botminds.aiRequest a demo
WorkflowShutdown, Turnaround & Outage

Restart Readiness Review

Restart readiness review for plants coming back from a long outage or a fire: what must be proven, unit by unit, in the order the plant comes back.

See the demoBook a demo
Follow day 214, from the graph to the release ↓
The problem

Idle for months, and the clocks kept running while it sat

After a fire, inspection maps the heat zones and integrity reviews each item for fitness for service. Maintenance repairs in its own system, and temporary clamps and bypasses go through the change register. Operations keeps preservation logs on paper or in the document system while crews move to the rebuild.

Meanwhile relief valve tests lapse, instruments stick, crews move, logs stop and temporary repairs outlive their limits. Somebody exports each calendar to a spreadsheet and sorts for what lapsed, usually late and split by discipline. A missing log gets read as a good one. A checklist cannot show which unit waits on which, so the whole site waits for the slowest, and why leaders held or released sits in the minutes.

Built forRestart review leadsPlant managersProcess safety engineersIntegrity engineersInternal auditors

The Problem Today

A plant idle for months can look fine while its tests, repairs and crews have quietly run out of date.

6 mo
nearly, one gas plant stayed shut after a fire (one plant) our estimate
3 yrs
the longest an operator may go without refresher training published

Checked by hand today

  • Test dates
  • Idle logs
  • Clamps
  • Crews
  • One review, many unitsA checklist cannot hold the order units come back
  • Who agreed, and why?Hold and release reasons end up in meeting notes

The Solution

  1. Walk each calendarTests, repairs and training dates read across the whole shutdown
  2. Read the idle monthsPreservation logs lined up with pressure history, day by day
  3. Catch temporary repairsEach clamp, bypass and hose checked against its limit and review
  4. Light units in orderNothing lights before what it depends on; people sign each step

Built-in controls

  • Agents can never light a unit
  • Only its test closes a lapsed clock
  • The signer opens a sample before signing in bulk

What You Get

Leaders can release what people have signed, hold the rest, and show who agreed.

344
hours by hand, assuming 30 seconds for each calendar entry our estimate
  • Each lapse tied to what it blocksEach clock points at the unit that cannot restart
  • One review per unitThe same questions on each unit, each answer cited
  • Holds with reasonsEach hold and release shows who agreed, and why
Day 214 after the fire

Restart readiness review on a two-train gas plant, 214 days after a fire

A failed instrument tube on a compressor started a fire that took out the inlet header and fire water ring. Train 2 has been without feed since. Gas-in is set for next week, and the leaders must decide which train comes back first.

demoThe plant, the fire, the people, the tags and the counts are sample data. Nothing on this plant is real.

  1. 01Morning

    Eleven units in the order they must come back, four of them lit

    Restart review lead

    The plant is drawn as a network of utilities, flare, inlet separation, acid gas, compression and both trains, with lines showing what must be signed first. A unit lights only when its proof is signed, and nothing can light before what it depends on. Utilities, flare and relief, inlet separation and acid gas handling are lit. Train 1’s amine, cold section and inlet compression are stopped.

  2. 02Morning

    231 of 41,286 calendar entries lapsed while the plant sat idle

    Clock walker

    Eight calendars, five years of history, walked across all 214 days: relief valve tests, calibrations, shutdown systems, fire and gas devices, inspections, preservation checks, temporary repairs and operator qualifications. Most came due and were done on time. 231 lapsed: 63 redone, 168 still open, all on Train 1. Each lapsed row names the unit it blocks.

  3. 03Morning

    No nitrogen log for 19 days, and pressure under the plan for six of them

    Preservation reader

    The plan said to hold the regenerator at 3 psig of nitrogen and log it daily. When the Train 1 day crew moved to the rebuild, the rounds passed to a night shift with nobody named, and the log went blank. Pressure history shows the blanket under the minimum for six days. The agent says plainly it cannot tell whether air got in; process safety sets the checks.

  4. 04Morning

    A clamp allowed for 90 days on a 1,050 psig line, with no engineering review

    Integrity engineer

    A bolted clamp went on over a pinhole weep on a compressor discharge line after the fire, allowed for the nitrogen leak test only. Its limit passed long ago. The engineering review is blank, there is no thickness reading under it and no clamp data sheet, and the line sits in heat zone IV of the fire. The integrity engineer decides first; process safety countersigns.

  5. 0509:17 and 09:20

    Hold one train, release the other first: proposed, never signed by the lead

    Restart review lead

    The suggestion sits on top: of Train 2’s 652 remaining items nothing open was found, and no person has checked them yet. The lead proposes the hold on Train 1 and the release of Train 2, and has the failed calendar feed read again before the release can be signed. She can propose; she can never sign.

  6. 0609:35

    Concurred after opening the blinds, the live-train work and the flare load

    Process safety engineer

    Before her concurrence counts, she opens her three checks herself: Train 1 isolated by six blinds, work beside a live train, and the flare carrying one train. Each opens to its record. She concurs, or refuses with a reason. The release now waits on the plant manager’s sample and signature.

  7. 0710:10

    Twelve of 652 items opened by the plant manager before the bulk signature

    Plant manager

    The sample is drawn one or more from each Train 2 unit, high risk first: the same tubing that failed, now replaced and braced, relief valve bench tests, a shutdown valve stroke, a gas detector, a dryer, compressor oil, an operator’s refresher. Each must be opened by the person signing, and he marks each one as matching the record or not.

  8. 0810:14 and 10:17

    Train 1 held in his own words; Train 2 signed, words not yet read

    Plant manager

    He picks the reasons and writes why. Hold: the clamp is past its 90-day limit with no engineering review, and the regenerator log has a 19-day gap. Release: Train 1 is blinded in six places, Train 2’s tubing is replaced and braced, and the twelve sampled records match. Typed words are not compared by the product; a second person must read them before the release takes effect.

