Hi George,
Since it's for patient access to their own data, you do not need to be part of our code program before going to prod.
As many sites are still working on initial trials of some of the patient access and setup, and may not be ready for a full production app yet, the process for getting to production is not very smooth at this point. For example, we're working on publishing our FHIR endpoints for different sites, which your application will need, and streamlining the way your application will get access so it's not as manual as it is today. Look for more information to come out here as this progresses.
In the meantime, the first requirement is definitely to test your application against our sandbox and get it registered in our code portal.
~ Jenni