-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathSAMA-Readiness-Guide-v4.html
More file actions
2274 lines (2165 loc) · 176 KB
/
Copy pathSAMA-Readiness-Guide-v4.html
File metadata and controls
2274 lines (2165 loc) · 176 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>SAMA Continuous Provider Risk Monitoring Readiness Guide</title>
<style>
:root {
--primary: #1a365d;
--primary-light: #2c5282;
--accent: #2b6cb0;
--success: #276749;
--warning: #c05621;
--danger: #c53030;
--bg: #f7fafc;
--card-bg: #ffffff;
--border: #e2e8f0;
--text: #2d3748;
--text-light: #718096;
--phase1: #2b6cb0;
--phase2: #2f855a;
--phase3: #c05621;
--phase4: #6b46c1;
}
* { box-sizing: border-box; margin: 0; padding: 0; }
body {
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
background: var(--bg);
color: var(--text);
line-height: 1.6;
}
.header {
background: linear-gradient(135deg, var(--primary) 0%, var(--primary-light) 100%);
color: white;
padding: 2.5rem 2rem;
text-align: center;
}
.header h1 { font-size: 2rem; margin-bottom: 0.5rem; }
.header p { opacity: 0.9; font-size: 1.05rem; max-width: 800px; margin: 0.3rem auto; }
.header .badge {
display: inline-block;
background: rgba(255,200,50,0.3);
border: 1px solid rgba(255,200,50,0.6);
padding: 0.25rem 0.75rem;
border-radius: 12px;
font-size: 0.8rem;
margin-top: 0.75rem;
font-weight: 600;
}
.main-layout {
display: flex;
min-height: calc(100vh - 120px);
}
.nav-bar {
background: white;
border-right: 1px solid var(--border);
padding: 1rem 0;
position: sticky;
top: 0;
height: 100vh;
overflow-y: auto;
z-index: 100;
box-shadow: 2px 0 4px rgba(0,0,0,0.05);
min-width: 220px;
max-width: 220px;
flex-shrink: 0;
}
.nav-bar ul {
display: flex;
flex-direction: column;
list-style: none;
margin: 0;
padding: 0;
}
.nav-bar li a {
display: block;
padding: 0.6rem 1.25rem;
text-decoration: none;
color: var(--text-light);
font-size: 0.82rem;
font-weight: 500;
white-space: nowrap;
border-left: 3px solid transparent;
transition: all 0.2s;
}
.nav-bar li a:hover, .nav-bar li a.active {
color: var(--primary);
background: #ebf8ff;
border-left-color: var(--accent);
}
.nav-bar li.has-sub > a {
display: flex;
justify-content: space-between;
align-items: center;
}
.nav-bar li.has-sub > a .nav-arrow {
font-size: 0.6rem;
transition: transform 0.2s;
margin-left: 0.4rem;
}
.nav-bar li.has-sub.expanded > a .nav-arrow {
transform: rotate(90deg);
}
.nav-bar .sub-nav {
list-style: none;
padding: 0;
margin: 0;
max-height: 0;
overflow: hidden;
transition: max-height 0.3s ease;
}
.nav-bar li.has-sub.expanded .sub-nav {
max-height: 500px;
}
.nav-bar .sub-nav li a {
padding: 0.4rem 1.25rem 0.4rem 2.25rem;
font-size: 0.76rem;
color: var(--text-light);
border-left: 3px solid transparent;
}
.nav-bar .sub-nav li a:hover, .nav-bar .sub-nav li a.active {
color: var(--accent);
background: #f0f7ff;
border-left-color: var(--border);
}
.container { max-width: 1100px; margin: 0 auto; padding: 2rem 1.5rem; flex: 1; }
.section { display: none; animation: fadeIn 0.3s ease; }
.section.active { display: block; }
@keyframes fadeIn { from { opacity: 0; transform: translateY(10px); } to { opacity: 1; transform: translateY(0); } }
.card {
background: var(--card-bg);
border: 1px solid var(--border);
border-radius: 10px;
padding: 1.5rem;
margin-bottom: 1.25rem;
box-shadow: 0 1px 3px rgba(0,0,0,0.04);
}
.card h3 { color: var(--primary); margin-bottom: 0.75rem; font-size: 1.1rem; }
.card p { color: var(--text); margin-bottom: 0.5rem; }
.phase-badge {
display: inline-block;
padding: 0.2rem 0.6rem;
border-radius: 4px;
font-size: 0.75rem;
font-weight: 600;
color: white;
margin-bottom: 0.5rem;
}
.phase-badge.p1 { background: var(--phase1); }
.phase-badge.p2 { background: var(--phase2); }
.phase-badge.p3 { background: var(--phase3); }
.phase-badge.p4 { background: var(--phase4); }
.timeline { position: relative; padding-left: 2rem; margin: 1.5rem 0; }
.timeline::before {
content: '';
position: absolute;
left: 8px;
top: 0;
bottom: 0;
width: 3px;
background: var(--border);
border-radius: 2px;
}
.timeline-item { position: relative; margin-bottom: 1.5rem; padding-left: 1rem; }
.timeline-item::before {
content: '';
position: absolute;
left: -1.65rem;
top: 0.5rem;
width: 14px;
height: 14px;
border-radius: 50%;
border: 3px solid var(--accent);
background: white;
}
.checklist { list-style: none; padding: 0; }
.checklist li {
padding: 0.6rem 0.5rem;
border-bottom: 1px solid var(--border);
display: flex;
align-items: flex-start;
gap: 0.6rem;
cursor: pointer;
transition: background 0.15s;
}
.checklist li:hover { background: #f0f4f8; }
.checklist li:last-child { border-bottom: none; }
.checklist li input[type="checkbox"] {
margin-top: 0.2rem;
width: 18px;
height: 18px;
accent-color: var(--success);
flex-shrink: 0;
}
.checklist li.checked span { text-decoration: line-through; color: var(--text-light); }
.progress-bar {
background: #e2e8f0;
border-radius: 8px;
height: 8px;
overflow: hidden;
margin: 0.5rem 0;
