Hospital theatre pressurisation at handover - certifying under commercial pressure

The issues, separated because they have different owners and different remedies:

1. A safety-critical system does not meet its design intent. Theatre 7 is at +2 to +4 Pa instead of +15 Pa, and 0 Pa with the doors open. That is not a sensor nuisance - it means the pressurisation regime that protects the sterile field is not established. Signing a completion certificate asserts that the works are complete and compliant; the trend data says they are not.
2. A commissioning record appears to be false. A test record signed after the event is not a record of the test. That is an integrity issue that must be raised, not corrected quietly.
3. Commercial pressure on a technical judgement. A withheld fee and a booked surgical list are not engineering evidence and must not enter the decision.
4. A restrictive specification. Naming one controller model and its vendor tool may have excluded compliant tenderers from a publicly or privately tendered package - a procurement fairness and competence issue for your own firm, not the contractor.

Relevant HKIE code principles: honesty and integrity in professional life; competence - act only within your competence and keep your knowledge current; public safety and health as the paramount consideration, ahead of duty to the client or employer; duty to act lawfully and to avoid misleading any party; and full and frank disclosure of conflicts of interest.

What you cannot sign: any certificate stating that the theatre pressurisation system is complete and complies with the design. You cannot sign it on the basis of a promised fix, and you cannot sign it because the contractor's sheet says pass.

What you can sign and issue: a factual inspection and test report that records the measured values, identifies the non-conformity in theatre 7, states the probable causes, and recommends that theatre 7 not be used for invasive procedures until the deficiency is rectified and revalidated. That gives the client something to act on without misrepresenting the facts.

Day 1:

1. Freeze the evidence: export the 7-day trends, photograph the commissioning sheets, record the panel data, and note who said what and when. Preserve the originals.
2. Issue a written non-conformance report to the contractor and copy the client: theatre 7 measured at +2 to +4 Pa against a design of +15 Pa; the commissioning sheet is not supported by measured data; the system is not accepted.
3. Put your refusal to certify in writing to your director, with the technical basis, and request a written instruction if one is intended. Refusing verbally is how engineers end up being described as having agreed.

Day 2:

1. Propose the remediation and revalidation plan: recalibrate or replace the sensor using a proper differential reference, right-size or replace the supply air valve, then re-test each theatre with a documented protocol including doors closed, doors open, and a defined recovery time. Witness and sign the re-test yourself.
2. Propose interim risk controls for the clinical team: theatre 7 excluded from the schedule, or used only with an independent local pressure monitor and an audible alarm at the nurse station, and a written clinical risk acceptance by the hospital's infection control lead.
3. Escalate internally to the firm's quality or technical director, and if necessary the managing director, in writing. The instruction to certify is being given to you; the accountability for it must also be theirs, in writing.

Day 3:

1. Meet the client with the facts and a realistic programme. Clients accept bad news with a plan far better than a surprise. Point out that a certificate issued now, followed by an infection control incident or a regulatory finding, exposes the client more than a three-week delay does.
2. Keep a contemporaneous record of every instruction and response.

On the fee pressure: it is not a factor you are entitled to weigh. If the firm is instructed to certify anyway, record your dissent in writing, keep a personal copy, decline to be the signatory, and consider whether the matter is serious enough to report to the institution. The professional obligation is to the safety of the patients, ahead of the employer's commercial interest.

The backdated site record. Do not quietly re-test, re-date or discard it. Report it in writing to the client and to your own firm's quality function, identify it in the commissioning file, and require the contractor to explain it and to re-perform the corridor pressurisation test under witnessing. Whether it was laziness or concealment, the file cannot be relied upon, so the response must be to re-establish the evidential basis for every test in that package - not just the one that was spotted. Silently correcting it would make you a party to the misrepresentation and would leave the rest of the records tainted with no way to know how far it spread.

The proprietary specification. A design intent should be written as a performance specification - required turndown, sensor accuracy, alarm annunciation, BACnet interoperability and point list, response time, and a requirement for the contractor to demonstrate interoperability with an independent tool. Naming one controller and its vendor tool restricts competition, may breach the client's procurement rules or the funding body's requirements, and locks the client into one supplier for spares and future works. Disclose it to the client, issue an addendum or a technical clarification, and review how that clause came to be in your firm's document - if it originated from a vendor's standard text, that is a competence and independence issue in your own office, not just a drafting error.

Consequences if neither is addressed:

• For the firm: loss of the client, exposure to a claim if a clinical incident occurs, potential disciplinary referral of individuals to the institution, and damage to the firm's standing in a sector built on trust.
• For you personally: signing a certificate you know to be untrue exposes you individually, and 'my director told me to' is not a defence in a disciplinary process.
• For the contractor: contractual consequences and, potentially, a criminal exposure for a false record.

The professional answer is the same in all three parts of this case: state the facts in writing, refuse to certify what is not true, and give the client a route to a compliant building rather than a certificate that paper over the gap.