Signal 022 — July 10, 2026

The Map Nobody Wanted to Build

Forty-four states publish Medicaid exclusion lists. Every one of them lives somewhere different, in a different format, behind a different obstacle. The obligation to check them is uniform and federal. The ability to actually find them is chaos. That gap — between what is technically public and what is practically reachable — is where accountability quietly dies.

CFAISolutions LLC — Sacramento, California — July 10, 2026

There is a rule in American healthcare that sounds simple. If you bill Medicaid, you may not employ anyone who has been excluded from the program. Not a doctor, not a hygienist, not the person who codes the claims or the vendor who handles the billing. Check your people against the exclusion lists before you hire them, and every month after. Keep a dated record that you did.

The federal part of that rule is clean. There is one federal list — the OIG's List of Excluded Individuals and Entities — and it lives in one place, updated on a schedule, downloadable by anyone. Whatever else you think of the federal government's data practices, the LEIE is a model of how public information should work: one source, one format, freely available.

Then you reach the states, and the floor gives out.

Forty-four states and the District of Columbia maintain their own Medicaid exclusion lists — separate from the federal one, legally required to be checked, and answerable to no common standard whatsoever. There is no shared format. There is no shared location. There is no shared update schedule, no shared naming, no shared anything. Each state built its list the way a household builds a junk drawer: independently, over years, with no thought that anyone outside would ever need to open it.

So one state hands you a clean spreadsheet. The next buries the same information in a Word document. A third publishes a PDF — a picture of a table, technically readable, practically useless to any system that needs to actually process it. Some states put the file behind a web portal that runs entirely on JavaScript, so that anything short of a full web browser sees an empty page. Some quietly move the file into a new folder every month, named by date, so that last month's link returns nothing and you have to go find the current one all over again. Some block automated access outright, treating a request for a public list the way a bank treats a break-in.

None of this is malicious. That is the important part, and the part that should trouble you most. No one designed this to be inaccessible. There is no conspiracy in a rotating URL. Each state simply made a local decision, in isolation, optimizing for nothing but getting a required document onto a website — and the sum of forty-five local decisions is a system that is, in practice, closed. The obligation to check these lists is universal and enforced with real penalties. The means to check them was never anyone's job to provide.

"Public" and "accessible" are not the same word, and the distance between them is where accountability goes to hide.

This is the failure mode that almost no one names, because it doesn't look like a failure. The data is public. Anyone can say so, honestly, and point to forty-five government websites as proof. But public and accessible are not the same word, and the distance between them is where accountability goes to hide. A record that exists but cannot be found does not protect anyone. A list that is technically downloadable but practically unreachable might as well be sealed. Transparency is not a legal status a document holds. It is a question of whether a human being with a reason to look can actually get there.

Consider who actually pays for this gap. It is not the large hospital system with a compliance department and a five-figure contract with a national screening vendor. Those organizations buy their way across the gap; the fragmentation is merely a line item. The ones who fall in are the small practices — the single dental office, the two-provider clinic, the family pharmacy — who have exactly the same legal obligation and none of the infrastructure. They are told, correctly, that they must screen against every applicable state list. They go looking. They find a spreadsheet here, a PDF there, a portal that won't load, a link that's dead. Most of them give up, screen the one federal list they can actually reach, and hope. When one of them is fined, the penalty is not for dishonesty. It is for being unable to navigate a maze that was never meant to be navigable.


The maze is the point of this entry, because the maze is the thing CFVA exists to dismantle. Not this one specifically — the whole category. Public records scattered across incompatible systems, each one technically available and collectively unusable, protecting no one because no one can assemble them. Court filings in one county's portal and another county's PDF. Enforcement actions spread across a dozen agencies that have never spoken to each other. Sanctions, debarments, exclusions, all of it real, all of it public, none of it reachable from a single place by a person who simply wants to know the truth about who they're dealing with.

Someone has to do the unglamorous work. Someone has to go to all forty-five places, learn each one's particular obstacle, pull the file whatever form it takes, and put it somewhere a person can actually look. It does not require genius. It requires refusing to accept that "it's technically on a website" is the same as "it's available." It requires treating the gap between public and accessible as a problem to be solved rather than a fact of life to be endured.

A right you cannot exercise is not yet a right. A record you cannot find is not yet public.

That gap is not an accident of technology, and it will not close on its own. It closes one scattered, stubborn, badly-formatted source at a time — because someone decided that a right you cannot exercise is not yet a right, and that a record you cannot find is not yet public. The government wrote the rule that these lists must be checked. It left to everyone else the small matter of making them checkable.

We think that small matter is the entire matter. Corruption, fraud, and simple error survive in exactly the places where the information exists but the path to it does not. Close the path, and there is nowhere left to hide. That is the work. It is slow, it is tedious, and it is, quietly, everything.

Christian Fuhrmann
Founder & CEO, CFAISolutions LLC
Sacramento, California — July 10, 2026