7 Ways Manufacturers Control First Article Approval in 2026
A first article inspection approval workflow is the controlled route from a defined part configuration and inspection package to documented review, disposition, release status, and retention. It binds every ballooned characteristic, result, material or process record, drawing revision, nonconformance, reviewer action, and final status to the same part, purchase order, supplier, and inspection instance.
The useful automation prevents clerical gaps from looking like technical decisions. It can compare identities, link evidence, route exceptions, enforce separation of duties, and hold release. Authorized quality personnel still interpret requirements, accept or reject results, determine FAI scope, disposition nonconformance, and approve product movement.
According to SAE International's AS9102 page, the current listed revision is AS9102C dated June 28, 2023, after revisions B, A, and the original issue. The public abstract establishes that AS9102 concerns FAI documentation requirements; it is not a substitute for the licensed current standard, customer purchase order, drawing, quality clauses, or organization-specific procedure.
AS9102C is listed with a June 28, 2023 revision date.
This guide was reviewed July 22, 2026. It is workflow design guidance, not engineering, metrology, product-acceptance, airworthiness, export-control, cybersecurity, legal, contractual, regulatory, or quality-system advice. Automation does not certify a part, a process, a FAIR, or an organization's compliance.
TL;DR
Lock part, drawing, purchase-order, supplier, and configuration identity before accepting characteristic results.
Create one structured characteristic ledger that links each balloon to its requirement, measured result, method, equipment, evidence, and disposition.
Keep completeness checks separate from technical acceptance. Missing evidence can block routing; only authorized reviewers approve or reject.
Preserve full, partial or delta scope, nonconformance, signatures, release hold, and every state transition in an immutable or append-only audit history.
Who this is for
This recipe is for aerospace, defense, space, medical-device, automotive, contract-machining, and other precision manufacturers with a controlled first-article process. Likely owners include supplier quality engineers, quality managers, inspectors, manufacturing engineers, document control, and buyers.
As a fit heuristic, it is strongest for firms with roughly 50–2,000 employees, recurring FAIR packages, multiple reviewers, and evidence split across ERP, QMS, PLM, inspection tools, email, and portals. Repeated handoffs matter more than company size.
The current stack may contain:
ERP purchase orders, material masters, suppliers, receipts, and inspection lots;
PLM or document control for drawings, specifications, change notices, and configuration;
QMS records for inspections, nonconformances, approvals, and retention;
inspection software or QIF, CMM, gauge, and manual result exports;
supplier email, secure upload, or customer portal submissions;
identity, role, signature, and audit services.
Do not buy orchestration first when a single validated QMS already controls the whole process, when packages are rare and a documented checklist works, or when the organization has not defined reviewer authority. Also pause if the current drawing and purchase-order configuration cannot be established reliably. Automation will reproduce an identity problem faster.
According to Quality Magazine's practical FAIR guide, a FAIR is commonly organized around 3 forms: part-number accountability, product accountability, and characteristic accountability. That 2019 article is useful preparation context, but its older guidance cannot override AS9102C or a customer's current requirements.
The hidden cost of manual first article inspection approval workflow
Manual review fails in the joins between files. A balloon number exists on a PDF but not in the spreadsheet. The inspection result matches a requirement from revision B while the purchase order calls for revision C. A special-process certificate is attached but belongs to another lot. A reviewer replies “looks good” in email, yet the controlled record never changes. Production sees a completed inspection and mistakes it for release authority.
The costs are rework, delay, and control risk. People reopen drawings and chase suppliers; packages sit without a clear owner; folders look complete despite missing links.
Sample recent full, partial, accepted, rejected, and resubmitted packages. Count characteristic- and package-level problems; time active work separately from queue delay.
| Illustrative baseline defect | Packages affected | Active rework/package | Queue delay/package | Monthly packages |
|---|---|---|---|---|
| Drawing or part revision mismatch | 3 of 20 | 45 min | 2 days | 20 |
| Missing characteristic evidence | 5 of 20 | 60 min | 3 days | 20 |
| Certificate identity mismatch | 2 of 20 | 35 min | 1 day | 20 |
| Reviewer ownership unclear | 4 of 20 | 20 min | 2 days | 20 |
| Release status not synchronized | 1 of 20 | 90 min | 1 day | 20 |
Every count and duration in this table is illustrative. Replace it with observed package history. Do not add row-level minutes as if defects were mutually exclusive; one package may contain several.
