13.1 Two-Stage Cooling Requirements

Cooking kills many vegetative cells. It does not end the temperature job. Cooked time/temperature control for safety (TCS) food that will be saved must leave the temperature danger zone on a legal clock. FDA Food Code 3-501.14 (2022, January 18, 2023 version) and the FDA employee sheet (July 2024) use the same two-stage rule:

1. 135°F (57°C) to 70°F (21°C) within 2 hours
2. 70°F (21°C) to 41°F (5°C) or less within 4 more hours
3. 6 hours total from 135°F to 41°F

The Person in Charge (PIC) treats those numbers as hard gates, not as kitchen folklore. A pot that “feels cooler” is not cooled. A walk-in that is “really cold” does not replace a probe reading. If you cannot show the 70°F check and the 41°F check, you cannot defend the leftover.

Why the First 2 Hours Are the Rapid-Cool Stage

The danger zone is 41°F–135°F. Growth is fastest at roughly 70°F–125°F. Stage 1 exists to punch the food through that fastest-growth band before sporeformers that survived the cook can rebuild to an illness dose. Clostridium perfringens is the classic cooling pathogen: cooking may leave spores in a stew, chili, gravy, or roast; slow cooling lets those spores germinate and multiply. Bacillus cereus does the same job in rice and other starches. Stage 2 then finishes the trip through the remaining danger zone to a legal cold hold.

That is why stage 1 is 2 hours, not 4, and why a miss at 70°F is not something you “make up later” by leaving the pan in the cooler overnight. The second stage is allowed only after the food has already reached 70°F. If the center is still 78°F at the 2-hour mark, the food is still sitting in the rapid-growth range. The Code path is then reheat to 165°F and restart cooling correctly, or discard.

Do not mash this clock into the 4-hour time-as-a-public-health-control option in 3-501.19. Time as a control is a planned, labeled, written alternative used when you are not holding at 41°F or 135°F. Two-stage cooling is how cooked TCS food is supposed to exit the danger zone after cooking or hot holding. A cook who says leftover chili can sit in the zone for four hours “because of the four-hour rule” is naming the wrong rule.

A different 4-hour line does exist inside 3-501.14(B): TCS food prepared from ambient-temperature ingredients — canned tuna salad, reconstituted foods — must reach 41°F within 4 hours. That is not two-stage cooling of a cooked leftover. Do not put a 135°F-to-70°F checkpoint on tuna salad, and do not give cooked chili a single 4-hour pass to 41°F.

Start the Clock at 135°F, Not at “We Took It Off the Line”

3-501.14 measures from 135°F, the bottom of legal hot holding. Food often leaves the kettle hotter than that. The PIC starts active cooling immediately — methods live in 13.2 — and starts the legal clock when a calibrated probe reads 135°F in the thickest part. Do not wait for the steam to stop. Do not park the pot on the prep table “until it isn’t dangerous to the walk-in.” Room-temperature lingering is still danger-zone time, and it is not a cooling method.

Use a cleaned, calibrated probe. Measure the center / thickest part, not the ice-bath water, not the pan wall, and not a thin edge that cooled first. Stirred liquids still need a center reading after stirring stops long enough for the number to mean something. Record the food name, the start time and temperature, the 2-hour check, the final check, the employee’s initials, and any corrective action. A cooling program without a log is a story, not active managerial control.

Worked Example: Chili at 145°F at 2:00 p.m.

Saturday. A full batch of leftover chili comes off the steam table at 2:00 p.m. The probe reads 145°F. The PIC does not start a 2-hour countdown from 2:00 just because the pan moved. The PIC starts active cooling now (shallow metal pans or an ice-water bath — 13.2) and keeps probing.

At 2:12 p.m. the thickest part reads 135°F. That is when the 3-501.14 clock starts.

• Stage 1 deadline: 4:12 p.m. — food must be 70°F or below
• Final deadline: 8:12 p.m. — food must be 41°F or below (6 hours from 135°F)

Path A — Legal cool, 70°F arrives on time

At 4:00 p.m. the chili reads 68°F. Stage 1 is met inside 2 hours. The PIC keeps the same active method going and probes again. At 7:40 p.m. the chili reads 40°F. Stage 2 is met. Cover, date-mark, and cold-hold at 41°F or below.

Path B — 70°F arrives early; leftover time is usable

At 3:12 p.m. the chili already reads 70°F. Stage 1 took 1 hour, not 2. The FDA employee sheet (July 2024) is explicit: unused first-stage time may be used to reach 41°F, but the food still has to be at 41°F within 6 hours from 135°F. The final deadline stays 8:12 p.m. — 5 hours left, not a new 4-hour clock that would expire at 7:12 p.m. Do not invent a tighter second-stage deadline just because stage 1 was fast. Do not invent an 8-hour total because stage 1 was fast either.

Path C — Still above 70°F at 2 hours

At 4:12 p.m. the chili still reads 76°F. Stage 1 failed. The PIC does not “give it until 8:12 and hope.” The food is still in the rapid-growth band. Reheat all parts to 165°F and restart two-stage cooling correctly with a method that can actually move heat, or discard. Restart means a new 135°F start, a new 2-hour run to 70°F, and a new 6-hour total. It does not mean adding two extra hours onto a failed pan.

If this kitchen had treated 2:00 p.m. as the 135°F start without a probe, the paperwork would be wrong by 12 minutes. Twelve minutes is not the exam’s point. The point is that the clock is tied to 135°F, and both gates are real.

Monitor, Document, Correct

A cooling log is how the PIC proves the clocks. Check more than once if the product is dense. A single 6-hour reading of 41°F does not prove the food passed 70°F by 2 hours. You need the midpoint. If a check is late or missing and you cannot reconstruct the path, discard. Reheating a mystery leftover “to be safe” does not erase unknown time in the rapid-growth band if you already blew the 2-hour gate and kept going.

Exam Traps

• 4 hours from 135°F straight to 41°F skips the 70°F / 2-hour gate.
• 2 hours all the way to 41°F is stricter than the Code and will miss items that test the 6-hour total.
• “It hit 70°F early, so we only get 4 more hours” ignores the employee-sheet rule that unused stage-1 time may be used, still inside 6 hours from 135°F.
• “Still 78°F at 2 hours; the cooler will finish it” is a failed stage 1. Reheat to 165°F and restart, or discard.
• Time-as-a-control “four-hour rule” is a different section and a different plan.
• Clock starts when the pot leaves the stove, even at 180°F, is sloppy. Start active cooling then; start the legal clock at 135°F.
• Unlogged cooling is not a program. Probe the center and write the times down.

Chapter 12 owned the cook numbers. This section owns the leftover’s way back down. The next section is how you actually move that heat — because a legal clock with a 5-gallon stockpot in a walk-in is how kitchens fail both gates at once.