Radiopharmacy operations. Release before the dose disappears.

Radiopharmaceutical manufacturing has a constraint that ordinary planning systems do not understand: the product is losing usable activity while it is being made, tested, released, transported, and prepared for administration.

Seal makes time, activity, and destination part of the batch state. Production demand, radionuclide source, synthesis, disposables, rapid QC, disposition, patient-dose preparation, labeling, shipment, administration window, and later-arriving evidence remain one traceable operation.

Radiopharmacy software sits across manufacturing, laboratory, pharmacy, logistics, and clinical-system boundaries. It must preserve GMP evidence and radioactive-material accountability without exposing protected patient data to every manufacturing user or pretending to replace process controllers, analytical instruments, hospital scheduling, or radiation-safety systems.

The operating architecture should identify which system owns each fact.

Interfaces carry controlled identifiers, activity and reference time, status, source, acknowledgement, and permitted patient context. A measurement without radionuclide, unit, reference time, instrument, geometry, and source record is not usable manufacturing evidence. A retry cannot create a second patient dose or shipment.

Seal makes pending, failed, rejected, and reconciled messages visible. If the clinical order changes, the original request and accepted manufacturing instruction remain distinguishable.

The operating question is not only whether the process is complete. It is whether the batch can still satisfy ordered activity at the reference time, complete required release work, reach each destination, and remain usable at administration.

Seal calculates the operational timeline from product, radionuclide, calibration or reference time, ordered doses, route, preparation, QC duration, release review, transport, and administration windows. Every delay consumes the same budget.

The schedule therefore reflects physical product state. A synthesis delay, failed suitability check, repeat measurement, courier change, or late clinic acknowledgement immediately shows which doses remain feasible and which require accountable replanning.

Decay correction is not a display convenience. Product, radionuclide, half-life or approved decay constant, measured activity, measurement time, target or calibration time, units, precision, rounding, and permitted calculation context determine the result.

Seal versions the calculation and retains every input and output used for planning, release, dispensing, labeling, and reconciliation. A manually adjusted value preserves the original measurement, rationale, user, and review. Unit conversion and timezone behavior are tested explicitly so values cannot shift when orders cross sites or daylight-saving boundaries.

Different measurements can coexist without overwriting one another: end of bombardment, end of synthesis, QC sample, bulk vial, dispensed dose, residual, dispatch, or administration. Each retains its reference time and physical source. The system can calculate a future value while preserving the measured evidence from which it was derived.

Many radiopharmaceutical operations manufacture against same-day orders rather than stocking stable finished goods. The order may include product, activity, calibration time, administration time, patient or site, route, container, and delivery requirements.

Seal turns accepted demand into a production and dispensing plan while preserving protected identifiers and role-based access. Orders aggregate into the required batch activity with process loss, QC samples, retains, overfill, decay, and contingency represented explicitly.

Changes remain controlled. A cancelled dose, revised administration time, added patient, or destination delay updates the plan and downstream labels without overwriting the original instruction. The production team sees the current executable demand; QA sees the full decision history.

Multi-run and multi-site planning uses actual constraints: target or generator availability, synthesis module and hot-cell state, product and cleaning compatibility, QC instruments, staff qualification, release duration, courier route, calibration times, and dose demand. The plan distinguishes forecast, accepted order, scheduled batch, released product, assigned dose, dispatched unit, and acknowledged receipt.

Overproduction, shortage, cancellation, resynthesis, transfer between sites, and dose reassignment follow accountable rules. The system does not solve a shortage by silently changing the dose or patient association.

The source may be generated on site, received from a supplier, or derived from a generator. Radionuclide identity, source lot or production run, target or generator, activity, reference time, radionuclidic attributes, receipt or transfer, and status begin the product genealogy.

Seal links the source to synthesis and every finished vial or patient dose derived from it. Reagents, precursors, cartridges, cassettes, columns, filters, containers, and closures retain their own lot identity, expiry, storage, and use history.

A supplier finding, target issue, generator event, or material recall can trace forward to every synthesis batch and dispatched dose. A complaint or unexpected result can trace backward from the administered or shipped unit to the full source population.

The licensed-material or radiation inventory boundary is explicit. Receipt, production, transfer, dispensing, sampling, residuals, waste, decay-in-storage, return, and disposal can exchange quantities with the authoritative radiation-safety process while the GMP record preserves product genealogy and disposition. Reconciliation identifies differences instead of forcing two systems to independently infer the same activity balance.

Automated synthesis modules may run an approved program while operators perform setup, material loading, connections, filter installation, transfers, and observations. The executable record must join both kinds of work.

