Failed Low-Water Cutoff Before a Monday Production Run
You are the operations superintendent at a food plant with three 150 psig boilers. On Friday at 14:00, the weekly test of the float-type low-water fuel cutoff on No. 3 boiler fails: the burner does not trip when the float chamber is drained. A second, probe-type low-water cutoff passes its test. The replacement float chamber is three days away, and Monday’s production run needs No. 3 on line. An operator suggests jumping the float switch and watching the sight glass until the part arrives. Two of your five operators are out sick, overtime is at 25%, and the jurisdictional inspector is scheduled in 10 days. The boiler is 45,000 lb/h, automatically fired, and the plant has no spare boiler capacity. The boiler code of construction and local rules govern whether one cutoff may be used temporarily.
1. How do you respond to the operator’s suggestion to jump the float switch?
Read the worked answer
The jumper is not acceptable as an operator-level workaround. Defeating a low-water fuel cutoff removes the protective function that prevents a fuel-rich furnace explosion or overheating during a low-water condition. It also creates a reportable safety violation and sets a precedent that production pressure can override safety devices. A sight glass is not a substitute: it requires a person to be watching at the moment of the event and does not automatically trip the burner.
The fact that a second cutoff exists changes the decision process but does not make the jumper acceptable. The question becomes whether the code and the authority having jurisdiction permit operation on the probe-type cutoff alone, under documented conditions, while the float chamber is repaired. That is a management and regulatory decision, not a field improvisation. Call the AHJ immediately, get written guidance, and evaluate alternatives such as renting a temporary boiler, curtailing load, or repairing the float chamber in kind if the failure is a plugged chamber or closed isolation valve rather than a failed float.
2. If temporary operation on one cutoff is permitted, what controls and monitoring would you require?
Read the worked answer
Require written AHJ approval and a documented management-of-change review before startup. Confirm that the probe-type cutoff is independent, tested, and has a manual reset. Test it at the start of each shift, not just daily, and record the test. Post a conspicuous notice at the boiler control panel identifying the impaired device and the temporary operating basis. Restrict firing rate or steam demand to reduce risk. Require frequent operator rounds with sight-glass verification and log entries, and define an immediate trip-and-shutdown criterion for low water, high temperature, or unstable level.
Brief all operators on the temporary condition and prohibit any further bypass. Ensure the probe is not the same logic channel as the float switch and that its wiring and alarm are functional. If any of these controls cannot be met, do not run the boiler.
3. What follow-up, documentation, and organizational actions should result from this event?
Read the worked answer
Open a near-miss or safety-event report describing the failed test, the proposed jumper, the decision, and the AHJ correspondence. Begin a root-cause investigation into why the float chamber failed: water quality, sediment, lack of blowdown, isolation valves left closed, or missed preventive maintenance. Review the testing procedure and the last several weekly test records for signs of degradation. Add the float chamber to the preventive maintenance program with a defined inspection and overhaul interval.
Communicate to production that the schedule depends on the safety case, not the reverse. Address the staffing and overtime issue separately: two operators out sick and 25% overtime increase the risk of shortcuts, so review shift coverage for the weekend and the inspector’s visit. Verify that all three boilers’ safety devices are current before the inspection, and document corrective actions with owners and due dates.