Definition
An investigative concept defining processes used to identify facts, preserve information, and support lawful adjudication outcomes. It governs planning, collection, documentation, and verification of information through structured investigative steps and records. It does not justify unlawful collection methods and requires integrity controls to prevent contamination, loss, or misattribution. It materially affects case solvability and prosecutorial viability by shaping reliability and completeness of the record. The concept is generally stable, though methods and technical standards evolve with forensic and digital capabilities over time.
Principle
Principle
Document incidents contemporaneously, objectively, and with sufficient detail (timestamps, locations, personnel identities, actions taken, and supporting media) so that the sequence and context can be independently evaluated and verified.
Demonstration
Demonstration
After a refrigerated evidence container warms due to a failed thermostat, staff complete an incident document noting discovery time, temperature readings, chain-of-custody holders, photographs of the container, immediate mitigations (e.g., relocation), and notifications to supervising forensic staff.
Misapplication
Misapplication
Filing vague or delayed notes in personal logs instead of a standardized incident form, omitting signer identification or timestamps, which undermines credibility and complicates later disclosure or legal review.
Consequence
Consequence
Accurate incident documentation preserves a transparent trail for internal review and external disclosure, helps determine whether evidence integrity was compromised, and supports remedial actions or judicial decisions on admissibility.
Reversal
Reversal
Routine evidence intake logs or inventory records that do not capture anomalous events; an 'incident notification' email that alerts stakeholders but lacks the structured details and evidentiary context of a full incident document.
Boundary
Boundary
Covers records of events that materially affect evidence condition, custody, or disposition across storage, transport, analysis, or courtroom handling; excludes general incident reports unrelated to evidence integrity and ordinary administrative audits.
Semantic Tension
Semantic Tension
Incident documentation must balance operational transparency and investigative secrecy: over-disclosure can harm investigations while under-documentation harms legal defensibility and accountability.
Synthesis
Synthesis
Evidence incident documentation is a structured, contemporaneous record of any event affecting evidence integrity or custody, designed to establish facts, support investigation of causes, and enable defensible remedial or legal actions.