Machine Guarding and Lockout During a Maintenance Window
A packaging line has a conveyor with an unguarded nip point at a transfer where product sometimes jams. Operators clear jams by reaching in while the conveyor runs slowly, using a long-handled tool. A planned 6-hour maintenance window is scheduled to install a guard and a lockout point. The maintenance supervisor says the line must keep running until the window because of a customer commitment, and asks operators to keep clearing jams by hand. During the window, a contractor will work on the conveyor drive while plant electricians work on an adjacent panel. There is one lockout hasp and no written energy-control procedure for the conveyor.
1. Identify the control failures in the interim period and the minimum actions required before the line continues running.
Read the worked answer
The interim practice is a serious hazard.
The hazard. Reaching toward an energized nip point, even with a long tool, exposes the operator to entanglement and amputation. 'Running slowly' does not reduce the consequence; it may increase the chance of a caught glove or sleeve being drawn in.
Minimum actions. Stop hand-clearing of jams while the line runs. Options include stopping and locking out the conveyor for each jam, installing a temporary barrier or interlocked gate at the transfer, or reducing jam frequency through adjustment. If the customer commitment truly requires running, the line can run with a rule that any jam requires a full stop and energy isolation, accepting the downtime. That is a management decision, not an operator one.
Root causes. The jam is a design problem; the unguarded nip is a design problem; the absence of a lockout point is a design problem. All three should be corrected, not worked around.
Escalation. The safety professional should document the exposure, state the stop-work basis, and put the decision to continue in writing to the operations leader. Production pressure does not transfer the risk decision to the operator.
2. During the maintenance window, the contractor and plant electricians are on adjacent equipment with one lockout hasp. What coordination is required, and what could go wrong?
Read the worked answer
Shared or adjacent energy sources are a classic lockout failure mode.
What could go wrong. If the conveyor drive and the adjacent panel share a feed, or if one group restores energy to test, the other group can be exposed. A single hasp means one lock per person may not be possible, forcing group lockout, which requires a documented procedure and a designated authorized employee to control the lock and verify isolation.
Required coordination. Hold a joint pre-job briefing covering who is exposed to what, which disconnects isolate which equipment, and the sequence for lockout, tag, try, and verification. Use a group lockout procedure with a lockbox or hasp that ensures no energy can be restored until every worker has removed a personal lock. Define who verifies isolation and who authorizes re-energization. Establish communication between the two crews for any test or restart.
Procedure gap. The absence of a written energy-control procedure for the conveyor is itself a violation. One should be written and used during the window, not after.
Verification. Try the start after lockout; confirm zero energy at the point of work. Do not rely on a tag alone.