Medium Sterilization and Contamination Control

Purpose. Understand sterility as an evidence-supported system of barriers, validated practices, and monitoring—not a calculated guarantee.

Entry knowledge. Students should be able to balance mass and energy, work with differential equations, check dimensional consistency and interpret experimental uncertainty. Prior biological experience helps but is not assumed. The models are deliberately simplified; scientific claims require the limitations in each lesson to be stated.

Lesson pathway

1. [Contamination, biosafety and evidence](../lessons/unit-05-lesson-01.html) — [related numerical lab](../labs/lab-13.html)
2. [Thermal treatment and inactivation models](../lessons/unit-05-lesson-02.html) — [related numerical lab](../labs/lab-14.html)
3. [Filtration, barrier integrity and monitoring](../lessons/unit-05-lesson-03.html) — [related numerical lab](../labs/lab-15.html)
4. [Aseptic operations and process validation](../lessons/unit-05-lesson-04.html) — [related numerical lab](../labs/lab-15.html)

Practise and demonstrate competence

• [Unit 05 assessment: 16 multi-part tasks](../assessments/unit-05.html) tests physical reasoning, calculation, falsification and design decision-making.
• [Unit 05 applied project](../projects/unit-05.html) requires an evidence ledger, assumption register, data table, quantitative check and defensible conclusion.
• [Laboratory manual](../LABORATORY-MANUAL.html) indexes the offline simulations and their modeling restrictions.

Outcomes and publication boundary

At the end of this unit, students should explain why the chosen equation is appropriate, reproduce at least one numerical prediction, describe a test that could disprove it, and articulate the information missing for a real process decision. No numerical curve in this resource is an industrial operating recommendation. All sample coefficients and operating points are fictional classroom inputs unless a source is specifically identified.

Unit 5 · Lesson 1 — Contamination, biosafety and evidence

[Unit 05 overview](../units/unit-05.html) · [Run numerical laboratory 13](../labs/lab-13.html) · [Assessment](../assessments/unit-05.html) · [Applied project](../projects/unit-05.html)

The engineering question

Contamination control aims to maintain a defined process state; sterility is not something established from one negative test or from a low modeled arrival probability. Sources include raw materials, equipment interfaces, sampling operations, aerosols and human handling. Risk depends on organism identity, product type, closed-system design and intended use. Biosafety controls are not interchangeable with product quality controls. The same environmental reading can have very different meaning for an open food fermenter and aseptic manufacture of a sterile therapeutic.

The larger aim of Sterility and contamination control is to answer this question: Understand sterility as an evidence-supported system of barriers, validated practices, and monitoring—not a calculated guarantee. A result must be interpreted as a statement about a specified physical boundary and observed quantities. Distinguish the underlying biological mechanism from the mathematical convenience that makes a calculation tractable. A model can be dimensionally consistent and still be badly chosen for the organism, medium or scale. Conversely, a complicated simulator is not superior unless its extra parameters can be identified and tested with observations.

A useful model and its assumptions

Working relation: A toy Poisson arrival model gives P(at least one arrival)=1−exp(−λt) for constant independent events. This probability is not a sterility assurance level, culture contamination rate, or validation result.

The displayed relationship is a starting point for reasoning. Before substituting numbers, name every term, give the unit and decide whether each quantity is a measured value, a fitted coefficient, or a controlled setting. Conservation laws are independent of constitutive assumptions, while kinetic and transfer coefficients depend on conditions. Make a sketch of the relevant system boundary and show what enters, accumulates and leaves. State whether the rate is per unit liquid volume, per unit catalyst or per unit cell mass; confusing these bases can lead to order-of-magnitude errors even when individual values seem realistic.

When a relationship contains an exponential, check which variable is integrated in the exponent and whether the exponent is dimensionless. When it contains a ratio, check what happens as the denominator approaches a limiting condition. When it describes an observable signal, identify the calibration that connects that signal to the claimed physical quantity. These checks are not substitutes for experiment, but they reject many wrong models before fitting begins.

Worked investigation with synthetic numbers

If a hypothetical event arrival rate is 0.002/h for 100 hours, P≥1=1−exp(−0.2)≈0.181. The number says nothing about whether an arrival establishes growth, survives cleaning or affects product quality.

Reconstruction task. Rewrite the stated computation as a ledger: input variable and unit, conversion used, intermediate result and final quantity. Show the same calculation with one input perturbed by 10% while retaining the others, and determine whether the output response is approximately proportional, nonlinear, or sensitive to a constraint. Then reverse the question: what input accuracy would be needed to distinguish the two predictions using a real instrument? Avoid claiming more significant figures than the chosen coefficients justify.

The example is intentionally synthetic. It should teach the direction and scale of a response, not imply that a specific organism or process will exhibit these numerical coefficients. If the result suggests substantial accumulation, ask where the required mass and energy originate. If it suggests extreme sensitivity, inspect whether the sensitivity arises from a genuine mechanistic feature or from mathematically approaching a singular assumption.

Measurement design and engineering judgment

Distinguish a mathematical proxy from a validated control. Identify what the calculated outcome actually measures, what it omits, and why it cannot by itself authorize a sterility or safety claim. Require product-specific validation evidence when discussing regulated manufacturing.

Map interfaces and operational interventions, then prioritize environmental monitoring, closed connections, operator qualification and independently evaluated barriers.