The customer perspective is more demanding than “all three forms exist.” According to the General Dynamics Ordnance and Tactical Systems supplier checklist, its 1-page customer-specific checklist calls for Forms 1, 2, and 3, an independently signed reviewer field, and 9 ordered package items, while instructing suppliers not to ship before GD-OTS approval. That checklist is dated January 25, 2022 and applies to that customer's process; its value here is showing why customer rules must be versioned rather than generalized.
One supplier checklist specifies 9 ordered package items.
Manual folders also hide configuration drift. Treat these identities as a composite key, not optional metadata:
| Identity dimension | Minimum controlled value | Blocking conflict |
|---|---|---|
| Product | Part number and nomenclature | Part number differs across forms |
| Configuration | Part and drawing revision | PO and drawing revision disagree |
| Commercial context | PO and line item | Submission maps to two PO lines |
| Source | Supplier and manufacturing site | Site differs from approved record |
| Inspection | FAI type and instance ID | Full/partial scope is absent |
| Production trace | Lot, batch, serial, or work order | Evidence cannot map to inspected item |
| Evidence version | File ID, hash, and received time | Attachment silently replaced |
Connect this identity layer with batch and lot traceability automation, while preserving the FAI's inspection scope and approval history. Traceability does not make the technical disposition.
How the automation actually works
The workflow should be a state machine with explicit entry and exit criteria. “Submitted,” “in review,” and “approved” are too coarse on their own.
| State | Machine-enforced entry condition | Authorized human decision | Exit evidence |
|---|---|---|---|
| Intake received | Stable submission and source identity | None | Original package preserved |
| Identity exception | Any key mismatch or ambiguity | Resolve or return | Correction and actor recorded |
| Completeness review | Required items present for rule version | Confirm scope or request evidence | Checklist result |
| Technical review | Characteristic ledger and evidence linked | Accept, reject, or open issue | Signed review action |
| Nonconformance hold | One or more results need disposition | Disposition by authorized role | Linked controlled record |
| Final approval pending | All required reviews complete | Final package decision | Signature and timestamp |
| Release held/released | Approved release rule evaluates | Release authority acts if required | ERP/QMS status transition |
| Superseded/retained | New version or closure event | None | Full history retained |
1. Freeze the submission identity
On receipt, assign a submission ID and preserve original files. Compare extracted part, revision, PO, supplier, trace, and FAI type against authoritative records. Create an exception when sources disagree; never equate revision “C” and “03” without an approved crosswalk.
Later uploads create a new package version. Record what changed, who changed it, and which prior decisions are affected.
2. Structure every ballooned characteristic
Build a ledger keyed by balloon or characteristic number. Link drawing sheet and zone, requirement text or controlled reference, nominal and tolerance where applicable, result, unit, inspection method, equipment identity, evidence location, pass/fail indication, comment, and reviewer disposition.
Optical extraction can propose mappings; a reviewer confirms them. Missing tolerances, unapproved unit conversions, repeated balloons, illegible symbols, and changed characteristics become exceptions.
NIST research provides useful architecture context without replacing the current standard. According to the 18-page NIST paper on FAIR generation from digital quality data, its QIF 2.0 example maps structured data to Forms 1 and 3, while treating Form 2 as outside that implementation's scope. The paper uses an older AS9102 revision, so the durable lesson is structured, linked inspection data—not form or compliance guidance.
3. Validate evidence links and provenance
Presence is not sufficiency. Validate each record's type, issuer, product association, lot or batch, controlled specification, date, and policy-defined validity; then link it to affected records.
A related supplier compliance-certificate collection workflow can request, classify, and chase documents. The FAI workflow adds package scope and reviewer disposition; it should never mark a certificate technically acceptable solely because a PDF exists.
4. Open nonconformance as a first-class branch
When a result is outside requirement or evidence conflicts, freeze the affected characteristic and link a controlled nonconformance, deviation, concession, or customer decision as the applicable procedure requires. Record the disposition authority and effective scope. Do not change the measured result to match the disposition.
Supplier follow-up may continue through a corrective-action collection recipe. Keep corrective action separate from the immediate FAI disposition: one addresses systemic cause and prevention, while the other determines what happens to this package and product under approved authority.
5. Route reviews with separation of duties
Create routing by customer, program, site, FAI type, special process, and exception. Submitters cannot satisfy independent review by changing roles. Delegation needs dates, scope, and an audit entry.
