Capability
One record, written once and read by everyone.
The clinical, operational and financial work of a hospital writes to a single patient record, so two systems can never hold a different version of the same person.
Every tool inside Pensieve reads and writes the same record through the same core systems. An order placed once carries through fulfilment, billing and result without being typed again, and each step is written with its author, its timestamp and its department.
The record is the thing that is governed. Authorization is checked on every read and every write, and a patient lens at the database read path means a user cannot query records they are not entitled to.
What a hospital gets back is a single history per patient rather than a reconciliation between systems that never agreed on who the patient was.