Specialist System Design Responsibility and Handover

Specialist System Design Responsibility and Handover

1. Direct engineering answer

Specialist-system responsibility must be assigned at the boundaries where process requirements become equipment specifications, where packages connect to common utilities, where control signals initiate protective action, and where acceptance evidence passes from supplier to facility owner. A purchase order that names several suppliers does not by itself establish who owns the complete integrated design. The project must appoint a competent system design authority, document each design input and interface, and require a single approved disposition for every deviation before energisation, introduction of process media or operational handover.

Specialist design, regulatory compliance and safety approval remain with qualified appointed parties.

2. Controlled scope and boundaries

3. Responsibility models: accountability is not a list of names

A practical matrix separates Accountable (final decision), Responsible (produces the work), Consulted (technical input) and Informed (receives the result). For each safety-critical decision there should be one identified accountable authority even where several suppliers perform tasks. An equipment vendor may be responsible for its skid and accountable for its own certificate, while the owner-appointed integrator is accountable for the complete facility interface. Avoid assigning two parties as final approver without defining an arbitration mechanism.

A responsibility matrix is insufficient if it contains only department names. Every row should carry an identifiable deliverable, revision, design basis, approval stage, interface endpoint and objective acceptance evidence. Where the owner has not appointed an integrator, this is a procurement hold, not an invitation to assume that the compressor supplier owns the whole plant.

4. Contracting and system boundary map

Process owner

Defines product, medium, hazards, purity, flow and pressure profiles; specifies operating modes, demand envelope, required availability and consequences of failure. Approves the process design basis and the operating philosophy.

Engineering design authority

Integrates design calculations, interface definitions, codes and site classification; reconciles conflicting supplier assumptions; accepts deviations and signs the final coordinated design basis.

Compressor or blower package supplier

States rated conditions, exclusions, material compatibility evidence, limits, package protective devices, utilities, electrical demand, instrument list, operating envelope and factory-test boundary. No facility-level guarantee is implied.

Treatment and gas-conditioning supplier

States contaminant removal, dryer/filter design boundaries, pressure drop, replacement intervals, monitoring and failure responses, with explicit inlet-condition limits.

Electrical and automation integrator

Defines power architecture, earthing, hazardous-area suitability where applicable, control network, cause-and-effect logic, alarms, interlocks, fail-safe positions and time synchronisation.

Civil and mechanical installation contractor

Owns foundations, anchorage, piping stress, supports, isolation, access, lifting, drainage, ventilation, noise interfaces and as-built confirmation within its scope.

Commissioning authority

Coordinates safe commissioning sequence, test permits, witness points, calibrated instruments, punch lists, retest and signed turnover evidence.

Operations and maintenance owner

Accepts training, spares, isolation procedures, alarms, periodic test duties, configuration baseline and maintenance responsibilities.

5. Design-basis freeze before equipment selection

The design basis should distinguish process requirement from proposed equipment performance. It identifies gas or air composition, hazardous constituents, oxygen compatibility if relevant, minimum/normal/peak flow, pressure and temperature at each boundary, inlet condition, ambient extremes, contaminant limits, start-up and shutdown profiles, abnormal scenarios, applicable jurisdiction and the accepted operating philosophy. Reference conditions for quoted flows must be written explicitly; Nm³/h, Sm³/h and actual m³/h are not interchangeable without reference temperature, pressure, humidity and composition.

Each requirement must have an origin: owner specification, specialist calculation, site survey, OEM proposal, approved test or a clearly labelled preliminary assumption. Unknown values remain open items; they cannot be filled silently by standard compressor catalogue assumptions.

6. Process and mechanical interface definition

Battery limits

Show tie-in numbers on P&IDs, upstream/downstream isolation, responsibility for mating flanges, gaskets, cleaning, pressure testing and reinstatement. Record which party supplies and installs each item.

Pressure protection

Separate equipment design pressure, maximum allowable working pressure, operating setpoints, trip settings and downstream design limits. Identify who calculates relief demand, who supplies the device, where discharge routes and who witnesses setpoint verification.

Media and cleanliness

Define compatible wetted materials, lubricants, sealants, particle cleanliness, moisture, oxygen service or other special preparation as applicable. Require written specialist confirmation; general industrial air treatment is not a substitute.

Vibration and loads

Identify nozzle loads, thermal growth, pulsation, foundation dynamic loads, pipe supports, flexible connections and acoustic treatment; assign design and field verification owners.

