Restrictive practices
A register that notices when the authorisation runs out.
Recording a restrictive practice is the part everybody does. The part that goes wrong is quieter: an authorisation reaches its review date on a week when the practice leader is on leave, nobody notices, and the practice carries on being used — now unauthorised, and now a reportable incident that nobody has reported.
The part that is hard to copy
Nothing here depends on somebody remembering
An authorisation that has expired, a review date that has passed and an incident deadline that is closing are all conditions the system evaluates, not reminders a person set. The incident clock in particular is moved along by a scan inside the database every hour, which needs nobody to have a browser open or a task still running on an office laptop. That is the difference between a lapse the system will tell you about and a lapse it will merely be able to show you afterwards, once it matters.