Seal verifies product, synthesis unit, program version, cassette or disposable configuration, precursor and reagent lots, expiry, calibration and maintenance, cleaning or line clearance, and operator qualification before start. Instrument or controller events can populate critical process evidence automatically.

The batch record preserves start and end time, actual additions, program, equipment, alarms, interventions, yields, filter identity, integrity evidence where applicable, and transfers. A changed program or manual intervention cannot disappear behind a final successful status from the synthesizer.

Disposable cassette, cartridge, tubing, filter, reagent, precursor, vial, and closure identity are verified against the approved setup. Lot, expiry, storage, preparation, position, and use remain traceable. A wrong or expired component blocks the normal path; an authorized replacement records both configurations and the process interval affected.

Process control remains in the synthesis module. Seal receives the accountable events, critical values, alarms, report or source link, and reviewed outcome. Missing controller data remains pending. After an interface outage, recovery reconciles the expected run and time range rather than asking an operator to copy values from a printout without provenance.

Identity, radiochemical purity, radionuclidic identity or purity, activity, pH, residual solvents, endotoxin, filter integrity, appearance, sterility, and other product-specific tests have different durations and data sources.

Seal creates the required panel from the effective specification and release procedure. Samples carry source batch, collection time, activity and reference time where needed, preparation, method, priority, and decision. Instruments, acquisitions, standards, calculations, suitability, analyst, and review remain connected.

Results appear against the release clock as they are approved. A failing, invalid, or delayed result triggers the defined exception path and recalculates the feasible dose population rather than leaving operations to coordinate through calls and whiteboards.

Methods preserve their data boundary. Chromatography software, spectrometers, dose calibrators, endotoxin readers, and other instruments may remain authoritative for raw acquisition. Seal orchestrates sample identity, method and specification, instrument eligibility, standards or controls, calculations, result review, and the release decision while retaining source files or durable references.

System suitability, invalid runs, repeats, retest, atypical or OOS results, manual integration where applicable, and changed calculations remain visible. Rapid review cannot become reduced review. The system prioritizes the critical path while preserving every piece of required evidence.

Short-lived products may have release models in which some long-duration evidence completes after time-critical distribution, subject to the applicable product, procedure, regulation, and quality oversight. The system must never blur “not yet available” into “passed.”

FDA established specific current good manufacturing practice requirements for PET drugs in 21 CFR part 212 and provides a PET drug CGMP small-entity compliance guide. Seal represents each requirement with its actual state: approved, pending under an authorized release condition, failed, invalid, or not applicable.

The disposition record shows the evidence available at decision time, the approved basis for any pending obligation, accountable signatures, affected dose population, and required follow-up. Later results attach to the original batch and can trigger investigation, notification, or field action without rewriting the release history.

Release can occur at bulk-batch, container, or dose level according to the approved process. The relationship between those decisions is explicit. A released bulk vial does not automatically make every later dispense acceptable; dose identity, activity, volume, container, label, order, calibration time, and current status still require verification.

Long-duration evidence such as sterility remains an open obligation with due state and escalation. Approved does not mean pending, and pending does not mean passed. When the result arrives, it attaches to the historical disposition and distributed or administered population. A concerning result opens the defined notification and investigation workflow immediately.

Bulk product may be divided into multidose vials, unit doses, syringes, or other final presentations. Each dispense has source container, activity, measurement and reference time, calculated volume, destination, patient or order association, container, label, preparer, verifier, and status.

Seal can receive dose-calibrator readings directly and preserve calculation inputs. Barcode or controlled identifier checks verify the intended order and presentation. Adjustments, residuals, waste, samples, and returned or undeliverable doses reconcile against the source batch.

Protected patient information is visible only to authorized roles. Manufacturing and quality retain the traceability needed to identify the unit without exposing clinical identifiers broadly.

Dose preparation can be manual, semi-automated, or automated. The accountable record verifies source bulk, dispensing equipment and calibrator eligibility, measurement, time, calculation, container, shield, label, operator or device, independent check where required, residual, and status. The clinical order and physical dose must agree before assignment or dispatch.

Split, top-up, remake, cancelled, damaged, returned, undeliverable, or unused doses remain explicit. They do not disappear through a quantity correction. Every state contributes to batch, activity, and radioactive-material reconciliation.

Radiopharmaceutical labels can depend on product, activity, calibration time, volume, route, destination, expiry, radiation markings, batch, and patient or order details. A static template populated manually is a high-risk interface.

Seal renders the label from the approved product, batch, measurement, order, and timing records. Template and printer versions remain controlled. Reprinting requires reason and preserves prior output. Scanning confirms the label against the physical container and shipment.

