Field notes
Labeling transfer media so night-shift staff cannot mix lanes
Most Offline Signing Station Setup failures we see are not cryptographic. They are logistical: an inbound stick used for outbound artifacts because the bags looked identical under fluorescent light at 02:00.
Color alone is not enough. Night-shift lighting washes out pastel tags. We coach teams to combine three signals: color, raised tactile dots, and a large printed verb—“IMPORT ONLY” or “EXPORT ONLY”—on both sides of the bag.
A lane is a story with a clock
Every stick should have a custody card that answers four questions: who sealed it, when, which ceremony ID it belongs to, and whether it has been wiped since last use. If the card is missing, the stick is quarantined—even if the hash looks fine.
Physical separation beats policy paragraphs
Put inbound and outbound trays on opposite ends of the bench. If someone has to walk around the chassis to “just borrow” a stick, the friction is doing useful work. Document that layout in photos for your Korea plant wiki and the secondary site.
Want the full drill set? See the Air-Gapped Signing Bench Intensive.