A defensible evidence plan identifies a process objective, measured signals, their frequency, instrument or assay uncertainty, and a comparison criterion selected before viewing the data. Include control conditions and independent replicates when the biological material varies across runs. Distinguish calibration measurements from hold-out verification data. If the main parameter is estimated from one narrow operating window, do not assume it will remain identifiable when oxygen, temperature, shear, pH or medium composition changes.

In a design review, explain the alternatives rather than selecting a model because it yields the highest projected titer or lowest cost. A common problem is conflating process capacity with process utilization: an available transfer rate is not automatically used, and biological demand can be low because the culture is inhibited. When a prediction is contradicted, investigate both the experiment and the model, and keep a record of the resulting revision.

Where the simple model fails

Arrivals are neither independent nor homogeneous in real plants; single events may cause correlated failures. A sterile-product regulatory program needs evidence beyond a probabilistic classroom model.

A classroom model is especially fragile when extrapolated beyond its parameter-identification range. Carefully distinguish structural uncertainty (missing mechanism or wrong equation), parameter uncertainty (imprecisely estimated coefficient), and measurement uncertainty (sensor or assay error). Running many simulations with one incorrect equation does not resolve structural uncertainty. A useful sensitivity chart should therefore accompany a stated model boundary, not pretend to replace it.

For an independent verification, perform three checks: units and conservation; a limiting condition with a known qualitative answer; and a second calculation method or external measurement. Explain what each check can and cannot demonstrate. Automated agreement with an equation confirms the implementation, not necessarily the equation's suitability for a real reactor.

Guided laboratory and discussion

Open [Laboratory 13](../labs/lab-13.html). Record the default input values with units. Move the first slider to three equally spaced settings while leaving other controls unchanged; save the response to CSV and compare the graph with the governing relation in that laboratory. Then change a second independent parameter to test whether the original trend is stable. The laboratory describes its physical limits and reports an explicit warning where assumptions fail. The export is generated locally; no data leave the browser.

Investigative prompt: Compare line-opening frequency with sealed single-use connections and identify the validation records required before making a process claim.

Interpretation prompt: Identify a response that the model cannot predict, and propose one targeted measurement needed to decide if the omission matters. Write a two-sentence decision: what is supported by the simulation and what remains unproven. A high-grade response distinguishes a mathematical identity, an observation and a contingent engineering inference.

Lesson check

1. State the modeled system boundary, the type of measurable quantity being predicted and the appropriate units.
2. Derive or reconstruct the stated relation from a rate law or conservation balance, and show a limiting case.
3. Reproduce the worked calculation, then vary one input and interpret sensitivity without generalizing outside the stated model.
4. Identify two independent measurements that could falsify the simplified hypothesis.
5. Present a recommendation that is explicitly conditional on the evidence rather than an unsupported production specification.

Continue: Thermal treatment and inactivation models. Return to the [unit learning pathway](../units/unit-05.html) or attempt the [unit assessment](../assessments/unit-05.html).

Unit 5 · Lesson 2 — Thermal treatment and inactivation models

[Unit 05 overview](../units/unit-05.html) · [Run numerical laboratory 14](../labs/lab-14.html) · [Assessment](../assessments/unit-05.html) · [Applied project](../projects/unit-05.html)

The engineering question

Heat treatment can reduce microbial burden, but the observed survival curve depends on organism, medium, inoculum, heating profile and recovery method. Decimal reduction time D is the time at a specified temperature needed for a one-log10 reduction under a particular validated model. The z value describes the temperature change associated with a tenfold change in D. Integrating lethality over nonisothermal history requires actual temperature records, not the heater setpoint. The model does not guarantee sterility; spores, cold spots and resistant subpopulations may violate simple log-linear assumptions.

The larger aim of Sterility and contamination control is to answer this question: Understand sterility as an evidence-supported system of barriers, validated practices, and monitoring—not a calculated guarantee. A result must be interpreted as a statement about a specified physical boundary and observed quantities. Distinguish the underlying biological mechanism from the mathematical convenience that makes a calculation tractable. A model can be dimensionally consistent and still be badly chosen for the organism, medium or scale. Conversely, a complicated simulator is not superior unless its extra parameters can be identified and tested with observations.

A useful model and its assumptions

Working relation: For a constant temperature T, D(T)=Dref·10^((Tref−T)/z), and log10(N0/N)=t/D(T), provided the measured kinetics are log-linear in the assessed domain.

The displayed relationship is a starting point for reasoning. Before substituting numbers, name every term, give the unit and decide whether each quantity is a measured value, a fitted coefficient, or a controlled setting. Conservation laws are independent of constitutive assumptions, while kinetic and transfer coefficients depend on conditions. Make a sketch of the relevant system boundary and show what enters, accumulates and leaves. State whether the rate is per unit liquid volume, per unit catalyst or per unit cell mass; confusing these bases can lead to order-of-magnitude errors even when individual values seem realistic.

When a relationship contains an exponential, check which variable is integrated in the exponent and whether the exponent is dimensionless. When it contains a ratio, check what happens as the denominator approaches a limiting condition. When it describes an observable signal, identify the calibration that connects that signal to the claimed physical quantity. These checks are not substitutes for experiment, but they reject many wrong models before fitting begins.

Worked investigation with synthetic numbers

With synthetic Dref=2 min at Tref=121°C and z=10°C, at T=111°C D=20 min. A 10-minute hold therefore corresponds to 0.5 log10 reduction under the assumed kinetics, not to a sterilized product.

