Put identity on the interchangeable insert, and ask tooling how to prevent or detect reversal. A carrier code can't tell you which bit somebody put inside it. Then make the selected recipe agree with the identified insert, including what happens when that identity can't be read.