Use due dates and reminders for queue management, not automatic acceptance. Silence, elapsed time, or a completed checklist must never become an approval. A rejection should identify controlled reason codes, affected characteristics or evidence, requested action, and whether resubmission creates a new version.
Worked example
In an illustrative supplier package with 72 ballooned characteristics, 3 evidence bundles, and 2 drawing versions detected at intake, the orchestrator first reads SAP's API_QUALITYINFORECORD_SRV/QualityFirstArticleInspection resource, then links the approved ERP identity to the QMS package rather than writing an approval. Suppose 68 characteristics map cleanly, 3 route for missing evidence, and 1 opens a nonconformance; none may release until authorized reviewers act. According to SAP's Quality Info Record API operations page, QualityFirstArticleInspection supports 4 documented operation types—create, read, update, and delete—and update operations use ETags. The resource name and API behavior come from SAP; every example input and outcome is illustrative.
6. Control full, partial, and delta scope
Do not assume “partial” means “review only changed balloons.” The quality procedure determines triggers, baseline, impacts, and evidence. Store the prior package, change reason, declared scope, approver, and required customer authorization.
Automation may propose a delta; a qualified person approves scope. Block the path when the baseline is missing, superseded, or under unresolved nonconformance.
7. Hold release and retain the complete audit trail
Separate package approval from downstream release. An approved FAIR may still require customer approval, purchase-order conditions, source inspection, material review, or another gate. Model each gate explicitly and synchronize only the authorized status to ERP or MES.
SAP's manufacturing-quality model illustrates that separation. According to SAP's current First Article Inspection process page, the documented flow has 5 numbered stages, including inspection-lot creation at goods receipt, a usage decision, and monitoring; it also warns on a regular inspection lot when the matching FAI has not yet been valuated. That is SAP-specific behavior, not a universal release rule.
Retain raw submissions, extracted values, corrections, checklist versions, characteristic links, evidence versions, comments, signatures, delegations, dispositions, state transitions, notifications, integration responses, and release actions under the organization's approved retention and access policy.
Benchmarks: before vs after
Separate automation quality from product quality. Faster routing helps only while conflicts, missing evidence, and unauthorized release remain visible.
The following before-and-after model is illustrative for 10 packages per month. It assumes automation assists identity comparison, characteristic mapping, evidence indexing, and routing; inspectors and authorized quality personnel still review technical content.
| Activity | Units/package | Manual min/package | Assisted min/package | Minutes saved/package |
|---|---|---|---|---|
| Identity and revision comparison | 6 records | 30 | 10 | 20 |
| Characteristic ledger preparation | 72 rows | 180 | 60 | 120 |
| Evidence indexing | 12 files | 60 | 20 | 40 |
| Review routing and reminders | 3 reviewers | 45 | 15 | 30 |
| Package index and archive | 1 package | 45 | 15 | 30 |
| Total | 94 units | 360 | 120 | 240 |
At 10 monthly packages, 240 minutes per package equals 40 hours of capacity. At an illustrative loaded labor value of $45 per hour, that capacity is $1,800 monthly before platform, implementation, validation, support, training, and governance costs.
Ten packages at 240 saved minutes equal 40 hours.
That is arithmetic, not a customer result or headcount promise. Validate each assumption through time sampling. Also monitor controls that should not be traded for speed:
| Control metric | Pilot denominator | Illustrative gate | Failure response |
|---|---|---|---|
| Composite identity match | 30 packages | 100% | Stop intake routing |
| Required characteristics represented | 2,160 rows | 100% | Return to mapping review |
| Evidence linked to controlled object | 360 files | 100% | Hold completeness status |
| Automated technical approvals | 30 packages | 0 | Disable path and investigate |
| Release with open blocking issue | 30 packages | 0 | Freeze release integration |
| State transitions with actor and time | 600 events | 100% | Repair audit capture |
All thresholds and denominators are illustrative except the principle that automation should perform zero unauthorized technical approvals. A pilot should intentionally include wrong revisions, duplicate balloons, missing evidence, out-of-tolerance results, expired delegation, failed notifications, an API retry, and a changed package after approval.
Track supplier patterns without turning incomplete paperwork into an unsupported quality judgment. A controlled manufacturing vendor scorecard can separate on-time submission, first-pass completeness, resubmission count, and response age from product conformance and formal supplier status.
