🎓 Lesson 19
D5
Evidence Preservation Protocol for Litigation-Ready Reporting
A step-by-step method to collect, label, store, and document evidence after a mining or energy storage incident so it can be trusted in court.
🎯 Learning Objectives
- ✓ Explain the legal and technical requirements for maintaining evidentiary integrity in post-incident reporting
- ✓ Apply chain-of-custody documentation standards to preserve digital sensor logs and physical debris samples
- ✓ Analyze a sample incident report to identify three critical preservation failures violating NFPA 921 or ASTM E2911
- ✓ Design a site-specific evidence preservation checklist compliant with MSHA Part 46 and ISO/IEC 17025
📖 Why This Matters
In 2022, a lithium-ion battery thermal runaway incident at a mine-side energy storage facility led to a $14M settlement—not because the engineering failed first, but because critical temperature log files were overwritten, fire-damaged cell fragments were stored without environmental controls, and witness statements lacked time-stamped, signed chain-of-custody forms. When evidence is mishandled, engineers—not just operators—face professional liability. This lesson teaches you how to turn raw incident data into litigation-ready forensic truth.
📘 Core Principles
Evidence preservation rests on four interlocking pillars: (1) Integrity—ensuring no alteration or contamination from collection through analysis; (2) Authenticity—verifying origin and identity via unique identifiers and metadata; (3) Continuity—documenting every person, action, time, and location associated with evidence handling (the 'chain of custody'); and (4) Admissibility—meeting statutory and evidentiary rules (e.g., Federal Rule of Evidence 901, MSHA’s accident investigation directives). In energy storage forensics, this extends to volatile digital evidence (BMS logs, SCADA timestamps), thermally degraded materials (electrolyte residues, separator morphology), and spatial context (drone photogrammetry, LiDAR scans)—all requiring specialized protocols distinct from traditional mining blast forensics.
📐 Chain-of-Custody Verification Index (CCVI)
The CCVI quantifies procedural compliance by scoring documented custody events against minimum required elements per evidence item. A score < 0.8 indicates high risk of evidentiary challenge in court.
Chain-of-Custody Verification Index (CCVI)
CCVI = Σ(compliant_elements_i) / (n_items × total_required_elements)Quantitative measure of chain-of-custody completeness across all evidence items; used internally to audit protocol adherence before evidence submission.
Variables:
| Symbol | Name | Unit | Description |
|---|---|---|---|
| compliant_elements_i | Compliant elements for item i | count | Number of required chain-of-custody fields fully completed for evidence item i |
| n_items | Number of evidence items | count | Total discrete pieces or batches of evidence collected |
| total_required_elements | Required chain-of-custody elements per item | count | Minimum documented fields mandated by internal SOP or ASTM E2911-23 Section 7.2 |
Typical Ranges:
MSHA-compliant investigations: 0.80 – 1.00
NFPA 921–aligned fire labs: 0.85 – 1.00
💡 Worked Example
Problem: An investigator collected 3 damaged battery modules. For each, the chain-of-custody form includes: (i) unique ID tag, (ii) collector name/signature, (iii) collection timestamp (ISO 8601), (iv) storage location, (v) environmental conditions (temp/humidity), (vi) transfer signature to lab technician, (vii) lab receipt timestamp. However, Module #2 lacks humidity logging, and Module #3 has no transfer signature.
1.
Step 1: Identify total required elements per item = 7
2.
Step 2: Count compliant elements per module: Module #1 = 7/7, Module #2 = 6/7 (missing humidity), Module #3 = 6/7 (missing transfer signature)
3.
Step 3: Compute average compliance ratio = (7 + 6 + 6) / (7 × 3) = 19/21 ≈ 0.905
4.
Step 4: Compare to threshold: 0.905 > 0.8 → acceptable CCVI
Answer:
The result is 0.905, which falls within the safe range of ≥0.80. However, two deficiencies require corrective action per ISO/IEC 17025 Clause 7.5.3.
🏗️ Real-World Application
During the 2021 Stillwater Mine ESS fire (Montana), NIST investigators preserved evidence using a tiered protocol: (1) All BMS log files were imaged *in situ* using write-blockers and hashed (SHA-256); (2) Thermal camera footage was exported with embedded GPS/time metadata and stored on write-once Blu-ray discs; (3) Electrode samples were vacuum-sealed in argon-filled bags with desiccant, labeled with RFID tags synced to a blockchain ledger; (4) Every handoff—from miner to safety officer to forensic lab—was recorded via encrypted mobile app with biometric sign-off. This enabled full reconstruction of thermal propagation sequence and upheld evidence admissibility in subsequent OSHA litigation.