SystemHealth, Safety & Environment

Serious Injury and Fatality Prevention

Serious injury and fatality prevention that finds the missing critical control in today's high-energy work, before the crew leaves the yard

Every high-energy job checked for its critical controls before the crew leaves the yard.

See one case, screen by screen ↓
target100%of high-energy jobs checked for a working control before the crew leaves the yard
demo7hazardswith no control, found on 5 of the day's 214 jobs by 06:09 — before any crew left the yard
demo412foundmissing controls found before work in 90 days — all 412 closed before the job started
target95%observed control score within a year of go-live, from 81 % at go-live
The problem

Why serious injuries have not fallen with recordables

Recordable injury rates in power generation and delivery fell from about 2.05 to about 1.14 per 200,000 hours between 2010 and 2023, while the fatality rate stayed flat at about 0.02 per 1,000 workers (EEI, High-Energy Control Assessments, 2024). Serious injuries and fatalities do not come from the same causes as sprains and cuts. They come from high energy — an energised 12.47 kV line, a climb to 38 ft, a 7 ft trench in wet clay, a chlorine cylinder, a vault entry — meeting no control that works when someone makes a mistake.

The controls are known: fall protection on a climb, a shield rated for the depth and soil, breathing apparatus at a chlorine changeover, an attendant outside a permit space, verified isolation. What fails is that one control is not on one truck on one morning — a fall restriction device tagged out last Friday, a pack built from a bucket template for a pole no bucket can reach, “shoring as required” with no shield assigned. With 214 jobs and 11 supervisors, no one can check that before 07:00. Supervisors read tailboards on site after the crew has arrived, and visits are chosen by habit and distance, not by exposure.

typical32%of recordables at 11 utilities had serious injury or fatality potential — 42 % at water utilities
typical19–24per 100,000fatal injuries a year among power-line installers and repairers, 2011–2015
Days a known exposure stays in a job templateestimated
By hand44 days
With the solution5.5 days
  • Near-miss report read and sorted for serious potential5 → 0.5 d
  • Linking it to other events on the same job template20 → 0.5 d
  • Drafting the template change7 → 0.5 d
  • Safety manager's review and approval7 → 3 d
  • Job packs rebuilt from the new version5 → 1 d

Estimated split, in calendar days, from a near miss to packs built from a corrected template — by hand and with the solution. In the working solution the rear-lot climbing pattern on template OH-07 runs from a near miss on 21 Jul to today's red job on 13 Oct.

How it works

How a morning's work is checked

Six specialist agents find each job's high energy and check its controls before work; the field supervisor decides.

What comes in
Today's work in214 jobs · packs, trucks, crews, weather
Agents at work
Work pack readerpacks, manifests, permits
Then
High-energy finder
Precursor scanner
Then
Critical control checkerin place · verified
Then
Visit plannerred and amber first
A person decides
Field supervisoramends, holds or signs a go
What comes out
Map of today's high-energy work
Alerts before the start
Supervisor visits
One case, step by step

One morning, from the 06:00 check to a climb with fall protection

Tuesday 13 October, Lumina Utilities, Corran Valley. 214 jobs — 152 electric, 62 water — leave four yards at 07:00. Here is what happens before they do, screen by screen, in the working solution.

  1. 0106:00

    Every job of the day, checked before the yards open

    Work pack reader · High-energy finder · Critical control checker

    The agents read 214 work orders and their packs, 38 truck manifests, 162 crew records and the 05:30 forecast. 61 jobs meet high energy, with 148 hazards; 12 are worked out in joules from pole heights, loads and depths. 136 have a working control, 5 are listed but not verified, and 7 have none, on 5 jobs. The map shows each high-energy job by its main energy, coloured by its controls.

    Precursor scanner: “Gusts 31–33 mph from 12:00 on the north ridge · 3 scopes changed since the packs were built · 2 crews worked over 11 h yesterday”

  2. 0206:41

    A pole-top job in Kilnmoor is red

    Hannah Okoro · Safety manager

    Hannah opens the map nineteen minutes before the crews leave. Five jobs are missing a control. She opens WO-48213: replace a crossarm and insulators on pole P-11873, feeder KM-04, 12.47 kV energised, Crew 14, start 07:30. Electrical contact, arc flash and the dropped crossarm each have a control in place. Fall from height — a climb to 38 ft, about 10,200 J — does not.

    “Fall-arrest equipment is not listed in the pack, and truck T-4471's pole fall restriction device was tagged out on 9 Oct.”

