Temporary Repair Review: How to Restart Equipment Safely

F2 operational guide for supervisors, maintenance leaders, and EHS teams

A temporary repair can restore production while leaving the original hazard in place. The difficult decision comes later, when the equipment appears stable and the pressure to restart has already softened the memory of why the repair was needed.

A temporary repair is ready for restart only when the team can show what changed, what exposure remains, who owns the restriction, how the condition will be monitored, and when the permanent correction will be completed. This review is designed to be completed in about 30 minutes before the restart decision.

What you need before starting

Bring the work order, the original defect description, the repair details, the isolation and test records, the operating limit, and the name of the person who accepts the remaining exposure. Include the operator who will use the equipment, because a repair that looks sound from the workshop may create an awkward task at the point of use.

Do not begin with the question, ‘Can we run it?’ Begin with the question, ‘What condition are we accepting?’ Then ask what evidence would make that acceptance unsafe. James Reason’s work on latent failures is useful here. A visible repair can sit on top of a deeper weakness in design, maintenance planning, supervision, or decision ownership.

Step 1: Describe the original failure

Write the original failure in operational terms rather than using a vague label such as ‘equipment issue.’ State what stopped working, what energy or material was involved, when the defect was found, and what task was affected.

Then compare the description with the evidence from the work order, inspection, operator report, and isolation record. If the team cannot agree on what failed, the review is not ready to move forward. A temporary repair built on an uncertain problem can conceal the condition that caused the first failure.

Verify the step by asking an operator to explain the failure without reading the maintenance note. The common error is allowing the person who made the repair to define the problem alone, which can turn a diagnosis into a justification.

Step 2: Record exactly what the repair changed

Describe the repair, the parts used, the fasteners or materials added, and any function that is no longer available. If a guard was modified, identify the opening. If a sensor was bypassed, identify the protection that disappeared. If a component was braced, state which load it can and cannot withstand.

Use photographs, a marked-up drawing, or a short test record when words would leave room for interpretation. The review should distinguish between restoring a function and restoring the original level of protection, because those are not always the same result.

Verify the record with someone who did not perform the repair. A second person should be able to point to the changed condition in the field. The common error is describing the intended repair instead of the repair that actually exists.

Step 3: Identify the remaining exposure

List what can still injure a person or damage the process while the temporary condition remains. Consider stored energy, unexpected movement, loss of containment, heat, pressure, access, visibility, noise, ergonomics, and the possibility that another team will treat the repair as permanent.

Do not reduce the review to a risk score. Describe the exposure and the circumstance that makes it credible. A temporary brace may hold during normal operation but fail during cleaning, a jam, a power interruption, or an abnormal load. The relevant question is where the repair loses its margin.

Verify the exposure by walking the task with the operator and supervisor. The common error is accepting an administrative warning as the main control when a physical restriction, exclusion zone, reduced operating limit, or additional isolation is available.

Step 4: Set operating boundaries

Translate the remaining exposure into boundaries that a person can use during the shift. Define the permitted speed, load, temperature, pressure, duration, access route, inspection interval, and conditions that require an immediate stop.

Write the boundaries where the operator will see them, and connect them to the work permit, shift handover, or equipment status board when those tools are used. A restriction that exists only in a maintenance note is easy to lose during a change of crew.

Verify the boundaries by asking the next-shift supervisor to repeat them without prompting. The common error is using words such as ‘use caution’ or ‘monitor closely,’ which sound responsible but do not define a decision.

Step 5: Assign one owner for the temporary condition

Name the person who owns the condition until the permanent correction is complete. The owner is not simply the person who installed the repair. The owner must have authority to restrict use, stop the equipment, request technical support, and escalate when the promised correction is delayed.

Separate three responsibilities in the record. One person owns safe operation under the temporary boundary. Another may own the engineering or maintenance solution. A manager should own any decision to extend the temporary period. When all three responsibilities sit under the word ‘maintenance,’ accountability becomes difficult to test.

Verify ownership by asking who will be called on the night shift, who approves a changed operating condition, and who receives the escalation if the deadline is missed. The common error is assigning a department rather than a person with a decision right.

Step 6: Create a monitoring and stop rule

Choose the evidence that will show whether the temporary repair is holding. It might include a torque check, a leak inspection, a temperature reading, a vibration trend, a visual condition, or a test of the function that the repair was intended to support.

Set the frequency, the responsible person, the record location, and the action that follows an abnormal result. Monitoring without a stop rule produces information that arrives after the decision has already been made. The rule should state when operation pauses, who evaluates the condition, and what must be verified before restart.

Verify the plan by running one monitoring cycle before the equipment is released. The common error is choosing a measurement because it is easy to collect rather than because it can reveal degradation in time to protect people.

Step 7: Set the permanent-fix deadline

Give the permanent correction a due date, a named owner, and a dependency list. If the correction requires design approval, a spare part, a shutdown window, or contractor support, record that dependency instead of pretending the date is fully controlled.

Define what happens when the date cannot be met. The decision may require a new technical review, a tighter operating boundary, an additional safeguard, or removal of the equipment from service. An extension should be a new decision supported by evidence, not an automatic calendar change.

Verify the deadline in the planning system and in the shift handover record. The common error is treating a temporary repair as closed because the equipment returned to service, while the permanent action remains open without escalation.

Step 8: Hold the restart decision at the equipment

Bring the operator, maintenance representative, supervisor, and EHS or technical authority to the equipment when the exposure is significant. Review the original failure, the changed condition, the remaining exposure, the boundaries, the monitoring rule, and the permanent-fix deadline.

Ask each person what would make them stop the equipment during the next shift. This question gives the team a concrete route for dissent and exposes differences that a signature sheet can hide. The person closest to the task should be able to explain the restriction in plain language.

Verify the decision with a restart test that matches the real operating sequence. Record who accepted the condition and what evidence supported the decision. The common error is signing the form in an office before anyone confirms that the repair works under the conditions in which the equipment will be used.

Final checklist before restart

• The original failure is described and supported by evidence.
• The temporary repair is documented as it exists in the field.
• The remaining exposure is stated without relying on a score alone.
• Operating boundaries and stop conditions are visible to the next shift.
• One person owns the temporary condition and has authority to act.
• Monitoring has a frequency, record, and stop rule.
• The permanent correction has an owner, deadline, and escalation route.
• The restart decision was verified at the equipment with the operator present.

A temporary repair becomes unsafe when the organization remembers the restored production but forgets the unresolved exposure.

Use this review before restart, after any change in operating condition, and whenever the permanent correction moves beyond its agreed date. In The Illusion of Compliance, Andreza Araujo examines how documented completion can coexist with weak protection. The restart test is therefore not whether the form is complete. It is whether the people doing the work can state the boundary, see the evidence, and stop the task when the temporary margin disappears.