Planned workflow
How a lot assessment would work
Nine steps take one lot from intake to a recorded client decision. Each step leaves a record that can be retrieved later for audits and corrective actions.
Acceptance
Restricted-party and sanctions screening, confirmation of civilian use and an engagement letter that sets out the advisory nature and limits of the service.
Scope
Criticality class, end use and the client’s own requirements for the application.
Evidence intake
Offer, supplier data, certificates of conformance, packing lists, lot and date codes, photographs, lifecycle and incident data. The provenance, date and source of each item are recorded; file hashes show that a file has not changed, not that its content is true.
Initial risk record
Factor scoring, a risk tier, the confidence of the evidence and any critical flags. The numerical core is experimental until validation.
Verification plan
A recommended verification depth, from document review (L0) to destructive laboratory analysis (L3), and the methods to use. Reviewed by a second qualified reviewer.
Testing
The client contracts an ISO/IEC 17025-accredited laboratory of its choice; chain of custody is kept.
Update and lot record
Laboratory results are entered, the record is updated and a recommendation is issued in the Digital Component Passport (DCP).
Client decision
The client decides whether to accept, test further, quarantine or reject the lot, and records that decision.
Records and complaints
Retention under the contract and applicable law; corrections are appended, never overwritten; complaints and report withdrawals are logged.
Four-eyes review. An engagement that requires independent review is accepted only when a second qualified reviewer is available. The person who creates a record does not act as its independent reviewer.