Worker Passport: Product Memo
Status: July 2026 · aligned to canon generation 8.
TL;DR: Passport is the worker side of the operating network for the healthcare workforce: a worker-controlled, consent-gated record of professional evidence that persists across employers. The worker promise: stop rebuilding the same packet. Build your proof once, control who can use it, let Rōvn chase what expires, and reuse the evidence at the next opportunity. The required clarification always travels with it: your evidence travels, every organization makes its own decision.
1. What the Passport is
Passport is the persistent worker relationship, not a document folder. It is designed to hold:
- verified identity references;
- licenses, credentials, education, training, certifications, work history, insurance, and health or competency evidence where applicable;
- original evidence and source receipts;
- freshness and monitoring state;
- corrections and disputes;
- consent and disclosure history;
- a professional profile, opportunities, and applications;
- renewal and expiration support;
- Work Relationship and Work Activation history (a Work Activation is approved to start, with proof: the organization-specific, named-human-approved state that lets one person start one defined scope of work);
- worker-agent preferences.
The relationship continues after hiring. Passport is a live professional profile, not a packet that dies when the application closes.
2. Worker authority and consent
The worker controls Passport sharing, corrections, disputes, preferences, opportunity consent, and worker-agent authority. Consent grants are purpose-specific, recipient-specific where required, revocable, and receipted. Every disclosure produces a receipt the worker can inspect. A dispute can suspend or qualify downstream use of the disputed fact. The default posture is private: nothing is discoverable or shared unless the worker opts in.
3. Evidence classes, not a blended score
Every item in a Passport carries an honest evidence class:
- source-verified;
- issuer-attested;
- facility-attested;
- worker-provided;
- extracted but unconfirmed;
- pending, conflicting, expired, unavailable, or human-review-required.
Imported or uploaded evidence never becomes source-verified merely because it entered Rōvn. Primary sources prove facts; Rōvn preserves the response, the timestamp, and the provenance link. There is no blended worker score, and there is never a facility-facing reliability or reputation score.
4. How a Passport meets a facility
When a worker engages an organization, the system records an organization-confirmed Work Relationship: applicant, candidate, employee, contractor, agency clinician, privileged provider, or affiliated clinician, with dates, scope, and provenance. The organization evaluates the worker's evidence against its own versioned requirements, and a named human signs the decision. The result, when approved, is a Work Activation with a signed receipt. A second organization never inherits the first organization's approval; it inherits the worker's consented evidence and decides for itself. That reuse without re-collection is the network thesis, and it is measured, not asserted: if the second Work Activation is not materially faster and cheaper than the first, the thesis is wrong.
5. Free to the worker, forever
Workers never pay to hold, correct, export, or reuse their own evidence. Rōvn takes no placement, commission, success, or finder fee, ever. Any future worker premium must add value without restricting basic ownership, access, correction, portability, or reuse.
6. Useful before the network is dense
Passport is designed to be worth keeping even with a single employer:
- show what is current and what expires;
- let the worker correct records and preserve completed evidence;
- support controlled sharing and reduce the next application burden;
- help the worker understand readiness for a specific role;
- keep serving the worker after hiring, through renewals and monitoring.
An unclaimed worker can complete a narrow request before creating an account. Passport activation follows delivered value, not coercion.
7. What exists in July 2026
The Worker Passport experience is demonstrable today at worker.demo.rovn.to as the synthetic clinician Maria Alvarez: profile, evidence states, consent surfaces, and readiness views on synthetic data. No real worker roster has been deposited, no PHI is processed, and the demo is a read-only demonstration of the designed experience, not a production customer deployment. The consent, dispute, and monitoring depth described above is a mix of built, building, and designed capability; current-state questions route to the canon-grounded agent on 11.1 Ask Rōvn.
8. Why the Passport matters
- Worker control is structural. The record belongs to the worker, on or off Rōvn. An asset the worker owns cannot be captured without the workers leaving.
- Reuse compounds. Every consented, still-valid piece of evidence removes rework from the next Work Activation. The compass metric is the zero-rework Work Activation rate, which has no measured value yet and will be instrumented in the first pilot.
- Local authority is preserved. Facilities keep their own policy and their own decisions, which is exactly what makes reuse acceptable to a hospital General Counsel.