You signed it.
Now show the reasoning
that justified it.

You reviewed the batch record. You signed it as complete.

The investigator opens the file and asks:

"What specific checks were performed before this record was deemed complete?"

You look at the file. The signature is there. The review logic is not.

Scope expanded to 24 additional batch records. Sampled re-review required under QA leadership.

You released the batch. The deviation had been closed. The excursion exceeded the validated range.

Eight days later, the investigator stops on it.

"Who concluded the excursion did not impact product quality — and what evidence supported that determination?"

The batch record is on the table. The release rationale is not.

Historical review of all prior deviation-linked releases requested. 24 additional lots flagged.

Your team dispositioned the OOS result. Laboratory error. Investigation closed.

The investigator pulls the file.

"Who authorized this closure — and on what basis was the result attributed to laboratory error?"

The investigation exists. The closure authorization does not.

All OOS closures from the previous 12 months flagged for re-review.

Your team concluded the root cause. CAPA was opened. The risk assessment that justified the conclusion was never formally authorized.

"Who authorized the risk assessment that supported this root cause determination?"

The CAPA is open. The risk authorization behind it is not documented.

Investigator questioned the basis of three downstream CAPAs. All three reopened for review.

Regulatory approved the filing category. The change was implemented. No one recorded why CBE-0 was selected over a Prior Approval Supplement.

"How was the filing category for this change determined — and who had authority to approve it?"

The change is in production. The filing rationale is nowhere in the record.

Filing category for two prior changes called into question. Regulatory resubmission considered.

You signed the CAPA effectiveness review fourteen months ago. Effectiveness check: complete. Corrective actions: documented.

The investigator pulls it.

"How did you determine this CAPA was effective — and what evidence did you review before authorizing the closure?"

The CAPA closed. The effectiveness authorization — the one with your name on it — does not exist as a record.

Effectiveness determinations for all open CAPAs requested. Your methodology is now under review.

Your team investigated the audit trail anomaly. The determination: data integrity not compromised. Investigation closed.

"Who reviewed this data anomaly — and what was the documented basis for concluding integrity was not compromised?"

The investigation is closed. The integrity determination is not in the file.

Assessment expanded to all systems sharing the same audit trail. Three additional anomalies surfaced.

Your supplier was audited. Two findings remained open. Material continued to be received. Your team approved the exception.

But the exception authorization was never documented.

"How was this supplier determined qualified when an exception condition existed?"

The audit report exists. The exception logic does not.

Incoming material quarantined. Re-qualification review initiated across three additional suppliers.

The OOT result was flagged during a routine stability pull. Your team evaluated it. Conclusion: within statistical expectation. No further action.

"Who authorized that conclusion — and where is the documented evaluation?"

The conclusion was recorded. The authorization was not.

Trend evaluation methodology for all active stability programs requested for investigator review.

You closed the complaint. No field action required. The patient was not harmed.

The investigator reads the file and looks up.

"Who authorized this disposition — and what evidence supported the determination that no field action was required?"

The complaint file is complete. The disposition authorization is not in it.

Complaint trending analysis requested. All related MDR filings pulled for cross-reference.