The patient-record discharge variables for an appointment (ITE-1237): microchip, colour, age, weight in kg and lbs, and sex with neuter/spay status, as the printed discharge fills them (DischargePatientVariables). The on-screen discharge preview merges these into its template context, so it no longer shows the raw tokens. A value the record lacks is an empty string. 404 for an unknown appointment, including another tenant's. Open to any authenticated tenant user, like GET /patients/{id}: patient demographics are not a sensitive read under docs/permissions.md (Model A).