# MIKA De-ID Local v0.2.1 verification record

Verification date: 2026-08-27  
Release state: **LOCAL / SYNTHETIC DATA ONLY**  
Patient release authorization: **not granted**

## Environment

- macOS development workstation
- Python 3.12.13
- Tesseract 5.5.1
- offline OCR languages: `rus`, `eng`
- barcode detection: available
- HEIC/HEIF decoding: available
- network required during processing: no

Exact direct Python versions are recorded in `requirements-lock.txt`; OCR model hashes are recorded in `models/tessdata/README.md`.

## Evidence completed

- Automated test suite: 20 passed.
- Editable package and standalone wheel metadata: `AGPL-3.0-only`, NPO NT, and full AGPL text verified.
- All Python source, script, and test files: NPO NT copyright plus SPDX header verified.
- Source offer, authorship record, third-party notices, licence copies, and direct CycloneDX SBOM: present and parseable.
- GUI and CLI licence/source notices: verified.
- Synthetic labelled PDF: 13/13 regions matched; synthetic recall 1.0.
- Synthetic photograph: 10 findings across name, birth date, phone, email, SNILS, insurance policy, medical record ID, address, event date, and QR code.
- Dataset sample: schema and package validation passed.
- GUI construction smoke test: passed.
- Cleaned PDF structural verification: passed.
- Cleaned PDF: 2 pages, zero annotations, zero embedded files, zero extractable text characters, zero residual automated findings.
- Cleaned PDF pages: rendered and visually inspected after final regeneration.
- Product dossier: 7 A4 pages; all pages rendered and visually inspected after v0.2.1 regeneration.
- Synthetic-corpus QA report: 7 A4 pages; all pages rendered and visually inspected for v0.2.1.
- Confirmed-fully-synthetic corpus: 100/100 PDFs processed successfully, 453 pages, 2,161 machine findings, 0 document failures.
- Corpus processing time: 762.427 seconds locally with two workers; 35.65 pages/minute.
- Machine findings: 841 proposed redactions and 1,320 exact-date review decisions; no detected text or original filename is present in the reports.
- Elevated manual-review flags: 51 pages; 50 OCR pages below the internal confidence threshold and 1 page without an OCR-confidence value.
- Machine preannotations: 100 JSON files, 2,161 normalized regions, all pages and regions explicitly unreviewed.
- Synthetic registry: 100 rows mapped to 100 neutral PDF identifiers; 99 mappings use a unique internal-number match and 1 is marked as a remaining-pair inference.
- Exploratory strict registry-value cross-check: exact OCR matches were found for 1/100 synthetic names and 5/100 synthetic birth dates; 1 name and 3 birth dates received their specific detector category. This is a blocking investigation signal, not coordinate-level recall: the registry does not prove that each value is printed in its linked PDF, and exact matching is sensitive to OCR spelling errors.
- Wheel build: `mika_deid-0.2.1-py3-none-any.whl` built successfully with current setuptools, installed into an isolated target, and returned the expected NPO NT / AGPL / 0.2.1 licence notice.
- Wheel SHA-256: `92725b627839d5b55ebf3c5920de86eb96baadfb54a86fd99680a3fc56d3c6f9`.

The 13/13 synthetic-fixture recall figure is only a pipeline check on one deliberately constructed document. The 100-document corpus has no adjudicated coordinate-level ground truth, so corpus recall and precision are not computed. The strict registry-value cross-check is exploratory coverage evidence, not recall or proof of a miss. None of these results is a clinical or privacy performance claim, and none may be used to estimate safety on patient documents.

## Open release blockers

- Human-reviewed coordinate annotations, adjudicated ground truth, and a locked evaluation split for the supplied synthetic corpus.
- Privacy, legal, clinical-content, and independent security review.
- Registered NPO NT legal details and independent AGPL package review.
- Malformed-file isolation/fuzzing and dependency vulnerability review.
- Signed macOS and Windows installers, reproducible build, full installer-specific SBOM, update/revocation process.
- Controlled usability pilot and verified MIKA receiving contour.

See `docs/RELEASE_GATES.md` for the authoritative staged gate list.
