Elevator Phase I Recall and Shunt-Trip Failure at the Annual Witness Test
A 1972 eight-story, 240,000 sq ft commercial building has six geared traction elevators modernized in 2016, a common machine room above the eighth floor with a dedicated quick-response sprinkler head, and a shunt-trip breaker located in the main electrical room. During the annual witness test with the Fire Department, the lobby smoke detector placed Car 2 into Phase I recall, but Car 4 continued to answer hall calls for a full minute before recalling on its own. The machine-room heat detector did not trip the shunt trip at all. Investigation shows the shunt-trip control circuit is fed from a breaker that an electrical contractor opened and tagged during last winter's switchgear replacement; the tag was removed and the breaker left open. The elevator maintenance provider's last twelve monthly reports are all marked "no deficiencies." Floors 3 through 8 include a day-care center licensed for 60 children.
1. What is your immediate position on the operating status of these cars, and what must be completed before the building returns to normal operation? Justify the call in terms of risk, not paperwork.
Read the worked answer
Take the affected cars out of service or on manual/attendant control until recall and shunt trip are restored and re-witnessed. The reasoning is physical, not procedural:
- Phase I recall exists so that a fire on an upper floor does not deliver occupants into a smoke-filled lobby and does not let a car stop at the fire floor. A car that keeps answering hall calls for a minute after the lobby detector trips will, in a real event, open its doors at the lobby or at the fire floor with passengers aboard.
- The shunt trip exists because a sprinkler discharge into a live elevator controller is both an electrocution and a fire-spread event. With the control circuit de-energized, that protection does not exist. Water on an energized controller is a credible fatality scenario.
The day-care occupancy on floors 3–8 raises the consequence of any failure - 60 children who cannot self-evacuate eight floors down a stairwell without staff assistance.
Sequence before normal service:
- Close and lock the shunt-trip supply breaker; verify the trip circuit operates on test without actually dropping the main.
- Restore and functionally test Phase I recall from the lobby detector on all six cars, plus Phase II key operation, from both the lobby and an alternate level.
- Re-witness with the Fire Department and retain the sign-off.
- Notify the property's insurer and the elevator maintenance provider in writing the same day.
Document everything with timestamps and photographs.
2. How do you test Phase I recall, Phase II operation, and the shunt trip so that you know they work - not merely that they worked once? Describe what a passing test looks like for each.
Read the worked answer
The point of the test is to prove the whole chain, not the endpoint. Three separate chains are in play.
Phase I (recall), per car:
- Activate the lobby smoke detector. Each car must illuminate the recall indicator, cease answering hall calls, close doors, and travel nonstop to the designated level - without stopping at the fire floor.
- Confirm the car parks with doors open and remains there.
- Now the negative test: activate an upper-floor lobby detector and confirm the alternate recall level is used, if the design provides one.
- Repeat with a car at the top floor and a car mid-travel. A car that recalls only from the ground floor has not been tested.
Phase II (in-car operation):
- With the Phase I condition held, insert the key, confirm the car goes to in-car control, doors operate only by the door-close button, and the car will not stop at the designated level or the fire floor. Confirm the key returns the car to automatic.
Shunt trip:
- Verify circuit continuity with a meter, then test the trip function in a way that does not drop building power - typically by lifting the trip coil wire and confirming the breaker mechanism operates. Confirm breaker close is blocked while the trip circuit is in the tripped condition and that the heat detector's address in the fire alarm panel matches the device actually protecting the elevator room.
- Also verify the smoke detector, not just the heat detector, initiates shunt trip if that is the design.
Record pass/fail per car per function on a matrix signed by the technician and witnessed by building staff.
3. What do you do about the maintenance provider whose twelve monthly reports show no deficiencies, and about the electrical contractor whose tag was removed? Address both commercial and supervisory actions.
Read the worked answer
Elevator maintenance provider. A monthly report that shows no deficiencies for twelve months while a safety function was dead is either a false record or evidence that no functional test was performed. Either way it is a contract performance failure.
- Issue a written notice of deficiency citing the specific finding, the date of the witnessed failure, and the last report that claimed no deficiencies. Preserve it in the contract file.
- Request the technician's test logs for the last twelve visits, not the summary sheets. If the logs do not show Phase I testing, that is your proof.
- Invoke the contract's performance provisions: re-test at their cost, and evaluate whether the contractor is in material breach. Put them on notice that renewal is at risk.
- Check whether the contract actually requires documented annual fire-emergency testing or just "monthly maintenance" - many do not, and that is the real gap to fix at renewal.
Electrical contractor. The tag was removed and the breaker left open at the end of a switchgear job. That is a lockout/tagout and closeout failure on a life-safety circuit.
- Retrieve the contractor's switching orders and the lockout log; the open/close status of every circuit they touched should be documented.
- Require a written corrective action and a re-verification that no other circuit was left in a test or open condition.
- Add a closeout requirement to future scopes: all life-safety and fire-alarm-related circuits must be functionally verified and initialed before substantial completion, and any tag removal requires building sign-off.
Systemic fix: put every fire-related elevator function on a quarterly in-house test, independent of the vendor's annual cycle.