Patient-side v2 payloads use api_version: "2026-08-17". Deduplicate on event_id. Live envelopes include timestamp_epoch.
The PATIENT allowlist is empty — Patient Enrolled delivers only the universal patient-identity block. PATIENT does not receive attribution.