Reconstruction task. Rewrite the stated computation as a ledger: input variable and unit, conversion used, intermediate result and final quantity. Show the same calculation with one input perturbed by 10% while retaining the others, and determine whether the output response is approximately proportional, nonlinear, or sensitive to a constraint. Then reverse the question: what input accuracy would be needed to distinguish the two predictions using a real instrument? Avoid claiming more significant figures than the chosen coefficients justify.

The example is intentionally synthetic. It should teach the direction and scale of a response, not imply that a specific organism or process will exhibit these numerical coefficients. If the result suggests substantial accumulation, ask where the required mass and energy originate. If it suggests extreme sensitivity, inspect whether the sensitivity arises from a genuine mechanistic feature or from mathematically approaching a singular assumption.

Measurement design and engineering judgment

Distinguish a mathematical proxy from a validated control. Identify what the calculated outcome actually measures, what it omits, and why it cannot by itself authorize a sterility or safety claim. Require product-specific validation evidence when discussing regulated manufacturing.

Specify organism, matrix, loading, come-up and cool-down behavior; use real thermocouple traces and worst-location measurements for validation studies.

A defensible evidence plan identifies a process objective, measured signals, their frequency, instrument or assay uncertainty, and a comparison criterion selected before viewing the data. Include control conditions and independent replicates when the biological material varies across runs. Distinguish calibration measurements from hold-out verification data. If the main parameter is estimated from one narrow operating window, do not assume it will remain identifiable when oxygen, temperature, shear, pH or medium composition changes.

In a design review, explain the alternatives rather than selecting a model because it yields the highest projected titer or lowest cost. A common problem is conflating process capacity with process utilization: an available transfer rate is not automatically used, and biological demand can be low because the culture is inhibited. When a prediction is contradicted, investigate both the experiment and the model, and keep a record of the resulting revision.

Where the simple model fails

The equation omits tailing, shoulders, nonuniform temperature and population diversity; extrapolating D values may be unsafe. It is not a process-release rule.

A classroom model is especially fragile when extrapolated beyond its parameter-identification range. Carefully distinguish structural uncertainty (missing mechanism or wrong equation), parameter uncertainty (imprecisely estimated coefficient), and measurement uncertainty (sensor or assay error). Running many simulations with one incorrect equation does not resolve structural uncertainty. A useful sensitivity chart should therefore accompany a stated model boundary, not pretend to replace it.

For an independent verification, perform three checks: units and conservation; a limiting condition with a known qualitative answer; and a second calculation method or external measurement. Explain what each check can and cannot demonstrate. Automated agreement with an equation confirms the implementation, not necessarily the equation's suitability for a real reactor.

Guided laboratory and discussion

Open [Laboratory 14](../labs/lab-14.html). Record the default input values with units. Move the first slider to three equally spaced settings while leaving other controls unchanged; save the response to CSV and compare the graph with the governing relation in that laboratory. Then change a second independent parameter to test whether the original trend is stable. The laboratory describes its physical limits and reports an explicit warning where assumptions fail. The export is generated locally; no data leave the browser.

Investigative prompt: Compare a constant-temperature idealization to a measured heating trajectory and describe which missing evidence prevents a release decision.

Interpretation prompt: Identify a response that the model cannot predict, and propose one targeted measurement needed to decide if the omission matters. Write a two-sentence decision: what is supported by the simulation and what remains unproven. A high-grade response distinguishes a mathematical identity, an observation and a contingent engineering inference.

Lesson check

1. State the modeled system boundary, the type of measurable quantity being predicted and the appropriate units.
2. Derive or reconstruct the stated relation from a rate law or conservation balance, and show a limiting case.
3. Reproduce the worked calculation, then vary one input and interpret sensitivity without generalizing outside the stated model.
4. Identify two independent measurements that could falsify the simplified hypothesis.
5. Present a recommendation that is explicitly conditional on the evidence rather than an unsupported production specification.

Continue: Filtration, barrier integrity and monitoring. Return to the [unit learning pathway](../units/unit-05.html) or attempt the [unit assessment](../assessments/unit-05.html).

Unit 5 · Lesson 3 — Filtration, barrier integrity and monitoring

[Unit 05 overview](../units/unit-05.html) · [Run numerical laboratory 15](../labs/lab-15.html) · [Assessment](../assessments/unit-05.html) · [Applied project](../projects/unit-05.html)

The engineering question

Membrane and depth filtration can remove particles or microorganisms according to pore structure, adsorption and operating condition. A nominal pore rating does not, by itself, demonstrate retention for a particular organism and formulation. Pressure-decay and integrity tests are meaningful only when correlated with the filter, wetting fluid, temperature, assembly and validated criteria. Dirty membranes may achieve apparent retention but fail to deliver usable flow. A pressure trace is a measurement of system response, not proof of microbiological quality.

The larger aim of Sterility and contamination control is to answer this question: Understand sterility as an evidence-supported system of barriers, validated practices, and monitoring—not a calculated guarantee. A result must be interpreted as a statement about a specified physical boundary and observed quantities. Distinguish the underlying biological mechanism from the mathematical convenience that makes a calculation tractable. A model can be dimensionally consistent and still be badly chosen for the organism, medium or scale. Conversely, a complicated simulator is not superior unless its extra parameters can be identified and tested with observations.

A useful model and its assumptions

Working relation: An instructional closed-system pressure proxy is P(t)=P0 exp(−kt). The decay constant k is fitted to that apparatus and does not imply any microorganism-retention performance.

