Certificates That Do Not Add Up, and a Friday Restart

Statutory duties

• Pressure vessels and steam receivers in Hong Kong are regulated under the Boilers and Pressure Vessels Ordinance (Cap. 56), which requires examination by an appointed competent examiner at prescribed intervals. An expired certificate means the air receiver may not lawfully continue in service; confirm the current requirements and intervals with the Labour Department rather than relying on memory.
• The Occupational Safety and Health Ordinance (Cap. 509) and the Factories and Industrial Undertakings Ordinance (Cap. 59) place a duty on the employer and on individuals to ensure safety at work. Recording an inspection as complete when it was not performed undermines the only evidence that the protective devices work.
• Signing a false record is not a paperwork issue. It may amount to false accounting or fraud, and it exposes you personally as well as the company.

Professional duties

• The HKIE Code of Conduct requires members to hold the safety and health of the public in the highest regard, to act with integrity, and not to be associated with any misleading statement or record. It also obliges members to report unethical conduct. Your obligation is to the public and the statute before it is to the commercial schedule.

First hours

• Do not sign the records. Secure the originals of the pack, photograph them, and keep them in the document control system.
• Physically verify the 12 valve tag numbers and serial numbers against the register; identify which valves are actually affected.
• Place the air receiver out of service, or reduce it to a documented safe condition, pending examination.
• Check the validity of the examiner's appointment and confirm the certificates directly with the examining body.
• Inform your line manager in writing, factually, without accusation.

Handling the instruction

• Respond in writing the same day, setting out the specific discrepancies (dates, signatures, serial mismatches, expired receiver certificate) and the legal position. Keep it factual and non-accusatory; you are reporting evidence, not alleging fraud.
• Offer options that protect the schedule where possible: bring in an independent competent examiner at short notice for the affected valves and the receiver; restart the line on the systems that are unaffected and keep the ammonia system or the receiver isolated; sequence the examination as the first task of the restart rather than after it.
• If pressed to sign, decline once in writing, then escalate to the engineering manager or asset owner. If the instruction is repeated, escalate to the regulator and to the Institution. Do not negotiate a false record.

Handling the contractor

• Ask for the raw calibration data, the technician identities and the workshop records behind the 12 certificates, and for an explanation of the serial mismatch. A legitimate contractor will produce them.
• Suspend further work by that contractor on safety-critical devices pending the answer; do not use the dispute as a reason to delay the independent re-examination.
• Do not destroy or alter anything, including the original certificates.

Document

• A dated chronology: what was found, who was told, what was instructed and what you did.
• The technical basis for each decision (which valves, which vessel, why out of service).
• The interim risk assessment for any system left in service, and the sign-off for the restart of the unaffected line.

Weaknesses

• Contractor assurance is reputational, not evidential. "Approved for 20 years" is not verification. The site has no routine check that certificates are genuine and match the equipment.
• No expiry management. An air receiver certificate five months expired means nobody owns the statutory register. A simple lookahead would have caught it.
• Single point of trust. One person receives and files the pack; there is no second-person check of serial numbers against tags.
• Commercial pressure reaching safety records. The shutdown schedule was allowed to become the deciding factor on a statutory examination.

Recommendations

• Rebuild the statutory equipment register with tag, serial, examination due date and examiner, with a 60-day lookahead and escalation to the asset owner.
• Introduce a two-person verification of every incoming examination certificate against the register and the physical tag, with a documented sample audit of the contractor's workshop records.
• Re-qualify contractors on evidence: appointment status of examiners, traceability of calibration, and audit rights. Include a right to audit and a clear integrity clause in the contract.
• Separate the shutdown sign-off authority from the production schedule owner, and write into the permit and restart procedure that no safety-critical device is returned to service on unverified documentation.
• Refresh the whistleblowing and speak-up channel and confirm staff know they can escalate outside the line, and that the company will support them.
• Run a lessons-learned session with the maintenance team and record the case in the site's integrity management review, with the actions tracked to closure.