Prometheno  ·  For medical researchers
01 — Premise
For medical researchers

Cohorts that respect consent.

Cohort tools like OHDSI Atlas or i2b2 select patients by clinical criteria; consent is handled upstream, outside the tool. Forge is built so that every query runs inside consent scope and every access is HAVEN-audited. The reference implementation does this today for study enrollment and payout; consent-scoped cohort export is the next milestone. Developed and tested on a MIMIC-IV extract.

02 — What hurts

Three pains every clinical researcher knows.

01

Your cohort is a compliance gamble

Atlas, i2b2, and EDW exports fetch by criteria and ignore consent context. Your published cohort may include patients who never consented to that purpose. You won't know until someone asks.

02

No audit chain to hand IRB

When IRB or a journal asks who consented to what, you compile from spreadsheets, emails, and EHR audit logs. There is no single, signed chain you can hand over. There is no chain at all.

03

Multi-site cohorts die at the paperwork

Cross-institutional data sharing requires BAA, DUA, IRB reciprocity per pair of institutions. Months of legal before a single query runs. Most multi-site studies fail here, not at the science.

03 — What I built

Forge as the cohort builder. HAVEN for consent and audit. PSDL to make every definition portable and reproducible across institutions.

Researcher app · built into Prometheno

Forge

Cohort builder with consent baked in
Forge is the OHDSI Atlas-style query interface, designed so every cohort is consent-scoped at query time and HAVEN-audited at access time (consent-scoped export is still in development). AI Cohort Builder turns natural language into OMOP SQL. Exports to CSV, JSON, FHIR R4, OMOP CDM.
Version: v0.10.0
Stack: Next.js 14 + Tailwind
Data: Simulated MIMIC-IV cohort
Solves: Cohort consent compliance, audit trail, OMOP querying without ignoring sovereignty
Open protocol · the foundation

HAVEN

Consent + audit + attribution, by spec
Four primitives: content-addressed Health Asset, programmable Consent (immediately revocable), hash-chained Provenance (Ed25519-signed), quality-weighted Contribution. What makes Forge consent-aware in the first place.
Spec: v2.0 draft, CC BY 4.0
Citation: DOI 10.5281/zenodo.18701303
Tests: 27 passing in Prometheno backend
Solves: Patient sovereignty, tamper-evident audit, attribution back to contributors
Reference platform

Prometheno

OMOP backbone · HAVEN reference implementation
PostgreSQL + OMOP CDM 5.4 (270K vocabulary concepts), FHIR↔OMOP pipeline. Runs Forge for researchers, Ember for patients. 27 HAVEN protocol tests passing.
Version: backend v0.8.0
Data: 17K+ records synced
Apps: Forge + Ember
Solves: OMOP backbone, vocabulary normalization, the substrate Forge runs on
Open protocol · reproducibility

PSDL family

PSDL spec · psdl-inspector · PSDL-workbench
Portable clinical scenarios across institutions. PSDL is the spec, psdl-inspector is the visual builder + Certified Bundle export, workbench maps your local EDW to PSDL signals (works even without OMOP). Every cohort definition is hashed, rationale-linked, and reproducible by design.
PSDL: v0.5, 539 tests
Inspector: v0.2.0
Workbench: in development
Solves: Cross-institutional cohort definitions, Certified Bundle export, EDW semantic mapping
04 — Demo

Same scenario. Two simulated sites. Byte-identical hashes.

An AKI Detection scenario, authored once in psdl-inspector, compiled to a Certified Bundle, executed against MIMIC-IV (Site A) and a simulated dataset (Site B). The output hashes match. That is what reproducibility looks like at the protocol layer.

Forge AI Cohort Builder showing a natural-language diabetes cohort query ready to compile to OMOP SQL
Forge
Explore · NL cohort on Prometheno OMOP
psdl-inspector showing the AKI Detection scenario in PSDL YAML, with KDIGO guideline reference in the audit block
psdl-inspector↗
Formalize · AKI scenario · KDIGO audit
PSDL-workbench dashboard for institutional EDW semantic mapping (in development)
In development
PSDL-workbench
Deploy · your EDW → PSDL signals (even without OMOP)
Step 01

Author

AKI scenario in psdl-inspector with KDIGO criteria.

scenario: AKI_Detection audit: intent: ... rationale: KDIGO 2012 signals: { Cr: ... } trends: { delta_6h: ... } logic: { aki_risk: ... }
Step 02

Certify

Compile to a Certified Bundle. SHA-256 binds everything.

{ "bundle_version": "1.1", "checksum": "sha256:abc123...", "scenario": { ... }, "terminology_anchors": { "creatinine": { "concept_id": 3016723, "vocabulary_id": "LOINC" } } }
Step 03

Run · Site A

Execute on MIMIC-IV via Prometheno. Hash recorded in HAVEN audit chain.

$ psdl run bundle.json --site mimic-iv  Triggered patients: 47 Result IR hash: 0x9799d065d19f...e583 HAVEN audit entry: #1247
Step 04

Run · Site B

Same bundle, different dataset. Hash identical. Reproducibility, proven.

$ psdl run bundle.json --site sim-b

Triggered patients: 31
Result IR hash:
  0x9799d065d19f...e583
HAVEN audit entry: #889

✓ Hashes match
— Reproduce this yourself

The MIMIC-IV Colab notebook runs end-to-end in your browser. No install.

Hashes shown are illustrative. Actual hashes match across runs of identical inputs.

07 — Questions

Straight answers.

How is Forge different from Atlas or i2b2?
Cohort tools like OHDSI Atlas or i2b2 select patients by clinical criteria; consent is handled upstream, outside the tool. Forge is built so that cohort queries and exports run inside HAVEN consent scope, with the audit chain written as the query runs. In the reference implementation today this holds for study enrollment and payout; consent-scoped cohort export is the next milestone.
What data model does Prometheno use?
OMOP CDM 5.4 as the canonical model, with the full OHDSI vocabulary. FHIR R4 is used for ingestion and export. The platform is developed and tested on a 1,000-patient MIMIC-IV extract with 429,000 lab measurements.
What is PSDL and do I need it?
Patient Scenario Definition Language. You write a scenario or cohort definition once; it compiles to a signed, versioned bundle that runs identically on any OMOP or FHIR data source. Recommended for multi-site work, not required.
What do I hand to my IRB?
Your ethics review board gets the consent registry entries and the tamper-evident audit log, with proofs that each entry is in the log, generated from the same source that executed your query. Nothing is compiled by hand from spreadsheets.
What does it cost?
Prometheno is pre-pilot. The protocols underneath are open: HAVEN under CC BY 4.0, PSDL and VERITAS under Apache 2.0. For platform access and pilot terms, write to us.
Can I run it on my own data?
Yes. PSDL's data adapters are documented, and a Colab notebook runs end to end on MIMIC-IV. Prometheno's backend is the HAVEN reference implementation; its 27 protocol tests cover consent, audit, and value distribution.
05 — Where this scales

When this works at scale.

Cross-institutional cohorts in hours, not months. Multi-site reproducibility as default. IRB documentation auto-generated from the same source as execution. Researchers spend their time on science instead of data acquisition.

The protocols underneath stay open: HAVEN under CC BY 4.0, PSDL and VERITAS under Apache 2.0. Prometheno is the platform that runs them.