Compliance as Infrastructure · Domain Playbooks · Gloria Gallo · 2026
Domain 03 · Procurement & Supply Chain
← Back to Compliance as Infrastructure
Procurement
Visibility
lost
The supply chain is where compliance visibility
typically breaks. Third-party suppliers introduce
jurisdiction and classification uncertainty.

Screening is a point-in-time activity.
Visibility is a continuous condition.
The architecture pattern
A
New supplier requests activation in vendor master
First purchase order · New category · New geography
Gate A
Beneficial ownership analyzed · Sub-supplier disclosed
Cannot activate until ownership traced to UBO
Qualification gate
B
Active supplier relationship — continuous monitoring
Ownership change · New list designation · Screening interval lapses
Gate B
Continuous screening · Ownership monitoring · Alert on match
Purchase orders suspended automatically on active alert
Screening gate
C
Purchase order created for controlled component
Controlled ECCN · New supplier · First order in category
Gate C
Screening current · Component ECCN documented
PO cannot release until both conditions confirmed
PO release gate
D
UFLPA or high-risk category material ordered
Cotton · Polysilicon · Tomatoes · Designated region materials
Gate D
Supply chain traceability documented to required tier
CBP-ready documentation · PO blocked without current disclosure
Traceability gate
Evidence generated — Supply Chain Compliance Register
Screening · ownership · classification · traceability · Timestamped
Record
Control DNA — Procurement fields
Field Type What it governs Review trigger
screening_status
enum
Clear, review, or blocked against current restricted party lists. Continuous state, not a one-time onboarding check.
Qualification
beneficial_owner
text
Ultimate beneficial owner traced through the supplier's corporate structure. The 50% rule extends restrictions beyond the name-based screen.
Ownership change
screening_last_refreshed
timestamp
Date the most recent screening was completed. The Hub watches the gap between this date and the defined refresh interval.
Each screen
component_eccn
text
Documented classification for every controlled component sourced from this supplier. Required before purchase order release.
PO creation
country_of_origin
char
Country of origin for sourced materials. Required for de minimis calculation and UFLPA-category determination.
PO creation
traceability_status
enum
Whether supply chain disclosure has been documented to the required tier for UFLPA-relevant categories. Blocks PO release if absent.
Annual / change
active_alert_flag
bool
Whether an unresolved screening or ownership alert exists against this supplier. True suspends purchase order release automatically.
Continuous
Failure modes
Screening happens at onboarding and nowhere else
Supplier screened before the first purchase order. Result clean. Relationship established. Screening never repeated. Fix: continuous screening with a defined refresh interval — not a one-time event.
Architecture failure
Ownership change invisible after activation
Supplier acquired. Ownership structure changes. Procurement keeps processing orders against the original qualification. Fix: ownership monitoring with automated alert on change.
Undetected restricted-party link
Screening project, not visibility condition
Tier 1 supplier screened annually and called supply chain compliance. Visibility is continuous — a point-in-time screen is not the same thing. Fix: treat visibility as architecture, not a periodic project.
Blind to tier 2/3
Component classification undocumented at sourcing
Purchase order releases without a documented ECCN for the controlled component. Engineering classified the product — procurement never confirmed the part. Fix: PO release gate requires documented classification.
Unknown exposure
Traceability documentation assembled only at CBP detention
UFLPA-category material ordered without tier-level disclosure. Documentation reconstructed under deadline pressure when a shipment is detained. Fix: traceability required before PO release — not after detention.
Detained shipment
Intelligence signals
Supplier screening currency rate
Active suppliers with current screening · Any lapse is a gap
Ownership analysis coverage rate
Active suppliers with completed beneficial ownership analysis · Target 100%
Active alert response time
Time from flag to compliance team resolution · Days, not weeks
Screening gap accumulation
Suppliers approaching refresh interval · Alert before lapse, not after
Traceability documentation coverage
UFLPA-category POs with tier-level disclosure · Target 100%
Implementation
01
Defined rescreening interval, quarterly minimum for tier 1 suppliers, with compliance review before the interval lapses.
Calendar-driven process · No budget required
02
News monitoring process for significant corporate events — acquisitions, ownership changes — affecting active suppliers.
Manual monitoring · Weekly review
03
Purchase order release blocked manually when an active screening alert exists against the supplier.
Procurement workflow checkpoint
Screen
Continuous screening integration connecting the vendor master to a restricted party platform with daily list updates.
Descartes Visual Compliance · Kharon
UBO
Beneficial ownership intelligence tracing corporate structures through multiple layers, flagging restricted-party connections.
Sayari · Moody's Orbis
Trace
Supply chain traceability platform mapping multi-tier sourcing, flagging designated-region materials, generating CBP-ready documentation.
Altana · Sourcemap
The architecture cannot govern what happens outside its boundaries. It can only govern what enters across them.
4
Enforcement gates
5
Monitoring signals
3
Lean build actions
Full prose · Implementation detail
Reference artifacts · Schemas
complianceasinfrastructure.com/procurement
Gate A — qualification · ownership traced before activation
Gate B / C — screening & PO release · continuous, not one-time
Gate D — traceability · blocked without disclosure