Flame Scanner Failure During Low-Load Operation
A gas-fired packaged boiler with a single burner and a flame scanner is running at 25% load to hold plant steam during a production lull. The burner management system annunciates a flame scanner fault - the scanner is reading no flame intermittently, roughly once every 90 seconds, while the burner is visibly lit and steam pressure is stable. The BMS is configured for a 3-second flame failure response time. The operator has already tried cleaning the scanner lens once. The plant needs steam for another six hours before the process restarts. The supervisor must decide whether to run, hold at minimum load, or shut down, and what interlocks must not be bypassed.
1. Evaluate the risk of continuing to run with an intermittent flame scanner fault and explain why bypassing the flame safeguard is not an option.
Read the worked answer
An intermittent no-flame signal on a lit burner is a loss-of-flame-protection problem, not a nuisance alarm. The BMS is designed so that if the scanner cannot prove flame, fuel must be cut off within the response time - here 3 seconds. If the scanner is faulty and reading no flame while the burner is lit, the BMS may trip the burner at any moment, which is safe but disruptive. The dangerous scenario is the inverse: a scanner that reads flame when there is none, allowing fuel to accumulate in the furnace. A flaky scanner could fail in either direction.
Bypassing or jumpering the flame safeguard removes the only automatic protection against fuel accumulation and furnace explosion. It is prohibited by the BMS logic and by code, and it is exactly the shortcut that causes furnace explosions. The supervisor must not authorize it under production pressure.
The correct posture is to treat the boiler as having degraded flame protection and either restore proven flame detection or shut down.
2. Recommend a course of action for the six-hour window, including what would justify continuing versus shutting down.
Read the worked answer
First, attempt a proper diagnosis rather than a second lens wipe: verify the scanner sighting tube is clear and aligned, check the scanner cooling air, confirm the scanner amplifier and cable connections, and swap in a known-good scanner or spare channel if available. Test the scanner response against a reference flame or the manufacturer's test procedure. If a spare scanner restores reliable flame signal, continue at minimum load with the new scanner and monitor.
If reliable flame detection cannot be restored, shut down in an orderly manner rather than run with intermittent protection. The six-hour production need does not justify operating a burner whose flame safeguard may fail either way. A controlled shutdown now is cheaper than an unplanned trip or a furnace explosion.
If the decision is made to continue briefly because the fault is proven to be a monitoring artifact and a redundant scanner proves flame, that must be documented, the BMS must remain fully in service, and the boiler held at minimum load with continuous attendance. No interlock is bypassed. If steam can be held another way, do that.