botminds.aiRequest a demo
SystemDrilling, Wells & Decommissioning

Well Integrity Management

Well integrity management that draws each well with its barriers, follows each element to the test that proves it, and leaves every status change to a signed decision.

See the demoBook a demo
Follow 14-118 from a rising annulus to a signed status ↓
The problem

Sustained casing pressure that looks like heat on a list

Proof that a barrier works sits in charts, work orders, certificates and spreadsheets, so a well's status is only as fresh as its last review. Tracing one element by hand means three systems and the best part of an hour.

The gaps come from ordinary work. A workover swaps the safety valve, and the test plan stays on the old serial, so no work order is ever raised. An annulus that creeps up a little each week reads like heat or lift gas, until someone lines it up against flow and temperature.

Built forWell integrity engineersWell integrity authoritiesProduction supervisorsWells data coordinatorsInternal auditors

The Problem Today

Proof of each barrier sits in charts, work orders and reports, so a well's true status goes stale between reviews.

8,000+
wells with sustained pressure, per one offshore regulator published
$250K
to fix one such well, in that regulator's own estimate published

Chased by hand today

  • Valve tests
  • Pressures
  • Charts
  • Work orders
  • Plans lost in workoversA new valve serial can leave its test plan behind
  • Slow rises get missedHeat, lift gas and real leaks look alike on a list

The Solution

  1. Read each test recordWork orders, paper charts and certificates, each value tied to its page
  2. Trace each barrierEach element drawn on the well, with its last proof and test
  3. Watch each annulusPressure read against limits; heat and lift gas told apart
  4. A person signs the statusThe engineer proposes, the authority signs, evidence opened first

Built-in controls

  • Agents never close a valve or clear an anomaly
  • Agents never edit a test result
  • Second person signs each status change

What You Get

Well teams see each barrier's proof or its gap, and each status change carries who signed it and why.

  • Proven, or shown as unprovenAn element with no test on file is never assumed good
  • Tests that follow the valvePlans moved to the new serial after a workover
  • A review that samples, not skimsClean wells signed only after a random draw is opened
One well, one morning

Well integrity management on 14-118: two barrier problems on one well

A gas producer on a platform, back from a workover that replaced its tubing and safety valve. Since summer its A-annulus has risen every week.

demoPlatforms, wells, valves, people and pressures are sample data.

  1. 01Morning

    The envelope shows tubing in question and a safety valve 14 days overdue

    Well integrity engineer

    The well is drawn as engineers draw it, with primary and secondary barriers traced around it. Each element shows when it was last proven and by what test. Most read proven. The tubing reads in question, and the downhole safety valve reads 14 days overdue, on the same well.

  2. 02Morning

    1,560 psi on the A-annulus, up 40 psi a week, while flow and heat sit still

    Well integrity engineer

    The annulus watch puts the trend under the limit lines: 2,000 psi limit, 1,800 action, 1,600 alert. Tubing pressure, gas flow and wellhead temperature held steady over the same weeks, so heat does not explain it. Fifteen other flags today are explained, mostly heat after restarts and lift gas.

  3. 03Morning

    Prove it: the safety valve's last inflow test, opened from the drawing

    Well integrity engineer

    Asking the safety valve to prove itself goes straight to the test record: the inflow test after the workover, 14 psi rise in 30 minutes, worked out to 3.2 scf/min against 15 allowed, with the valve serial and work order beside it. It passed then. The question is why there has been no test since.

  4. 04Morning

    The workover fitted DV-7741, and the test plan stayed on DV-5130

    Well integrity engineer

    The work order closure shows the valve removed and the valve fitted. The six-month test plan was never moved to the new serial, so no work order was raised and the test slipped past its due date. Nobody missed a test on purpose; the plan was attached to a part no longer in the well.

  5. 0509:17

    He proposes Restricted: two barrier problems on one well

    Well integrity engineer

    An anomaly draft puts the two together. With the tubing in question and the valve unproven, and the leak depth unknown, closing the valve may not stop it. So the engineer proposes moving the well to Restricted, with conditions. He cannot sign his own proposal.

  6. 06Before 09:38

    Sign stays locked until she has opened all five pieces of evidence

    Well integrity authority

    The authority opens the annulus readings with tubing, flow and temperature, the tubing pressure test, the safety valve test, the workover record and the limit calculation. Each shows opened by her name. Only then can she sign, with send back and reject beside it.

  7. 0709:38

    Signed: Watch 131 to 130, Restricted 38 to 39, three conditions sent

    Well integrity authority

    Her signature moves the well and changes the fleet count on the spot. The test plan moves to the new valve serial, a 1,800 psi ceiling goes live, and three conditions go to their owners with dates. The anomaly stays open; signing a status does not clear it.

