Ten Weeks Without a Lockout
A batch-mixing line runs about 12 cleanouts per shift. Operators must reach into the mixer to scrape product from the paddles. The gate interlock is routinely bypassed with a jumper because the mixer must be jogged to expose all paddle surfaces, and a full lockout adds roughly 25 minutes per cleanout. The plant has a written lockout procedure and permits, but no lockout has been performed on this line in at least a year. Maintenance uses the same jumper. A contractor crew cleans the pit below the mixer twice a month and has never been shown the plant lockout procedure. Engineering has designed a paddle-positioning brake and a hinged gate with a trapped-key interlock, but fabrication and installation will take about 10 weeks. Production is at capacity and the plant manager says stopping the line is not an option.
1. Characterize the risk and identify what is non-negotiable, regardless of the matrix score or production pressure.
Read the worked answer
The hazard Unexpected startup plus point-of-operation exposure to rotating paddles: caught-in and amputation potential, with fatal potential if a person is drawn in. Exposure is high by design: 12 cleanouts per shift, roughly 3,000 per year on the line, performed by both operators and maintenance, with a normalized and shared bypass. Near-miss history should be assumed to be under-reported.
Non-negotiables
- Energy isolation and verification before any body part enters the hazard zone; the alternative is relying on a jumper, which is a defeated safeguard, not a control.
- The narrow minor-servicing exception for routine, repetitive, integral tasks does not cover bypassing an interlock so a person can reach into the point of operation while jogging. It requires alternative measures that provide effective protection; a jumper is the opposite.
- Machine guarding requirements apply, and contractors must be informed of and follow the lockout procedure under the energy-control standard.
The manager's constraint Capacity pressure is a scheduling problem; it is not a defense for a known amputation exposure. The task should stop until effective controls are in place, and that decision belongs above the person accountable for output.
2. Engineering installation is 10 weeks out. What interim control set would you accept, and on what conditions?
Read the worked answer
Try to collapse the 10 weeks first Ask whether the paddle-positioning brake or a keyed rotation device can be procured or rented sooner, or whether cleanout frequency can be reduced by product sequencing and longer runs. Reduce exposure before managing it.
Acceptable interim set (layered, in this order)
- Full energy isolation for every cleanout, including stored-energy verification and a physical block, with individual locks. Accept the 25 minutes and schedule it; 12 cleanouts per shift is a planning failure, not a reason to skip.
- Prohibit jogging while any person is inside the hazard zone; use long-handled scrapers so nobody reaches in.
- Restrict the task to a small list of authorized, trained employees; one person in at a time with a second person verifying isolation.
- Physical key control so the bypass jumper cannot be installed, plus a per-cleanout supervisor verification.
- Contractor cleanouts under a permit with host verification.
Conditions The interim state is documented as a time-bound risk acceptance at plant manager or corporate level with a review date, daily verification, and a stop-work trigger. Administrative controls are not equivalent to the engineered fix, and the plan must say so.
3. What contractor-control failures are present, and what must be in place before the next pit cleaning?
Read the worked answer
Failures The contractor has never been shown the plant's lockout procedure, has not been informed of the interlock bypass or stored-energy hazards, and cleans a pit beneath equipment that can be energized. The host has effectively transferred a hazard it has not communicated.
Before the next cleaning
- Pre-qualification and a documented site-specific orientation covering energy control, the bypass history, and pit hazards.
- A joint walkdown with the contractor's supervisor, with the contractor applying its own locks under its own procedure; group lockout or a lockbox where energy sources are shared.
- A permit identifying isolation points, verification method, and who holds keys.
- Host verification that isolation is in place before work begins, plus defined stop-work authority.
- Post-job review and a record of who was trained.
Why Contractors fail on host-controlled hazards far more often than on their own trade skill. The duty to inform and coordinate sits with the host employer and does not move with the contract language.