3.4 The permit: fifteen elements and a cancellation

1 What the permit is for

1910.146(e)(1): before entry is authorized, the employer shall document the completion of the measures required by paragraph (d)(3) by preparing an entry permit. Paragraph (d)(3) is the list of means, procedures and practices for safe entry — specifying acceptable entry conditions, giving entrants the opportunity to observe monitoring, isolating the space, purging or ventilating it, providing barriers, and verifying that conditions remain acceptable throughout. The permit exists to record that those things were done.

Three procedural rules follow, and each one closes a specific gap:

• (e)(2) — before entry begins, the entry supervisor identified on the permit signs it to authorize entry. 1926.1205(b) says the same.
• (e)(3) — the completed permit is made available at the time of entry to all authorized entrants, by posting it at the entry portal or by any other equally effective means, so that the entrants can confirm that pre-entry preparations have been completed. The permit is written for the person going in, not for the file.
• (e)(4) — the duration may not exceed the time required to complete the assigned task or job identified on the permit. There is no standard shift length in the standard; the job's own duration is the limit. OSHA's sample permit in Appendix D-2 shows one employer's choice: “PERMIT VALID FOR 8 HOURS ONLY.”

2 The fifteen elements

1926.1206 keeps all fifteen and adds one that general industry does not have: paragraph (e), the means of detecting an increase in atmospheric hazard levels in the event the ventilation system stops working. If you build a permit for construction work, that line has to be on it.

Notice how many elements are about people by name. (f)(4), (f)(5) and (f)(6) exist so that the attendant can answer one question instantly under stress: who is in there right now? A permit listing “crew of 3” cannot answer it, and the note to (f)(4) allows a roster or tracking system precisely so the answer stays accurate when people cycle in and out.

3 Ending the entry: cancel, or suspend

1910.146(e)(5) gives the entry supervisor two triggers to terminate entry and cancel the permit: the entry operations covered by the permit have been completed, or a condition that is not allowed under the permit arises in or near the permit space. “Or near” matters: a truck parked over the opening, a chemical delivery on the other side of the wall, a fire alarm in the building.

Construction splits the second trigger in two, at 1926.1205(e):

The suspension option is a genuine improvement for construction work, where a passing hazard — a crane lift overhead, a delivery in the access route — used to force the whole permit to be rewritten. What it is not is a way to keep a permit alive through a real change. The condition has to be temporary, it must not change the space's configuration, it must create no new hazards inside, and the space is fully reassessed before anyone goes back in.

4 The cancelled permit is the beginning of the paperwork, not the end

1910.146(e)(6): the employer shall retain each cancelled entry permit for at least 1 year to facilitate the review of the permit-required confined space program required by (d)(14). Any problems encountered during an entry operation shall be noted on the pertinent permit so that appropriate revisions to the program can be made. 1926.1205(f) is the same for construction.

That second sentence is a duty, and it is the hinge between one entry and the whole program. The permit is where the note goes: the blower had to be moved twice, the radio would not reach the bottom, the vault read 19.8 percent after the rain, the rescue service did not answer on the first number. Nobody remembers those things a year later, and the annual review is a formality without them.

1910.146(d)(14) then requires the employer to review the permit space program using the cancelled permits, within 1 year after each entry, and revise it as necessary. The notes say a single annual review may cover all entries in a 12-month period — and that if no entry was performed during a 12-month period, no review is necessary. 1926.1204(n) matches it.

5 The review that does not wait for the year

1910.146(d)(13) requires the employer to review entry operations when it has reason to believe the measures taken under the program may not protect employees, and to revise the program to correct the deficiencies before subsequent entries are authorized. The note lists what should trigger it, and the list is a good self-audit on its own:

• any unauthorized entry of a permit space;
• the detection of a permit space hazard not covered by the permit;
• the detection of a condition prohibited by the permit;
• the occurrence of an injury or near-miss during entry;
• a change in the use or configuration of a permit space;
• employee complaints about the effectiveness of the program.

1926.1204(m) carries the same duty and the same note. Two items on that list deserve attention because they are not incidents. A hazard that was not on the permit means the assessment was wrong, and a complaint means somebody who works in these spaces thinks the program does not fit — and 1910.146(l) already gave them the right to say so.

6 Building a permit that gets used

OSHA publishes two sample permits, in Appendix D to 1910.146, and they are public domain. Appendix D-1 is a one-page check sheet. Appendix D-2 is a fuller form with continuous monitoring rows, gas tester and instrument columns, a standby person block, and phone numbers at the bottom. Reading them is the fastest way to see what the fifteen elements look like as a document rather than a list — and Appendix D-2 is where the widely used entry-level figures come from, including the reminder that “SAFETY STANDBY PERSON IS REQUIRED FOR ALL CONFINED SPACE WORK.”

Two design points make the difference between a permit that is filled in and a permit that is used. First, put the reading next to the limit it is being compared against — Appendix B(2) says results should be recorded on the permit in the space provided adjacent to the stipulated acceptable entry condition. Second, keep the rescue information where it can be read from the portal under stress, because (f)(11) requires not just the service but the means for summoning it.

If you want working versions of both, the confined space entry permit generator covers all fifteen elements plus the construction addition, the atmospheric testing log carries the readings that (f)(10) requires when the permit runs out of room, and the rescue plan generator builds the document behind (f)(11). All three print on Letter and none of them sends anything anywhere.