(a) For all production platforms, you must comply with the following production safety system requirements, in addition to the requirements of § 250.802 of this subpart and the requirements of API RP 14C (incorporated by reference as specified in 30 CFR 250.198 ).
(b) Design, installation, and operation of additional production systems—(1) Pressure and fired vessels. Pressure and fired vessels must be designed, fabricated, and code stamped in accordance with the applicable provisions of Sections I, IV, and VIII of the American Society of Mechanical Engineers (ASME) Boiler and Pressure Vessel Code. Pressure and fired vessels must have maintenance inspection, rating, repair, and alteration performed in accordance with the applicable provisions of API Pressure Vessel Inspections Code: In-Service Inspection, Rating, Repair, and Alteration, API 510 (except Sections 5.8 and 9.5) (incorporated by reference as specified in § 250.198 ).
(i) Pressure relief valves shall be designed, installed, and maintained in accordance with applicable provisions of sections I, IV, and VIII of the ASME Boiler and Pressure Vessel Code. The relief valves shall conform to the valve-sizing and pressure-relieving requirements specified in these documents; however, the relief valves, except completely redundant relief valves, shall be set no higher than the maximum-allowable working pressure of the vessel. All relief valves and vents shall be piped in such a way as to prevent fluid from striking personnel or ignition sources.
(ii) Steam generators operating at less than 15 pounds per square inch gauge (psig) shall be equipped with a level safety low (LSL) sensor which will shut off the fuel supply when the water level drops below the minimum safe level. Steam generators operating at greater than 15 psig require, in addition to an LSL, a water-feeding device which will automatically control the water level.
(iii) The lessee shall use pressure recorders to establish the new operating pressure ranges of pressure vessels at any time when there is a change in operating pressures that requires new settings for the high-pressure shut-in sensor and/or the low-pressure shut-in sensor as provided herein. The pressure-recorder charts used to determine current operating pressure ranges shall be maintained at the lessee's field office nearest the OCS facility or at other locations conveniently available to the District Manager. The high-pressure shut-in sensor shall be set no higher than 15 percent or 5 psi, whichever is greater, above the highest operating pressure of the vessel. This setting shall also be set sufficiently below (5 percent or 5 psi, whichever is greater) the relief valve's set pressure to assure that the pressure source is shut in before the relief valve activates. The low-pressure shut-in sensor shall activate no lower than 15 percent or 5 psi, whichever is greater, below the lowest pressure in the operating range. The activation of low-pressure sensors on pressure vessels which operate at less than 5 psi shall be approved by the District Manager on a case-by-case basis.
(2) Flowlines.(i) You must equip flowlines from wells with high- and low-pressure shut-in sensors located in accordance with section A.1 and Figure A1 of API RP 14C (incorporated by reference as specified in § 250.198 ). The lessee shall use pressure recorders to establish the new operating pressure ranges of flowlines at any time when there is a significant change in operating pressures. The most recent pressure-recorder charts used to determine operating pressure ranges shall be maintained at the lessee's field office nearest the OCS facility or at other locations conveniently available to the District Manager. The high-pressure shut-in sensor(s) shall be set no higher than 15 percent or 5 psi, whichever is greater, above the highest operating pressure of the line. But in all cases, it shall be set sufficiently below the maximum shut-in wellhead pressure or the gas-lift supply pressure to assure actuation of the SSV. The low-pressure shut-in sensor(s) shall be set no lower than 15 percent or 5 psi, whichever is greater, below the lowest operating pressure of the line in which it is installed.
(ii) If a well flows directly to the pipeline before separation, the flowline and valves from the well located upstream of and including the header inlet valve(s) shall have a working pressure equal to or greater than the maximum shut-in pressure of the well unless the flowline is protected by one of the following:
(A) A relief valve which vents into the platform flare scrubber or some other location approved by the District Manager. The platform flare scrubber shall be designed to handle, without liquid-hydrocarbon carryover to the flare, the maximum-anticipated flow of liquid hydrocarbons which may be relieved to the vessel.
(B) Two SSV's with independent high-pressure sensors installed with adequate volume upstream of any block valve to allow sufficient time for the valve(s) to close before exceeding the maximum allowable working pressure.