Ventilation and thermal

Specify package heat rejection, room ambient limits, airflow paths, recirculation prevention, cooling-water quality and upset conditions; assign the room designer and the package supplier separate obligations.

Maintenance and isolation

Define lockout, depressurisation, purge, drain, access and lifting paths. Include a safe means to test isolation and return equipment to service.

7. Electrical, controls and functional-safety interfaces

The controls handover must contain a signal list with tag, type, range, engineering units, scaling, update interval, communication protocol, alarm threshold, trip threshold, fail state and owner. A cause-and-effect matrix must connect each initiating condition to a specified response, including local package action, plant-wide shutdown, alarm annunciation, reset permissions and manual override controls. Communications loss is a design state, not an unspecified exception.

Where an independent protective function is required, a normal PLC permissive should not be described as an independent safety layer without an approved hazard assessment and documented architecture.

8. Normal, start-up, upset, emergency and recovery states

Normal operation

Confirm duty range, automatic sequencing, treatment bypass restrictions, environmental limits and evidence capture. Name the system owner for operation outside the accepted envelope.

Initial start-up

Document cleanliness release, mechanical completion, instrument calibration, utility readiness, leak checks, permissives, purge where relevant and authorised start instruction.

Minimum-demand operation

Check stable capacity, recycle/unload strategy, temperature and pressure control, deadhead risks, quality deterioration and nuisance cycling.

Peak demand

Trace simultaneous-user demand, pressure loss, standby availability, thermal limits and emergency reserve. Supplier curves must match actual site conditions.

Utility failure

Test power, cooling, instrument air, communications, ventilation and analyser failure separately. Specify which valves fail open or closed and why.

Process upset

Capture off-spec medium, contamination, blocked outlet, high temperature, liquid carryover or abnormal backpressure; assign isolation and recovery authorisation.

Emergency shutdown

Document personnel protection, shutdown hierarchy, trapped-pressure relief, restart lockouts and alarm retention. Specialist design authority approves safe state.

Recovery and return to service

Require root-cause disposition, inspection, clearance of trips, authorised reset and evidence that process and equipment conditions are within limits.

9. Mandatory asset — Specialist Design Responsibility Matrix

This controlled asset is intended for direct insertion into the enquiry pack and later commissioning dossier. “OPEN” is a valid interim status only while the project remains on hold; it is not an approval. Each row needs an identified person or organisation, evidence reference and a dated disposition before final release.

SR-01 — System design authority appointment

Input/evidence: Owner appointment letter | Method: Name the accountable integrator | Status: OPEN | Owner: Facility owner | Open item: No appointment supplied | Disposition: HOLD procurement release

SR-02 — Process design basis

Input/evidence: Approved PFD / design specification | Method: Check media and operating states | Status: OPEN | Owner: Process authority | Open item: Process conditions unverified | Disposition: HOLD equipment sizing

SR-03 — Battery-limit schedule

Input/evidence: P&ID and tie-in list | Method: Assign upstream/downstream scope | Status: OPEN | Owner: Lead mechanical engineer | Open item: No signed tie-in register | Disposition: HOLD installation

SR-04 — Compressor duty and exclusions

Input/evidence: OEM datasheet and curve | Method: Match duty at inlet conditions | Status: OPEN | Owner: Package supplier | Open item: Actual inlet state pending | Disposition: HOLD selection

SR-05 — Gas compatibility

Input/evidence: Wetted-parts and lubricant declaration | Method: Specialist media review | Status: OPEN | Owner: Process specialist | Open item: Compatibility evidence pending | Disposition: HOLD media introduction

SR-06 — Pressure relief

Input/evidence: Relief study and certificates | Method: Match protected volume and scenarios | Status: OPEN | Owner: Mechanical design authority | Open item: Relief basis unapproved | Disposition: HOLD pressure test

SR-07 — Electrical classification

Input/evidence: Site classification drawing | Method: Compare installed component scope | Status: OPEN | Owner: Electrical authority | Open item: Area classification missing | Disposition: HOLD energisation

SR-08 — Cause-and-effect

Input/evidence: Approved logic matrix | Method: Review alarms, trips and fail states | Status: OPEN | Owner: Controls integrator | Open item: Integrated matrix pending | Disposition: HOLD functional test

SR-09 — Instrument calibration

Input/evidence: Certificates and loop sheets | Method: Verify traceability and ranges | Status: OPEN | Owner: Instrument lead | Open item: Calibration plan missing | Disposition: HOLD acceptance

