Flow 23 — Supplier performance and scoped response portal
Calculate one immutable scorecard from exact delivery, inspection, NCR and SCAR sources, review the frozen population independently, release only a bounded UNCLASSIFIED supplier summary, then capture and separately disposition one portal response.
Overview
Flow 23 reads and freezes source facts only. It never approves or suspends a vendor, awards/amends a PO, changes schedules/expediting, receives or inspects stock, edits NCR/SCAR records, creates a notification delivery or sends a message.
Supplier Quality Engineer author → different Procurement Manager exact-source reviewer → different QA Head supplier-facing releaser → external supplier representative → different QA Head response reviewer → Buyer / Auditor read-only
Process
- 1Exact-source score
Freeze governed delivery, inspection, NCR and SCAR snapshots and deterministic metrics.
Read-only source calculation - 2Procurement review
Recalculate the authoritative population and approve only an exact fingerprint match.
No PO or schedule update - 3QA release
Approve only the UNCLASSIFIED supplier summary and issue one expiring credential.
No message sent - 4Supplier response
Redeem once for a short-lived scorecard-only session and submit one attributable response.
No tenant navigation - 5QA dispositionREAD ONLY
A different QA user accepts or rejects the immutable external response.
Sources remain unchanged
Role handoff
Supplier Quality Engineer author → different Procurement Manager exact-source reviewer → different QA Head supplier-facing releaser → external supplier representative → different QA Head response reviewer → Buyer / Auditor read-only
Detailed reference chapters
Detailed steps
- 1
As Supplier Quality Engineer, open Quality → Supplier performance and create a scorecard for one supplier, site and completed period. Moduvio calculates delivery, incoming acceptance, supplier-NCR and SCAR metrics from frozen exact sources; manual source substitution is unavailable.
- 2
Submit the scorecard. As a different Procurement Manager, perform exact-source review. Approval recalculates the governed population and requires the stored fingerprint to match; if facts changed, reject and create a fresh immutable version.
- 3
As a different QA Head, inspect the internal source chain and approve only the bounded UNCLASSIFIED public summary. Copy the plaintext response link once; Moduvio stores only its strong hash, expiry and revocation/redemption facts and does not deliver the link.
- 4
As the supplier representative, redeem the link once. Confirm the page shows only one supplier, one scorecard, aggregate metrics and the approved message—never tenant navigation, internal evidence, classified detail or named-user history. Submit one attributable response through the short-lived session.
- 5
As a second QA Head distinct from author, Procurement reviewer and releaser, accept or reject the immutable response. Rejection returns the scorecard to released state for a new one-time link; acceptance closes the bounded response chain.
- 6
As Auditor, reconcile scorecard/source/review/token/session/response history, strong-hash-only credentials, CLEAN evidence, audit/outbox facts and unchanged vendor, Procurement, receipt, inspection, NCR, SCAR, inventory and notification-delivery witnesses.
Field-by-field practice data
Freeze an exact-source supplier scorecard and prepare a bounded supplier-facing summary. The page shows sample set A; the workbook includes independent A, B and C values.
Field names match the current application labels. Select existing approved records where shown, leave optional values blank unless they genuinely apply, and never copy fictitious TRAIN values into live work.
Create the supplier scorecard
Select the supplier/site/period and author the summary from exact source records for independent review.
| Exact field name | Requirement | Sample value A | How to use it |
|---|---|---|---|
| Supplier | Select existing | TRAIN-A-SUPPLIER | Select the approved supplier. |
| Performance site | Select existing | COM-01 | Use the receiving/performance site. |
| Period start | Required | 2026-07-01 | Start of the frozen source window. |
| Period end | Required | 2026-09-30 | End of the frozen source window. |
| Supplier-facing title | Required | TRAIN-A Q3 supplier performance | Use an UNCLASSIFIED-ready title only when approved. |
| Supplier-facing message | Required | Delivery and quality performance summary for the declared period; corrective actions remain governed separately. | Do not expose internal restricted evidence. |
| Internal scorecard-author evidence | Select existing | TRAIN-A-SCORECARD-001 | Select CLEAN internal evidence. |
| One-time link expiry | Conditional | 2026-10-15 | Use the approved bounded portal expiry. |
Expected result: The scorecard does not change source inspection, NCR, SCAR, procurement or supplier-approval facts.
End state
One closed supplier scorecard retains deterministic exact-source snapshots, independent Procurement and QA gates, a single-use scoped portal exchange and independently accepted external response without acquiring supplier-master, Procurement, Quality-source, custody or messaging authority.