Laboratory IntegrationGuide
SFTP & file integration
Implemented SFTP/file exchange: host-key verification, safe file handling, receipts and reconciliation.
Status
Limitation
Status today: this interface is implemented in source and exercised only in isolated local tests. Its runtime is disabled, no laboratory installation is approved, and no vendor or product version is certified. It cannot carry Sandbox or Production orders until the release-readiness process in Installation validation & go-live is complete.
Connection security
- The server's SSH host key must match a pinned SHA-256 fingerprint during the handshake, before any credential is offered.
- Host, port and username must appear on the installation's allowlist.
- Credentials are resolved from Solia's secret store at connection time and are never written to logs or files.
File handling
- Directory and file names are restricted to a safe character set; path traversal, symlinks and non-regular files are skipped.
- Each inbound file is fingerprinted (SHA-256). Duplicates are recognized by fingerprint; unparseable files are quarantined.
- A file is archived only after Solia has committed it canonically. Until then it is staged, never deleted.
- Supported formats: delimited files with a versioned profile. XML and fixed-width formats are not supported.
Receipts and reconciliation
File transfer has no automatic LIS acknowledgement. Delivery of an order file is not acceptance. Acceptance requires an application receipt that matches both the file name and its SHA-256; unmatched receipts are reconciled by an operator.