App manifest reference
`medos-app-project/1` is strict authoring metadata; `medos-remote-app-release/1` is the signed immutable release envelope.
CLI reference
The CLI covers project creation/diagnosis, secret-safe packaging, release signing/verification, and hospital handoff evidence.
Extension SDK reference
The external SDK surface is the partner helper library plus `medos-bridge/1`; trusted host SDK seams are internal-only.
Permissions
Permissions are exact certified context fields, FHIR resources/operations, webhook topics, and browser capabilities.
Embedded app viewports
Embedded apps must adapt to the host-provided frame and request bounded height changes through the bridge.
Design patterns
Use status color only for meaningful state, show clinical provenance, preserve host context, and make every denied/unavailable condition visible.
Components
External apps use ordinary accessible web components inside their frame; medOS native component kits remain trusted first-party code.