The displayed relationship is a starting point for reasoning. Before substituting numbers, name every term, give the unit and decide whether each quantity is a measured value, a fitted coefficient, or a controlled setting. Conservation laws are independent of constitutive assumptions, while kinetic and transfer coefficients depend on conditions. Make a sketch of the relevant system boundary and show what enters, accumulates and leaves. State whether the rate is per unit liquid volume, per unit catalyst or per unit cell mass; confusing these bases can lead to order-of-magnitude errors even when individual values seem realistic.

When a relationship contains an exponential, check which variable is integrated in the exponent and whether the exponent is dimensionless. When it contains a ratio, check what happens as the denominator approaches a limiting condition. When it describes an observable signal, identify the calibration that connects that signal to the claimed physical quantity. These checks are not substitutes for experiment, but they reject many wrong models before fitting begins.

Worked investigation with synthetic numbers

For P0=100 kPa and k=0.02 min⁻¹, after 20 minutes P≈67.0 kPa in the ideal model. That loss could reflect a leak, temperature drift, system compliance or another mechanism; no filter pass/fail limit follows from it.

Reconstruction task. Rewrite the stated computation as a ledger: input variable and unit, conversion used, intermediate result and final quantity. Show the same calculation with one input perturbed by 10% while retaining the others, and determine whether the output response is approximately proportional, nonlinear, or sensitive to a constraint. Then reverse the question: what input accuracy would be needed to distinguish the two predictions using a real instrument? Avoid claiming more significant figures than the chosen coefficients justify.

The example is intentionally synthetic. It should teach the direction and scale of a response, not imply that a specific organism or process will exhibit these numerical coefficients. If the result suggests substantial accumulation, ask where the required mass and energy originate. If it suggests extreme sensitivity, inspect whether the sensitivity arises from a genuine mechanistic feature or from mathematically approaching a singular assumption.

Measurement design and engineering judgment

Distinguish a mathematical proxy from a validated control. Identify what the calculated outcome actually measures, what it omits, and why it cannot by itself authorize a sterility or safety claim. Require product-specific validation evidence when discussing regulated manufacturing.

Use manufacturer-supported integrity test methods and validated acceptance criteria; distinguish installation qualification from routine integrity monitoring.

A defensible evidence plan identifies a process objective, measured signals, their frequency, instrument or assay uncertainty, and a comparison criterion selected before viewing the data. Include control conditions and independent replicates when the biological material varies across runs. Distinguish calibration measurements from hold-out verification data. If the main parameter is estimated from one narrow operating window, do not assume it will remain identifiable when oxygen, temperature, shear, pH or medium composition changes.

In a design review, explain the alternatives rather than selecting a model because it yields the highest projected titer or lowest cost. A common problem is conflating process capacity with process utilization: an available transfer rate is not automatically used, and biological demand can be low because the culture is inhibited. When a prediction is contradicted, investigate both the experiment and the model, and keep a record of the resulting revision.

Where the simple model fails

Gas solubility, compressibility, wetting, permeability and temperature can violate single-exponential decay. Validation requires product-specific challenge evidence.

A classroom model is especially fragile when extrapolated beyond its parameter-identification range. Carefully distinguish structural uncertainty (missing mechanism or wrong equation), parameter uncertainty (imprecisely estimated coefficient), and measurement uncertainty (sensor or assay error). Running many simulations with one incorrect equation does not resolve structural uncertainty. A useful sensitivity chart should therefore accompany a stated model boundary, not pretend to replace it.

For an independent verification, perform three checks: units and conservation; a limiting condition with a known qualitative answer; and a second calculation method or external measurement. Explain what each check can and cannot demonstrate. Automated agreement with an equation confirms the implementation, not necessarily the equation's suitability for a real reactor.

Guided laboratory and discussion

Open [Laboratory 15](../labs/lab-15.html). Record the default input values with units. Move the first slider to three equally spaced settings while leaving other controls unchanged; save the response to CSV and compare the graph with the governing relation in that laboratory. Then change a second independent parameter to test whether the original trend is stable. The laboratory describes its physical limits and reports an explicit warning where assumptions fail. The export is generated locally; no data leave the browser.

Investigative prompt: Create a diagnostic decision tree for apparent integrity-test failures without proposing a universal numerical cutoff.

Interpretation prompt: Identify a response that the model cannot predict, and propose one targeted measurement needed to decide if the omission matters. Write a two-sentence decision: what is supported by the simulation and what remains unproven. A high-grade response distinguishes a mathematical identity, an observation and a contingent engineering inference.

Lesson check

1. State the modeled system boundary, the type of measurable quantity being predicted and the appropriate units.
2. Derive or reconstruct the stated relation from a rate law or conservation balance, and show a limiting case.
3. Reproduce the worked calculation, then vary one input and interpret sensitivity without generalizing outside the stated model.
4. Identify two independent measurements that could falsify the simplified hypothesis.
5. Present a recommendation that is explicitly conditional on the evidence rather than an unsupported production specification.

Continue: Aseptic operations and process validation. Return to the [unit learning pathway](../units/unit-05.html) or attempt the [unit assessment](../assessments/unit-05.html).

