| Authorised route snapshot | Pharmacy/driver scope, route ID/version, stable stop/job references, sequence, approved navigation point, package count, relevant windows/policy flags. | Read-only starting scope. Confirm access, refresh, expiry, location necessity and permitted use. |
| Delivery events | Approved dispatch, status, delay and outcome events with time, source and stable references. | Patient notifications must be based on authorised data. An ETA is an estimate, not handover evidence. |
| Hold or combine request | Patient intent linked to their own prescription/parts. Pharmacy approval, request ID and expected route version. | Optional separate write/event channel. Reject stale/conflicting changes; return acknowledgement. A read export does not grant mutation access. |
| Reconciliation | Versioned refresh, applied/rejected result and unresolved changes visible to staff/driver. | Repeat requests must not duplicate actions. Avoid silent divergence between overlay and source round. |
| Handover evidence | Authorised outcome reference and suitable photo/evidence access if supported. | Agree evidence owner, storage, retention and viewer permissions; a photo alone cannot relax policy. |