}
.progress-bar .fill {
height: 100%;
border-radius: 8px;
transition: width 0.4s ease;
background: var(--success);
}
.progress-text { font-size: 0.8rem; color: var(--text-light); margin-bottom: 0.25rem; }
.governance-rule {
border-left: 4px solid var(--accent);
padding: 1rem 1.25rem;
margin-bottom: 1rem;
background: #ebf4ff;
border-radius: 0 8px 8px 0;
}
.governance-rule h4 { color: var(--primary); margin-bottom: 0.4rem; font-size: 0.95rem; }
.governance-rule p { font-size: 0.9rem; color: var(--text); }
.governance-rule .priority-tag {
display: inline-block;
font-size: 0.7rem;
padding: 0.15rem 0.5rem;
border-radius: 3px;
font-weight: 600;
margin-left: 0.5rem;
vertical-align: middle;
}
.governance-rule .priority-tag.required { background: #c53030; color: white; }
.governance-rule .priority-tag.build { background: #2f855a; color: white; }
.workflow-step {
display: flex;
gap: 1rem;
padding: 1rem;
border: 1px solid var(--border);
border-radius: 8px;
margin-bottom: 0.75rem;
background: white;
}
.workflow-step .step-num {
width: 36px;
height: 36px;
background: var(--accent);
color: white;
border-radius: 50%;
display: flex;
align-items: center;
justify-content: center;
font-weight: 700;
font-size: 0.9rem;
flex-shrink: 0;
}
.workflow-step .step-content h4 { font-size: 0.95rem; margin-bottom: 0.25rem; }
.workflow-step .step-content p { font-size: 0.85rem; color: var(--text-light); }
.tab-group { margin-bottom: 1.5rem; }
.tab-buttons { display: flex; gap: 0.25rem; border-bottom: 2px solid var(--border); margin-bottom: 1rem; flex-wrap: wrap; }
.tab-btn {
padding: 0.6rem 1rem;
border: none;
background: none;
cursor: pointer;
font-size: 0.85rem;
font-weight: 500;
color: var(--text-light);
border-bottom: 2px solid transparent;
margin-bottom: -2px;
transition: all 0.2s;
}
.tab-btn:hover { color: var(--primary); }
.tab-btn.active { color: var(--primary); border-bottom-color: var(--accent); }
.tab-content { display: none; }
.tab-content.active { display: block; }
.table-wrapper { overflow-x: auto; }
table {
width: 100%;
border-collapse: collapse;
font-size: 0.85rem;
margin: 1rem 0;
}
table th, table td {
padding: 0.7rem 0.8rem;
border: 1px solid var(--border);
text-align: left;
vertical-align: top;
}
table th { background: #edf2f7; font-weight: 600; color: var(--primary); }
table tr:hover td { background: #f7fafc; }
.callout {
padding: 1rem 1.25rem;
border-radius: 8px;
margin: 1rem 0;
font-size: 0.9rem;
}
.callout.info { background: #ebf8ff; border-left: 4px solid #3182ce; }
.callout.warning { background: #fffaf0; border-left: 4px solid #dd6b20; }
.callout.success { background: #f0fff4; border-left: 4px solid #38a169; }
.callout.new { background: #faf5ff; border-left: 4px solid #6b46c1; }
.summary-grid {
display: grid;
grid-template-columns: repeat(auto-fit, minmax(240px, 1fr));
gap: 1rem;
margin: 1.5rem 0;
}
.summary-card {
background: white;
border: 1px solid var(--border);
border-radius: 10px;
padding: 1.25rem;
text-align: center;
border-top: 4px solid var(--accent);
}
.summary-card h4 { color: var(--primary); margin-bottom: 0.5rem; }
.summary-card .number { font-size: 2rem; font-weight: 700; color: var(--accent); }
.accordion { margin-bottom: 0.5rem; }
.accordion-header {
padding: 0.85rem 1rem;
background: #edf2f7;
border: 1px solid var(--border);
border-radius: 6px;
cursor: pointer;
font-weight: 600;
font-size: 0.9rem;
display: flex;
justify-content: space-between;
align-items: center;
transition: background 0.2s;
}
.accordion-header:hover { background: #e2e8f0; }
.accordion-header .arrow { transition: transform 0.2s; }
.accordion-header.open .arrow { transform: rotate(180deg); }
.accordion-header.open { border-radius: 6px 6px 0 0; }
.accordion-body {
display: none;
padding: 1rem;
border: 1px solid var(--border);
border-top: none;
border-radius: 0 0 6px 6px;
background: white;
}
.accordion-body.open { display: block; }
.use-case-card {
border: 1px solid var(--border);
border-radius: 10px;
padding: 1.25rem;
margin-bottom: 1rem;
background: white;
border-left: 4px solid var(--phase2);
}
.use-case-card h4 { color: var(--primary); margin-bottom: 0.75rem; }
.use-case-card .uc-row { display: flex; gap: 1rem; margin-bottom: 0.5rem; flex-wrap: wrap; }
.use-case-card .uc-col { flex: 1; min-width: 200px; }
.use-case-card .uc-col h5 { font-size: 0.8rem; color: var(--text-light); text-transform: uppercase; margin-bottom: 0.3rem; }
.use-case-card .uc-col p { font-size: 0.85rem; }
.new-badge {
display: inline-block;
background: #6b46c1;
color: white;
font-size: 0.65rem;
padding: 0.1rem 0.4rem;
border-radius: 3px;
margin-left: 0.5rem;
vertical-align: middle;
font-weight: 600;
}
.tier-badge {
display: inline-block;
font-size: 0.7rem;
padding: 0.15rem 0.5rem;
border-radius: 3px;
font-weight: 600;
margin-left: 0.5rem;
vertical-align: middle;
}
.tier-badge.conventional { background: #bee3f8; color: #2a4365; }
.tier-badge.ml { background: #fefcbf; color: #744210; }