(iii) If you are installing flowlines constructed of unbonded flexible pipe on a floating platform, you must:
(A) Review the manufacturer's Design Methodology Verification Report and the independent verification agent's (IVA's) certificate for the design methodology contained in that report to ensure that the manufacturer has complied with the requirements of API Spec 17J (incorporated by reference as specified in 30 CFR 250.198 );
(B) Determine that the unbonded flexible pipe is suitable for its intended purpose on the lease or pipeline right-of-way;
(C) Submit to the MMS District Manager the manufacturer's design specifications for the unbonded flexible pipe; and
(D) Submit to the MMS District Manager a statement certifying that the pipe is suitable for its intended use and that the manufacturer has complied with the IVA requirements of API Spec 17J (incorporated by reference as specified in 30 CFR 250.198 ).
(3) Safety sensors. All shutdown devices, valves, and pressure sensors shall function in a manual reset mode. Sensors with integral automatic reset shall be equipped with an appropriate device to override the automatic reset mode. All pressure sensors shall be equipped to permit testing with an external pressure source.
(4) ESD. The ESD must conform to the requirements of Appendix C, section C1, of API RP 14C (incorporated by reference as specified in § 250.198 ), and the following:
(i) The manually operated ESD valve(s) shall be quick-opening and nonrestricted to enable the rapid actuation of the shutdown system. Only ESD stations at the boat landing may utilize a loop of breakable synthetic tubing in lieu of a valve.
(ii) Closure of the SSV shall not exceed 45 seconds after automatic detection of an abnormal condition or actuation of an ESD. The surface-controlled SSSV shall close in not more than 2 minutes after the shut-in signal has closed the SSV. Design-delayed closure time greater than 2 minutes shall be justified by the lessee based on the individual well's mechanical/production characteristics and be approved by the District Manager.
(iii) A schematic of the ESD which indicates the control functions of all safety devices for the platforms shall be maintained by the lessee on the platform or at the lessee's field office nearest the OCS facility or other location conveniently available to the District Manager.
(5) Engines—(i) Engine exhaust. You must equip engine exhausts to comply with the insulation and personnel protection requirements of API RP 14C, section 4.2c(4) (incorporated by reference as specified in § 250.198 ). Exhaust piping from diesel engines must be equipped with spark arresters.
(ii) Diesel engine air intake. All diesel engine air intakes must be equipped with a device to shutdown the diesel engine in the event of runaway. Diesel engines that are continuously attended must be equipped with either remote operated manual or automatic shutdown devices. Diesel engines that are not continuously attended must be equipped with automatic shutdown devices.
(6) Glycol dehydration units. A pressure relief system or an adequate vent shall be installed on the glycol regenerator (reboiler) which will prevent overpressurization. The discharge of the relief valve shall be vented in a nonhazardous manner.
(7) Gas compressors. You must equip compressor installations with the following protective equipment as required in API RP 14C, Sections A4 and A8 (incorporated by reference as specified in § 250.198 ).
(i) A Pressure Safety High (PSH), a Pressure Safety Low (PSL), a Pressure Safety Valve (PSV), and a Level Safety High (LSH), and an LSL to protect each interstage and suction scrubber.
(ii) A Temperature Safety High (TSH) on each compressor discharge cylinder.
(iii) The PSH and PSL shut-in sensors and LSH shut-in controls protecting compressor suction and interstage scrubbers shall be designated to actuate automatic shutdown valves (SDV) located in each compressor suction and fuel gas line so that the compressor unit and the associated vessels can be isolated from all input sources. All automatic SDV's installed in compressor suction and fuel gas piping shall also be actuated by the shutdown of the prime mover. Unless otherwise approved by the District Manager, gas—well gas affected by the closure of the automatic SDV on a compressor suction shall be diverted to the pipeline or shut in at the wellhead.
(iv) A blowdown valve is required on the discharge line of all compressor installations of 1,000 horsepower (746 kilowatts) or greater.
(8) Firefighting systems. Firefighting systems for both open and totally enclosed platforms installed for extreme weather conditions or other reasons shall conform to sub section 5.2, Firewater systems, of API RP 14G (incorporated by reference as specified in § 250.198 ), Fire Prevention and Control Open Type Offshore Production Platforms, and shall require approval of the District Manager. The following additional requirements shall apply for both open- and closed-production platforms:
(i) A firewater system consisting of rigid pipe with firehose stations or fixed firewater monitors shall be installed. The firewater system shall be installed to provide needed protection in all areas where production-handling equipment is located. A fixed waterspray system shall be installed in enclosed well-bay areas where hydrocarbon vapors may accumulate.