  3. 03The job

    Each energy, its control and where the proof is

    Critical control checker

    The job screen lays every high-energy hazard beside the control that works even if someone slips, the pack line and the record that verifies it: gloves and sleeves class 2 tested 21 Sep, 8 cal/cm² clothing against about 4.1 cal/cm² at working distance, a barricaded drop zone. The fall line reads “Not in the pack”. The supervisor decision opens on the recommended fix: move two fall restriction devices from T-4490.

    A job missing a control may not start until Wes Calder amends the pack, holds it, or signs a go with a reason.

  4. 04Why it was missed

    A bucket template for a pole no bucket can reach

    Work pack reader · Precursor scanner

    The pack was built from template OH-07, crossarm replacement, energised (bucket), version 8. Its equipment list has “Bucket fall arrest, anchored to the boom”. But P-11873 is in a rear lot 64 ft from the road on a 14 % slope, so the crew climbs. Insulators were added at 16:20 yesterday and the equipment list was not rebuilt. Jamie Reyes, a second-year apprentice, is on the climb — a first rear-lot climb on record, and gusts pass the 30 mph climbing limit at 12:00.

    Margin note: “No fall-arrest equipment for climbing — and this pole has no bucket access”

  5. 0506:42–06:58

    Alerted, acknowledged, amended — and green

    Wes Calder · Line supervisor, Kilnmoor yard

    The alert reaches Wes's phone at 06:42 with the job, the missing control and its source. He acknowledges at 06:43. At 06:58 he moves pole fall restriction devices FRD-118 and FRD-121, inspected 30 Sep, from T-4490 — Crew 12 is on ground work today — to T-4471, adds them to the pack and re-sequences the climb to finish by 11:30, before the gusts. The checker checks again: 4 of 4. Start moves to 07:50.

    Wes Calder: “On it. Taking the devices off 4490.”

  6. 0606:58

    137 of 148, and four jobs still to go

    Hannah Okoro · Safety manager

    Back on the map, the Kilnmoor pin is green and the count reads 137 of 148 hazards with a working control. The job's log keeps the alert, the acknowledgement and the amendment with their times. Four jobs are still red: the water main break in Pellham Cross, the chlorine changeover at Ashcombe, the 11 kV vault in Wrenfield and the 50 ft pole beside a live 34.5 kV line in Tarrow.

    “WO-48213 is green · 137 of 148 hazards now have a working control”

  7. 0708:00 start

    A 7 ft trench where “as required” is not a control

    Aisha Bello · Water distribution supervisor

    WO-48177 repairs a 12-inch ductile iron main outside 41 High Street, Pellham Cross. The trench is 7 ft deep in type C clay, wet after 0.7 in of rain, with excavator EX-14 working beside people on foot. The pack says “shoring as required” and no shield is assigned. Shield TS-3 is free at the Pellham Cross depot; the recommended amendment puts it on the low-loader for 08:20.

    Never counts on its own: “shoring as required”, a spotter at the edge.

  8. 08Visits

    Supervisors go first where the exposure is

    Visit planner

    40 visits for 11 supervisors, with the 9 red and amber jobs first, each before its start. Wes has 4 visits and 77 minutes of driving from Kilnmoor yard: P-11873 at 07:40 to confirm the fall devices on site, then the Tarrow pole set at 09:50, where no one is yet named to watch the boom's distance to the 34.5 kV line. Green high-energy jobs fill the rest of the day.

    Visit planner: never removes a visit a supervisor chose.

  9. 0907:44

    On site, before the climb: 4 of 4

    Wes Calder · Line supervisor

    Wes arrives at P-11873 and checks each hazard as he sees it, before anyone steps in: gloves and sleeves on with cover-up on all three phases, 8 cal/cm² clothing, the drop zone taped, and both climbers wearing FRD-118 and FRD-121 from the ground. The observed control score is 100 % — 4 of 4 hazards — and matches what the morning check now plans.

    Observed control score = controls in place ÷ hazards seen

  10. 10The last 90 days

    Three near misses turn into a template change

    Event classifier · Hannah Okoro

    The event classifier sorted 47 incidents and near misses from the last 90 days by high energy, control and outcome. Three on OH-07 share a pattern: an apprentice slipped at 12 ft with no device on 21 Jul, a climb was stopped on a visit on 24 Sep, a gaff cut out at 22 ft on 2 Oct and the device held. Version 9 adds “if the pole has no bucket access, the job is a climb” and a fall restriction device for each climber. It waits for Hannah's approval.

    “This month 14 jobs use OH-07 on poles with no bucket access. Packs built after approval include the device.”