  8. 08After

    Three requests on 14-118 land on the platform's list, each with a date

    Production supervisor

    The supervisor's work list opens with the downhole safety valve inflow test, a bleed-down and build-up test under a permit, and a daily hand gauge reading checked against the transmitter. The overdue tests on other wells follow, oldest first.

  9. 09After

    Back on the envelope, the well reads Restricted, with the signer's name

    Well integrity engineer

    The drawing now carries the new status and the ceiling, and the tracer names who signed it. Restricted stops any well work on the tubing or annulus without the authority. The next step is the signed decision itself, one click away for anyone who asks why.

17,360 barrier elements, and why 16,981 count as proven

An element is proven only with a test on file, in date, with nothing waiting on it.

Proven, with a test in date16,981
Test overdue214
Cannot be proven from any record97
Failed or in question58
Newer record waiting on a person10
Barrier elements across 1,240 wells17,360

demoSample data, from the working solution. Fourteen elements a well. The four groups outside proven do not overlap.

Around the fleet

Test clocks, unproven elements and the review in one integrity system

The screens the coordinator, the supervisor and the authority return to each week.

Audit trailEach piece of evidence opened by the authority, by name and minute, then her signature and the conditions sent. Nothing here can be changed after the fact.
Test clock214 tests overdue across the fleet, 205 that can run now. Each row has an owner and a clock, and requests go out a platform at a time.
Cannot be proven97 elements no record proves, each with what is missing: a test that was never filed, a report with no chart, a scan nobody can read.
Test records286 records arrived this week in five formats and 276 matched. Each of the 10 that need a person says why, such as a serial that does not match.
Status review879 clean Normal wells go through on one signature only after 20 drawn at random are opened. 179 are set apart and decided one at a time.
All wells1,240 wells by status, type, platform and annulus reading, with overdue and unproven counts. Any row opens that well's envelope.

demoSample data, from the working solution.

Who watches the barriers

Six agents read tests and trends, and none of them clears an anomaly

Their limits are written into the work, not left to a setting.

Test reader

Reads work orders, paper charts, certificates, spreadsheets and daily reports.

  • Never edits a test
  • Never writes a result the crew did not state
Barrier tracer

Keeps the envelope and answers prove it for any element.

  • Never says proven without a page
Annulus watcher

Reads each annulus against its limits and triggers, and tells heat and lift gas apart.

  • Never closes a flag
  • Never advises a bleed
Test clock

Tracks intervals and finds plans left on old serials.

  • Never raises a work order alone
Anomaly drafter

Drafts the anomaly, its risk and a proposed status.

  • Never changes a status
  • Never clears an anomaly
Review preparer

Prepares the periodic review and draws the random sample.

  • Never signs
  • Never removes a well from the sample

What only the integrity authority and the crew may do

The agents read, trace and propose. These stay with people.

No valve is closed by softwareAgents never operate equipment, and never tell a crew to bleed an annulus.
A status changes on a signatureThe engineer proposes; the authority signs after opening the evidence. A proposer's own signature is refused.
Unproven is never shown as provenWhere no test can be found, the element says cannot be proven, with where the search looked.
A test result belongs to whoever ran itAgents read the result as written. A doubtful record goes to the data coordinator, not into the well.

What well integrity teams ask about well integrity management

What is well integrity management?

Well integrity management keeps each well's barriers proven and its status current. In this well integrity management, agents read test records in any format, tie each barrier element to its last test, watch each annulus against its limits, and propose status changes that a well integrity authority signs.

How does it handle sustained casing pressure?

The annulus watcher reads each annulus against its limit, action and alert levels, and checks flow, tubing pressure and temperature to tell heat and lift gas from a real rise. A rise it cannot explain becomes a draft anomaly for the engineer.

What happens to test plans after a workover?

The test clock follows the serial numbers. When a part is swapped and its plan stays on the old serial, the clock finds it and the plan moves once the status decision is signed.

Can a well integrity management system mark an element proven without a test?

No. An element is proven only with a test on file and in date. Where no record exists, it reads cannot be proven, and it is never assumed good.

Who signs a well's status?

The well integrity engineer proposes and the well integrity authority signs, after opening each piece of evidence. The fleet counts change the moment she signs.

How does the periodic review work?

Clean wells go through on one signature only after a random draw from them has been opened and agreed. Any well with an overdue test, an open flag or a record waiting is set apart and decided one at a time.

Drilling, Wells & Decommissioning

More solutions for wells and barriers

All 9 solutions →
Well Program Review

Offset hazards traced to the program step that handles them, and the untraced ones shown plainly.

1-min demoOffset Well Analysis

The kick nobody would have picked, found in the daily reports and cited to its page.

1-min demoNPT Analysis

Lost time read from the words, not the codes: both sides answer, one person signs.

1-min demo

Pick one platform's wells
and its test records.

We will draw each well's barriers and show which ones your records actually prove.

Book a demoBrowse solutions