Unit 5 · Lesson 4 — Aseptic operations and process validation

[Unit 05 overview](../units/unit-05.html) · [Run numerical laboratory 15](../labs/lab-15.html) · [Assessment](../assessments/unit-05.html) · [Applied project](../projects/unit-05.html)

The engineering question

Aseptic processing combines facility design, cleanability, flow patterns, qualified interventions, environmental monitoring and documented operator practices. The engineering objective is to minimize contamination pathways and demonstrate a state of control. A successful media-fill simulation is a piece of evidence, not proof that future batches are sterile. Relevant requirements vary with jurisdiction and product category; classroom notes must not be mistaken for manufacturing instructions. Human interventions are often a critical uncertainty because their timing and physical motion influence contamination pathways.

The larger aim of Sterility and contamination control is to answer this question: Understand sterility as an evidence-supported system of barriers, validated practices, and monitoring—not a calculated guarantee. A result must be interpreted as a statement about a specified physical boundary and observed quantities. Distinguish the underlying biological mechanism from the mathematical convenience that makes a calculation tractable. A model can be dimensionally consistent and still be badly chosen for the organism, medium or scale. Conversely, a complicated simulator is not superior unless its extra parameters can be identified and tested with observations.

A useful model and its assumptions

Working relation: Treat contamination-control claims as evidence chains: defined process → risk assessment → barrier design → qualification → monitoring → deviations → corrective actions. No single scalar probability replaces this chain.

The displayed relationship is a starting point for reasoning. Before substituting numbers, name every term, give the unit and decide whether each quantity is a measured value, a fitted coefficient, or a controlled setting. Conservation laws are independent of constitutive assumptions, while kinetic and transfer coefficients depend on conditions. Make a sketch of the relevant system boundary and show what enters, accumulates and leaves. State whether the rate is per unit liquid volume, per unit catalyst or per unit cell mass; confusing these bases can lead to order-of-magnitude errors even when individual values seem realistic.

When a relationship contains an exponential, check which variable is integrated in the exponent and whether the exponent is dimensionless. When it contains a ratio, check what happens as the denominator approaches a limiting condition. When it describes an observable signal, identify the calibration that connects that signal to the claimed physical quantity. These checks are not substitutes for experiment, but they reject many wrong models before fitting begins.

Worked investigation with synthetic numbers

A facility with ten observed negative samples has not established zero contamination probability. The sampling design, detection sensitivity, sampling locations and background population matter. Reporting 0/10 without those details is descriptive, not proof of process capability.

Reconstruction task. Rewrite the stated computation as a ledger: input variable and unit, conversion used, intermediate result and final quantity. Show the same calculation with one input perturbed by 10% while retaining the others, and determine whether the output response is approximately proportional, nonlinear, or sensitive to a constraint. Then reverse the question: what input accuracy would be needed to distinguish the two predictions using a real instrument? Avoid claiming more significant figures than the chosen coefficients justify.

The example is intentionally synthetic. It should teach the direction and scale of a response, not imply that a specific organism or process will exhibit these numerical coefficients. If the result suggests substantial accumulation, ask where the required mass and energy originate. If it suggests extreme sensitivity, inspect whether the sensitivity arises from a genuine mechanistic feature or from mathematically approaching a singular assumption.

Measurement design and engineering judgment

Distinguish a mathematical proxy from a validated control. Identify what the calculated outcome actually measures, what it omits, and why it cannot by itself authorize a sterility or safety claim. Require product-specific validation evidence when discussing regulated manufacturing.

Compare intervention records, unidirectional airflow studies and contamination trend data. Match the evidence required to the claim before deciding whether a process is qualified.

A defensible evidence plan identifies a process objective, measured signals, their frequency, instrument or assay uncertainty, and a comparison criterion selected before viewing the data. Include control conditions and independent replicates when the biological material varies across runs. Distinguish calibration measurements from hold-out verification data. If the main parameter is estimated from one narrow operating window, do not assume it will remain identifiable when oxygen, temperature, shear, pH or medium composition changes.

In a design review, explain the alternatives rather than selecting a model because it yields the highest projected titer or lowest cost. A common problem is conflating process capacity with process utilization: an available transfer rate is not automatically used, and biological demand can be low because the culture is inhibited. When a prediction is contradicted, investigate both the experiment and the model, and keep a record of the resulting revision.

Where the simple model fails

No simulation in this book certifies GMP compliance, barrier integrity or product release. FDA aseptic guidance must be read in its original scope and current context.

A classroom model is especially fragile when extrapolated beyond its parameter-identification range. Carefully distinguish structural uncertainty (missing mechanism or wrong equation), parameter uncertainty (imprecisely estimated coefficient), and measurement uncertainty (sensor or assay error). Running many simulations with one incorrect equation does not resolve structural uncertainty. A useful sensitivity chart should therefore accompany a stated model boundary, not pretend to replace it.

For an independent verification, perform three checks: units and conservation; a limiting condition with a known qualitative answer; and a second calculation method or external measurement. Explain what each check can and cannot demonstrate. Automated agreement with an equation confirms the implementation, not necessarily the equation's suitability for a real reactor.

Guided laboratory and discussion

Open [Laboratory 15](../labs/lab-15.html). Record the default input values with units. Move the first slider to three equally spaced settings while leaving other controls unchanged; save the response to CSV and compare the graph with the governing relation in that laboratory. Then change a second independent parameter to test whether the original trend is stable. The laboratory describes its physical limits and reports an explicit warning where assumptions fail. The export is generated locally; no data leave the browser.

Investigative prompt: Draft an evidence map and change-control plan for a hypothetical sterile closed transfer using public agency guidance as reference.