Who it’s for

Built for everyone who sends a crew out.

The same morning, seen by the five people who own it — what their day looked like, and what it looks like now.

HO
Hannah OkoroSafety manager, distribution and water · approves rules and templates
Safety manager
Before
Hears about a missing control after the crew has reached the site, if at all, and plans visits with supervisors by habit and distance. “I need the five jobs that can kill someone today, not a list of 214.”
Now
Opens a map at 06:41 with every high-energy job coloured by its controls, alerts the supervisor in one click and approves template changes drawn from near misses.
WC
Wes CalderLine supervisor, Kilnmoor yard · 11 crews · stop-work authority
Line supervisor
Before
Signs tailboards and visits three or four sites a day, finding gaps on site. “Tell me what's missing before the truck leaves, not after the climb.”
Now
Gets the job, the missing control and its source on his phone, amends the pack before the start, and visits the exposed jobs first.
AB
Aisha BelloWater distribution supervisor, Pellham Cross depot · main repairs, trenching, valve work
Water distribution supervisor
Before
Sees trench protection written in the pack as “shoring as required”. “Wet clay at seven feet doesn't care what the pack says.”
Now
Sees the depth, the soil, the rain and the free shield at the depot before the 08:00 start, with the amendment ready to send.
LO
Luis OrtegaForeman, Crew 14 · overhead lines · phone app
Foreman
Before
Leads the job briefing and the climb plan from the pack. “If the pack says it's on the truck, I trust it's on the truck.”
Now
Sees each hazard, its control and the record behind it for his job, and a pack that matches what is on T-4471.
GP
Graham PellowDirector of health, safety and environment · reports serious injuries to the board
Director of HSE
Before
Reports serious and potentially serious events once a quarter, too rare to learn from in time. “Our recordables are down 40 %. Our serious injuries are not. Show me why.”
Now
Sees planned controls every morning and observed controls at every visit, by energy and by yard, next to the serious events themselves.
Built on the engine

6 agents. Each with one job, and hard limits.

Six specialist agents find each job's high energy and check its controls before work; the field supervisor decides.

Work pack reader

At 06:00 reads every work order scheduled for the day with its job pack — scope, template and version, equipment list, permits, switching orders and hold-offs — and each assigned truck's equipment manifest and tag-out records. Records what the pack says and what is actually on the truck.

  • Never edits a work order or a pack — amendments are made by a supervisor
  • Reads only today's and tomorrow's work
High-energy finder

Works out the energies each job will meet from the work type, the asset and the site: circuit voltage and state, height of work and access, loads, trench depth and soil, chemicals, confined spaces, traffic speed. Where no threshold applies it computes the energy — a climb to 38 ft is about 10,200 J against the 1,500 J line.

  • Never marks a hazard below threshold without the data that proves it
  • Shows its arithmetic for every computed energy
Critical control checker

Matches every high-energy hazard to a control in the pack that is targeted at the energy, works when installed and used properly, and works despite a human error. Checks the item is on the assigned truck, not tagged out, within its test or inspection date, and that the person using it is qualified.

  • Never counts training, signs, “as required” or a spotter alone as a control
  • Out-of-date tests and calibrations count as missing
Precursor scanner

Checks each high-energy job against the hourly forecast and weather limits, hours worked in the last 24, apprentices on high-energy tasks, scope changes after the pack was built, site access, and incidents or near misses on the same template or asset in 90 days.

  • Flags conditions, never people
  • Never scores or ranks individual workers
Visit planner

Builds each supervisor's route from their yard: red and amber jobs first, each before its start time, then green high-energy jobs by drive time. Plans again when a job changes colour.

  • Never removes a visit a supervisor chose
  • Supervisors can move any visit up or down before the plan goes to their phones
Event classifier

Reads each incident and near-miss report and decides whether high energy was present, a working control was in place, energy was released and anyone was seriously hurt. Classifies it as serious injury, serious potential, control held, exposure found, success or low energy, links it to the job template and proposes a change when a pattern repeats.

  • Never closes an investigation
  • Never assigns blame
  • Template changes need the safety manager's approval
Field supervisor

Decides every job missing a control; safety manager approves rule changes. The agents propose; a named person decides.

Ask in plain words

Ask about any job, energy or control

Ask about any job, energy, control or supervisor — or say what to hold. Every answer points to its records.

Why is pole P-11873 in Kilnmoor red?