.tier-badge.genai { background: #fed7e2; color: #702459; }
.risk-row {
display: grid;
grid-template-columns: 1fr 1fr 1fr;
gap: 0.75rem;
padding: 0.75rem;
border-bottom: 1px solid var(--border);
}
.risk-row:last-child { border-bottom: none; }
.risk-row.risk-header { font-weight: 600; background: #edf2f7; border-radius: 6px 6px 0 0; }
.start-here-card {
background: linear-gradient(135deg, #ebf8ff 0%, #f0fff4 100%);
border: 2px solid var(--accent);
border-radius: 12px;
padding: 1.75rem;
margin-bottom: 1.5rem;
}
.start-here-card h3 { color: var(--primary); margin-bottom: 1rem; font-size: 1.2rem; }
.start-path {
display: flex;
gap: 0.75rem;
align-items: center;
padding: 0.75rem 1rem;
background: white;
border-radius: 8px;
margin-bottom: 0.5rem;
border: 1px solid var(--border);
cursor: pointer;
transition: all 0.2s;
}
.start-path:hover { border-color: var(--accent); transform: translateX(4px); }
.start-path .path-icon { font-size: 1.5rem; flex-shrink: 0; }
.start-path .path-text strong { display: block; font-size: 0.9rem; color: var(--primary); }
.start-path .path-text span { font-size: 0.8rem; color: var(--text-light); }
/* Feedback Panel */
.feedback-toggle {
position: fixed;
bottom: 1.5rem;
right: 1.5rem;
background: var(--primary);
color: white;
border: none;
padding: 0.75rem 1.25rem;
border-radius: 30px;
font-size: 0.9rem;
font-weight: 600;
cursor: pointer;
box-shadow: 0 4px 12px rgba(0,0,0,0.2);
z-index: 200;
transition: transform 0.2s, background 0.2s;
}
.feedback-toggle:hover { background: var(--primary-light); transform: scale(1.05); }
.feedback-panel {
position: fixed;
top: 0;
right: -420px;
width: 400px;
height: 100vh;
background: white;
border-left: 2px solid var(--border);
box-shadow: -4px 0 20px rgba(0,0,0,0.1);
z-index: 300;
transition: right 0.3s ease;
display: flex;
flex-direction: column;
overflow: hidden;
}
.feedback-panel.open { right: 0; }
.feedback-panel-header {
padding: 1.25rem;
background: var(--primary);
color: white;
display: flex;
justify-content: space-between;
align-items: center;
}
.feedback-panel-header h3 { font-size: 1rem; margin: 0; }
.feedback-panel-close {
background: none;
border: none;
color: white;
font-size: 1.5rem;
cursor: pointer;
padding: 0 0.5rem;
}
.feedback-panel-body { flex: 1; overflow-y: auto; padding: 1.25rem; }
.feedback-section { margin-bottom: 1.25rem; }
.feedback-section label { display: block; font-weight: 600; font-size: 0.85rem; color: var(--primary); margin-bottom: 0.4rem; }
.feedback-section textarea {
width: 100%;
min-height: 70px;
border: 1px solid var(--border);
border-radius: 6px;
padding: 0.6rem;
font-size: 0.85rem;
font-family: inherit;
resize: vertical;
transition: border-color 0.2s;
}
.feedback-section textarea:focus { outline: none; border-color: var(--accent); }
.feedback-name {
width: 100%;
border: 1px solid var(--border);
border-radius: 6px;
padding: 0.6rem;
font-size: 0.85rem;
font-family: inherit;
margin-bottom: 1rem;
}
.feedback-name:focus { outline: none; border-color: var(--accent); }
.feedback-actions {
padding: 1rem 1.25rem;
border-top: 1px solid var(--border);
display: flex;
gap: 0.5rem;
flex-wrap: wrap;
}
.feedback-btn {
padding: 0.6rem 1rem;
border: none;
border-radius: 6px;
font-size: 0.85rem;
font-weight: 600;
cursor: pointer;
transition: background 0.2s;
}
.feedback-btn.primary { background: var(--accent); color: white; }
.feedback-btn.primary:hover { background: var(--primary); }
.feedback-btn.secondary { background: #edf2f7; color: var(--text); }
.feedback-btn.secondary:hover { background: #e2e8f0; }
.feedback-toast {
position: fixed;
bottom: 5rem;
right: 1.5rem;
background: var(--success);
color: white;
padding: 0.75rem 1.25rem;
border-radius: 8px;
font-size: 0.85rem;
font-weight: 500;
z-index: 400;
opacity: 0;
transform: translateY(10px);
transition: all 0.3s ease;
pointer-events: none;
}
.feedback-toast.show { opacity: 1; transform: translateY(0); }
.feedback-overlay {
position: fixed;
top: 0; left: 0; right: 0; bottom: 0;
background: rgba(0,0,0,0.3);
z-index: 250;
display: none;
}
.feedback-overlay.show { display: block; }
@media (max-width: 900px) {
.main-layout { flex-direction: column; }
.nav-bar {
position: relative;
height: auto;
max-width: 100%;
min-width: 100%;
border-right: none;
border-bottom: 1px solid var(--border);
overflow-y: visible;
overflow-x: auto;
padding: 0.5rem 0;
}
.nav-bar ul { flex-direction: row; flex-wrap: wrap; padding: 0 0.5rem; }
.nav-bar li a {
padding: 0.5rem 0.75rem;
font-size: 0.78rem;
border-left: none;
border-bottom: 2px solid transparent;
}
.nav-bar li a:hover, .nav-bar li a.active {
border-left-color: transparent;
border-bottom-color: var(--accent);
background: transparent;
}
.nav-bar .sub-nav { display: none !important; }
.nav-bar li.has-sub > a .nav-arrow { display: none; }
}
@media (max-width: 768px) {
.header h1 { font-size: 1.4rem; }
.container { padding: 1.25rem 1rem; }
.workflow-step { flex-direction: column; gap: 0.5rem; }
.use-case-card .uc-row { flex-direction: column; }
