Definition

An investigative concept defining processes used to identify facts, preserve information, and support lawful adjudication outcomes. It governs planning, collection, documentation, and verification of information through structured investigative steps and records. It does not justify unlawful collection methods and requires integrity controls to prevent contamination, loss, or misattribution. It materially affects case solvability and prosecutorial viability by shaping reliability and completeness of the record. The concept is generally stable, though methods and technical standards evolve with forensic and digital capabilities over time.

Principle

Principle
Document incidents contemporaneously, objectively, and with sufficient detail (timestamps, locations, personnel identities, actions taken, and supporting media) so that the sequence and context can be independently evaluated and verified.

Demonstration

Demonstration
After a refrigerated evidence container warms due to a failed thermostat, staff complete an incident document noting discovery time, temperature readings, chain-of-custody holders, photographs of the container, immediate mitigations (e.g., relocation), and notifications to supervising forensic staff.

Misapplication

Misapplication
Filing vague or delayed notes in personal logs instead of a standardized incident form, omitting signer identification or timestamps, which undermines credibility and complicates later disclosure or legal review.

Consequence

Consequence
Accurate incident documentation preserves a transparent trail for internal review and external disclosure, helps determine whether evidence integrity was compromised, and supports remedial actions or judicial decisions on admissibility.

Reversal

Reversal
Routine evidence intake logs or inventory records that do not capture anomalous events; an 'incident notification' email that alerts stakeholders but lacks the structured details and evidentiary context of a full incident document.

Boundary

Boundary
Covers records of events that materially affect evidence condition, custody, or disposition across storage, transport, analysis, or courtroom handling; excludes general incident reports unrelated to evidence integrity and ordinary administrative audits.

Semantic Tension

Semantic Tension
Incident documentation must balance operational transparency and investigative secrecy: over-disclosure can harm investigations while under-documentation harms legal defensibility and accountability.

Synthesis

Synthesis
Evidence incident documentation is a structured, contemporaneous record of any event affecting evidence integrity or custody, designed to establish facts, support investigation of causes, and enable defensible remedial or legal actions.