Record that you chose manual entry instead of this photo capture

Nothing is written to the health passport by analysis. Confirm requires explicit review, storage consent and the version of the health-storage notice shown (consentVersion, stored with the confirmation receipt); a missing or unknown version is rejected. Health records retain OCR provenance, evidence ID and their original model confidence only if unchanged. Corrections insert immutable replacements with supersedesId, matching owner, code and original time. Meal nutrition comes from catalogue IDs or the server-pinned draft estimate scaled by reviewed grams. Clients cannot submit arbitrary calorie values or food names. Confirmation, observations and meal rows commit together. Repeating the identical confirmation returns the original receipt; changed payloads return 409.