A hot-work permit is a promise: we checked, it’s safe to strike an arc right here. But a permit only knows what the air was doing the moment somebody tested it — and air moves. Today’s story is a spark, a rusted-out tank, and a boilermaker whose name is now on a Delaware law.
On This Day in Safety — July 17, 2001 · Delaware City, Delaware
Straight with you: no clean U.S. worker-safety anniversary lands exactly on July 16 — the exact-date events are a 1937 Atlantic City gasoline-tank fire with no recorded cause and a 2010 pipeline spill overseas. So we’re stepping one day into this same week for a lesson that lands on the floor.
At the Motiva refinery in Delaware City, a contract crew was up on a catwalk doing hot work — repairing the steel grating over a row of spent sulfuric acid tanks. Routine job. Guys had done it plenty of times.
Here’s what nobody was watching: spent sulfuric acid slowly eats the carbon steel it sits in, and that reaction gives off hydrogen — a flammable gas — into the empty space at the top of the tank. Tank 393 was rotten. It had holes in its roof and shell from corrosion. It had leaked six times in three years. Company inspectors had flagged it and recommended, in writing, that it be pulled out of service. It was still in service.
A spark from the hot work dropped into that vapor space. The tank exploded, tore off its own floor, and collapsed. Jeffrey Davis, a boilermaker, was killed. Eight other workers were hurt. About 1.1 million gallons of spent acid let go; roughly 99,000 gallons reached the Delaware River and killed fish and aquatic life along it.
The rule this is written into: 29 CFR 1910.252 — hot work (welding, cutting, brazing). Translated to the floor: before anybody strikes an arc or throws sparks, you test the atmosphere for flammables, you post a fire watch, and — this is the part that killed Jeff Davis — you keep checking, because a tank that reads clean at 7 a.m. can build a flammable headspace by lunch. The CSB’s own recommendation out of this fire was continuous or periodic monitoring during hot work, not a one-and-done test. It ties straight into 29 CFR 1910.119 — Process Safety Management, which says the equipment your people work next to has to be mechanically sound. A tank flagged for removal three years running is the opposite of that.
Delaware later passed the Jeffrey Davis Aboveground Storage Tank Act. That’s what “written in blood” means — a man goes to work on a catwalk and comes home as a statute. The people closest to that tank saw the hazard first; they wrote it down six times. The failure wasn’t the crew doing the welding. It was a system that let a rotten tank keep working while the paperwork piled up.
Trending Now
Heat: the standard stalled, but the inspections didn’t. There’s still no final federal heat standard — OSHA’s permanent heat rule is proposed and stuck. But the enforcement program is very much alive. OSHA’s updated Heat National Emphasis Program took effect April 10, 2026, runs for five years, and now targets 55 high-hazard industries (22 of them newly added). On any day the heat index hits 80°F or the National Weather Service posts a heat advisory, a compliance officer can open — or expand — an inspection on heat alone. So what: you can’t “comply” with a rule that isn’t final, but you can absolutely be cited under the General Duty Clause. Water, rest, shade, a real acclimatization plan for new and returning workers, and something in writing. That’s what they’re looking for this week.
EPA moves to loosen the chemical-accident rule. EPA has proposed rolling back big pieces of the 2024 Risk Management Program (RMP) update — including the Safer Technologies and Alternatives Analysis for certain existing processes — under what it’s calling a “common sense” reconsideration. It’s a proposal; the 2024 rule is still on the books. So what: if you run an RMP-covered process, don’t stand down your third-party audits or your process-hazard work on the strength of something that isn’t final. Tank 393 is the whole argument for why mechanical integrity and management of change aren’t just paperwork.
Fail of the Day
A maintenance crew pulled a hot-work permit to weld a handrail near a tank farm. Morning gas test at the work spot: clean. Permit signed, arc struck, job rolling. What the permit didn’t capture: a nearby drain had been backfilled with process slop the shift before, and it was quietly off-gassing as the day warmed up. Around 2 p.m., one of the crew clipped a four-gas meter back onto his belt out of habit — and it screamed at 30% LEL. They shut it down. No fire. No injury.
Here’s the blameless read: nobody “forgot” anything. The permit did exactly what the system asked of it — one test, one signature, good for the shift. The atmosphere never agreed to those terms. The near-miss wasn’t caught by the paperwork; it was caught by a guy with a meter and a habit. Don’t ask who messed up. Ask why a single morning test was allowed to speak for eight hours of changing air — then fix the permit.
Got a fail or a near-miss? Hit reply. We’ll feature it anonymously — no names, no company, no blame. Just the lesson, so the next crew doesn’t learn it the hard way.
Do This One Thing
Before any hot work today, put a calibrated gas monitor in the space and leave it running — continuous monitoring, not a single test at the start. Atmospheres drift. A clean reading at 7 a.m. does not protect a spark at 2 p.m. If Jeff Davis’s crew had a meter live in that tank’s vapor space, this is a different story.
🎬 Prefer to watch? Today’s 60-second version is on YouTube → https://www.youtube.com/@GetSafetyIntel (subscribe there too).
Please stay Safe & Hydrated!!!