
Playbook
Dual sign-off at dispatch: a release gate two different people must pass.
“The checklist was signed — by the same person twice.” A paper checklist makes it easy to release a shipment nobody independently verified.

“The checklist was signed — by the same person twice.” A paper checklist makes it easy to release a shipment nobody independently verified.
A paper dispatch checklist with one signature, or two signatures from the same person, lets a shipment leave with a gap nobody checked: a logger not started, ice short, a document missing.
| Measure | Direction |
|---|---|
| Shipments released with a FAIL | Zero |
| Holds by control | Falling as fixes land |
| Time from first check to release | Stable and predictable |
UltraCold runs −60 °C and −80 °C shipments from freezer to freezer in three phases with their own controls: 22 at dispatch, 22 in transit and 24 at delivery. Any FAIL at dispatch holds the shipment, and release needs QA and warehouse to sign independently; the system refuses the same person twice. Two loggers are watched live: drift beyond ±2 °C around target raises an alert, and a breach of the configured hard limits for 30 minutes becomes an NCR with a 4-hour QA disposition deadline. Dry ice is calculated per lane from lane time and ambient profile, with exhaustion risk flagged at two hours of cover. Every cross-dock records seal and dwell time, a 12-trigger ladder escalates from the control tower to senior management, and everything is kept in a five-year audit log.
A release that needs two different people, typically QA and warehouse, to sign independently after all dispatch controls pass.
The shipment is held until the issue is fixed and the control is rechecked; a FAIL should never be overridden by a signature.
See it on your own data. UltraCold — −80 °C, signed off at every step. Book a 30-minute working session with an engineer.