.risk-row { grid-template-columns: 1fr; }
.feedback-panel { width: 100%; right: -100%; }
}
</style>
</head>
<body>
<div class="header">
<h1>SAMA Continuous Provider Risk Monitoring Readiness Guide</h1>
<p>Leveraging AI and Advanced Analytics for Program Integrity, Rural Access, and Safe State Implementation</p>
<span class="badge">WORKING DRAFT v0.4 | SAMA Workstream | August 2026</span>
</div>
<div class="main-layout">
<nav class="nav-bar">
<ul>
<li><a href="#" data-section="start" class="active">Start Here</a></li>
<li><a href="#" data-section="overview">Overview</a></li>
<li><a href="#" data-section="problem">1. The Problem</a></li>
<li class="has-sub">
<a href="#" data-section="usecases">2. Use Cases <span class="nav-arrow">▸</span></a>
<ul class="sub-nav">
<li><a href="#" data-section="usecases" data-scroll="uc1">2.1 Billing Anomaly</a></li>
<li><a href="#" data-section="usecases" data-scroll="uc2">2.2 Ownership Graph</a></li>
<li><a href="#" data-section="usecases" data-scroll="uc3">2.3 Document Triage</a></li>
<li><a href="#" data-section="usecases" data-scroll="uc4">2.4 Cross-State</a></li>
<li><a href="#" data-section="usecases" data-scroll="uc5">2.5 Enrollment Tiering</a></li>
<li><a href="#" data-section="usecases" data-scroll="uc6">2.6 Rural Access</a></li>
</ul>
</li>
<li class="has-sub">
<a href="#" data-section="phases">3. Readiness Phases <span class="nav-arrow">▸</span></a>
<ul class="sub-nav">
<li><a href="#" data-section="phases" data-tab="phase1">Phase 1: Foundation</a></li>
<li><a href="#" data-section="phases" data-tab="phase2">Phase 2: Pilots</a></li>
<li><a href="#" data-section="phases" data-tab="phase3">Phase 3: Scale</a></li>
<li><a href="#" data-section="phases" data-tab="phase4">Phase 4: Continuous Ops</a></li>
</ul>
</li>
<li><a href="#" data-section="workflow">4. Workflow</a></li>
<li class="has-sub">
<a href="#" data-section="governance">5. Governance <span class="nav-arrow">▸</span></a>
<ul class="sub-nav">
<li><a href="#" data-section="governance" data-scroll="gov-rules">Rules</a></li>
<li><a href="#" data-section="governance" data-scroll="gov-disclosure">Provider Disclosure</a></li>
<li><a href="#" data-section="governance" data-scroll="gov-charter">Board Charter</a></li>
</ul>
</li>
<li><a href="#" data-section="risks">6. Risk Framework</a></li>
<li class="has-sub">
<a href="#" data-section="data">7. Data & Alerts <span class="nav-arrow">▸</span></a>
<ul class="sub-nav">
<li><a href="#" data-section="data" data-scroll="data-sources">Data Sources</a></li>
<li><a href="#" data-section="data" data-scroll="data-alerts">Alert Approach</a></li>
<li><a href="#" data-section="data" data-scroll="data-metrics">Metrics</a></li>
</ul>
</li>
<li class="has-sub">
<a href="#" data-section="staffing">8. Staffing & Budget <span class="nav-arrow">▸</span></a>
<ul class="sub-nav">
<li><a href="#" data-section="staffing" data-scroll="staff-roles">Team Roles</a></li>
<li><a href="#" data-section="staffing" data-scroll="staff-training">Training</a></li>
<li><a href="#" data-section="staffing" data-scroll="staff-budget">Budget</a></li>
<li><a href="#" data-section="staffing" data-scroll="staff-funding">Funding Pathways</a></li>
</ul>
</li>
<li class="has-sub">
<a href="#" data-section="templates">9. Templates <span class="nav-arrow">▸</span></a>
<ul class="sub-nav">
<li><a href="#" data-section="templates" data-tab="tmpl-readiness">Readiness Assessment</a></li>
<li><a href="#" data-section="templates" data-tab="tmpl-vendor">Vendor Questions</a></li>
<li><a href="#" data-section="templates" data-tab="tmpl-modelcard">Model Card</a></li>
<li><a href="#" data-section="templates" data-tab="tmpl-implsheet">Fact Sheet</a></li>
<li><a href="#" data-section="templates" data-tab="tmpl-evidence">Evidence Packet</a></li>
<li><a href="#" data-section="templates" data-tab="tmpl-rural">Rural Access</a></li>
</ul>
</li>
<li><a href="#" data-section="casestudies">10. Case Studies</a></li>
<li><a href="#" data-section="talkingpoints">11. Talking Points</a></li>
<li><a href="#" data-section="glossary">12. Glossary</a></li>
<li><a href="#" data-section="survey">13. Survey Results</a></li>
<li><a href="#" data-section="changelog">Changelog</a></li>
</ul>
</nav>
<div class="container">
<!-- START HERE SECTION (NEW in v0.3) -->
<div id="start" class="section active">
<h2 style="margin-bottom:1rem; color:var(--primary);">Start Here</h2>
<div class="callout warning" style="margin-bottom:1.5rem;">
<strong>Important:</strong> This work-in-progress guide is intended to help states consider key questions, risks, and readiness factors associated with AI-enabled continuous provider risk monitoring. It is not intended to prescribe a single implementation model or establish requirements, standards, or certification criteria. States should adapt the considerations presented here to their own legal, regulatory, policy, operational, technical, and program context.
