Why this holds up

The system itself, not just the screen, keeps Renee to her own sites, and this is tested for every role. She is handed her own sites' numbers and nothing else; the organization-wide median is worked out before it reaches her, so she never sees another site's row; and a load is stamped with the loader's own name and can never be edited or deleted.

Every rule on these screens lives in a tested module: the load checks, the placement against the organization, the trend, the sort and the filters. The CSV and the printout are built from the same view as the page.

Comparing with outside practices is an optional add-on, switched off in this install.