Severity
Non-Event
Was Hydrogen Released?
Was There Ignition?
Incident Date
Describe the incident, including corrective steps taken and their result.

A deficiency was discovered in the application of a hydrogen sensor in the Rotary Mode Core Sampling (RMCS) portable exhauster. The sensor is installed in the flow stream of the exhauster designed to be used with a RMCS truck for core sampling of watch list tanks, and is part of the flammable gas detector system. During the previous week, a quarterly calibration of the sensor, per maintenance procedure, was attempted by Characterization Project Operations (CPO) technicians. Ambient temperatures during the sensor calibration were approximately 20 to 30 degrees F. Inconsistencies in calibration results and the failure of the sensor to meet the response-time calibration requirement lead to the conclusion that the unit could not reliably perform its safety function at low ambient temperatures. The hydrogen sensor is an electrochemical cell used to initiate alarms and shut down the RMCS system in the case of a hydrogen release in the tank being sampled. The sensor is from the same vendor and category of sensor used in the tank farm Standard Hydrogen Monitoring System (SHMS) cabinets. However, the SHMS cabinets are climate-controlled, whereas the RMCS application does not provide a climate-controlled enclosure for the sensor. The RMCS exhauster flammable gas detector is required to operate in outdoor temperatures down to -20 degrees F.

The hydrogen sensor is one of two independent sensors in the exhauster flammable gas detector. The other sensor has not experienced these calibration problems. The flammable gas detector is not required for push-mode core sampling. During further investigation of the RMCS exhauster hydrogen detector system, a deficiency was discovered in the application of low-pressure differential transmitters. The low-pressure differential transmitters are qualified for use in a Class 1, Division 1, Group B environment. The transmitters are rated for input voltages of 12 to 36 volts per the vendor's catalog. However, during the process of reviewing the test reports, it was discovered that to be qualified for use in a Class 1, Division 1, Group B environment, the transducer must be configured in a specific fashion. This configuration is defined in the control drawing, which requires that the "associated apparatus" must provide no more than 20 volts. However, the intrinsic safety transmitter supply unit used in the exhauster hydrogen detector system could allow a maximum amount of 28 volts open circuit. Characterization Equipment Engineering concluded that this condition could result in a non-compliance with the intrinsic safety requirements of the National Electrical Code, Article 504, and ANSI/ISA-RP12.6 "Installation of Intrinsically Safe Systems for Hazardous (Classified) Locations."

The direct cause of the deficiencies is an inadequate design. The functional design criteria require that the system operate in a -20° F to 115° F environment. Although the vendor specifications for the cell require operating temperatures of 70° F to 120° F, the system design did not provide thermal protection for the cell.

Incident Attributes
Damage and Injuries
Probable Cause
Contributing Factors
When Incident Was Discovered
Lessons Learned
  1. Parallel-path design activities require an increased level of management oversight and control to mitigate the risks inherent in this process.
  2. Schedule pressure cannot be allowed to compromise the integrity of the design process.
  3. Turnover of personnel responsibilities that may be needed during the design process must be formal and controlled.

Key:

  • = No Ignition
  • = Explosion
  • = Fire
Hydrogen Incident Summaries by Equipment and Primary Cause/Issue
Equipment / Cause Equipment Design or Selection Component Failure Operational Error Installation or Maintenance Inadequate Gas or Flame Detection Emergency Shutdown Response Other or Unknown
Hydrogen Gas Metal Cylinder or Regulator   3/31/2012
4/30/1995
2/6/2013
4/26/2010 12/31/1969     3/17/1999
11/1/2001
12/23/2003
Piping/Valves 4/4/2002
2/2/2008
5/11/1999
4/20/1987
11/4/1997
12/31/1969
8/19/1986
7/27/1991
12/19/2004
2/6/2008
10/3/2008
4/5/2006
5/1/2007
9/19/2007
10/31/1980
2/7/2009 1/24/1999
2/24/2006
6/8/1998
12/31/1969
2/7/2009

9/1/1992
10/31/1980

10/3/2008  
Tubing/Fittings/Hose   9/23/1999
8/2/2004
8/6/2008
9/19/2007
1/1/1982 9/30/2004
10/7/2005
  10/7/2005  
Compressor   10/5/2009
6/10/2007
8/21/2008
1/15/2019
    10/5/2009 8/21/2008  
Liquid Hydrogen Tank or Delivery Truck 4/27/1989 12/19/2004
1/19/2009
8/6/2004 12/31/1969   1/1/1974 12/17/2004
Pressure Relief Device 7/25/2013
5/4/2012
1/15/2002
1/08/2007
12/31/1969        
Instrument 1/15/2019 3/17/1999
12/31/1969
2/6/2013
    11/13/73    
Hydrogen Generation Equipment 7/27/1999     10/23/2001      
Vehicle or Lift Truck   7/21/2011         2/8/2011
12/9/2010
Fuel Dispenser   8/2/2004
5/1/2007
6/11/2007
9/19/2007
  2/24/2006
1/22/2009
     
Fuel Cell Stack            

5/3/2004
12/9/2010
2/8/2011

Hydrogen Cooled Generator       12/31/1969
2/7/2009
     
Other (floor drain, lab
anaerobic chamber,
heated glassware,
test chamber,
gaseous hydrogen
composite cylinder,
delivery truck)
  11/14/1994
7/21/2011
7/27/1999
6/28/2010
8/21/2008
12/31/1969
3/22/2018
    6/10/2019
  • = No Ignition
  • = Explosion
  • = Fire