Build vs buy vs orchestrate
Choose the smallest architecture that preserves authority, configuration, evidence, and release. Orchestration is useful when FAIR authoring, QMS review, and ERP release are intentionally distributed.
| Option | Representative tools | Strongest use | What to validate | Likely mismatch |
|---|---|---|---|---|
| Build inside current QMS/ERP | SAP S/4HANA QM, existing QMS workflow | One governed system already owns most states | Configuration, signatures, audit, APIs, release | Cross-tool evidence remains manual |
| Buy focused FAIR software | DISCUS, Net-Inspect, High QA | Ballooning, forms, characteristic management | Current standard support, customer formats, export, revision control | Enterprise handoffs remain outside |
| Orchestrate controlled systems | QMS + ERP + PLM + email/portal | Authority and evidence span systems | Source of truth, idempotency, identity, monitoring | Too much complexity for low volume |
| Keep a governed manual process | Controlled forms and checklist | Rare packages, stable reviewers | Versioning, independent review, retention | Volume and queue delay outgrow it |
Product names are examples, not endorsements. Confirm current capabilities, validation obligations, licensing, data residency, export controls, security, customer acceptance, and integration terms directly with each provider.
US Tech Automations fits the orchestration row when the concrete workflow just described must compare PLM revisions, receive supplier email, create a controlled exception, monitor human review, and synchronize only an approved release state. Gmail and Outlook are registry-confirmed live connectors. ERP, QMS, PLM, inspection software, storage, and customer portals require custom or API validation when technically available.
US Tech Automations can build, run, and support that cross-tool workflow or provide a self-managed platform. It does not provide AS9102 certification, perform inspection, approve a FAIR, disposition a nonconformance, or replace a quality representative.
A sensible US Tech Automations discovery uses one accepted package, one rejected package, one partial or delta case, the routing matrix, source-system ownership, and a failure-mode list. If a focused FAIR or QMS product already covers those controls, US Tech Automations should not duplicate it.
FAQs
What should trigger a first article inspection workflow?
The current standard, customer requirements, purchase order, and approved quality procedure should define triggers. Automation can monitor approved trigger data, but a qualified owner must resolve ambiguous changes in design, process, source, location, tooling, or production history.
Can AI approve a FAIR when every field is complete?
No. Completeness is not technical acceptance. AI may identify missing fields or propose mappings, while authorized quality personnel evaluate results, evidence, scope, nonconformance, and approval.
How does the workflow handle a drawing revision change?
It freezes the received version, compares it with authoritative PO and document-control records, and opens an identity exception when they disagree. A new or corrected drawing creates a traceable package version; it should not silently replace reviewed evidence.
When is a partial or delta FAI appropriate?
Only when the governing requirements and authorized quality decision allow it. The workflow should preserve the approved baseline, change reason, affected scope, reviewer, and any customer authorization rather than infer scope from changed filenames alone.
Does an approved FAIR automatically release product to ship?
Not necessarily. Customer approval, source inspection, purchase-order clauses, nonconformance disposition, ERP status, or another release gate may still apply. Model package approval and shipment release as separate states.
Which evidence should be attached to each characteristic?
Attach the evidence required by the current standard, drawing, specifications, PO, customer clauses, and internal procedure. The data model should link evidence to the relevant characteristic or product record, but a qualified reviewer determines sufficiency.
What happens when the supplier resubmits only one file?
Create a new package version or controlled amendment, preserve the prior file and decisions, identify what changed, and re-open affected reviews. Never overwrite the original attachment without an audit event.
Key Takeaways
Lock part, configuration, PO, supplier, inspection, production-trace, and evidence identities first.
Structure every ballooned characteristic and link it to the controlled requirement, result, evidence, and disposition.
Automate completeness, comparison, routing, reminders, and audit capture—not technical acceptance.
Treat nonconformance, partial or delta scope, final approval, and release as explicit human-governed branches.
Benchmark handling time and queue health alongside zero-tolerance controls for unauthorized approval or release.
If your approved process is sound but handoffs still break across PLM, QMS, ERP, supplier email, and customer portals, review the US Tech Automations agentic-workflow model. A fit review should begin with real packages and failure modes, not an automation promise.
About the Author

Helping businesses leverage automation for operational efficiency.
Related Articles
See how AI agents fit your team
US Tech Automations builds and runs the AI agents that handle this work end to end, so your team doesn't have to.
View pricing & plans