Interpretation prompt: Identify a response that the model cannot predict, and propose one targeted measurement needed to decide if the omission matters. Write a two-sentence decision: what is supported by the simulation and what remains unproven. A high-grade response distinguishes a mathematical identity, an observation and a contingent engineering inference.

Lesson check

1. State the modeled system boundary, the type of measurable quantity being predicted and the appropriate units.
2. Derive or reconstruct the stated relation from a rate law or conservation balance, and show a limiting case.
3. Reproduce the worked calculation, then vary one input and interpret sensitivity without generalizing outside the stated model.
4. Identify two independent measurements that could falsify the simplified hypothesis.
5. Present a recommendation that is explicitly conditional on the evidence rather than an unsupported production specification.

Continue: Unit assessment. Return to the [unit learning pathway](../units/unit-05.html) or attempt the [unit assessment](../assessments/unit-05.html).

Unit 05 — Applied engineering project: Sterility and contamination control

Status: fictional teaching case; all experimental measurements, process values and costs must be supplied or explicitly marked synthetic. This is not an authorization to conduct biological culture, run equipment, release a therapeutic or discharge wastewater.

Project brief

A hypothetical biotechnology production line is changing from manually opened transfers to a closed sterile connection. A manager argues that ten negative environmental samples are enough to declare the new method sterile and discontinue process review.

The task is not to maximize a single simulated variable. It is to demonstrate that an engineering conclusion rests on a defensible boundary, conserved quantities, experimentally testable assumptions, and explicit uncertainty. Students must distinguish a model output from a measurement and a possible risk from an observed failure. A written recommendation must name the conditions that would reverse it.

Analytical scope

Develop a contamination pathway and intervention map. Explain what negative samples can and cannot demonstrate, differentiate filter retention from pressure-decay behavior, and describe evidence chains for qualification, media simulation, monitoring and change control.

Construct a process map with numbered stream or information flows. Give a name, unit, origin, expected uncertainty, and timing for every requested input. Show where the model has a fitted coefficient as opposed to a measured quantity. If a coefficient is not available, express results parametrically and give an illustrative sensitivity range; do not silently invent a best-estimate industrial value.

Evaluate at least two candidate decisions with one common denominator: product mass per time, target recovery, demand/supply margin, analytical comparability, or another defensible quantity aligned with the case objective. A design that seems superior only because different quantities are being compared should be rejected as unresolved. Use a conservation audit to check whether any claimed improvement moves beyond the available mass, substrate or energy.

Numerical investigations

1. Extract a first-principles relationship from one of the four unit lessons; identify dimensions and limiting cases.
2. Run [Lab 13](../labs/lab-13.html) and record the full model input vector. Export its parameter sweep and explain the default trend.
3. Run [Lab 14](../labs/lab-14.html); deliberately choose a second configuration with different assumptions. Give the independent reason to use the second model.
4. Run [Lab 15](../labs/lab-15.html). Identify any warnings, invalid domains, or model-regime boundaries and explain their physical significance.
5. Use a spreadsheet, pseudocode or a short program to independently verify one selected model output. Report discrepancy, units and rounding conventions. Test one zero-input, saturation, washout or conservation limit appropriate to the chosen model.

Measurement and evidence plan

To challenge your preferred conclusion, describe the specific experiment, sample or instrument measurement that would cause the most information gain. Plan a negative or reference control, repeat measurements where biological variability matters, and specify the comparison that would be judged before seeing the results. Report whether the experiment challenges parameter values, constitutive form or sensor calibration. Maintain separate pages for evidence actually collected, assumptions borrowed from literature and hypothetical inputs introduced for illustration.

Deliverables

Provide a risk map, validation evidence register, explicitly scoped reading of FDA sterile processing and general process-validation guidance, and a decision stating what cannot be concluded without product-specific validation.

The final package should contain a concise executive summary, a source-and-assumption register, dimensional and material balances, transparent calculations, a three-scenario sensitivity chart, and the source CSV files needed to reproduce every figure. Include two alternatives not selected and explain why they fail against the stated objective or evidence requirements.

Quality rubric (100 marks)

Reflection: Which additional observation, if obtained tomorrow, would have the highest chance of changing your recommendation? Explain why this information is more valuable than running another deterministic curve with the same uncertain assumptions.

Unit 05 — Assessment: Sterility and contamination control

This assessment has 16 substantive multi-part problems: four for each lesson. The purpose is to test domain reasoning, consistent units, conserved quantities, uncertainty and evidence. Students may explicitly reject an ill-posed process claim. Model values and numeric scenarios in the questions are fictional, not real plant operating conditions.

Assessment rubric (10 marks per task): clear physical boundary and correct units (2); correct equation or causal mechanism (2); numerical reconstruction or falsifiable reasoning (2); explicit applicability limits and uncertainty (2); defensible experimental or process decision (2). A correct calculation that silently uses an unsupported model cannot earn full credit.

Lesson 1 — Contamination, biosafety and evidence

Q01 — Reproduce and perturb a calculation (10 marks)

A. Reconstruct the numbers. Begin with the following numerical evidence: If a hypothetical event arrival rate is 0.002/h for 100 hours, P≥1=1−exp(−0.2)≈0.181. The number says nothing about whether an arrival establishes growth, survives cleaning or affects product quality. Identify every supplied number, every resulting number and the unit basis for each. Recompute the result using your own calculator or code, not by copying the printed final value. Alter one input by 15%, while preserving all others, and quantify the absolute and percentage change in output. Is the local response linear, and would a 15% observation error have the same impact as a deliberate 15% process change? State one limiting case and judge whether the scenario remains physically possible under conserved mass, energy or material balances.

