Skip to content
AskFlorence
Main Navigation ArchitectureFlorence AIAgentsMembersAgent PlatformValidationInfrastructure

Appearance

Sidebar Navigation

Overview

Home

Glossary

System Architecture

Consumer & Agent Flow

Florence AI

Overview

Principles

Runtime

Tool surface

Adding a tool

Tool registry

Knowledge: SBC scenarios & CSR

Voice

Evals & observability

Provider risk & portability

Outage playbook

Roadmap

Build plan

Agents

Overview

Workflows & pain points

Members

Overview

Medicaid coverage gap

Carriers

Overview

Marketplaces

Overview

Agency

Overview

Regulations

Overview

Agent Platform

Overview

Auth Architecture

MongoDB Permissioning

Compliance Model

Data Models

Data Sources

Overview

CMS Marketplace API

CMS dependency map

PUF Data

State Subsidies

SBE Ingestion Playbook

SBE State Watchouts + Decisions

CA Phase C/D Playbook

NY Phase C/D Playbook

Validation

Overview

Methodology

APTC Formula

California 2026

New York 2026

CAPS Formula

Scenario Results

Infrastructure

Account Inventory

AWS Setup Runbook

AWS Organizations

CloudTrail

GuardDuty

Security Hub

Config

CloudFront + WAFv2

Data sources & ingest

Phase 4 DNS

Change Log

Vulnerability Management

MongoDB Setup

Access Control

Data Classification

Documentation Hosting

Post-deploy Smoke

Development

Preflight (local CI mirror)

Testing strategy

Compliance

Overview (auditor entry point)

SOC 2 Control Mapping

HIPAA Control Mapping

CMS EDE Appendix A Mapping

Risk Assessment

Encryption Policy

Data Retention Policy

Privacy Impact Assessment

Consent Capture & Versioning

Incident Response Plan

Access Control Policy

Marketing vs. Portal Analytics

Vendor / Subprocessor Register

Dependency Vulnerability Policy

BAA / Compliance Evidence

Compliance-Automation Integration

Compliance-Automation Vendor Evaluation

Penetration Test Reports

Architecture

Portal entry handoff

Mobile app strategy

Deferred architecture decisions

Session cookie architecture

Share flows

Decisions (ADRs)

Index

0001 — Atlas project isolation

0002 — Append-only audit log

0003 — Narrow-scoped Mongo users

0004 — Cross-cluster Atlas PrivateLink

0005 — Delayed-job architecture

0006 — Mongo user simplification

0007 — Terraform owns ECS task def

0008 — E2E testing strategy

0009 — Self-hosted analytics + observability (superseded)

0010 — PostHog HIPAA Cloud (supersedes 0009)

Runbooks

Security Incident Response

Break-Glass Root Login

Onboard Team Member

Offboard Team Member

Atlas user provisioning

Deploy via Terraform (ENG-277)

Rollback via Terraform (ENG-277)

S3 data bucket migration (planned Phase 11)

Access Reviews

2026-Q2 Review

Session log

Index

2026-04-23 — Phase 10 DNS cutover

2026-04-22 — Phase 8 prod AWS mirror

2026-04-22 — Phase 7 Atlas VPC peering

2026-04-22 — Phase 6 CloudFront + WAF

2026-04-21 — Phase 5 staging go-live

2026-04-17 — Atlas staging

Briefs

Index

Member portal plan (ENG-187)

2026-04-16/17 handoff

2026-04-17 Atlas handoff

System briefing (2026-04-17)

Creative AdBundance proposal brief

Creative AdBundance analytics brief

ElevenLabs RN integration research

Policies

Overview

On this page

Tier 4 — Internal Data Integrity ​

Last run: April 14, 2026 Duration: ~4 seconds (no CMS calls) Plans checked: 4,044 Zips checked: 28,196

Purpose ​

Pure database consistency checks — no CMS calls. Catches data quality issues that would surface as false negatives in Tiers 1-3.

Checks performed ​

#CheckWhat it catches
1Plans have non-empty ageRatesByAreaLoading bugs
2Plans have non-empty premiumsByRatingAreaLoading bugs
3RAs in ageRatesByArea match premiumsByRatingAreaInconsistent ingestion
4Plans have non-zero rates in served RAsZero-rate bugs
5Every countiesServed county has a usable RA in plan ratesService area mismatches
6partialCountyZips keys are subset of countiesServedPartial county data integrity
7All zips have a regionId setEnrichment completeness
8No orphan zips (zips for counties with no plans)Dead data
9Age curve sanity: age 35 / age 21 ratio is 1.15-1.30PUF data anomalies

Results — April 14, 2026 ​

CheckResult
Plans without ageRatesByArea0 ✅
Plans without premiumsByRatingArea0 ✅
RA mismatch (age vs premium)0 ✅
Plans with zero rates0 ✅
countiesServed not in any RA24 ⚠️ (cosmetic)
partialCountyZips integrity0 ✅
Zips without regionId0 ✅
Orphan zips0 ✅
Age curve anomalies196 ⚠️ (PUF data)

Issue 1: countsServed not in any RA (24 plans) ​

Affected: All 24 are FL plans listing Sumter County in countiesServed.

Root cause: PUF service area file lists these plans as serving Sumter County (FIPS 12119), but the plans don't have rates for Rating Area 36 (Sumter's RA). CMS doesn't return them for Sumter either, so they're correctly filtered at query time. The mismatch is purely cosmetic — the PUF service area data is slightly over-inclusive.

Action: No fix required. Plans are filtered correctly by the existing regionId lookup logic.

Issue 2: Age curve anomalies (196 plans) ​

Affected by issuer prefix:

Issuer IDCountIssuer (likely)
6878187Select Health (UT)
2201340Regence BlueCross (UT)
4226136University of Utah Health Plans (UT)
3454115BridgeSpan Health (UT)
9811310Mountain Health Co-Op (UT)
181678Molina Healthcare (UT)

Pattern: All UT issuers. Age curve ratio is ~1.39 instead of the standard 1.222.

Sample: Plan 18167UT0010001 Rating Area 5: age 21 = $601.23, age 35 = $835.71, ratio = 1.39

Root cause: Utah uses a state-specific age curve that differs from the federal default. This is allowed under 45 CFR 147.102(e). The PUF rates are correct as-filed.

Action: No fix required. Update Tier 4 thresholds to allow UT-specific age curves (1.35-1.45 acceptable).

Resolution status ​

  • Functional integrity: 100% clean
  • Cosmetic warnings: 220 items documented above, do not affect query results

Related fixes during this audit ​

  • 9,358 zips backfilled with regionId from sibling zips (enrichment had left them empty)
  • 66 cross-state border zips removed from zip_county (CA, CO, NV, etc. — not in our service area)
  • FL Sumter RA confirmed correct (RA36, 6/10 plan votes)
Pager
Next pageHome

AskFlorence Internal Documentation. Not for public distribution.

AskFlorence

Internal Documentation

Access restricted. Not for public distribution.