  9. 0910:23

    Released, not started: four hold points stand before gas-in

    Process safety engineer

    She reads his words, with the record beside them, and lets the release take effect. Release is not gas. Blinds out and reconciled, the leak test, air freed and the final walk all read not done, each with its owner, and each has to be confirmed by a person in the plant. Train 1 stays held until its open items close.

  10. 10After the release

    Train 2 lights in order, and the gas-in still waits

    Restart order keeper

    On the graph, Train 2’s residue compression, amine and cold section are lit by the plant manager’s signature, in the order they depend on each other. Its inlet compression still has items to sign, Train 1 stays amber, and gas-in shows its date with no start. The agent lights nothing itself; it shows what the signature allowed.

Around the plant

Fire damage, repairs and crews behind a restart after prolonged shutdown

The rest of the restart team’s screens on the same plant.

Fire damage by zone148 items in the fire area by heat exposure zone: 14 replaced, 111 cleared, 23 still waiting on the integrity engineer, each with what was found.
Everything meant to be temporary74 clamps, bypasses, hoses, blinds and spools against their change records and limits. Three are past their limit and still fitted, all on Train 1’s inlet compression.
Who left, who came back64 operators on the day of the fire, 38 moved to the rebuild, 23 back and 15 away. Train 2 is covered on every shift; Train 1 has open qualifications.
Pre-startup review, unit by unitEach unit gets the same questions grouped as the safety rule asks them: built as designed, procedures, hazards, changes, training. Train 1’s squares are still open.
The decisions, as signedEach unit signed, the concurrence, the hold and the release with the plant manager’s words, and the reading of those words before the release took effect.

demoSample data, from the working solution.

The lead proposes, process safety concurs, the plant manager signs

Agents light nothing. Every hold and release has a maker, a second person and a reader.

Restart review lead
Sees
The graph, the clocks and the queue
Signs
Proposes holds and releases; signs neither
Plant manager
Sees
The sample of items behind a bulk signature
Signs
Signs each hold and release with reasons in his own words
Process safety engineer
Sees
Isolation, live-train work, flare load and the plant manager’s words
Signs
Concurs or refuses; rules on preservation gaps; reads the words before a release takes effect
Integrity engineer
Sees
Relief valves, fire damage and temporary repairs
Signs
Rules on fitness for service and repairs
Internal auditor
Sees
Each step, read only
Signs
Nothing; exports the evidence package
The agents

Seven agents walk the plant and its calendars, and none can light a unit

They walk, read, list and draw. People rule and sign.

Restart order keeper

Walks units in dependency order and stops at the first gap.

  • Never lights a unit
  • Never reorders the graph without a signed change
Clock walker

Walks every calendar across the shutdown.

  • Never extends a due date
Preservation reader

Lines up logs with plans and control system history.

  • Never infers a missing reading
Damage scope agent

Lists fire-area items by zone, material and test.

  • Never rules fitness for service
Temporary repair tracker

Checks each clamp, bypass, hose and blind against its record.

  • Never treats a temporary repair as permanent
Crew checker

Matches rosters to qualifications by operator number.

  • Never assigns a person
Pre-startup review assembler

Builds the review questions for each unit and draws the sample.

  • Never signs
  • Never removes a sample item

What stays with people before gas-in

The agents walk calendars and records. Restart decisions and plant checks belong to named people.

A unit never lights itselfIt lights only when people sign its proof, and only after what it depends on is lit.
A lapsed clock closes only with its testNo one can extend a due date on screen, and the agent never does.
A missing log is not a good readingThe preservation reader says what cannot be known, and process safety sets the checks.
Fitness for service stays with integrityFire-area items and temporary repairs wait for the integrity engineer’s ruling.
Hold points are confirmed in the plantBlinds out, leak test, air freeing and the final walk each need a person there.

Questions plant managers ask about a restart readiness review

What is a restart readiness review?

A restart readiness review shows what must be proven before a long-idle or fire-damaged plant restarts. This one walks every calendar across the shutdown, lines up idle logs and temporary repairs, ties each gap to the unit it blocks, and lets leaders hold or release units with signatures and reasons.

Why is a plant restart checklist not enough?

A checklist cannot hold the order units come back, or show that a lapsed relief valve test on one train blocks that train and nothing else. The restart graph lights a unit only when its proof is signed and what it depends on is lit.

Does it cover a pre-startup safety review after a fire?

Each unit gets the same review questions, grouped as built as designed, procedures, hazards, changes and training, with each answer cited. Fire-area items are listed by heat zone for the integrity engineer to rule on.

Can one train restart while the other is held?

Yes. The restart review lead proposes, process safety concurs, and the plant manager signs a hold for one train and a release for the other, each with reasons. The release takes effect only after process safety reads his words.

Is a release the same as starting up?

No. A release clears a train for its hold points. Blinds out and reconciled, the leak test, air freeing and the final walk each still need a person in the plant to confirm them before gas-in.

How long does a restart readiness assessment take by hand?

We have not measured it. Our own assumption of thirty seconds an entry gives the hours shown above, marked as our estimate. In practice someone exports and sorts each calendar, usually late, and a missing log can read like a good one.

Shutdown, Turnaround & Outage

More for turnarounds and plant restarts

All 15 solutions →
Turnaround Records Classification & Deduplication

Every document split, sorted and read, and the job history kept.

1-min demoEngineering Document Review

One engineer’s ruling settles a family of documents, so hours go where judgment is needed.

1-min demoTurnaround Data Migration

History in the new system, every value traced to its page.

1-min demo

Bring one unit’s calendars
from the months it sat idle.

We’ll walk them with you and show what lapsed and what it blocks.

Book a demoBrowse solutions