The ranking is published. The run-at-rate isn't.

This week I read that a cooling-plate manufacturer has earned global trust via compliance, and that ten CNC machining houses are officially reputable. Somewhere a purchase order is being cut against those sentences. Supplier discovery has been captured by syndicated SEO content – ranked listicles, badge announcements, "how to select a mould supplier" guides written by the mould suppliers themselves – and the evidence chain behind it all is nobody's job until an escape lands on the quality director's desk with a customer's name attached. I have been that quality director. The escape never arrives described as a sourcing decision. It arrives as a dimension, a porosity reading, a late tool – stamped with your part number.

What a ranking measures – and what it never touches

A ranking measures marketing spend and backlink discipline. That is what it measures. Discoverability is a purchasable asset, and the "ten reputable manufacturers" format is priced for the purchasing engineer who has three days to find a supplier and no budget to go look at one. What the listicle never carries: Cpk on critical characteristics, PPM history by part family, sub-tier flow-down, who runs the second shift when the process drifts. None of it fits in a paragraph that begins "renowned for".

Tooled parts are the sharpest case. Buy a mould or a machined casting and the supplier's process variance becomes your part's permanent characteristic. A cavity cut in the wrong steel. Draft angles that scuff every ejection. Thermal drift on a press nobody charts. You inherit all of it, on every shot, for the life of the programme – and you cannot inspect your way out of geometry that was wrong before the first part cooled.

I paid for that lesson at Witte Automotive. Suppliers chosen on brochure credibility escaped, and the cost landed in-house: containment, sorting, expedited freight, customer calls at 22:00. QRQC, A3 and Q-Wall discipline drove failure costs down substantially, and I am proud of that machine. The honest reading is that a share of that money should never have entered the building. We were treating symptoms of a qualification that had been a printout.

You cannot inspect quality into a part, and you cannot SEO capability into a supplier.

How a supplier is actually qualified

Qualification is a floor exercise, not a desktop one. In my world it means four things, in sequence:

• PPAP at the level the risk demands – level 3 as a floor, higher where the characteristic is safety- or homologation-relevant, with capability studies run on the actual criticals, not the convenient ones.
• A VDA 6.3 audit walked on the floor – not a certificate review in a conference room. The question is never "do you have a PFMEA"; it is "show me the last time this process drifted and what you did about it." If the answer takes more than a minute to find, you have your answer.
• Run-at-rate at contracted capacity – not demo capacity. The regular crew, the regular tools, the real takt, the third hour of the shift. Capability measured during a showcase run is theatre with a control chart.
• A contained launch – GP12-style enhanced release until the data stabilises, with exit criteria you can point to when commercial pressure arrives asking why you are still 100% inspecting.

When I stood up the QA/QC function for the SNOP greenfield plant – 900+ people, everything built from zero – this was the entry ticket. Evidence or nothing. It was slower than a shortlist. It is also why a young plant got through a quarter with zero critical customer escalations, and why I will defend the discipline against any deck that labels it overhead. Qualification is the purchase price of sleeping through the night.

The arithmetic is not close, either. Two auditor-days plus travel – call it €4,500 – against a tooled programme of €300,000 and a line-stop that burns five figures an hour. That is the cheapest insurance a tooled programme can buy, and it is the line item purchasing most reliably tries to delete.

When you cannot walk their floor

Distance sourcing is a reality; unverifiable sourcing is a choice. When you cannot stand at their press, you write the verification into the contract so it survives whoever answers the emails. First-article inspection at an accredited third-party laboratory, results flowing to you directly rather than through the supplier's own summary. Contractual audit rights, exercised by a commissioned local auditor or a resident engineer through the launch window, with access terms agreed before signature – not negotiated mid-crisis. SPC on the criticals delivered per shipment as a condition of payment, not produced on request after the escape. And escape-cost allocation signed before the first PO: who pays for sorting, freight, containment, line-stop. After the first 8D, that conversation is held from a position of zero leverage.

Here is the de-escalation reality I can state from scar tissue: the unverified supplier's failure mode always arrives stamped with your part number. Your customer never sees the tier-2 name on the badge. They see you. Reputation upstream does not transfer downstream. Liability does.

The internet is the first pass of your supply chain whether you like it or not – I use it for discovery myself. But that is where its authority ends. Treat every ranked shortlist and every "global trust" badge as an unverified claim from a party with an incentive, because that is precisely what it is. A supplier earns their way onto your approved list on the floor, at rate, on the record. Purchase orders get signed by evidence. Never by search position.