Enforced gates (not conventions)
- A deviation cannot close without a documented RCA conclusion + a linked disposition.
- CAPA effectiveness cannot be signed before all actions are complete.
- A CAPA cannot close before effectiveness is verified.
- Maker-checker: the author/requester/owner cannot approve, close, or reopen their own record.
- Reason for change is required on every mutation of a previously recorded regulated value.
- Every controlled transition writes an atomic, hash-chained audit entry in the same transaction.