Hot work permit SOP: gas test, fire watch, and closure
A hot work permit SOP for ship repair: gas-test the atmosphere, assign a fire watch, get dock master and HSE sign-off, then hold a mandatory post-work watch before the permit closes.
What the hot work permit SOP: gas test, fire watch, and closure process is
A ship under repair is not an empty steel shell. A vessel on a FAYARD dry dock berth can have fuel residue in its double-bottoms, insulation packed behind bulkheads that has absorbed years of oil mist, and a crane lift or a tank-entry job running two frames over while a fitter wants to cut a bracket a deck above. None of that is visible from where the torch is struck, which is exactly why the permit exists as a separate, sequenced step rather than a verbal go-ahead from whoever is standing nearby. The atmosphere has to be measured, not assumed, because a space that was gas-free on Tuesday can pick up vapour from a tank two frames over by Thursday. A fire watch has to be a named person with nothing else to do, because 'keep an eye on it' from a technician who is also running the grinder next door is not a fire watch, it is a hope. And the dock master's sign-off is not a formality: a repair yard runs mechanical, electrical and hydraulic work in parallel across the same hull, and the one person who can see all of it is the one who has to confirm nobody's hot work is happening over somebody else's open fuel line.
The chart is built around gates that are allowed to fail, not just steps assumed to pass. 'Atmosphere within safe limits for hot work?' can return 'Unsafe' and route to 'Ventilate space and remove combustibles, then retest', because a failed first reading is routine on a yard with confined double-bottoms and it needs a named recovery path, not a permit that simply stalls. 'HSE approves and signs the hot work permit?' is a second, independent gate after the atmosphere has already cleared, because a safe atmosphere and a safe plan are different questions: a 'Denied' branch sends the request back to re-inspection rather than back to the technician, so the corrective action gets checked rather than promised. The work itself is bracketed on both sides by fire watch, assigned before the torch is lit and required to continue for a fixed period after it is extinguished, because the failure that matters most in ship repair is not the fire that starts while someone is watching, it is the one that starts in smouldering insulation twenty minutes after the fire watch has packed up and walked away. 'Area clear and safe to leave unattended?' applies that same caution a second time at closure, with its own loop back through 'Extend fire watch and re-inspect', so the permit closes only when two separate checks agree, not one.
This template also carries People and Workload on every row, because a hot work permit is inseparable from who is accountable at each step and how much of their day it costs. Nathan Reyes, the yard's Gas-Free Engineer, tests the atmosphere and then stays on as the named fire watch through execution and the post-work watch, because the person who knows what the reading meant is best placed to notice if it stops meaning that. The workload BI panel reads that continuity straight off the People column rather than off the swimlane label, which is why moving to a two-person model, a separate fire watch handed off after testing, is a one-column edit here, not a redraw of the chart.
What this flowchart covers
In this template
- Two axes of structure: five phases across the top, "Request", "Area preparation", "Testing and approval", "Execution" and "Closure", crossed with four roles down the side, Technician, HSE / Fire Watch, Dock Master and Gas-Free Engineer, so the chart shows both what stage the permit is at and who is accountable for it.
- The atmosphere gate and its recovery loop: "Test atmosphere for flammable gas and oxygen level" feeds the decision "Atmosphere within safe limits for hot work?", where "Unsafe" routes to "Ventilate space and remove combustibles, then retest" and returns to the same test rather than letting the technician proceed on a first bad reading.
- Fire watch and dock coordination staged before ignition: "Assign dedicated fire watch and stage extinguishing equipment" and "Dock master confirms no conflicting work in the area" both have to clear before the request reaches HSE, so the person watching for fire and the person who can see the rest of the dock are accounted for ahead of approval.
- A second, independent approval gate: "HSE approves and signs the hot work permit?" can return "Denied": "Deny permit and record the corrective action required" sends the request back to re-inspection, so a refusal produces a recorded reason rather than a verbal no.
- Execution bracketed by fire watch on both sides: "Carry out welding or cutting under fire watch" is followed by a mandatory "Maintain fire watch for 30 minutes after work stops" before anyone is allowed to call the job finished.
- A second safety check at closure: "Final inspection of work area for smouldering material" feeds "Area clear and safe to leave unattended?": "Not clear" loops to "Extend fire watch and re-inspect", and only "Clear" reaches "Close and file the hot work permit".
When to use this template
- A welder or fitter needs to cut or strike an arc anywhere near a dry dock berth, a fuel bunker, an engine room or any space that has held flammable liquid or gas, and you need the request, the gas test and both sign-offs on one auditable record before the torch is struck.
- Your yard runs hot work permits on a paper pad or a spreadsheet tab, and a permit has been carried into a second or third day by habit without anyone re-testing the atmosphere or re-confirming the dock master has no conflicting work scheduled.