</div>
<div class="start-here-card">
<h3>Where are you on the readiness spectrum?</h3>
<p style="margin-bottom:1.25rem; font-size:0.9rem;">This guide supports states at different stages of readiness. Find your starting point below and jump to the sections most relevant to your current needs.</p>
<div class="start-path" onclick="navigateTo('overview')">
<div class="path-icon">1️⃣</div>
<div class="path-text">
<strong>Not exploring yet? Do these 3 things.</strong>
<span>1. Read the Executive Summary. 2. Review the 6 Use Cases to see what's possible. 3. Complete the Readiness Self-Assessment (§9.1) to identify gaps.</span>
</div>
</div>
<div class="start-path" onclick="navigateTo('governance')">
<div class="path-icon">2️⃣</div>
<div class="path-text">
<strong>Building governance or developing policy?</strong>
<span>Start with Governance Rules (§5) — focus on the 4 rules marked "Required before first pilot." Then review the Risk Framework (§6) and Staffing needs (§8).</span>
</div>
</div>
<div class="start-path" onclick="navigateTo('templates')">
<div class="path-icon">3️⃣</div>
<div class="path-text">
<strong>Procuring or evaluating vendor solutions?</strong>
<span>Jump to Vendor Questions (§9.2), Model Card Rubric (§9.3), and the Implementation Fact Sheet (§9.4). Use the Funding Pathways section (§8.4) for budget planning.</span>
</div>
</div>
<div class="start-path" onclick="navigateTo('phases')">
<div class="path-icon">4️⃣</div>
<div class="path-text">
<strong>Already in pilot or production?</strong>
<span>Focus on Phase 3–4 activities, the Workflow (§4), Performance Metrics with benchmarks (§7.3), and Continuous Ops checklists. Review Case Studies for peer lessons.</span>
</div>
</div>
</div>
<div class="card">
<h3>How to Use This Readiness Guide</h3>
<p>This work-in-progress draft is organized as a state-oriented readiness and decision-support resource. It can be used as:</p>
<ul style="margin:0.75rem 0 0 1.5rem;">
<li>A readiness checklist for state agencies at any maturity stage</li>
<li>A source for a short MESC executive summary</li>
<li>A framework to intake state-specific inputs and priorities</li>
<li>A reference for procurement staff evaluating vendor AI claims</li>
<li>A discussion tool for governance boards and cross-agency teams</li>
</ul>
</div>
<div class="callout success">
<strong>Key Takeaway:</strong> The safest path is not to buy an AI product and search for a problem. The safest path is to define the Medicaid decision, govern the workflow, validate the data and model, train, support, and empower the humans involved, and scale only when pilot outputs have been proven and demonstrated to be useful, fair, explainable, and defensible.
</div>
</div>
<!-- OVERVIEW SECTION -->
<div id="overview" class="section">
<h2 style="margin-bottom:1rem; color:var(--primary);">Executive Summary</h2>
<div class="card">
<p>State Medicaid agencies face a practical problem: they are expected to protect public funds, detect fraud, waste, and abuse, support federal and state integrity priorities, and maintain access to care for eligible members — including rural and underserved communities — with finite staffing and uneven data quality.</p>
<p style="margin-top:0.75rem;">AI and advanced analytics can help states move from episodic review toward <strong>continuous provider risk monitoring</strong>. The value is not replacing investigators or Medicaid leadership. The value is using analytics to organize large volumes of claims, enrollment, documentation, ownership, access, and public-source information into higher-quality leads, clearer risk tiers, and more defensible evidence packages for human review.</p>
</div>
<div class="callout success">
<strong>What good looks like:</strong> A state with effective continuous monitoring generates fewer but higher-quality leads, resolves cases faster, documents decisions defensibly, avoids disrupting rural access, and can explain its process to any audience — from legislators to ALJs to providers. The technology serves the mission; the mission does not serve the technology.
