Steam boiler with lapsed certificate and defeated safety controls
A palm-oil mill operates a 10 t/h, 8 bar(g) saturated-steam package boiler. The DOSH certificate of fitness expired three weeks ago. The mill manager says the last external inspection found no defects and asks you to authorise operation until the next planned shutdown in six weeks. During your walkdown you find the gauge-glass blowdown valve passing steam, the low-water cutoff bypassed with a wire, feedwater hardness 15 mg/L as CaCO3 with the softener regenerating manually, and a safety valve nameplate stamped 8.6 bar(g) with no recent pop test. The boiler supplies steam for fruit sterilisation; a stop now risks spoilage of about 120 t of fresh fruit bunches and contract penalties. The mill has a standby diesel generator but no standby boiler. You are the mechanical engineer advising the mill's management.
1. State your professional and statutory position on continued operation, and list the immediate actions you would require before any further steam generation.
Read the worked answer
Position I cannot authorise continued operation. A lapsed certificate of fitness means the boiler is not legally cleared to operate, and the low-water cutoff bypassed with wire is an immediate threat to life and plant. Economic loss from fruit spoilage does not justify overriding a statutory safety control. Under the Board of Engineers Malaysia code of professional conduct, my duty to public safety and to the profession takes precedence over the client’s commercial preference.
Immediate actions
- Advise management in writing that the boiler must be taken out of service until the certificate is restored and safety devices are proven.
- Remove the wire and restore the low-water cutoff; test it by actual lowering of water level and confirm the fuel trip.
- Repair or replace the passing gauge-glass blowdown valve and check the second independent water-level indication.
- Arrange feedwater testing and softener regeneration; do not fire until hardness is within the treatment programme limit.
- Have the safety valve inspected, set-pressure verified against the boiler maximum allowable working pressure, and pop-tested by a competent person.
- Notify DOSH and request inspection; obtain a valid certificate before restart.
If management refuses, escalate internally and document the refusal. Do not sign any operating authorisation.
2. Build a risk-based comparison of immediate shutdown, limited operation under a temporary permit, and continued operation. What conditions would have to be true for limited operation to be defensible?
Read the worked answer
Option 1 – Immediate shutdown
- Safety risk: low, because the hazardous condition is removed.
- Production risk: high, with spoilage and contractual penalties.
- Defensibility: strongest from a safety and statutory standpoint. It is the default until the boiler is inspected.
Option 2 – Limited operation under a temporary permit
- Only defensible if the competent authority grants a written temporary operating approval, the low-water cutoff is restored and proven, the safety valve is tested and set at or below the boiler MAWP, feedwater chemistry is controlled, and a competent operator is present continuously.
- It also requires a firm inspection date, a documented risk assessment, and a contingency plan for feedwater or flame failure.
- Without the authority’s written approval, this option is simply illegal operation and cannot be recommended.
Option 3 – Continued operation as requested
- Safety risk: high severity, because a low-water trip failure can lead to overheating and rupture; a lapsed inspection adds unknown risk.
- Defensibility: none. The manager’s statement that the last inspection found no defects does not cover the intervening bypass and water-treatment failures.
Decision Recommend Option 1, with parallel action to obtain inspection and repair. Option 2 is a contingency only if the statutory authority permits it in writing and every safety device is restored.
3. Explain the likely technical root causes of the feedwater and safety-valve findings, and specify the remediation and records you would require.
Read the worked answer
Feedwater hardness Hardness of 15 mg/L as CaCO3 with manual softener regeneration indicates the softener is exhausted or being regenerated too late. Hardness scales the boiler, reduces heat transfer, and can cause foaming and carryover. Carryover can also explain why the low-water cutoff may have tripped nuisance trips, prompting the bypass.
Safety valve The nameplate is stamped 8.6 bar(g), but the boiler MAWP must be verified. The valve set pressure must not exceed the MAWP of the boiler or any downstream component. No recent pop test means the valve may be stuck or leaking. A passing gauge glass blowdown valve is both a steam-loss and a false-level indication risk.
Remediation
- Restore automatic softener regeneration and daily hardness testing; add alkalinity, conductivity, and dissolved-oxygen checks as appropriate.
- Inspect the boiler waterside at the next opportunity for scale and carryover evidence; plan chemical cleaning if scale is significant.
- Replace or overhaul the gauge-glass blowdown valve and verify water-level indications.
- Certify the safety valve set pressure and test it; fit a sealed adjustment if required.
Records Maintain a boiler log with daily water level, blowdown, hardness, and conductivity; a safety-device test register; the inspection certificate; and a management-of-change record for any bypass removal. All records should be available to the DOSH inspector.