An Undocumented Modification Created a Safety Issue: Decision Tree

Why this matters

You open a panel, trace a line, or pull a cover and find a modification nobody told you about: a bypassed safety device, a connection rated for something other than what it is now carrying, a jumped interlock, a gas or pressure joint that was never pressure-tested. It was not on any work order, the customer does not know it is there, and it has likely been running that way for months or years without incident. That last part is the trap. "It has not failed yet" is not the same as "it is safe," and the discovery moment is exactly when a tech under time pressure is tempted to note it, move on, and finish the original call. Do not. An active safety defect gets acted on before it gets diagnosed further.

Start here: is it live and is it a hazard right now

The first branch is not about who made the modification. It is about whether the condition in front of you can hurt someone in the next five minutes.

• If you can see, smell, or measure an active hazard (energized exposed conductor, active gas smell, a pressure vessel or line you cannot confirm is relieved, visible arcing or heat damage, a bypassed device on equipment that is currently running) - go to "If it is an active hazard right now" below. Stop everything else.
• If the modification is a defect that is not currently active (a disabled safety interlock on equipment that is powered down, a misrated part that is carrying normal load without visible distress) - go to "If it is a defect but not actively hazardous" below.

When you are not sure which bucket you are in, treat it as the active hazard. The cost of over-cautioning here is a few extra minutes. The cost of under-cautioning is a person.

If it is an active hazard right now

Do this before anything else, in order:

1. Stop work and clear the area. Get yourself and anyone nearby away from the immediate hazard zone.
2. De-energize or isolate the specific hazard, if you can do so safely from outside the danger zone: kill the breaker, close the accessible shutoff, shut down the equipment. Do not reach across or through the hazard to get to a control.
3. If the hazard involves gas, fire, or something you cannot safely isolate yourself, evacuate and call for help immediately rather than attempting to control it. See related: Smell of Gas or Burning: Response Decision Tree for the full evacuation sequence when gas or fire is involved.
4. Verify de-energized or de-pressurized before you go any further. Test it, do not assume it. A modification that bypassed a safety device once may have also disabled the indicator you would normally trust.
5. Tag it out. Lock out or red-tag the equipment so nobody, including a coworker or the customer, re-energizes or restarts it while you investigate.

Only after the immediate hazard is controlled do you move to tracing what the modification actually is and how far it goes.

If it is a defect but not actively hazardous

The equipment is off, or the condition has not created an immediate energized/pressurized/burning hazard, but what you found is clearly not to standard and represents a real risk if the equipment is used as-is.

1. Do not re-energize or restart it to "test if it still works." Confirming that a bypassed safety still lets the equipment run is not useful information, and it recreates the hazard you just found.
2. Tag it out of service if the defect is severe enough that operating it is unsafe, even though it is not hazardous sitting idle right now.
3. Trace the modification's full extent before you decide what it needs. A single visible splice or jumper is often not the whole story. Follow the wire, the line, or the logic to confirm you have found the entire workaround and not just the part that happens to be visible.

Trace it: how far does the modification go

Once the immediate risk is controlled, work out what you are actually looking at.

• Compare against the manufacturer's documentation or code requirement for that component, not against what "looks normal" from experience. A modification is often deliberately made to look unremarkable.
• Check for a pattern, not just a point. An undocumented modification in one place is sometimes one of several the same prior contractor made throughout the system. If you find one, look for others before you call the job done.
• Look for a reason it was done, even if you cannot confirm it. A bypassed interlock is sometimes a workaround for a different underlying fault that was never actually fixed. If you only restore the safety device without finding what it was hiding, the original fault may still be live and now unmasked in a new way.

Decide: repair now, red-tag and quote, or escalate

Not every undocumented modification gets fixed on the spot, but every genuine safety defect gets addressed before the equipment returns to normal service.

• Repair now when the fix is within scope, you have the parts and authorization, and leaving it disabled creates its own problem (for example, a customer with no working equipment overnight in extreme weather). Get sign-off to proceed if it is outside the original scope of the call.
• Red-tag and quote when the fix requires parts, time, or approval you do not have on this visit. The equipment stays out of service or clearly restricted until the repair happens. A defect that is dangerous enough to red-tag is dangerous enough that "we'll get to it next visit" is not an acceptable interim plan.
• Escalate when the modification suggests something outside your scope: a code violation that requires inspection or permitting, a hazard connected to utility-owned equipment, or a defect severe enough that you are not confident it is contained to what you can see. Loop in a supervisor, the authority having jurisdiction, or the utility before proceeding.

Talk to the customer and document

The customer needs to hear about a genuine safety finding clearly and without alarmist language, and it needs to be in writing. See related: Telling a Customer About a Prior Contractor's Undocumented Work for how to have that conversation without putting them on the defensive. At minimum, document:

• What the modification was and where you found it, with a photo taken before you disturbed anything.
• What hazard it created and what you did to control it (de-energized, tagged out, isolated).
• What was communicated to the customer and what they decided (repair now, defer with a written declination, escalate).

The recap

Hazard active right now: stop, isolate, verify dead, tag out. Defect present but not active: do not re-energize to test it, tag it out if severe, trace the full extent. Either way: confirm the scope, decide repair versus red-tag versus escalate, tell the customer plainly, and put all of it in writing before you close the call.

References

• OSHA General Duty Clause and lockout/tagout principles (29 CFR 1910.147 concepts)
• NFPA 70E for electrical energized-work and de-energize-and-verify practice
• Manufacturer documentation as the standard a modification is compared against
• See related: Telling a Customer About a Prior Contractor's Undocumented Work
• See related: Smell of Gas or Burning: Response Decision Tree
• See related: Red Tag vs Warn vs Proceed on Unsafe Equipment