</div>
<h3 style="margin:1.5rem 0 0.5rem; color:var(--primary);">SAMA Readiness Framework at a Glance</h3>
<p style="margin-bottom:1rem; font-size:0.88rem; color:var(--text-light);">The phases, governance rules, workflow steps, and templates below are SAMA workstream recommendations developed to support state readiness. They are not CMS requirements, certification criteria, or mandates unless separately identified as such.</p>
<div class="summary-grid">
<div class="summary-card">
<div class="number">4</div>
<h4>Implementation Phases</h4>
<p style="font-size:0.8rem;color:var(--text-light);">Foundation → Pilots → Scale → Continuous Ops</p>
</div>
<div class="summary-card">
<div class="number">12</div>
<h4>Governance Rules</h4>
<p style="font-size:0.8rem;color:var(--text-light);">4 recommended before pilot; 8 built as program matures</p>
</div>
<div class="summary-card">
<div class="number">8</div>
<h4>Workflow Steps</h4>
<p style="font-size:0.8rem;color:var(--text-light);">Human-centered, auditable process</p>
</div>
<div class="summary-card">
<div class="number">7+</div>
<h4>Implementation Templates</h4>
<p style="font-size:0.8rem;color:var(--text-light);">Ready-to-use checklists, model cards & assessments</p>
</div>
</div>
<div class="callout info">
<strong>Central Premise:</strong> States should not ask, "Can AI find fraud?" in isolation. They should ask, "Can this AI-assisted workflow responsibly help us identify and prioritize potential risks, support human review, protect providers and beneficiaries from unnecessary harm, and produce decisions that are traceable, explainable, and appropriate to the consequences?"
</div>
</div>
<!-- THE PROBLEM SECTION -->
<div id="problem" class="section">
<h2 style="margin-bottom:1rem; color:var(--primary);">1. The Problem</h2>
<div class="accordion">
<div class="accordion-header" onclick="toggleAccordion(this)">
1.1 Periodic oversight may not detect all emerging risks
<span class="arrow">▼</span>
</div>
<div class="accordion-body">
<p>Periodic provider enrollment, screening, and revalidation remain essential, but they may not detect all risks that emerge between review cycles. A provider may pass every enrollment rule and still present risk because of the services billed, the entities connected to the provider, billing velocity, documentation patterns, referral networks, or sudden changes in service mix.</p>
<p style="margin-top:0.75rem;">Continuous provider risk monitoring fills this gap by creating an ongoing cycle: <strong>collect signals → stratify risk → prioritize human review → document evidence → act proportionately → feed outcomes back</strong> into the monitoring system.</p>
</div>
</div>
<div class="accordion">
<div class="accordion-header" onclick="toggleAccordion(this)">
1.2 Lead quality matters more than lead volume
<span class="arrow">▼</span>
</div>
<div class="accordion-body">
<p>Many states do not lack leads. They lack staff capacity to pursue every lead, and they need better ways to select the leads most likely to produce a viable outcome. The goal is not to maximize flags. The goal is to generate fewer, better, more explainable, more defensible leads.</p>
<ul style="margin:0.75rem 0 0 1.5rem;">
<li>Some states must focus on cases with the greatest recovery potential; others may prioritize patient harm or network risk.</li>
<li>Some states may be prohibited from using extrapolation and need tools to identify which claims deserve human attention.</li>
<li>Some states are more focused on prevention and enrollment; others on post-payment investigations.</li>
<li>All states need transparency about why a lead was generated and what evidence exists before taking action.</li>
</ul>
</div>
</div>
<div class="accordion">
<div class="accordion-header" onclick="toggleAccordion(this)">
1.3 Rural access and program integrity are connected
<span class="arrow">▼</span>
</div>
<div class="accordion-body">
<p>Program integrity cannot be treated only as a recovery function. In rural areas, a single provider may be critical to maintaining access. A poorly calibrated risk program can unintentionally burden or drive out legitimate providers.</p>
<p style="margin-top:0.75rem;">Continuous provider risk monitoring should include access guardrails. Before escalating adverse action, the workflow should ask:</p>
<ul style="margin:0.75rem 0 0 1.5rem;">
<li>What access gap would this action create?</li>
<li>Are there alternative providers?</li>
<li>Are members likely to experience travel, delay, or continuity-of-care disruption?</li>
<li>Is the state dealing with fraud vs. a good-faith provider who needs education?</li>
</ul>
</div>
</div>
<div class="accordion">
<div class="accordion-header" onclick="toggleAccordion(this)">
1.4 AI changes what states can see — and must govern
<span class="arrow">▼</span>
</div>
<div class="accordion-body">
<p>AI can analyze information previously difficult to use at scale: multi-page clinical records, call recordings, consent artifacts, ownership networks, provider websites, service patterns, geospatial shifts, and longitudinal behavior. That expanded visibility can help identify hidden risk earlier — but also creates obligations: states must understand model purpose, data sources, limitations, bias risks, explainability, audit trail, and decision rights before relying on the output.</p>
</div>
</div>
<div class="accordion">
<div class="accordion-header" onclick="toggleAccordion(this)">
1.5 Why this matters now
<span class="arrow">▼</span>
</div>
<div class="accordion-body">
<p>States are under increasing pressure to improve program integrity without creating unnecessary burden for providers or barriers for members. Fraud schemes can move faster than traditional audits. Public data can be incomplete or misleading. Vendors are bringing AI products into Medicaid environments, and states need a practical way to ask the right questions, monitor performance, and ensure tools remain safe over time.</p>
<div class="callout warning" style="margin-top:0.75rem;">
<strong>Implementation Warning:</strong> An AI-generated risk score, without governance, workflow integration, evidence standards, and meaningful human review, is not a complete program integrity capability. It creates unmanaged operational, legal, equity, access, privacy, and program risk.
