GC-7 Silane Gas Cabinet — Cylinder Change Isolation
Pyrophoric gas cylinder change in a bulk specialty gas cabinet. Covers process line purge, excess flow and pigtail isolation, and the detection and exhaust systems that must stay live throughout.
How Setyr addresses Semiconductor →
It refers to equipment that does not exist and illustrates the elements 29 CFR 1910.147(c)(4)(ii) requires a procedure to contain. It is not a document to adopt. Under (c)(4)(i) the employer must develop and document energy control procedures specific to their own machines, and under (c)(6) must inspect them at least annually.
11 points, in sequence
Silane cylinder valve on the in-service cylinder.
Method: Close the cylinder valve and confirm closed by observing downstream pressure decay on the high-pressure gauge.
Caution: Silane ignites on contact with air. A valve that appears closed but seats poorly will feed the pigtail during disconnection.
Cylinder pigtail connection between the cylinder valve and the panel inlet.
Method: Purge the pigtail through the full cycle-purge count before breaking the connection. Confirm the purge cycle counter completed.
Caution: This is the connection that kills. A pigtail with residual silane flashes on disconnection. Cycle purge is not optional and cannot be shortened.
Process gas isolation valve to the tool subfab header.
Method: Close and lock. Confirm the downstream tools show no supply pressure.
Caution: Tools upstream of the cabinet may still call for gas. Isolating at the cabinet does not tell the tool it has been isolated.
Gas cabinet control panel supply, feeding valve actuators and the purge sequencer.
Method: Open and lock only AFTER the purge cycle has completed and the manifold is confirmed clear.
Caution: Dropping panel power mid-purge strands the manifold part-purged with pneumatic valves failing to their spring position.
Instrument air to the pneumatic manifold valve actuators.
Method: Close and lock the supply, then bleed the actuator header.
Caution: Valves fail closed on loss of air, which is the safe state — but confirm each valve position rather than assuming it reached it.
Excess flow valve on the cabinet inlet.
Method: Confirm the excess flow device is in service. It is not a lockable isolation device and must not be treated as one.
Caution: An excess flow valve limits a release. It does not isolate, and it cannot be locked.
Nitrogen purge supply to the cabinet manifold.
Method: Do NOT isolate. Confirm nitrogen supply pressure is at setpoint before the cylinder change begins.
Caution: The purge gas is the control that makes this job survivable. Losing nitrogen mid-change leaves silane in the line with no way to clear it.
Cabinet vent line to the pyrophoric scrubber.
Method: Do NOT isolate. Confirm the vent path to the scrubber is open and the scrubber is in service.
Caution: Purged silane goes somewhere. If the vent is isolated it goes into the cabinet.
Gas cabinet exhaust ventilation, interlocked to the cabinet door.
Method: Do NOT isolate. Confirm exhaust flow is above the low-flow alarm setpoint at the cabinet gauge.
Caution: Opening the cabinet without exhaust removes the containment that makes the enclosure a cabinet rather than a room.
Toxic gas monitoring point inside the cabinet and at the cabinet face.
Method: Do NOT isolate. Confirm both heads are in service and not in maintenance-inhibit.
Caution: Detection heads left in inhibit after a previous calibration is the recurring failure. Confirm the inhibit is cleared, not just that the panel is powered.
Cabinet fire suppression supply.
Method: Do NOT isolate. Confirm the suppression head is unobstructed and the supply valve is open and sealed.
Caution: A pyrophoric cabinet with suppression isolated is an enclosure full of gas with no response.
What your site must supply
This example is structurally complete and factually generic. The things below are the things only you can know — and they are exactly what makes a procedure yours.
- Your own asset and isolation-point tag numbers. The tags shown are illustrative and refer to equipment that does not exist.
- The actual location of every disconnect, valve and vent on your equipment.
- Measured stored-energy magnitudes and the dwell time required to dissipate them.
- Your verification method for each point, and who is authorised to perform it.
- Any additional energy sources present on your equipment and absent here.
Author this properly, once
Setyr holds procedures like this as living documents — bound to real isolation points, with lock registries, group lockout, person-in-charge custody and periodic review built in.