4.1 Mechanical Integrity and Pressure-Relief Valves

Mechanical integrity is the hardware side of PSM

A CIRO supervisor can write excellent operating procedures and still have a catastrophic-release pathway if a receiver relief valve is isolated, a high-level float has not been tested, or a pump is running on a spare impeller that was never checked against the original design. Mechanical integrity (MI) is OSHA's answer to that gap. 29 CFR 1910.119(j) requires a written, trained, documented program that keeps process equipment within the limits already recorded in process safety information. It is not a suggestion to "take care of the engine room." It is a six-family equipment list plus five duties: procedures, training, inspection and testing, deficiency correction, and quality assurance.

This section does not replace the IIAR 6 chapter of this guide. Current IIAR 6 remains the ammonia refrigeration inspection, testing, and maintenance (ITM) RAGAGEP. OSHA tells you that inspection and testing must follow recognized and generally accepted good engineering practices. IIAR 6 is that practice for closed-circuit ammonia. Use this section to learn what 1910.119(j) itself demands on an exam item, and use IIAR 6 when the item is about a specific ITM task or interval.

The six equipment families in 1910.119(j)(1)

Paragraphs (j)(2) through (j)(6) apply to the following process equipment:

OSHA's list says pumps, not "every rotating machine." Compressors, motors, and other rotating equipment still belong in a competent ammonia MI program because current IIAR 6 addresses them as ITM RAGAGEP. On a CIRO item, quote OSHA's six families when the question cites 1910.119(j)(1), and do not leave compressors out of the plant program just because the OSHA sentence used the word pumps.

Written procedures, training, and RAGAGEP testing

(j)(2) Written procedures. The employer must establish and implement written procedures to maintain the on-going integrity of process equipment. A binder that was copied from another plant and never edited for your thermosiphon oil coolers, dual-relief stations, or overfeed pumps is not implemented. Procedures have to match the equipment that is actually holding ammonia.

(j)(3) Training. Each employee involved in maintaining that integrity must be trained in an overview of the process and its hazards and in the procedures applicable to the employee's job tasks, so the employee can perform those tasks safely. A millwright who can unbolt a PRV but cannot explain why the three-way valve has to be fully in one detented position before the bolts come off is not trained for that task.

(j)(4) Inspection and testing. Inspections and tests must actually be performed. Inspection and testing procedures must follow RAGAGEP. Frequency must be consistent with applicable manufacturer recommendations and good engineering practices, and more frequent if prior operating experience shows that the RAGAGEP interval is not enough. A plant that had two weepage events on the same pilot-operated relief style cannot hide behind a calendar if experience already said the interval was too long.

Documentation is not optional boilerplate. 1910.119(j)(4)(iv) requires that each inspection or test identify all of the following:

• Date of the inspection or test
• Name of the person who performed it
• Serial number or other identifier of the equipment
• Description of the inspection or test performed
• Results of the inspection or test

A work-order that says "PRV PM — complete" without a serial number, a result, or a name fails the standard even if someone did the work. CIRO items like this because it is an easy fail in the field and a clean multiple-choice fact.

Deficiencies and quality assurance

(j)(5) Equipment deficiencies. Deficiencies in equipment that are outside acceptable limits — the limits in process safety information — must be corrected before further use or in a safe and timely manner when necessary means are taken to assure safe operation. That second clause is not a license to run a known bad relief valve until the Christmas shutdown. It is permission to continue only when you have actually taken means that keep the equipment inside safe limits: isolation and depressurization, reduced inventory, a temporary operating procedure tied to a documented engineering evaluation, or equivalent. A weeping dual-relief station, a high-level float that no longer trips, or a pump running with a missing coupling guard and a vibrating pedestal is not a "watch item" while ammonia remains in the circuit.

(j)(6) Quality assurance. In construction of new plants and equipment, equipment as fabricated must be suitable for the process application. Appropriate checks and inspections must assure that equipment is installed properly and consistent with design specifications and manufacturer instructions. Maintenance materials, spare parts, and equipment must be suitable for the process application. That last sentence is why a zinc-plated fastener, a copper capillary, a "close enough" gasket, or an unmarked relief valve from the free pile is an MI failure. Anhydrous ammonia attacks copper, zinc, and galvanized steel; the spare-parts cage is part of mechanical integrity.

Pressure-relief valves: dual relief, sealed setpoints, and replacement

Relief and vent systems are their own OSHA family because they are the last mechanical barrier between a vessel and an atmospheric release. Ammonia pressure vessels are arranged so a relief path remains available while a valve is removed. The usual station is two PRVs on a three-way dual shut-off (changeover) valve. The three-way has service positions that put one PRV in service and the other isolated. There is no acceptable "both isolated" position for a vessel that remains in ammonia service. When a valve is due, you swing the three-way so the in-date valve is fully online, verify the handle is detented, and only then unbolt the valve being removed.

Operators do not field-adjust sealed PRV setpoints. Set pressure is a design value from process safety information and the valve nameplate, established by the manufacturer or a qualified shop. Sealed caps, wire, and lead exist because "a little more pressure so it stops weeping" is how vessels get overpressured. If a valve relieves, you diagnose why the system reached set pressure — noncondensables, a failed high-pressure cutout, a blocked condenser, a hydrostatic lock in a liquid line — you do not turn a screw on the roof.

Replacement intervals follow the manufacturer and current IIAR 6. Many ammonia plants replace pilot-operated and soft-seat relief valves on a schedule that is commonly discussed as five years. Do not invent an IIAR 6 paragraph number for that interval on the exam. Cite manufacturer instructions plus current IIAR 6, and treat five years as the widely discussed ammonia practice for those valve styles. Conventional metal-seat valves may follow a different manufacturer interval. Hydrostatic relief valves that protect liquid-full piping between isolation valves are MI devices too; they are part of relief and vent systems, not optional accessories.

What a CIRO actually checks

Walk the receiver and recirculator packages. Confirm each three-way handle is fully in a detented position, not halfway between ports. Confirm both PRV tags show a set pressure that matches PSI. Confirm discharge piping is not capped, not full of ice and oil, and not routed to a closed valve. Confirm the last ITM record for each device has the five OSHA identifiers. If a valve is past its replacement date, the deficiency clock in (j)(5) has already started. That walk-down is mechanical integrity in operator language, and it is the level at which CIRO items are written.