An audit register, run in the open

COA Watchdog collects vendor certificates, checks them at the issuing laboratory, and records the results. Every check is recorded so a reader can repeat it at the laboratory portal with the same identifiers.

Software does what repeats exactly: collection, the portal lookup, hashing, field comparison. A person does what needs judgement: reading an uncertain field, writing the finding, contacting the vendor.

A certificate of analysis is the only evidence most buyers see that a product was tested. It is also a document anyone can edit. Laboratories publish verification portals, so whether a report is real has a definitive answer. This register collects that answer for each vendor, with the evidence, and scores the vendors that pass.

A record is published when the checks are finished. Everything in it was read from the company’s own storefront and from the laboratory that issued the reports.

A company can answer through the response form at any time. Whatever it sends is published verbatim in the company response block with the date it arrived. A company that fixes the issue can ask for a new check. A company that believes we made a mistake can ask for a review under the corrections policy, and evidence that a finding is wrong changes the record itself.

Laboratory information, correction requests and company replies go through the response form. An audit request only needs a name and an address: the request form takes both.