- You need to show a classification society, an insurer or a client's HSE auditor how a hot work permit is actually gated, not just that a form exists, including the loop that sends a failed gas test back to ventilation rather than forward to the torch.
- A near-miss or a smouldering-insulation incident happened after work was declared finished, and you want the mandatory post-work fire watch and the closure inspection drawn as two separate, named checks rather than folded into one sign-off.
- You're onboarding a new gas-free engineer or fire watch and want the whole permit, including who is accountable at each step and roughly how long each step takes, on one diagram rather than split across a policy binder and a verbal handover.
How it works
Match the lanes to your yard's actual roles
"Technician", "HSE / Fire Watch", "Dock Master" and "Gas-Free Engineer" are FAYARD's structure. A smaller yard often folds Gas-Free Engineer into HSE, and a yard using a contracted gas-testing service should give it its own lane rather than hiding it inside Technician, because who tested the atmosphere is exactly what an incident review asks first.
Write real numbers into the gas-test limits, not 'safe'
"Atmosphere within safe limits for hot work?" needs a stated flammable-gas percentage and oxygen range attached to the box or its comment, not the word safe on its own. A gas-free engineer working a fixed instrument reading against a written threshold has a defensible decision; one working against a feeling does not.
Decide how long your fire watch runs, and put the number in the box
This template's "Maintain fire watch for 30 minutes after work stops" is FAYARD's minimum for open hull and workshop spaces. A yard with confined double-bottoms or heavily insulated machinery spaces often extends it to 60 minutes, and that number belongs on the diagram itself, not in a separate policy nobody has open while the torch is running.
Use the People column to keep continuity where it matters
Assign the same named person to the gas test, the fire watch and the post-work watch where your staffing allows it, the way this template assigns Nathan Reyes across all three. The workload BI panel will then show a realistic single-person load for the permit instead of hiding a handoff that never actually happened.
Decide what a denial actually costs
"Deny permit and record the corrective action required" loops back to "Inspect work area for combustibles and adjacent tanks or spaces", restarting the whole area-preparation phase. If your yard's HSE denials are usually paperwork rather than the space itself, add a shorter return path so a paperwork fix doesn't force a full re-inspection of a space nobody actually touched.
Frequently asked questions
What is a hot work permit and why does it need its own SOP?
A hot work permit is the authorization gate a yard runs before any welding, cutting, grinding or other spark- or flame-producing task begins in or near a space that could hold flammable vapour. It needs its own SOP, separate from a general permit-to-work system, because the two failure modes it exists to catch, an unmeasured atmosphere and an unwatched space after the work stops, are specific to ignition sources and don't show up in a generic work-permit checklist.
Who should be the fire watch, and can they do other work at the same time?
The fire watch should be a named individual whose only task for the duration is watching the work and the space around it, including behind bulkheads and through deck penetrations the welder can't see. In this template, Nathan Reyes, the Gas-Free Engineer who already tested the atmosphere, holds the fire watch role through execution and the mandatory post-work period. What matters is that the role is never combined with actively performing the hot work itself.
Why does the atmosphere test loop back through ventilation instead of just failing the permit?
An unsafe first reading is common, not exceptional, on a yard with confined double-bottoms, tank tops and recently emptied fuel spaces, so treating it as a dead end would just push technicians toward re-testing informally until they got a pass. "Ventilate space and remove combustibles, then retest" keeps the recovery inside the controlled process: the same gas-free engineer removes the specific hazard found and retests against the same limits, rather than the permit being abandoned and restarted from a blank form.
How long does the fire watch have to stay after the welding stops?
This template's minimum is 30 minutes, at "Maintain fire watch for 30 minutes after work stops", because smouldering material inside insulation or behind a bulkhead can flare up well after the torch is off. Many yards extend that period for confined or heavily insulated spaces; the number should be written into the SOP and the permit itself, not left as an unstated convention the fire watch has to remember.
What happens if HSE denies the permit?
"HSE approves and signs the hot work permit?" can return "Denied", which routes to "Deny permit and record the corrective action required" and back into re-inspection rather than simply stopping the process. That loop matters because it forces the corrective action to be written down and the space re-checked before anyone resubmits the request, instead of the permit quietly disappearing and the same request coming back verbally an hour later.
Where this process fits
In most operations this process follows Shipyard subcontractor onboarding SOP: induction to checkout.
Comes before
- Shipyard subcontractor onboarding SOP: induction to checkout — A shipyard subcontractor onboarding SOP for ship repair yards: document and insurance verification, a pass/fail safety induction, access and PPE issue, a hot work or confined space permit decision, supervised work and checkout.