(ii) Fuel or power for firewater pump drivers shall be available for at least 30 minutes of run time during a platform shut-in. If necessary, an alternate fuel or power supply shall be installed to provide for this pump-operating time unless an alternate firefighting system has been approved by the District Manager.
(iii) A firefighting system using chemicals may be used in lieu of a water system if the District Manager determines that the use of a chemical system provides equivalent fire-protection control.
(iv) A diagram of the firefighting system showing the location of all firefighting equipment shall be posted in a prominent place on the facility or structure.
(v) For operations in subfreezing climates, the lessee shall furnish evidence to the District Manager that the firefighting system is suitable for the conditions.
(9) Fire- and gas-detection system.(i) Fire (flame, heat, or smoke) sensors shall be installed in all enclosed classified areas. Gas sensors shall be installed in all inadequately ventilated, enclosed classified areas. Adequate ventilation is defined as ventilation which is sufficient to prevent accumulation of significant quantities of vapor-air mixture in concentrations over 25 percent of the lower explosive limit (LEL). One approved method of providing adequate ventilation is a change of air volume each 5 minutes or 1 cubic foot of air-volume flow per minute per square foot of solid floor area, whichever is greater. Enclosed areas (e.g., buildings, living quarters, or doghouses) are defined as those areas confined on more than four of their six possible sides by walls, floors, or ceilings more restrictive to air flow than grating or fixed open louvers and of sufficient size to all entry of personnel. A classified area is any area classified Class I, Group D, Division 1 or 2, following the guidelines of API RP 500 (incorporated by reference as specified in § 250.198 ), or any area classified Class I, Zone 0, Zone 1, or Zone 2, following the guidelines of API RP 505 (incorporated by reference as specified in § 250.198 ).
(ii) All detection systems shall be capable of continuous monitoring. Fire-detection systems and portions of combustible gas-detection systems related to the higher gas concentration levels shall be of the manual-reset type. Combustible gas-detection systems related to the lower gas-concentration level may be of the automatic-reset type.
(iii) A fuel-gas odorant or an automatic gas-detection and alarm system is required in enclosed, continuously manned areas of the facility which are provided with fuel gas. Living quarters and doghouses not containing a gas source and not located in a classified area do not require a gas detection system.
(iv) The District Manager may require the installation and maintenance of a gas detector or alarm in any potentially hazardous area.
(v) Fire- and gas-detection systems must be an approved type, designed and installed according to API RP 14C, API RP 14G, and either API RP 14F or API RP 14FZ (the preceding four documents incorporated by reference as specified in § 250.198 ).
(10) Electrical equipment. Electrical equipment and systems shall be designed, installed, and maintained in accordance with the requirements in § 250.114 of this part.
(11) Erosion. A program of erosion control shall be in effect for wells or fields having a history of sand production. The erosion-control program may include sand probes, X-ray, ultrasonic, or other satisfactory monitoring methods. Records by lease, indicating the wells which have erosion-control programs in effect and the results of the programs, shall be maintained by the lessee for a period of 2 years and shall be made available to MMS upon request.
(c) General platform operations.(1) Surface or subsurface safety devices shall not be bypassed or blocked out of service unless they are temporarily out of service for startup, maintenance, or testing procedures. Only the minimum number of safety devices shall be taken out of service. Personnel shall monitor the bypassed or blocked-out functions until the safety devices are placed back in service. Any surface or subsurface safety device which is temporarily out of service shall be flagged.
(2) When wells are disconnected from producing facilities and blind flanged, equipped with a tubing plug, or the master valves have been locked closed, you are not required to comply with the provisions of API RP 14C (incorporated by reference as specified in § 250.198) or this regulation concerning the following:
(i) Automatic fail-close SSV's on wellhead assemblies, and
(ii) The PSH and PSL shut-in sensors in flowlines from wells.
(3) When pressure or atmospheric vessels are isolated from production facilities (e.g., inlet valve locked closed or inlet blind-flanged) and are to remain isolated for an extended period of time, safety device compliance with API RP 14C or this subpart is not required.
(4) All open-ended lines connected to producing facilities and wells shall be plugged or blind-flanged, except those lines designed to be open-ended such as flare or vent lines.
(d) Welding and burning practices and procedures. All welding, burning, and hot-tapping activities shall be conducted according to the specific requirements in §§ 250.109 through 250.113 of this part.