</div>
</div>
</div>
</div>
<!-- USE CASES SECTION -->
<div id="usecases" class="section">
<h2 style="margin-bottom:1rem; color:var(--primary);">2. Use Cases: What Goes In, What Comes Out</h2>
<p style="margin-bottom:1rem;">Each use case below describes the data going in, what the analytic approach does with it, the expected output, and where it fits in the workflow. Depending on the use case, the appropriate approach may involve conventional analytics, machine learning, generative AI, or a combination. Technology tier badges indicate the type of analytics involved.</p>
<div class="callout warning" style="margin-bottom:1.25rem;">
<strong>Important:</strong> Across all use cases, analytic outputs should be treated as indicators or leads for further review, not as definitive evidence of fraud, waste, abuse, or other misconduct.
</div>
<div class="callout info" style="margin-bottom:1.25rem;">
<strong>Technology Tier Key:</strong>
<span class="tier-badge conventional">Conventional Analytics</span> Statistical methods states have used for years —
<span class="tier-badge ml">Machine Learning</span> Pattern recognition requiring model governance —
<span class="tier-badge genai">Generative AI</span> LLM-based capabilities requiring additional safeguards (hallucination, training data controls)
</div>
<!-- Use Case Effort/Value Summary Table (NEW) -->
<div class="card">
<h3>Use Case Prioritization: Effort vs. Time-to-Value<span class="new-badge">NEW</span></h3>
<p style="margin-bottom:0.75rem;">Not all use cases require the same investment. The estimates below are example planning assumptions and will vary significantly based on state data quality, infrastructure, staffing, procurement approach, integration complexity, and governance requirements. Use this table as a starting point for sequencing discussions.</p>
<div class="table-wrapper">
<table>
<thead><tr><th>Use Case</th><th>Technology Tier</th><th>Data Readiness Required</th><th>Implementation Effort</th><th>Time to First Value</th></tr></thead>
<tbody>
<tr><td><strong>1. Billing Pattern Anomaly Detection</strong></td><td><span class="tier-badge conventional">Conventional</span> / <span class="tier-badge ml">ML</span></td><td>Medium — requires clean claims data</td><td>Medium</td><td>4–8 weeks</td></tr>
<tr><td><strong>2. Ownership Graph Analysis</strong></td><td><span class="tier-badge ml">ML</span></td><td>High — requires linked enrollment, corporate, NPI data</td><td>High</td><td>3–6 months</td></tr>
<tr><td><strong>3. Document Summarization & Triage</strong></td><td><span class="tier-badge genai">Generative AI</span></td><td>Low — works with existing document stores</td><td>Low–Medium</td><td>2–4 weeks</td></tr>
<tr><td><strong>4. Cross-State Provider Visibility</strong></td><td><span class="tier-badge ml">ML</span></td><td>Medium — CMS public data + state enrollment</td><td>Medium–High</td><td>2–4 months</td></tr>
<tr><td><strong>5. Enrollment/Revalidation Risk Tiering</strong></td><td><span class="tier-badge conventional">Conventional</span> / <span class="tier-badge ml">ML</span></td><td>Medium — enrollment + history data</td><td>Medium</td><td>6–10 weeks</td></tr>
<tr><td><strong>6. Rural Access Impact Overlay</strong></td><td><span class="tier-badge conventional">Conventional</span></td><td>Medium — geospatial + provider directory data</td><td>Low–Medium</td><td>4–6 weeks</td></tr>
</tbody>
</table>
</div>
<p style="font-size:0.8rem; color:var(--text-light); margin-top:0.5rem;"><em>Fastest wins:</em> Document Summarization and Rural Access Overlay can deliver value quickly with lower data preparation requirements. Ownership Graph Analysis requires the most data plumbing and cross-source integration.</p>
</div>
<div class="use-case-card" id="uc1">
<h4>Use Case 1: Billing Pattern Anomaly Detection (Lead Generation) <span class="tier-badge conventional">Conventional Analytics</span> <span class="tier-badge ml">ML</span></h4>
<div class="uc-row">
<div class="uc-col">
<h5>Data Inputs</h5>
<p>Paid claims data (procedure codes, dates, units, amounts), provider peer group benchmarks, historical billing patterns for same provider</p>
</div>
<div class="uc-col">
<h5>What AI Does</h5>
<p>Clustering and statistical outlier detection (techniques states have used for years, now enhanced with machine learning): identifies providers billing at volumes or patterns significantly different from peers in same taxonomy/geography.</p>
</div>
</div>
<div class="uc-row">
<div class="uc-col">
<h5>Expected Output</h5>
<p>Prioritized lead list with: provider ID, risk score, top 3 contributing factors (e.g., "billing 4x peer average for code X"), confidence level, and recommended next step (desk review, record request, etc.)</p>
</div>
<div class="uc-col">
<h5>Workflow Impact</h5>
<p>Feeds into Triage (Step 4). Investigators receive fewer but higher-quality leads with pre-assembled context instead of raw data dumps.</p>
</div>
</div>
<div class="callout success" style="margin-top:0.5rem;">
<strong>What good looks like:</strong> Investigators spend less time sorting through data and more time on substantive review. Lead-to-action conversion rates improve because leads arrive with context and evidence already assembled.
