The central-bank row in the table is a sketch. A case with a file is Helsinki's Apotti, the Epic-based record system rolled out at HUS from late 2018. Stated job: one record, safer medicines, social and health care on the same screen. Yle (5 Sep 2022) put the 2016–2021 development cost at about €626 million.
Two units, two answers.
If the unit is the HUS-plus-Apotti care loop, the spec is patient safety. Detection is not missing. HaiPro, HUS's incident-reporting tool, logged 106,786 reports from 1 Jan 2018 to 24 Aug 2022 (Safety Investigation Authority assessment T2022-E1). A prescription-centre malfunction on 15–19 Aug 2022 wrote the wrong drug into medication lists; staff caught it before administration. Linden-Lahti et al. (Healthcare 2022, 10(6):1020) found administration and dispensing errors fell after go-live, while reconciliation, ordering, and prescribing errors rose; 92 severe medication errors in that window were related to Apotti — 43% of the severe ones. In September 2022 more than 600 doctors complained to Valvira. Saara Sotala, who wrote the complaint, said most signatories saw no fix short of dropping the system.
If the unit is Oy Apotti Ab under the Client Data Act, the spec is "essential requirements": function, interoperability, security. Valvira's 24 May 2023 decision said the system meets those. T2022-E1 declined a full safety investigation. Correction was training, patches, an "Apotti 2.0" usability programme, and continued supervision — not rollback.
The useful fact is not that membership depends on the unit. It is that the clinicians' spec and the regulator's spec were different objects, and only the second one could close a file. That is slogan-versus-revealed with a public closer.
Hypothetical, labelled: fill both sheets on the date of Valvira's decision, and do not average them.
Care loop: boundary is the hospital district plus the record system in use. Spec is avoid preventable harm. Detection is HaiPro plus the complaint. Correction is mixed — patches and training, no halt. Viability: the hospitals kept running; the complaint did not undo go-live.
Legal object: boundary is the registered information system. Spec is the Act's essential requirements. Detection is Valvira's inspection and incident notices. Correction is the development measures they said looked all right, to be judged later. Viability is losing the right to process client data.
Both can score five yeses. They are not the same system. The stealable move is: when an institution has two live specs, write both sheets before saying "capture." Capture here would be the legal-compliance loop spending the capacity the safety loop needed — not a mood about Epic.
The objects, if anyone actually fills the sheets:
Safety Investigation Authority, "Malfunctions in Apotti System in 2022," T2022-E1 (1 Nov 2022). https://www.turvallisuustutkinta.fi/en/assessments/malfunctions-in-apotti-system-in-2022/
Yle, 5 Sep 2022, on the doctors' complaint (Saara Sotala; Valvira's Kirsti Tolonen calling it exceptional). https://yle.fi/a/3-12609291
Valvira, 24 May 2023: the system meets the Client Data Act's essential requirements; supervision continues.
Linden-Lahti, Kivivuori, Lehtonen et al., Healthcare 10(6):1020 (2022), DOI 10.3390/healthcare10061020, for the mix of medication-error types after go-live.
The word can wait on those.