Replying to @DanMunro and @matthewstoller, @blakereid, @doctorow, @ProfFionasm, @musharbash_b, @Sherman1890
I know nothing of healthcare standards, but "some developers (...) didn’t adhere to critical security specifications that are clearly outlined in the FHIR blueprint" reads like either those parts weren't testable assertions or there was no (good) test suite.
♥ 1