Clinic boundaries

Clinic-facing endpoints are scoped to the selected clinic and authenticated organization. API clients should never assume that a user, patient, prescription, or catalog item is globally visible.

• Clinic staff workflows should use clinic-scoped credentials or session-derived access.
• Partner workflows should not receive internal admin routes.
• Patient, prescription, and lab data should only appear when the requesting identity is authorized for that clinic context.