The Sentence That Changed Between Revisions

The core conflict is that I am being asked to certify as accurate a document I know to be materially inaccurate. That is not a confidentiality question; it is a truthfulness question.

• Obligation of accuracy and non-misrepresentation. Every safety professional code of conduct (BCSP and equivalents) requires holding the safety of people paramount and not misrepresenting facts or professional judgment. Signing as technical reviewer is an affirmative act: my signature says the analysis and factual basis are sound.
• The difference between privilege and alteration. Legal privilege protects the confidentiality of certain communications; it does not authorize changing a factual finding. Rewriting 'the supervisor instructed the bypass' into 'the operator defeated the interlock' moves fault from a management act to a worker act and changes what the corrective actions will target. That is a substantive, not editorial, change.
• Legal exposure. A false or incomplete submission to a federal agency can be a false statement offense, and the injury and illness records (which include this event) are separately required to be accurate. The company is in a worse position defending a document that contradicts its own interview transcript and key log than defending an honest one.

What I do: preserve the 12 March draft, the interview transcript, and the key log in unaltered form; write a signed memo to file stating that the 20 March version misstates the evidence and that I did not approve it; decline to sign; and put the refusal in writing to the plant manager, with the general counsel copied. I do not simply refuse and walk away - I offer the alternative that likely satisfies counsel: keep the privileged litigation analysis separate from a factual incident report, and let the factual report stand on the evidence.

The legitimate interest here is confidentiality of counsel's analysis and of the company's self-critical evaluation, not concealment of physical facts. Those can be separated.

1. Propose a two-document structure. Document A is the factual record: timeline, equipment condition, interviews verbatim, evidence (the key log). Document B, prepared at counsel's direction and marked as such, is the causation and legal-exposure analysis. The factual record does not become inaccurate because the analysis is privileged.
2. Ask counsel for the specific concern in writing. If the concern is that the supervisor's conduct language is speculative, the fix is to state what the evidence supports - 'the supervisor issued the bypass key on four documented dates' - not to invert it. If the concern is discoverability, that is a question of what goes into which document, not of what the evidence says.
3. Do not become the author of the compromise. I can review a revised document and say 'this is accurate' or 'this is not.' I cannot sign a document I believe misstates the evidence, and I should say plainly that my signature is worth nothing to the company if it is known to be defensive rather than technical.
4. Escalate. The general counsel and the chief executive are the right level, not the plant manager. I document the escalation date, what I raised, and what I was told.
5. Know the limit. If I am overruled and the inaccurate document is submitted anyway, my duties are to have my dissent documented, to decline any role in the submission, and to consider whether my continued employment in a role that requires my signature has become untenable. Public disclosure is a separate question governed by law and by the presence of an imminent hazard - which in this case I can address directly, on the floor, without waiting for the report dispute to resolve.

The equipment side of this is not discretionary and should not wait for the document to be finalized.

• Find every bypass key on site. Physically inventory them, take them out of circulation, and put them under lockout control with named issuance and a log. If a bypass is a legitimate engineered function on some equipment, it must be a designed, interlocked, permissioned function, not a loose key.
• Verify the second press. The 2 March log entry suggests the practice is not confined to one machine. Walk every press with a muted or defeatable interlock and treat each as an unguarded hazard until proven otherwise.
• Check the reporting clock. A fingertip amputation is generally reportable to OSHA within 24 hours of the employer learning of it, and recordable on the injury log within seven days. Confirm what was filed and when. If the 24-hour report was missed, file immediately and document the reason rather than letting the omission compound.
• Interim guarding. If a coil change genuinely requires the curtain to be muted, the muting must be designed for that specific sequence (correct sensor arrangement, timing, and validation) - not improvised.

If I am overruled on the report: I document my written objection to the general counsel and chief executive, I keep my original notes and drafts, and I state in writing that I will not sign. I continue to press for the engineering fixes regardless, because those are the actual injury-prevention actions. What I will not do is attach my name and professional standing to a finding I believe is false, or let the dispute over the paperwork become the reason the bypass keys stay in circulation.