Implement the Da Vinci HRex IG Provenance profile to document the source and custodian of data exchanged between payers and ensure the data pedigree is traceable by downstream consumers

Verified steps

1. For every FHIR resource included in a payer-to-payer exchange response, create a corresponding Provenance resource with target referencing the exchanged resource, occurred indicating the period when the data was asserted or last updated, and recorded set to the time of exchange
2. Populate the agent array with at minimum two entries: one with role transmitter identifying the payer transmitting the data, and one with role author or informant identifying the original source of the clinical information such as the providing EHR or the originating payer
3. Set agent.who to a reference to the Organization resource representing the payer or provider organization, and set agent.onBehalfOf to the Organization representing the entity on whose behalf the agent is acting when the transmitter and author are different organizations
4. Populate entity with role derivation or quotation to indicate whether the exchanged resource was derived from a transformed source document or is a verbatim copy of the original data; this distinction is important when the source data was a C-CDA document that was converted to FHIR
5. Include the Provenance resources as entries in the same Bundle as the clinical resources when transmitting exchange responses, so the data pedigree travels with the data rather than being stored separately where it may be decoupled
6. Validate the Provenance resources against the HRex Provenance profile using the $validate operation to confirm all must-support elements are populated before transmitting; missing agent.who or target references are the most common validation failures