Annex 1 2023 with AI in sterile packaging — CCS, EM and QRM stopped being paperwork.

The problem

The CCS stopped being a document — and now you have to prove it is alive.

The quality manager of a sterile plant has been living with an uncomfortable truth since Annex 1 was revised: the inspector is no longer satisfied that the SOP exists. They want to see the Contamination Control Strategy at work, with real data proving the strategy is executed the way it says, and with the traceability of every QRM decision. In operational reality:

1. The CCS is a PDF written two years ago, with an annex of procedures spread across QA, production and maintenance. Nobody has a single view of it.
2. Grade A EM is continuous in theory, but integrating the particle counters, the microbiology plates, the log of operator interventions in the RABS and the isolator's decontamination cycle is done by the QA team by hand, at batch closure.
3. QRM is a spreadsheet matrix updated once a year, with no direct link to the real events the system captures.

The result: when the inspector asks for the traceability of a quality decision, rebuilding it takes days — and sometimes you find an inconsistency between the CCS on paper and operational reality. The system is not failing: it is documented separately from the reality it controls.

How it fits the IRIS system

iLEAN does not rewrite your CCS — it makes it live on the real data of your line.

The problem is not the strategy: it is that the strategy and operational reality speak different languages. iLEAN acts as the putty that joins the documented CCS with continuous EM, the RABS/isolator logs and the operator records. The architecture, applied to Annex 1 2023:

Edge sees every intervention in the isolator and every decontamination cycle. Tracer rebuilds the batch's journey, evidence included. Writer keeps the CCS alive with real data. The person signs — always.

• Edge — vision-equipped terminals over the critical points of the isolator or RABS: glove integrity, peroxide cycle, manual interventions, differential pressure. They detect inconsistencies in milliseconds (a glove with a pinhole, an undocumented opening) and raise the alert before it affects the batch. It works without a network.
• Connect / Tracer — rebuilds the complete journey of the batch: what went in, what happened in grade A, which interventions were made, which EM results came back, which decontamination cycle ran, which deviations occurred. It captures the islands (the microbiology spreadsheet, the DCS log, the maintenance email) at second zero.
• Agent / Writer — keeps the CCS and the QRM matrix alive: it drafts the periodic reviews with real events, proposes risk re-evaluations when a pattern repeats, and prepares the per-batch dossier for the auditor. The person validates and signs.

See the full IRIS architecture →

Before and after

Annex 1 on paper vs. Annex 1 alive with iLEAN

Aspect	Documented CCS + EM handled separately	With iLEAN Edge + Tracer + Writer
CCS	A PDF reviewed once a year	A live strategy built on real process data
Grade A EM	Continuous at the sensors, manual at consolidation	Continuous and consolidated in real time, per batch
Operator interventions	Shift notebook + log written after the fact	Visual + voice capture, traced to the batch
QRM (risk matrix)	An annual spreadsheet, unlinked to real events	A live matrix, fed by system events
Dossier for the inspector	Manual reconstruction taking several days	Automatic per-batch dossier, evidence included
Operation without a network	Critical system down	Edge keeps running on the panel's own power

Impact estimate

Impact estimate for your plant — to be validated with your numbers.

The block below is an estimate to be validated with your plant's data. We put it forward so the committee has an order of magnitude; we refine it during the diagnostic.

• One sterile packaging line (RABS or isolator), with a documented CCS that is not integrated with continuous EM, and a per-batch dossier rebuilt manually.
• Edge pilot over the critical points + Tracer/Writer over the line. First value expected within a few weeks: an automatic per-batch dossier and a CCS connected to real events.
• Reduction in per-batch dossier preparation time on the order of ≥30%, conservatively. Indicative payback between 4 and 9 months.
• Hard lever: a single deviation caught in time avoids the rework or the recall of a sterile batch. In sterile packaging, one batch pays for the pilot with room to spare.

And the quality bar set by the most demanding sector of all

In automotive, the quality standard is on the order of 25 PPM ^[1]. In sterile packaging the bar is even lower (this is injectable product; we are talking about zero defects), and that is exactly why anchored AI — not free-running AI — is the only reasonable route: in tasks where the AI recontextualizes a piece of data from one system into another, the best models brought error below 1.5% ^[2]. iLEAN never decides alone on anything critical: the three safety rings guarantee that a critical operation is only ever executed by a person.

^[1] 25 PPM as the automotive quality standard — Symestic.
^[2] OpenAI paper “Why Language Models Hallucinate”, 2025 — reliability of AI in anchored tasks.