How we purchase blind

The goal of every step in this process is one property: the supplier cannot identify the order as originating from Open Assay at any point before the published result. If any single step leaks identity — the shipping address, the payment trail, the email used to check status, the timing of the order relative to a review cycle — the sample becomes a "reviewer sample," which is a different product than what the supplier ships to any other researcher. The whole value proposition of an independent test collapses.

The editorial side of the house — not the business side — selects which suppliers to test and which specific product listings to buy from. The selection criteria are public: we prioritize suppliers that rank in the top quartile of our leaderboard, suppliers with high community interest in the last quarter, and any supplier whose published third-party COAs a reader has flagged as suspicious.

Once a supplier is selected, the specific listing is chosen the same way a new researcher would choose one: by navigating the public storefront, reading the product page, and adding the most prominent SKU for the peptide in question to the cart. We do not ask the supplier to recommend a batch, we do not use a rep contact, and we do not accept "representative samples" the supplier would like us to test. Every sample comes out of retail inventory the same way any other order would.

Open Assay does not ship to its own business address. Shipments land at a rotating set of private mail-receiving addresses registered to individual receivers whose names do not appear anywhere in our corporate, editorial, or social-media surface. The addresses are ordinary residential or small commercial drop points chosen to look like the kind of destination a hobbyist researcher would use.

The addresses rotate on a schedule unrelated to purchase timing, so a supplier that flagged one address as "possibly a reviewer" would not be able to track the pattern forward to the next order. Names used on the shipping label are real, consented receivers; they are not pseudonyms, which would raise their own red flags at the shipper.

Payment is the part of the chain most likely to leak identity and is therefore the part we put the most thought into.

Suppliers who accept credit cards run the card through a payment processor that pings the issuer with the billing address. An Open Assay corporate card would be identifiable on either side. A personal card in a staff member's name could be cross-referenced if the supplier ever builds a reviewer watchlist.

Suppliers who accept cryptocurrency see a wallet address. Wallet reuse across purchases would cluster our activity. A fresh wallet every time, funded through a crypto-to-gift-card conversion flow, breaks the chain: the gift card is purchased with cash-equivalent funds through a regulated kiosk, converted to the cryptocurrency the supplier accepts, and sent from a newly-generated address. No field on that transaction ties back to Open Assay.

Email accounts used for order confirmation, shipment tracking, and supplier status messages are single-use addresses on a provider that is unconnected to any Open Assay domain. They are created before the order and abandoned after the shipment completes. They are never reused across suppliers and never reused across orders from the same supplier.

On delivery, the receiver photographs the exterior of the package before opening — carrier label, postage, any markings — and uploads the photos to the intake log with a timestamp. The package is then opened in a controlled environment, and the interior is photographed as received: product packaging, any inserts, any COA or literature included with the shipment, the physical appearance of the vial or primary container, and the packing materials.

The product receives an internal sample identifier at intake. From that moment forward, the supplier name does not appear on any label that will travel to the testing lab. The sample is referenced only by its identifier, a batch or lot number if one was printed on the vial, and the date of receipt.

The vial is transferred into controlled storage within the window recommended by the supplier's own handling guidance — typically an ultra-low freezer at −80 °C for lyophilized peptides or refrigerated storage for reconstituted material. Storage time, temperature, and freezer location are logged. Any deviation from recommended storage is recorded in the custody log and attached to the eventual assay page, because a reader has a right to know whether a failing result was influenced by pre-analytic conditions under Open Assay's control.

The custody log is append-only and timestamped. Entries cannot be back-edited. If a vial is moved between freezers, the move is a new entry with its own timestamp. A reader reviewing an assay page can request the custody log for that sample identifier by emailing editorial and will receive the unredacted log, minus the receiver name where that would compromise future blind purchases.

When a batch of samples is ready for testing, each vial is split into aliquots under lab-grade conditions. Every aliquot receives a fresh barcode that references only the internal sample identifier — the barcode does not encode the supplier name, the peptide name, or the production batch. The testing lab sees an opaque identifier.

Aliquots are shipped to the testing lab in batches that mix peptides and suppliers, so a lab technician opening the shipment cannot infer "this is an Open Assay run of Supplier X's BPC-157" from the pattern of the shipment. The lab runs the samples under its standard operating procedure and reports results against the barcode. Our internal system reassociates each barcode with its supplier, lot, and product page at the moment of publication.

We retain a duplicate aliquot of every sample in internal storage. If a supplier disputes a result, the duplicate is pulled from storage and sent to a second independent lab for a retest. Both results are published; we do not replace the first with the second.

Results go live on the supplier page on a publication date decided by editorial without reference to the supplier's PR calendar, partnership status, or outreach. The supplier learns the result by reading it on the site, at the same time as every other reader.

After publication, the supplier has a standing right of response under our editorial policy: a remediation entry within seven business days of receipt, a re-test at our expense under the published triggers, and on-page visibility for their response. What the supplier does not have is pre-publication visibility of the finding. A supplier that receives advance notice of a failing result has a window to alter inventory, push software updates that change how their public COAs display, or pre-empt the narrative with their own statement. None of that serves the reader.

It is worth naming the shortcuts that peptide review sites commonly take, because each one changes what the published result actually measures.

• Accepting vendor-supplied samples. If the vendor chose the vial, the vial was chosen. Vendor-supplied samples tell you what the vendor can produce when they know someone is looking. They do not tell you what a customer receives. Our disclosure marks any vendor-supplied material as "Golden-sample" and excludes it from the composite ranking.
• Using the company name on delivery. A package addressed to "Open Assay Editorial" is a package every supplier fulfillment team will flag on sight. Company-addressed deliveries are an order of magnitude more likely to come from the top of the QC queue than from standard inventory.
• Emailing "press contact" or "review request" ahead of the purchase. Any outreach from a domain, name, or IP associated with a reviewer attaches a flag to whatever order comes next. We do not contact suppliers in our own name prior to purchase.
• Paying with a corporate card. The card network ties the billing address to the review site. The fulfillment flag gets attached at the payment step, before the package is ever packed.
• Publishing to the supplier first for "fact check." A fact-check circulation for a failing result becomes a negotiation window. We run source audits and compliance sweeps internally before publication; suppliers are welcome to dispute after publication, on the record.
• Using a persistent shipping address. Over a few orders, any steady address gets recognized. Address rotation is a boring operational discipline that is easy to skip and cheap to maintain.
• Re-using the same receiver name. Name clustering at the shipper level leaks the same information as address reuse. We rotate receivers as well as addresses.

Every shortcut on this list trades rigor for convenience. Each one turns a blind-purchase program into something closer to a supplier-relations program, which is a different product.