Assess the changebefore it flies.
A new station, a new aircraft type, a reorganised ramp team, a rewritten procedure. Every change is a risk assessment with an owner, an approval that scales with the band it scored, and a review after it lands. The impacted areas and the hazards it touches are edges on the same graph as everything else, so a change is never a document filed beside the safety system.
The approval rank rises with the risk band, automatically.
A change assessed into a higher band needs a higher approver, decided by the same band-escalation rule the flight risk assessment uses rather than a second approval system invented for changes. And the post-change review is a stage the record has to pass through, so a change cannot be closed on the day it was implemented.
The capabilities, on one record.
Draft, impact assessment, risk assessment, approval, implementation, post-change review, closed. Each stage captures its own fields.
The band recorded at risk assessment sets the approver rank required, the same rule the flight risk assessment applies.
Impacted departments, stations and documents are link edges, and so are the hazards the change touches. No parallel register.
The work a change needs rides the same corrective-action machinery as every other action, linked back to the change.
Post-change review carries its date and its evaluator on the record, so it is a gate to pass, not a reminder to miss.
Real records, one reference each.
Every record carries a stable reference and a source on every field. Nothing is silently overwritten, and the trail is the record.
A change has an accountable owner, not a reporter
The approver rank follows the risk band it scored
Impacted areas and hazards are edges, not a list in a field
The post-change review is a stage, so it cannot be skipped
It links to the rest of the graph.
A change is not closed on the day it lands.
Post-change review is a stage the record has to pass through, carrying its date and its evaluator. Implementation is not the end of a change, it is the middle of one.
The change is controlled and reviewed. The next chapter is for the day it goes wrong anyway: the drilled emergency response.