THE INSPECTION RECORD · OPERATIONS
An investigator stops
at the ISO 5 line.
Who authorized
continuation?

May 18, 2026 · FDCA §503B · FDA Bulks List Guidance §III.B (April 2026) · 21 CFR §211.42, §211.113, §211.192
Home · Articles · Operations
Operations

The 503B Regulatory Cliff: What an Inspector Will Reconstruct After June 29

On April 30, 2026, FDA proposed excluding semaglutide, tirzepatide, and liraglutide from the 503B Bulks List. When the comment window closes on June 29, the remaining legal pathway for bulk GLP-1s seals — and inspectors will work backward through the authorization logic behind every release, EAC determination, and CFU continuation decision in the prior twelve months.

May 18, 2026 · FDCA §503B · FDA Bulks List Guidance §III.B (April 2026) · 21 CFR §211.42, §211.113, §211.192
JUNE 29, 2026

The comment window closes. The shortage safe harbor closes with it. The reconstruction begins.

GLP-1 bulk compounding is ending. On April 30, 2026, FDA proposed excluding semaglutide, tirzepatide, and liraglutide from the 503B Bulks List, concluding there is no clinical need for outsourcing facilities to compound these from raw substances. When the public comment window closes on June 29, 2026, the remaining legal pathway for bulk GLP-1s will be sealed.

What this actually means: the revenue cushion from high-volume peptide compounding is gone, and FDA is pivoting back to its core enforcement question — who authorized this decision, on what evidence, and can you reconstruct it in the room?

Inspectors will work backward through release calls, EAC determinations, and CFU continuation decisions. The facilities still operating in twelve months will be the ones whose authorization logic survives that walk-back.

If you lead a 503B, you need a 60-day transition plan. Here is the playbook.

What an investigator will walk backward through

Picture the inspection moment. An investigator stops at an ISO 5 line and asks why a borderline environmental excursion three months ago did not trigger a shutdown. The batch released. Your QA lead now has to reconstruct, on the spot: who authorized continuation. What environmental, intervention, and operator evidence was reviewed. Why that evidence justified continuing rather than halting. Where that reasoning lives, contemporaneously documented, not assembled after the fact.

That single question — what was the authorization logic at the moment the decision was made — is what June 29 turns into a filter. The compounding rationale, the EAC determination, the CFU disposition, the release sign-off: each is an authorization event an investigator can demand to reconstruct.

"

Execution evidence survives audit. Authorization evidence survives reconstruction.

What the IRR actually is

An Inspection Response Record is the layer that ties evidence, rationale, authorization, and retrieval continuity together for each inspection-critical decision — at the moment the decision is made. It is not a document repository. It is not deviation software. It is not a data lake. It is the record an investigator encounters when reconstructing release, continuation, and EAC decisions.

The reason it sits separate from your QMS: QMS systems store what was done. The IRR preserves why it was authorized, in a form that survives reconstruction.

What changes on June 29 — and what no longer counts

Clinical need ≠ shortages or price. FDA's "clinical need" standard excludes market shortages, backorders, or cost as justification to compound from bulk. You must show the approved product cannot meet defined clinical requirements (e.g., unavoidable excipient allergy in a population) — not that it is scarce or expensive.

The shortage safe harbor is closing. As branded GLP-1 supply normalizes, the shortage trigger no longer protects copy compounding.

Expect inspections to intensify. CDER is reallocating field resources. Inspectors will emphasize EAC authorization, ISO 5 sterility reasoning, data integrity, and investigation defensibility.

The implication: any non-shortage compounding must be authorized with explicit, prescriber-documented significant difference, and the authorization logic must hold up to reconstruction on demand.

90-day survival plan

Week 1–2: Freeze risk and establish authorization guardrails. Stop-loss authorization policy issued Day 3 prohibiting new bulk GLP-1 batches absent a lawful basis. SKU authorization ledger by Day 7 categorizing every revenue line by EAC risk. Prescriber Significant Difference attestation embedded in order intake as a hard-stop by Day 10 — without it, no order can be authorized.

Week 2–4: Stand up inspection reconstruction capability. Select an IRR by Day 21. The test is not whether it integrates your data — every system claims that. The test is whether an investigator could ask "who authorized this and on what basis" and the answer surface in under a minute. Migrate the last 12 months of EM, media fills, smoke studies, and critical investigations by Day 28. The point isn't to migrate data — it's to make 12 months of authorization decisions reconstructable.

Week 4–6: Cleanroom stability and cGMP defense. Run a mock ISO 5 reconstruction drill by Day 35 focused on CFU continuation decisions. Pre-write three exemplary investigations showing root cause, scope, impact authorization, and effectiveness verification. Close media fill and smoke study gaps by Day 42. Reconfirm environmental action authorization logic — continuation versus shutdown — by Day 45.