Crew 14 has to climb: the pole is in a rear lot 64 ft from the road on a 14 % slope, so no bucket can reach it. The pack was built from template OH-07, which assumes a bucket, and lists no fall-arrest equipment for climbing. Truck T-4471's pole fall restriction device was tagged out on 9 Oct for a worn strap. The climb is to 38 ft — about 10,200 J — and gusts pass the 30 mph climbing limit at 12:00. Fastest fix: move FRD-118 and FRD-121 from T-4490, which is on ground work today.

Which trenches today are deeper than 5 feet?

One of today's trench jobs has no protection: WO-48177 on High Street, Pellham Cross, is 7 ft in wet type C clay and no shield is assigned. Shield TS-3 is free at the depot. The map is filtered to trenches.

Plan Wes Calder's visits for this morning

Wes has 4 visits and 77 minutes of driving from Kilnmoor yard. Both red jobs come first, each before its start: P-11873 for the fall devices before the climb, then the Tarrow pole set for an observer for the boom near 34.5 kV. His plan is open; send it to his phone when you are happy.

Hold the Pellham Cross main repair until a trench shield is on site

Held. WO-48177 (Crew W-6, 12-inch main on High Street) cannot start until trench shield TS-3 is on site and set. Marta Kowalski and Aisha Bello are told, and the valve operations booked for 07:40 move to 08:20. The hold is on the audit trail; releasing it needs Aisha or you.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

Today's high-energy work214 jobs on the service-area map, the 61 with high energy coloured by their controls, the hour strip with gusts, and the jobs that need a supervisor before the 07:00 start.
A job missing a controlPole P-11873: four high-energy hazards, three controls in place and fall from height missing, with the reason and the alert to the supervisor.
Energy and its controlsEach hazard with how much energy, the control that works even if someone slips, the pack line and its proof, beside the supervisor decision.
The pack, read line by lineThe job pack with margin notes, the precursors, the wind at the site by hour and the crew's qualifications.
Amended and checked againWes Calder's amendment at 06:58: two fall restriction devices moved from another truck, the climb re-sequenced, 4 of 4 controls in place.
The map after the fix137 of 148 hazards with a working control, the job's log of alert, acknowledgement and amendment, and four jobs still to go.
A trench jobA 7 ft trench in wet type C clay with no shield assigned, and the amendment that brings a free shield from the depot.
Today's jobsAll 214 jobs with their energies, controls, precursors, crew, supervisor and start, filtered to high energy.
Supervisor visitsEach supervisor's morning, with jobs missing or unverified controls seen before work starts, on a route from their yard.
On-site checkWhat the supervisor sees on arrival: each high-energy hazard, whether its control is in place, and the observed control score.
Incidents and near misses90 days of events sorted by high energy, control and outcome, and the template change a repeated pattern suggests.
Protection trendPlanned controls each morning and observed controls on visits, missing controls by energy, serious events by quarter and results by yard.
Your rulesHigh-energy thresholds, weather limits, the morning check, alerts and what counts as a control.
Governance

Built so people decide, and every check is on the record.

Every flag cites its recordEach missing or unverified control links to its source — the pack line, the truck manifest, the tag-out record, the test certificate, the qualification record, the forecast, the site measurement.
A red job waits for a supervisorA job missing a control may not start until its supervisor amends the pack, holds it, or signs a go with a reason. The decision is recorded with the supervisor's name and time.
Only real controls countTraining, signs, “as required”, cones alone or a spotter who also works never count as a control. A control whose test, inspection or calibration is out of date counts as missing.
Stop-work stays with peopleThe agents check and alert. They never edit a pack or a work order, never start or stop work, and never close an investigation. Supervisors decide go, amend or hold.
Conditions, never peopleThe precursor scanner flags weather, hours, changed scope and access. No agent scores, rates or ranks an individual worker, and crew data is limited to qualifications and hours.
Every check on the activity trailEvery check, alert, acknowledgement, amendment, hold and on-site observation is recorded with its time. Rule and template changes are versioned and approved by the safety manager.
Configuration

Your safety rulebook, not ours

What counts as high energy, what counts as a control, when the check runs and who it calls are settings — every change versioned, approved by the safety manager and on the audit trail.

