Job safety analysis (JSA)
Permits: the paper expires and the crew stays inside
A permit has an end time. The building has no gate that makes anyone check it again. SafeOnuba treats the permit as the unit of work: one piece of paper, one zone and one crew.
a permita crewa zonean end time
The gap opens when the permit expires
The gatehouse checks who comes into the site. The permit says who may work in a zone, and until what time.
If the permit expires with the crew inside, nobody goes back through a turnstile. Access control sees no new movement. A geofence that only checks entries doesn’t either.
Nobody has come in: what has changed is the paper. SafeOnuba checks the permits every minute. When it finds one that has expired, it closes it and checks who is still inside its zone.
Whoever is still inside gets the alert on their wrist. The control room sees the same incident, with the name, the zone and the permit code.
The permit is the unit, not eight loose permits
The paper already groups the work. The system does the same. It is opened, closed and handed over as one unit.
- Code
- PT-0904
- Work
- A one-line description
- Where
- Contractor and zone
- When
- Start time and a mandatory end time
- Who
- One line per crew member
- Approval
- Name of the person who authorises it on site
The approval is a name written on the record. It is not a digital signature or an approval workflow.
ODIEL ENERGÍA · FICTITIOUS PLANT
PERMITS
JOB SAFETY ANALYSIS
PT-0904
- WORK
- Valve inspection on the compression unit
- ZONE
- Compression unit
- CONTRACTOR
- Maintenance contractor
- START
- 08:00
- MANDATORY END
- 15:00
CREW · 4 PEOPLE
- J. Márquez
- A. Romero
- L. Vázquez
- M. Pereira
MAP · LIVE
Approval: a name written on the record
OPEN THE NEXT →
While it is open, the map shows which permit the zone has
On the unit it reads PT-0904 · until 15:00. When it ends, it reads no permit.
The named crew may work there while its permit is valid. If anyone else comes in, they get the zone alert and the control room sees it.
The label changes when someone opens or closes the permit from any workstation. The map doesn’t need reloading.
PERMIT OPEN
PT-0904 · UNTIL 15:00
The named crew has a permit.
PERMIT CLOSED
NO PERMIT
Whoever is still inside gets the alert.
The permit expires. They are still inside.
The system doesn’t wait for them to leave and come back in. The watch vibrates with the reason and the zone. The control room gets an alert different from an unauthorised entry.
ODIEL ENERGÍA · FICTITIOUS PLANT
15:00
Permit expired while inside
J. Márquez is still in the compression unit.
PT-0904 · end 15:00 · alert sent to the watch
ZONE STATUS
NO PERMIT
Close and hand over without breaking up the crew
Closing before the end time
When the permit is closed, the system checks who is still inside and sends them the alert. The dashboard shows how many people have stayed in the zone without a permit. Whoever closes it knows whether they have set off one wrist or several.
Opening the next one
The handover takes two clicks. The next permit keeps the zone, the work and the crew, and proposes the next code of the day. Whoever opens it checks the mandatory end time before continuing.
A trench starts as a zone with a permit
One click where the trench is, the radius in metres, and who may work inside. The system draws the circle on the plan.
It doesn’t start as an off-limits zone. The crew that opens the trench is already inside. If their watch alerted on every position reading, the alert would stop meaning anything.
While the permit is open, that crew works without alerts. If someone else comes close, their watch alerts them. When the permit is closed, the zone disappears from the map on its own.
Afterwards, the permit leaves a record
It keeps who authorised it, which crew had the permit, in which zone, between which hours, under which code, who closed the permit and when.
In parallel, the time each person has spent inside each zone is kept, whether it was authorised or not. The record measures exposure, not only breaches: time inside with a permit counts too.
And if the entry opened an alert, that alert’s record carries its own time inside: when they went in, when they came out, how long they stayed and whether they had a permit, alongside the route taken while the alert was open. what that record looks like.
What this doesn’t do
It warns; it doesn’t block the way. In open ground there is nothing to close. The watch or the phone reports and the control room gets the alert.
It doesn’t sign off or approve the permit. The approval is a name for information only. There is no digital signature and no signatory roles.
It needs no integration beforehand. Today the permit is loaded from the dashboard; it is not integrated with the CAE platform or the client’s permit system.
It doesn’t detect overlaps or reserve space. That coordination stays with the safety officer.
The watch, outside explosive atmospheres. In ATEX zones the app runs on ATEX-certified phones, with the same system. The ATEX-certified watch is in development.
How SafeOnuba handles zones
The permit opens the zone for a crew and a window of time. The map shows which permit is in force. When the permit expires or is closed, the zone changes and whoever is still inside gets the alert.
In the mock-up you can open permit PT-0904, see it over the compression unit and let it expire with the crew inside. The plant is fictitious and is identified as Odiel Energía.