{"schema":"debriefmd.connector-requirements","version":1,"platform":"lti","tenant":"","evidence":[],"requirements":[{"id":"tenant","title":"Tenant and owner","detail":"Exact tenant URL, institution, program scope, platform/version, named technical owner and sandbox."},{"id":"authorization","title":"Authorized access","detail":"Supported scoped grant or service account, secret-store reference, rotation/revocation and denied cross-program tests. Never collect an institutional password."},{"id":"workflow","title":"Supported destination workflow","detail":"Vendor/admin confirmation of the exact write operation or completed-assessment importer, template/schema, size limits and sandbox example. Roster, schedule or grade imports are different workflows."},{"id":"identity","title":"Identity and authorship","detail":"Stable resident, assessor, program and academic-year mappings. Record DebriefMD as drafter and retain the real completing actor; never impersonate a preceptor."},{"id":"mapping","title":"Versioned field mapping","detail":"Frozen source form ID/definition hash and destination form/version/question IDs. Map every field and rating option explicitly; record unmapped items and preserve attribution, blanks and multi-note structure."},{"id":"approval","title":"Exact reviewed revision","detail":"Bind resident release to the submitted content hash. Changes invalidate approval. Confirm any destination-required assessor approval separately."},{"id":"privacy","title":"Data and residency approval","detail":"Approved destination/processing locations, minimum payload, retention/deletion and institutional agreement. No audio, transcript, self-reflection or model evidence in the handoff."},{"id":"delivery","title":"Delivery and reconciliation","detail":"Idempotency key, timeouts/rate limits, retry policy, destination record ID and read-back receipt. A download or HTTP 200 alone is not official filing."},{"id":"corrections","title":"Corrections and rollback","detail":"Define draft/final states, locked-record amendments, duplicate handling, revocation and reconciliation; do not assume a submitted evaluation can be edited or deleted."},{"id":"acceptance","title":"Tenant acceptance evidence","detail":"Synthetic end-to-end filing approved by program/admin: exact fields, authorship, receipt, denied foreign access, duplicate retry and correction. Record versions and dated evidence."}],"research":{"id":"lti","name":"LTI 1.3 / LTI Advantage","api":"DebriefMD implements configured Core resource-link launch verification with single-use state, nonce, signature, issuer, audience, deployment and browser binding. Existing DebriefMD sign-in and memberships remain required.","fileImport":"LTI is a launch/service protocol, not an assessment file format. Gradebook services do not by themselves represent a narrative preceptor-authored EPA.","nextStep":"Register the issuer/client/deployment, HTTPS initiation/launch/target URLs and approved JWKS endpoint. Test real browser cookies and existing account access. NRPS roster and AGS grade services require separate scoped implementation and tenant acceptance.","sources":[{"label":"LTI Core 1.3 specification","url":"https://www.imsglobal.org/spec/lti/v1p3/"},{"label":"LTI Advantage services","url":"https://www.1edtech.org/standards/lti/why-adopt-lti-1p3"}]},"researchedOn":"2026-10-22","notice":"Discovery checklist only. Contains no credentials or assessment data. Completeness does not enable a connector or certify vendor compatibility."}