SettingDefaultChoose from
Energy that can kill1,500 joulesAbove this, the most likely result of contact is a serious injury or a death; also 50 volts for electrical contact and 30 mph for traffic
Fall from height4 ftAdjustable up or down — climbing, buckets, roofs, tanks, open edges
Excavation or trench5 ftAdjustable up or down — the depth at which a protective system is required
Climbing poles and towers30 mph gustsAdjustable — above it a climb is a precursor and is re-sequenced or held; bucket and boom work 30 · 35 · 40 mph gusts
Morning check06:00 every working day05:30 every working day · 06:00 every working day · 05:00 and 12:00 — and again when a pack, crew, truck or forecast changes
A red job may not startOnOn · Off — until its supervisor amends the pack, holds it, or signs a go with a reason
Who is alertedOperations manager after 15 minutesThe crew's supervisor at once, then the operations manager at once · after 10 minutes · after 15 minutes
Treat as missingOnOn · Off — a control whose test, inspection or calibration is out of date
Connections

Works with the records a morning's work already runs on

Work managementwork orders, schedules and job packs built from templates
Tailboards, permits and switching ordersjob briefings, permits, hold-offs and isolation records
Truck manifests and storesequipment on each truck, test dates and tag-outs
Crew qualifications and hoursclimbing, energised work and rescue qualifications, hours worked
Weather, asset and site datagusts and heat by hour, pole heights, access and slope, circuit voltage
Incident and near-miss history90 days of reports, classified and linked to job templates
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
100%
of high-energy jobs checked for a working control before the crew leaves the yard
61 of 61 jobs
every morning by 06:30
typical
4 ft · 5 ft
fall protection and trench protection rules checked on every job, every morning
target
95%
observed control score within a year, from 81% at go-live
At go-live81%
Target95%

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the pilot · “estimated” = our estimate · “typical” = published figures (DEKRA study of 1,060 recordables at 11 utilities, reported by Safety+Health, 2018 — 32 % with SIF potential, 42 % at water utilities; BLS Monthly Labor Review, 2018 — power-line installers and repairers, 19–24 fatal injuries per 100,000 full-time workers, 2011–2015). Context: EEI, High-Energy Control Assessments (2024) and Power to Prevent SIF — 1,500 J high-energy line, direct controls, recordables down while the fatality rate stayed flat; 29 CFR 1910.269(g), 1926.652, 1910.146. Lumina Utilities, the Corran Valley, and the people, crews, trucks and jobs named on this page are fictional — characters and sample data in the working solution.

Questions

What safety leaders ask us.

What is serious injury and fatality (SIF) prevention software?

Software that looks for the conditions that lead to serious injuries and deaths — high energy without a working control — instead of counting injuries after the fact. Serious Injury and Fatality Prevention checks every job of the day for its high-energy hazards and their controls before the crews leave the yard, and puts the gaps in front of the supervisor who can fix them.

How does SIF prevention work for utility crews?

At 06:00 six agents read every work order, job pack, truck manifest, crew record and the forecast. They work out the energies each job will meet, check each one has a direct control that is listed, on the truck, in test and used by a qualified person, and flag precursors such as gusts over the climbing limit or a changed scope. Jobs missing a control turn red on the map and the supervisor is alerted.

What counts as a critical or direct control?

A control targeted at the energy, that works when installed and used properly, and works even if someone slips — a pole fall restriction device for a climb, a shield rated for the depth and soil, breathing apparatus for each person at a chlorine changeover. Training, signs, “as required”, cones alone or a spotter who also works never count on their own. The control library is a setting.

Does it cover water utilities as well as electricity?

Yes. In the working solution the same morning check covers water main repairs and trenching, chlorine cylinder changeovers, lift-station pump work and valve work in live lanes, alongside overhead, substation and underground electrical work, including vault entries. The thresholds — 1,500 J, 50 V, 4 ft, 5 ft, 30 mph — apply to every job.

Does it score or rank individual workers?

No. The precursor scanner flags conditions — weather, hours worked, an apprentice on a high-energy task, a changed scope, access — never people. Crew data is limited to qualifications and hours, and the event classifier never assigns blame.

Do supervisors stay in control of go, amend or hold?

Yes. The agents check and alert; they never edit a pack, start or stop work, or close an investigation. A red job may not start until its supervisor amends the pack, holds it, or signs a go with a reason, and stop-work authority stays with people. Rule and template changes need the safety manager's approval.

How does it measure SIF prevention as a leading indicator?

Every morning it measures planned controls — high-energy hazards with a working control — for every job, and every on-site check records the observed control score, controls in place divided by hazards seen. The trend shows planned controls daily and observed controls weekly, by yard, next to serious events by quarter. Serious events are too rare to read in a quarter or two; the daily measures move first.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your safety rulebook, job templates, control library and a sample of work orders, packs and near-miss reports — and it goes live once every quality gate has passed. We will walk you through it on a day of your own jobs first.

See it on
tomorrow's jobs.

We'll run Serious Injury and Fatality Prevention on a day of your own work orders and job packs.