One synthesis lot per certificate, an independent lab signing the numbers, and a label that traces back to the run that produced it.

If a lot cannot be reconciled, it does not go on the shelf.