</div>
</div>
<div class="use-case-card" id="uc2">
<h4>Use Case 2: Provider Network / Ownership Graph Analysis <span class="tier-badge ml">Machine Learning</span></h4>
<div class="uc-row">
<div class="uc-col">
<h5>Data Inputs</h5>
<p>Provider enrollment data (ownership, managing employees, TINs), corporate registration records, shared addresses/phone numbers, NPI/NPPES data, known sanction lists</p>
</div>
<div class="uc-col">
<h5>What AI Does</h5>
<p>Graph analysis: maps relationships between providers, identifies connected entities, surfaces hidden ownership links. Flags networks where one entity has sanctions/fraud history and others share ownership or management.</p>
</div>
</div>
<div class="uc-row">
<div class="uc-col">
<h5>Expected Output</h5>
<p>Network visualization showing provider relationships, risk inheritance paths, and flagged connections. Summary: "Provider A (sanctioned) shares managing employee with Providers B, C (active, no prior flags)."</p>
</div>
<div class="uc-col">
<h5>Workflow Impact</h5>
<p>Feeds into Risk Signal Generation (Step 2) and Investigation (Step 5). Enables proactive enrollment screening and supports network-level investigations.</p>
</div>
</div>
</div>
<div class="use-case-card" id="uc3">
<h4>Use Case 3: Document Summarization & Triage <span class="tier-badge genai">Generative AI</span></h4>
<div class="uc-row">
<div class="uc-col">
<h5>Data Inputs</h5>
<p>Clinical records, treatment plans, progress notes, transportation logs, consent forms, prior authorization documentation</p>
</div>
<div class="uc-col">
<h5>What AI Does</h5>
<p>NLP/LLM summarization: extracts key facts from multi-page records, identifies missing documentation, flags inconsistencies between billed services and clinical notes. Cites source pages.</p>
</div>
</div>
<div class="uc-row">
<div class="uc-col">
<h5>Expected Output</h5>
<p>Structured summary per provider/claim set: services billed vs. documented, missing authorizations, templated/duplicate note alerts, with page citations. Confidence flags for uncertain extractions.</p>
</div>
<div class="uc-col">
<h5>Workflow Impact</h5>
<p>Feeds into Investigation/Review (Step 5). Reduces auditor time per case from hours to minutes for initial document triage. Human auditor still makes final determination.</p>
</div>
</div>
<div class="callout success" style="margin-top:0.5rem;">
<strong>What good looks like:</strong> An auditor who previously spent 3–4 hours reviewing a 200-page clinical record can now review an AI-generated summary in 20 minutes, then spot-check the source pages cited. Throughput increases without sacrificing quality.
</div>
</div>
<div class="use-case-card" id="uc4">
<h4>Use Case 4: Cross-State Provider Visibility <span class="tier-badge ml">Machine Learning</span></h4>
<div class="uc-row">
<div class="uc-col">
<h5>Data Inputs</h5>
<p>CMS public provider data sets, NPPES registry, OIG exclusion lists, state-reported sanctions, multi-state provider enrollment records, Provider Network Directory data</p>
</div>
<div class="uc-col">
<h5>What AI Does</h5>
<p>Entity resolution and cross-referencing: identifies providers operating across multiple states, flags cases where a provider has been sanctioned or investigated in one state but remains active in others. Matches on NPI, name variants, TIN, address proximity.</p>
</div>
</div>
<div class="uc-row">
<div class="uc-col">
<h5>Expected Output</h5>
<p>Alert: "Provider X (NPI: ###) terminated in State A for [reason] on [date] — currently active in State B, C with $X in annual billings." Includes linked entity details and source citations.</p>
</div>
<div class="uc-col">
<h5>Workflow Impact</h5>
<p>Feeds into Signal Capture (Step 1) and Enrollment Risk Tiering. Enables states to catch risks that would be invisible without cross-program visibility.</p>
</div>
</div>
</div>
<div class="use-case-card" id="uc5">
<h4>Use Case 5: Enrollment/Revalidation Risk Tiering <span class="tier-badge conventional">Conventional Analytics</span> <span class="tier-badge ml">ML</span></h4>
<div class="uc-row">
<div class="uc-col">
<h5>Data Inputs</h5>
<p>Provider application data, ownership disclosures, prior investigation history, peer group risk indicators, geographic/access context</p>
</div>
<div class="uc-col">
<h5>What AI Does</h5>
<p>Risk scoring: compares provider attributes against known risk indicators. Assigns risk tier (standard, enhanced, deny-pending-review) based on combination of factors. Explains contributing features.</p>
</div>
</div>
<div class="uc-row">
<div class="uc-col">
<h5>Expected Output</h5>
<p>Risk tier assignment with rationale: "Enhanced review recommended — 3 risk factors: new entity formed <6 months, shared address with previously terminated provider, high-risk service category."</p>
</div>
<div class="uc-col">
<h5>Workflow Impact</h5>
<p>Front-door prevention. Enrollment staff use tier assignment to determine review depth. Tool does NOT deny enrollment — it routes applications for appropriate human review level.</p>
</div>
</div>
</div>
<div class="use-case-card" id="uc6">
<h4>Use Case 6: Rural Access Impact Overlay <span class="tier-badge conventional">Conventional Analytics</span></h4>
<div class="uc-row">
<div class="uc-col">
<h5>Data Inputs</h5>
<p>Provider locations, member locations, travel time data, network adequacy standards, provider taxonomy/capacity, risk signals from other use cases</p>
</div>
<div class="uc-col">
<h5>What AI Does</h5>
<p>Geospatial analysis: maps provider risk signals against geographic access data. Calculates impact of potential adverse actions on member access. Identifies sole-community providers.</p>
</div>
</div>
<div class="uc-row">
<div class="uc-col">
<h5>Expected Output</h5>
<p>Access impact report: "If Provider Y is suspended, 1,200 members in County Z would need to travel 45+ additional miles for behavioral health services. Next nearest provider at capacity."</p>
</div>
<div class="uc-col">