Q02 — Conservation and dimensional audit (10 marks)

B. Develop the relation, not just the answer. Take the stated working relationship: A toy Poisson arrival model gives P(at least one arrival)=1−exp(−λt) for constant independent events. This probability is not a sterility assurance level, culture contamination rate, or validation result. Begin from a species inventory, rate law or causal diagram appropriate to Contamination, biosafety and evidence. Show which terms would appear in the full statement, and identify each term removed in obtaining the simplified equation. Specify the units of two independent variables and of the predicted observable. Test at least two limiting conditions, including a zero rate, a dilute regime, a saturation boundary or a zero residence time where applicable. Explain how you would detect a wrong sign or a missing conversion factor without knowing the expected answer.

Q03 — Challenge the numerical model (10 marks)

C. Attempt to falsify the simulation. Open [Laboratory 13](../labs/lab-13.html) and record the exact default inputs with units. Save the full curve as CSV, choose three separated points, and calculate a finite-difference sensitivity from each adjacent pair. Repeat after changing a second parameter by a controlled amount. Use the model's stated restrictions—Arrivals are neither independent nor homogeneous in real plants; single events may cause correlated failures. A sterile-product regulatory program needs evidence beyond a probabilistic classroom model.—to identify at least two reasons a real experiment could disagree. Propose an observable and an experimental control that would discriminate parameter error from a missing physical mechanism. Do not equate agreement with the software to biological validation.

Q04 — Design a discriminating experiment (10 marks)

D. Make an evidence-constrained decision. Consider this engineering action: Map interfaces and operational interventions, then prioritize environmental monitoring, closed connections, operator qualification and independently evaluated barriers. Develop two plausible alternatives and a comparison matrix with expected benefit, scientific risk, measurement effort and an uncertainty or scale-up limitation. Propose three measurements that could change your decision, including one that directly tests the simplified model and one that checks product quality or conservation. Explain what evidence would make you stop the trial. Write a clear recommendation conditional on that evidence; explicitly say why a purely synthetic numerical prediction does not permit an operational or regulatory claim. End with a one-paragraph communication suitable for a multidisciplinary design review.

Lesson 2 — Thermal treatment and inactivation models

Q05 — Reproduce and perturb a calculation (10 marks)

A. Reconstruct the numbers. Begin with the following numerical evidence: With synthetic Dref=2 min at Tref=121°C and z=10°C, at T=111°C D=20 min. A 10-minute hold therefore corresponds to 0.5 log10 reduction under the assumed kinetics, not to a sterilized product. Identify every supplied number, every resulting number and the unit basis for each. Recompute the result using your own calculator or code, not by copying the printed final value. Alter one input by 15%, while preserving all others, and quantify the absolute and percentage change in output. Is the local response linear, and would a 15% observation error have the same impact as a deliberate 15% process change? State one limiting case and judge whether the scenario remains physically possible under conserved mass, energy or material balances.

Q06 — Conservation and dimensional audit (10 marks)

B. Develop the relation, not just the answer. Take the stated working relationship: For a constant temperature T, D(T)=Dref·10^((Tref−T)/z), and log10(N0/N)=t/D(T), provided the measured kinetics are log-linear in the assessed domain. Begin from a species inventory, rate law or causal diagram appropriate to Thermal treatment and inactivation models. Show which terms would appear in the full statement, and identify each term removed in obtaining the simplified equation. Specify the units of two independent variables and of the predicted observable. Test at least two limiting conditions, including a zero rate, a dilute regime, a saturation boundary or a zero residence time where applicable. Explain how you would detect a wrong sign or a missing conversion factor without knowing the expected answer.

Q07 — Challenge the numerical model (10 marks)

C. Attempt to falsify the simulation. Open [Laboratory 14](../labs/lab-14.html) and record the exact default inputs with units. Save the full curve as CSV, choose three separated points, and calculate a finite-difference sensitivity from each adjacent pair. Repeat after changing a second parameter by a controlled amount. Use the model's stated restrictions—The equation omits tailing, shoulders, nonuniform temperature and population diversity; extrapolating D values may be unsafe. It is not a process-release rule.—to identify at least two reasons a real experiment could disagree. Propose an observable and an experimental control that would discriminate parameter error from a missing physical mechanism. Do not equate agreement with the software to biological validation.

Q08 — Design a discriminating experiment (10 marks)

D. Make an evidence-constrained decision. Consider this engineering action: Specify organism, matrix, loading, come-up and cool-down behavior; use real thermocouple traces and worst-location measurements for validation studies. Develop two plausible alternatives and a comparison matrix with expected benefit, scientific risk, measurement effort and an uncertainty or scale-up limitation. Propose three measurements that could change your decision, including one that directly tests the simplified model and one that checks product quality or conservation. Explain what evidence would make you stop the trial. Write a clear recommendation conditional on that evidence; explicitly say why a purely synthetic numerical prediction does not permit an operational or regulatory claim. End with a one-paragraph communication suitable for a multidisciplinary design review.

