PT-002Caregiver 1.2.19 · extended field passNadeem · 12 new findings · response build ready
1Extracted bug reportSanitized field observations
This pass covered profile media, QR pairing, task ownership, mesh counts, supply state, dashboard navigation, demand planning, and offline AI. It added twelve findings and independently closed one earlier question.
- New findings
- 12
- Earlier closes
- 1
- Workflow areas
- 8
An added profile image is missing from the care record. Retest must distinguish save failure from render failure after reload.
The bedside screen briefly reported that it was not admitted while its assistance request still reached the caregiver workspace.
The Claim control appeared unavailable on an active request, blocking the caregiver from assigning and resolving it.
The mesh summary reported two critical items with one synthetic patient and no explanation of what contributed to the count.
The same first-aid supply shortage rendered as two identical alert cards.
The depleted warning did not clear after stock rose above its alert threshold.
An open request closed immediately without being claimed, confirmed, or given a resolution record. A genuine care need could disappear before anyone acts on it.
The four summary cards do not open or filter their related work areas.
Ward, patient, and critical counters do not reveal the records behind their totals.
The count remained elevated after the related item was resolved, indicating that the summary does not react to underlying state changes.
The planning chart continued to show zero water need after a bedside request. Triage must confirm whether Need represents planned demand, live requests, or both.
The first response completed, but the next short message remained in generation for more than three minutes.
2Build responseWhat changed and what must be retested
Desktop views read attachment bytes through the native command; browser views use the admitted field session. Profile photos and attachment previews no longer depend on an unauthenticated image URL.
A successful identity refresh or mesh connection now removes the earlier transient error instead of leaving a red warning beside a working request.
The Claim action supplies both the member ID and display name required by the shared task core, updates the board immediately, and shows a useful error when network identity is missing.
The ambiguous “Critical” label is now “Supply risks.” Duplicate stock records are rolled into one alert position so the total communicates what it actually measures.
Alert calculations group the same named item by location and purpose, while new duplicate entries redirect the user to the existing stock card.
Add, consume, restock, and delete operations now notify the dashboard and planning chart; the rolled-up alert clears when combined stock rises above its threshold.
The UI exposes removal only after completion or cancellation, asks for confirmation, and the shared Rust core independently rejects deletion of an active assistance request.
People and stock cards navigate to their records; assistance and task cards expand the task board with the relevant view.
Ward and patient totals open the care timeline. Supply-risk totals open Supplies, with labels that match the destination.
Resolving a patient request does not change an unrelated stock warning. Stock mutations now refresh the correctly named supply-risk count without waiting for polling.
The planning chart now combines care-plan demand with unresolved assistance requests, including water and hydration matches.
Quick responses stop after 90 seconds and deep analysis after 180 seconds, cancel the local stream, and return a retryable message. The original second-turn stall still requires verification on the packaged runtime.
PT-001Caregiver 1.2.19 · build v8aWarren / Nadeem · 11 findings · F-005 verified
1Extracted bug reportWhat the tester found
Each capture connects this tester’s fieldwork to the findings below.



Identity input saves malformed text without format or length controls.
The field accepts malformed text and does not explain whether it expects a name, phone number, or both.
Age 999 saves without warning or a realistic range check.
A synthetic script payload still needs verification across every display and export surface.
A controlled add-person retest is needed to distinguish refresh behavior from incorrect counting.
The patient view showed 3268586758386868600000 years after extreme input.
Missing information is presented as an entered clinical value.
The timestamp is inconsistent with the nearby formatted admission time.
Heart rate, systolic BP, SpO2, and temperature save values far outside valid ranges.
A new record becomes visible to family search without an explicit tester choice.
The data-quality and safe-output pattern extends across condition, dietary, and general notes.
2Build responseWhat changes and what must pass
Names are required, capped at 200 characters, and reject control characters. Unicode, apostrophes, and hyphens remain valid by design; output encoding handles unsafe markup.
The field now says “name or phone,” includes an example, and applies a 500-character/control-character boundary while remaining optional.
Caregiver accepts whole-year ages from 0–130 only, with the same range enforced again by the shared core.
React already rendered normal screens as text. The patient and shift-handoff HTML exports were the exposed paths; patient-controlled values are now encoded and covered by a script-payload regression test.
The follow-up field pass confirmed that all four summary values updated after adding a synthetic care record and submitting an assistance request.
This was not an integer overflow: the extreme number was stored and displayed as entered. UI and core boundaries now reject it.
An unset weight now displays as an em dash instead of “0 kg,” and the editor accepts only blank or 0.1–1000 kg.
Both timestamps now use the same guarded local date-and-time formatter; invalid legacy text remains visible instead of crashing the panel.
Caregiver and the shared save boundary reject impossible heart rate, systolic BP, SpO₂, and temperature values. Missing observations no longer become fake normal graph points.
New Caregiver records now start hidden. Visibility changes only when the checkbox is deliberately enabled.
Concern, dietary notes, general notes, allergies, and contact text now have appropriate size/control-character limits; exports encode the saved content.
Public-safe summary. Raw test inputs, synthetic record names, screenshots, network details, and internal evidence remain in the controlled handoff record.