Week 6–8: EAC authorization controls. Codify the EAC authorization tree by Day 50: not on shortage list requires prescriber-documented significant difference; on shortage list requires verified listing status and documented allocation attempts; cost or preference never authorizes. Embed release authorization locks by Day 52 — no batch release unless the EAC authorization field is complete and verifiable. Run a 30-order reconstruction audit by Day 56. Anything that wouldn't survive reconstruction in front of an investigator is a CAPA with a deadline.

Week 8–12: Financial containment and customer continuity. Reinspection liability reserve modeled and board-approved by Day 60. Capacity shift to non-shortage sterile injectables and validated specialty formulations by Day 70. Customer continuity brief to partners by Day 75 covering what's ending, what continues, and the inspection-reconstruction improvements made.

C-suite scorecards

COO — yield and uptime without compromise. Under 4 hours average line hold per deviation by Day 60. 95% right-first-time batch record completion. 100% EM excursions triaged within action timeframes, with authorization captured at the moment. Uptime without contemporaneous authorization is uptime that does not survive inspection.

Head of Quality & Regulatory — reconstruction on demand. 30-second retrieval of authorization rationale behind any release, continuation, or EAC decision in the last 6–12 months. Zero incomplete CFU investigations over 30 days. 100% ALCOA+ evidence supporting reconstructable authorization. Reconstruction latency is the operational measure of authorization decay.

CFO — cash protection and audit cost containment. Under 2% revenue exposed to non-reconstructable EAC authorization by Day 75. Under 10% inventory at risk of expiry during holds. Reinspection cost model approved with coverage plan.

"

If your system cannot reconstruct the authorization on the spot, the 483 is already written.

What the IRR must reconstruct in 30 seconds

An investigator names a hood, a line, a window, a batch. The IRR returns, in seconds: the release authorization — who signed, on what evidence, at what moment. The continuation decisions — who authorized each environmental, intervention, or excursion call that allowed the batch to proceed. The EAC rationale — the prescriber-documented significant difference linked to order and label. The disposition ownership — the named decision-maker, the evidence they reviewed, the authorization moment. The investigation logic — root cause, scope, CAPA, effectiveness verification, all contemporaneously documented.

Red flags that trigger enforcement escalation

Inability to reconstruct rationale contemporaneously — the authorization existed in someone's head, not the record. Bulk compounding of non-shortage drugs without explicit, case-level significant difference authorization. Delayed or binder-based retrieval of EM, investigation, or release-authorization records. Trend blindness — no analysis across operators, shifts, or equipment supporting continuation decisions. Vague CFU investigations lacking root cause, scope, or effectiveness authorization. Release decisions made outside a closed, traceable authorization system.

If you see one, you likely have three. Each is a CAPA project with a deadline.

The bottom line

June 29 isn't just a deadline. It's a filter for whose historical authorization decisions survive reconstruction. Facilities that can surface the reasoning behind each release, each continuation, each EAC determination — in the room, in seconds — will keep operating. Those that cannot will face holds, 483s, and contract losses.

Most facilities discover whether their authorization logic survives reconstruction during the inspection itself. The IRR exists to surface that exposure before the investigator does.

Before June 29, find out if your authorization logic survives reconstruction

You don't get to find out during the inspection. By then, the question has already been asked, and either the record answers it or it doesn't.

Three questions to test before June 29:

1. Pick one batch released in the last 90 days where an environmental excursion was overridden to continue. Can your team produce the authorization rationale — who, what evidence, why justified — in under a minute? Not the data. The reasoning.

2. Pull a non-shortage compound shipped in the last 30 days. Can you surface the prescriber-documented significant difference, linked to that specific order, that authorized it?

3. Name the last CFU investigation closed on your floor. Without opening the binder, can you reconstruct the disposition logic that closed it?

If any answer is "we'd have to go look," that's the reconstruction gap. The IRR closes it before the investigator stands in the room.

Inspection Exposure

Three questions. Your facility. Right now.

The most recent borderline environmental excursion your line continued through. Not a hypothetical — the actual last one. The three questions at the end of this article apply to that decision right now.

01 Who authorized this decision in your facility?
02 What exists in that file right now — beyond the signature?
03 Could you produce a complete authorization record in five minutes?
Community Discussion

The last release decision your facility made after an environmental excursion was overridden — where does the contemporaneous reasoning live? In the deviation file, or in the head of the person who approved it?

From your personal experience — not opinion. What exists in your files right now.

Join to Comment →