The Fix That Creates a New Hazard: Decision Tree

Why this matters

The worst failures are the ones a repair caused. A fix that stops the symptom but defeats a safety function, or trades a small problem for a bigger one, leaves the customer worse off than before you arrived, and leaves you liable. Common examples: jumpering a protective device to keep a unit running, capping a relief path to stop a weep, oversizing a fuse to stop nuisance trips, or sealing a vent to quiet a draft. Each one "works" in the sense that the complaint stops. Each one is a trap. The discipline is to ask, before every fix, what protection you might be removing.

Safety first: never trade a nuisance for a hazard

Before you apply any fix, ask one question: does this remove or defeat a safety function? If the answer is yes or maybe, stop.

• If a fix would bypass, jumper, defeat, or remove a protective device (a relief valve, a limit, an overload, a fuse or breaker of the rated size, an interlock, a ground), do not do it. That device is the thing standing between normal operation and an injury.
• The conservative call: treat the actual cause, not the protection. A protective device that keeps tripping or weeping is reporting a real problem; the answer is to fix what it is protecting against, not to silence the messenger.
• If you cannot fix the root cause today, leave the system safely shut down rather than running with its protection defeated. A unit that is off is safe; a unit running without its safety is a hazard waiting on a trigger. (See related: The Temporary Safe-Shutdown Method.)

Only proceed with a fix once you have confirmed it does not strip a safeguard.

The pattern to recognize

Most hazard-creating fixes share a shape: a protective device is doing its job (which is annoying), and the tempting "fix" is to stop the device instead of stopping the cause. Train yourself to see it.

• A relief valve weeps. The cause is overpressure or lost expansion absorption. The trap is capping the relief.
• A breaker or overload trips. The cause is too much current or a fault. The trap is oversizing or jumpering it.
• A high-limit cuts out. The cause is overheating. The trap is bypassing the limit.
• A unit will not start because an interlock is open. The cause is the condition the interlock guards. The trap is defeating the interlock.

In every case the device is the symptom reporter, not the fault.

Branch 1: the fix would defeat a protective device

• If the proposed fix is "make the protective device stop acting," reject it. Go find why the device is acting.
• If the protective device itself has genuinely failed (it trips when there is no real fault), replace it with the correct rated part, not a larger or bypassed one. Confirm the underlying condition is actually normal before you blame the device.
• Restore the protection to full function as part of any repair.

Branch 2: the fix solves one problem and worsens another

Not every hazard-creating fix touches a labeled safety device. Some just shift the risk.

• If sealing, capping, or blocking something to stop a leak, a noise, or a draft would trap pressure, trap combustion products, restrict required flow, or remove ventilation, you may be creating a worse hazard than the one you fixed. Think through the side effect first.
• If a quick fix would put load, heat, or pressure somewhere not designed for it, expect a new failure, possibly a dangerous one.
• If in doubt about whether your fix shifts risk, choose the option that keeps every safety margin intact, even if it is more work.

Branch 3: pressure to "just make it run"

Customers and schedules push for the fast fix. The pressure is real; the answer does not change.

• Always keep safety functions intact, regardless of who is asking for the shortcut.
• If the only way to restore service quickly defeats a safeguard, the correct answer is no, with a plain explanation of why and what the proper fix requires.
• Document what you declined to do and why. Protecting the customer protects you.

The discipline

Every repair has to clear one bar before it is acceptable: it must not leave the system more dangerous than you found it. If a fix stops the complaint by removing a protection, it is not a fix, it is a deferred accident. Treat the cause, restore every safeguard, and when you cannot do that today, leave it safely off and say so.

References

• OSHA lockout/tagout and machine-guarding requirements
• NFPA standards on overcurrent protection, relief devices, and venting
• Manufacturer documentation on protective-device ratings and safe operation
• See related: The Temporary Safe-Shutdown Method; Two Faults, One Dangerous: Decision Tree