Sanitation, CIP and bowl entry — lockout under production pressure.
Food plants isolate more often than almost any other industry, because sanitation is daily and it means opening equipment. A rotary filler gets entered for a changeover, a jam, and a wash-down — sometimes all in one shift — and each entry is a lockout.
The energy sources are the usual electrical and pneumatic plus the ones that hurt people in food: CO₂ and nitrogen purge lines, hot CIP chemical loops, and product under pressure. The bowl is a confined space by most programmes' definition, which brings 1910.146 alongside 1910.147.
Pressure to restart is the constant. A procedure that is slow to execute gets skipped; one that is fast and specific gets followed.
Electrical is locked, pneumatics are bled, and the CO₂ supply to the bowl is still live because it was not on the procedure.
The sanitation team enters equipment under a lockout written for maintenance, with a different energy path and no confined-space provisions.
The restart sequence has no positive check that every entrant is out. A lock count is not a head count.
Real isolation-point structure, illustrative tags, equipment that does not exist. Free to read and download. An example to learn from — not a document to adopt.
Capper head rebuild plus filler bowl internal inspection. Includes DP-1 depalletizer isolation and CO2 purge.
- 13 isolation points
- 1 must stay energised
The worked example carries the CO₂ supply and the CIP return as isolation points with their own verification, so the ones that hurt are on the list.
A confined-space permit can be required by the procedure; the first isolation step is refused until it is issued, and the work order cannot close while it is open.
A phone scan at the tag confirms the operator is at the right device before the attestation is recorded.
Plans are per site, per year, unlimited users — see pricing.