Lesson 3 — Filtration, barrier integrity and monitoring

Q09 — Reproduce and perturb a calculation (10 marks)

A. Reconstruct the numbers. Begin with the following numerical evidence: For P0=100 kPa and k=0.02 min⁻¹, after 20 minutes P≈67.0 kPa in the ideal model. That loss could reflect a leak, temperature drift, system compliance or another mechanism; no filter pass/fail limit follows from it. Identify every supplied number, every resulting number and the unit basis for each. Recompute the result using your own calculator or code, not by copying the printed final value. Alter one input by 15%, while preserving all others, and quantify the absolute and percentage change in output. Is the local response linear, and would a 15% observation error have the same impact as a deliberate 15% process change? State one limiting case and judge whether the scenario remains physically possible under conserved mass, energy or material balances.

Q10 — Conservation and dimensional audit (10 marks)

B. Develop the relation, not just the answer. Take the stated working relationship: An instructional closed-system pressure proxy is P(t)=P0 exp(−kt). The decay constant k is fitted to that apparatus and does not imply any microorganism-retention performance. Begin from a species inventory, rate law or causal diagram appropriate to Filtration, barrier integrity and monitoring. Show which terms would appear in the full statement, and identify each term removed in obtaining the simplified equation. Specify the units of two independent variables and of the predicted observable. Test at least two limiting conditions, including a zero rate, a dilute regime, a saturation boundary or a zero residence time where applicable. Explain how you would detect a wrong sign or a missing conversion factor without knowing the expected answer.

Q11 — Challenge the numerical model (10 marks)

C. Attempt to falsify the simulation. Open [Laboratory 15](../labs/lab-15.html) and record the exact default inputs with units. Save the full curve as CSV, choose three separated points, and calculate a finite-difference sensitivity from each adjacent pair. Repeat after changing a second parameter by a controlled amount. Use the model's stated restrictions—Gas solubility, compressibility, wetting, permeability and temperature can violate single-exponential decay. Validation requires product-specific challenge evidence.—to identify at least two reasons a real experiment could disagree. Propose an observable and an experimental control that would discriminate parameter error from a missing physical mechanism. Do not equate agreement with the software to biological validation.

Q12 — Design a discriminating experiment (10 marks)

D. Make an evidence-constrained decision. Consider this engineering action: Use manufacturer-supported integrity test methods and validated acceptance criteria; distinguish installation qualification from routine integrity monitoring. Develop two plausible alternatives and a comparison matrix with expected benefit, scientific risk, measurement effort and an uncertainty or scale-up limitation. Propose three measurements that could change your decision, including one that directly tests the simplified model and one that checks product quality or conservation. Explain what evidence would make you stop the trial. Write a clear recommendation conditional on that evidence; explicitly say why a purely synthetic numerical prediction does not permit an operational or regulatory claim. End with a one-paragraph communication suitable for a multidisciplinary design review.

Lesson 4 — Aseptic operations and process validation

Q13 — Reproduce and perturb a calculation (10 marks)

A. Reconstruct the numbers. Begin with the following numerical evidence: A facility with ten observed negative samples has not established zero contamination probability. The sampling design, detection sensitivity, sampling locations and background population matter. Reporting 0/10 without those details is descriptive, not proof of process capability. Identify every supplied number, every resulting number and the unit basis for each. Recompute the result using your own calculator or code, not by copying the printed final value. Alter one input by 15%, while preserving all others, and quantify the absolute and percentage change in output. Is the local response linear, and would a 15% observation error have the same impact as a deliberate 15% process change? State one limiting case and judge whether the scenario remains physically possible under conserved mass, energy or material balances.

Q14 — Conservation and dimensional audit (10 marks)

B. Develop the relation, not just the answer. Take the stated working relationship: Treat contamination-control claims as evidence chains: defined process → risk assessment → barrier design → qualification → monitoring → deviations → corrective actions. No single scalar probability replaces this chain. Begin from a species inventory, rate law or causal diagram appropriate to Aseptic operations and process validation. Show which terms would appear in the full statement, and identify each term removed in obtaining the simplified equation. Specify the units of two independent variables and of the predicted observable. Test at least two limiting conditions, including a zero rate, a dilute regime, a saturation boundary or a zero residence time where applicable. Explain how you would detect a wrong sign or a missing conversion factor without knowing the expected answer.

Q15 — Challenge the numerical model (10 marks)

C. Attempt to falsify the simulation. Open [Laboratory 15](../labs/lab-15.html) and record the exact default inputs with units. Save the full curve as CSV, choose three separated points, and calculate a finite-difference sensitivity from each adjacent pair. Repeat after changing a second parameter by a controlled amount. Use the model's stated restrictions—No simulation in this book certifies GMP compliance, barrier integrity or product release. FDA aseptic guidance must be read in its original scope and current context.—to identify at least two reasons a real experiment could disagree. Propose an observable and an experimental control that would discriminate parameter error from a missing physical mechanism. Do not equate agreement with the software to biological validation.

Q16 — Design a discriminating experiment (10 marks)

D. Make an evidence-constrained decision. Consider this engineering action: Compare intervention records, unidirectional airflow studies and contamination trend data. Match the evidence required to the claim before deciding whether a process is qualified. Develop two plausible alternatives and a comparison matrix with expected benefit, scientific risk, measurement effort and an uncertainty or scale-up limitation. Propose three measurements that could change your decision, including one that directly tests the simplified model and one that checks product quality or conservation. Explain what evidence would make you stop the trial. Write a clear recommendation conditional on that evidence; explicitly say why a purely synthetic numerical prediction does not permit an operational or regulatory claim. End with a one-paragraph communication suitable for a multidisciplinary design review.

Practice task linked to this lesson: Draft an evidence map and change-control plan for a hypothetical sterile closed transfer using public agency guidance as reference.