WORKSTATION AGENT

Workstation Agent — Offline & Resilience

9 of 12

Keep approved local operations reliable during connectivity loss with secure buffering, ordered synchronization and safe recovery.

ReliableSecureOrderedIdempotentRecoverable

Connectivity states & behavior

Online

Full connectivity and real-time streaming.

Degraded

Intermittent connectivity; traffic reduced.

Offline

No connectivity; safe local operation.

Reconnecting

Authenticate again and prepare synchronization.

Online (Synced)

Queues flushed and acknowledged.

Offline capabilities

Can continue offline

Capture and buffer allowed data

Read from local devices and applications

Local validation and formatting

Queue commands and notifications

Work with local cache

Requires server / must be blocked

Clinical sign-off or electronic signature

Authorization-sensitive actions

Real-time data requiring current state

Clinical or policy decisions

Cross-workstation operations

Data buffering & queues

Durable event queues on disk

Encrypted at rest (AES-256-GCM)

Large payload segmentation and integrity checks

Configurable capacity management

jsonCopy

{
 "queue":"outbound",
 "size_bytes":12485760,
 "events":312,
 "oldest_event":"2025-05-15T10:21:34Z"
}

Synchronization flow

Detect restored connectivity

Authenticate & establish channel

Capability & state exchange

Queue flush in preserved order

Acknowledge every event

Finalize and update state

Synchronization is incremental, ordered and resumable.

Conflict handling

Last-write-wins for non-critical metadata

Server authority for clinical and policy data

Merge on field basis for notes/documents

Manual resolution when required

jsonCopy

{
 "conflict_id":"c_9f2b1a07",
 "resource":"note",
 "strategy":"merge-field",
 "status":"requires-review"
}

Connector recovery

Connector crashes are isolated

Automatic restart with backoff

State and queues are preserved

Repeated failures pause connector and alert

Retry & backoff

Exponential backoff with jitter

Initial delay 1s; max 60s

Max attempts configurable / unlimited

Non-retryable errors dropped with alert

Data expiration & retention

Buffered events configurable, default 30 days

Cached data configurable per type

Expired data purged securely

Clinical data never cached longer than policy allows

Durability & security

OS-secure storage locations

Integrity verification (HMAC-SHA256)

Tamper-evident logs

Private keys never leave workstation