maziyarpanahi/openmed

Summary Private-training rounds need explicit enrollment, update-submission, aggregation, and evaluation windows. Ambiguous or overlapping deadlines make lifecycle state and air-gapped participation nondeterministic. Scope Define an immutable UTC schedule with strictly ordered phase boundaries, optional maximum durations, and deterministic serialization. Resolve the active or next phase from a caller-injected timestamp without reading the system clock. Acceptance criteria Before-start, exact-boundary, active-phase, and after-finish cases resolve predictably for every phase. Naive timestamps, non-UTC offsets, reversed or equal boundaries, booleans, and excessive durations fail with field-only errors. The schedule contains no site identity, patient count, local metric, or network endpoint. .venv/bin/python -m pytest tests/unit/training/test_federated_schedule.py -q passes. Out of scope Network coordination, client notification, retries, or selecting the round lifecycle state. Extend

Summary A client capability envelope and an immutable round manifest are useful only if compatibility is checked before enrollment. The comparison must explain incompatibility without exposing client identity, exact hardware inventory, or local data characteristics. Scope Compare protocol versions, training backend, model and adapter format, quantization support, declared resource class, deterministic-kernel support, privacy mechanism, and secure-aggregation mode. Return compatible, review-required, or incompatible with stable field-level reason codes and a metadata-only deterministic report. Acceptance criteria Exact match, supported version range, insufficient resources, unsupported privacy mode, adapter mismatch, and unknown requirement cases have table-driven tests. Unknown mandatory requirements fail closed; optional capability differences are distinguished from hard incompatibilities. Reports exclude client IDs, site names, hardware serials, paths, endpoints, patient counts, l

Summary Several multimodal modules compute SHA-256 independently, and callers need a shared streaming helper that does not load large PDFs, images, DICOM objects, or audio files into memory. Scope Hash bytes and binary streams in bounded chunks, returning the SHA-256 digest and byte count with an optional hard maximum. Preserve a seekable stream's position, never close caller-owned streams, and keep errors free of paths, filenames, and byte content. Acceptance criteria Bytes, seekable streams, non-seekable streams, empty input, and multi-chunk input match hashlib.sha256 reference digests. Exceeding the configured maximum fails before unbounded reading and reports only the limit category and numeric counts. Tests verify position restoration for seekable streams, no implicit close, and bounded read request sizes. .venv/bin/python -m pytest tests/unit/multimodal/test_digest.py -q passes. Out of scope Cryptographic signatures, content-addressed storage, or opening filesystem paths. Ma

Summary The new asset manifest, media-type detector, modality profiles, resource limits, and streaming digest checks need one pre-decode entry point. Without a common report, each future VLM, OCR, DICOM, waveform, and audio provider will assemble different safety behavior. Scope Orchestrate manifest validation, declared-versus-detected media type, modality-specific fields, digest matching, and resource limits into a single accept-or-abstain report. Return deterministic findings, reason codes, schema versions, numeric metadata, and digests only; never open a heavy decoder or copy source content into the report. Acceptance criteria Synthetic happy-path examples for image, PDF, DICOM, and audio are accepted with byte-stable JSON. Media mismatch, malformed manifest, digest mismatch, insufficient metadata, and every resource-limit class produce ordered fail-closed findings. A sentinel test proves filenames, paths, OCR text, transcripts, DICOM values, credentials, and raw prefix bytes do

Summary A generic asset manifest can be structurally valid while still omitting the metadata needed to preflight its declared modality. Image dimensions, PDF page counts, DICOM frame geometry, and audio duration need explicit cross-field rules. Scope Add versioned image, PDF, DICOM, and audio manifest profiles that declare required, optional, and inapplicable metadata fields. Validate a privacy-safe asset manifest into deterministic field-only findings without opening or decoding the asset. Acceptance criteria Image width/height, PDF page count, DICOM frame count plus dimensions, and audio duration requirements have table-driven valid and invalid tests. Inapplicable fields, missing required fields, zero values, booleans, and non-finite numeric values produce stable categorical findings. Results contain only field names and reason codes, never source paths, embedded metadata, or media content. .venv/bin/python -m pytest tests/unit/multimodal/test_manifest_profiles.py -q passes. Out