Prove the retrieval scope belongs to the patient (nothing downstream re-checks it). BAD_REQUEST naming no id; a repo failure bubbles by band (500).
Prove the retrieval scope belongs to the patient (nothing downstream re-checks it). BAD_REQUEST naming no id; a repo failure bubbles by band (500).