If timing or activity changes, the accountable source data changes first; the next approved label reflects that state. The label is an output of the operation, not a second database.

Print verification connects template version, printer, output, physical container, and inspection. Reprinting requires a reason and preserves the prior label state. Labels withdrawn after a changed order, activity, destination, or time remain in reconciliation and cannot be reused accidentally.

Each shipment connects containers or doses to pack-out configuration, radiation and temperature controls, courier, route, destination, planned and actual handoffs, receipt acknowledgement, and delivery exception.

The batch plan carries travel time and administration window. A delay can identify which dose remains within specification at the revised time. Chain of custody records who transferred and received each package without forcing operations to reconcile a courier portal with a production spreadsheet later.

Returns, non-delivery, damage, or missed administration update dose disposition and reconciliation. The original batch and release evidence remain attached.

Custody events identify sender, receiver, time, package, seal or condition where applicable, location, and acknowledgement. Courier tracking can inform the operation without becoming the GMP authority for custody and dose status. A delivery scan is not the same as qualified receipt by the destination.

A route delay recalculates activity and feasibility for the specific dose. The response may continue, redirect, return, cancel, or require a new preparation according to the approved rule. The system preserves the original plan and the reason for change.

Cyclotrons, generators, synthesis modules, hot cells, dose calibrators, radio-HPLC, gas chromatographs, survey meters, endotoxin readers, balances, and other assets require appropriate qualification, calibration, maintenance, checks, and availability.

Seal gates assignment and execution on the configured equipment state. Daily or pre-use checks become executable work linked to the asset and method. Calibration factors and due dates cannot live only on a sticker. An out-of-tolerance finding identifies batches and measurements made during the assessment interval.

Radiation-safety and environmental programs remain governed by the applicable site procedures and authorities. Their approved controls, surveys, contamination checks, waste routes, and role qualifications can be made visible at the activity that requires them.

A failed or overdue instrument blocks normal use. If a later calibration finding challenges prior measurements, impact assessment identifies every sample, release calculation, bulk vial, and dose measured in the affected interval.

Radiation surveys, contamination checks, personal dosimetry, area controls, waste segregation, decay-in-storage, and licensed-material records may remain governed by a radiation-safety program. Manufacturing still needs to know whether the room, hot cell, instrument, container, and waste path were eligible for the work.

Seal links the required radiation-safety state or evidence to execution without broadly copying sensitive occupational or licensed-material records. Waste events preserve source batch or dose, material or container, activity and reference time where required, quantity, category, location, hold or decay state, survey or release evidence, and final transfer or disposal.

GMP mass or activity reconciliation and radiation-safety accounting can therefore agree on the physical event while retaining their respective responsibilities. A discrepancy opens a bounded investigation rather than being corrected independently in two systems.

A conventional deviation opened after the shift is too slow when the batch may be unusable within hours. Seal creates an event from the active batch, dose, test, equipment alarm, late transport, or measurement with the full time and activity context attached.

The defined response can hold the affected population, require immediate quality assessment, recalculate dose feasibility, notify a destination, or begin a later investigation while preserving the real-time decision. The event does not need to wait for someone to reconstruct source lots, equipment, results, and orders.

Post-release evidence and complaints trace back to the same record. If a sterility result, environmental finding, equipment assessment, or transport issue arrives later, the system identifies the manufactured and distributed population and supports targeted notification.

These events retain the timing context required to understand consequence. A ten-minute delay can be negligible for one radionuclide or decisive for another. Impact is calculated against affected batches and doses, not assigned from a generic severity matrix alone.

Cybersecurity and continuity are operational risks because timing is unforgiving. The approved design covers identity-provider, network, interface, instrument, printer, and application outages; safe hold points; manual safety controls; data recovery; message reconciliation; and return to the authoritative record. Contingency work cannot create duplicate doses or erase the original order, measurement, or disposition.

A radiopharmaceutical implementation should rehearse one complete day: accept orders, plan activity, receive or produce the radionuclide, verify the synthesis setup, execute the batch, capture rapid QC, make the actual release decision, dispense and label doses, dispatch, acknowledge receipt, reconcile residuals and waste, and attach later evidence.

Exercise a late order, synthesis alarm, failed suitability, recalculation, delayed courier, cancelled patient, reprint, unavailable dose calibrator, and adverse post-release result. The system is ready when the clock, product, evidence, and affected population remain aligned through each exception.

The qualification set should also include a missing controller interval, wrong component, invalid system suitability, OOS result, activity discrepancy, returned dose, waste transfer, and hospital-interface retry. Each scenario must identify the affected physical population, preserve the original state, and drive the correct communication and disposition.