*Pseudonymised at source _ Identifiers become cryptographic tokens before any clinical data enters the federation.