SR-10 — Utility-loss response

Input/evidence: Failure-mode analysis | Method: Witness power and cooling loss tests | Status: OPEN | Owner: Commissioning lead | Open item: Recovery philosophy missing | Disposition: HOLD operation

SR-11 — Cleaning and contamination

Input/evidence: Cleaning plan and certificates | Method: Verify specialist cleanliness | Status: OPEN | Owner: Quality lead | Open item: Cleanliness class unconfirmed | Disposition: HOLD process tie-in

SR-12 — Site installation

Input/evidence: As-built drawings and inspection | Method: Confirm pipe supports and access | Status: OPEN | Owner: Installation contractor | Open item: As-builts pending | Disposition: HOLD mechanical completion

SR-13 — Factory acceptance

Input/evidence: FAT protocol and report | Method: Resolve supplier deviations | Status: OPEN | Owner: Package supplier | Open item: Witness plan missing | Disposition: HOLD shipment acceptance

SR-14 — Site acceptance

Input/evidence: SAT protocol and signed data | Method: Test integrated operating states | Status: OPEN | Owner: Commissioning authority | Open item: Acceptance limits pending | Disposition: HOLD handover

SR-15 — Operator training

Input/evidence: Attendance and competency records | Method: Verify emergency and isolation tasks | Status: OPEN | Owner: Facility operations | Open item: Training scope pending | Disposition: HOLD operation

SR-16 — Handover dossier

Input/evidence: Document index and revisions | Method: Check completeness and approvals | Status: OPEN | Owner: Document controller | Open item: Final revisions pending | Disposition: HOLD closure

10. Worked scenario A — Multi-supplier high-purity process gas skid

Illustrative only. A facility plans to install a process-gas compressor, a treatment skid, an analyser panel and a plant-wide control system from four different vendors. The process owner specifies 150 actual m³/h at the compressor inlet and a downstream delivery pressure of 7.0 bar(g). The compressor proposal lists 150 m³/h at a different reference condition, while the treatment supplier quotes its pressure drop at nominal flow only. No party has signed responsibility for analyser failure or off-spec gas isolation.

Decision path: (1) freeze gas composition and inlet absolute pressure/temperature; (2) convert all flow guarantees to a common basis; (3) allocate the treatment pressure-drop curve to the treatment vendor and final pressure-margin assessment to the system integrator; (4) define analyser sample conditioning and response time; (5) agree whether an analyser fault triggers diversion, isolation or a controlled shutdown; (6) capture those outcomes in the cause-and-effect matrix and acceptance protocol. Until steps 1–5 are resolved, the package cannot be represented as integrated or approved.

Worksheet disposition: SR-02, SR-04, SR-08 and SR-14 OPEN; owner-appointed design authority must coordinate closure. The numerical values are hypothetical and not equipment guarantees.

11. Worked scenario B — Conflicting pressure boundary

Illustrative only. A compressor package can discharge at 10 bar(g), while a downstream vessel is rated for 8 bar(g). An upstream pressure-control valve is proposed, but the vendor scope does not include independent overpressure protection. The 2 bar difference is not a permissible safety margin; a regulating valve can fail. The mechanical design authority must establish credible overpressure scenarios, relief philosophy, isolation and testing requirements, and obtain applicable approvals. The package supplier must identify maximum possible discharge pressure and trip limits; the integrator must show the protected boundary and protective devices. SR-03 and SR-06 remain HOLD until evidence is signed.

12. Worked scenario C — Control interface under power loss

Illustrative only. A treatment skid valve remains in its last position during power failure, whereas the process authority requires off-spec media to be isolated. A generic statement “fail-safe” is insufficient: the fail state must be defined per valve, energy source and process consequence. The controls integrator proposes a fail-closed arrangement; the mechanical supplier checks trapped-pressure implications and the process authority verifies whether shutdown creates another hazard. Integrated blackout testing must include return-of-power and restart inhibition. The final cause-and-effect revision is the governing record.

13. Worked scenario D — Duty and interface margin

Illustrative only. The process needs 120 m³/h at 6.0 bar(g) at the user. A proposed conditioning train has a clean pressure loss of 0.15 bar and a documented end-of-life loss of 0.45 bar; distribution loss at peak demand is estimated at 0.25 bar. Ignoring other losses, compressor package delivery pressure must be at least 6.0 + 0.45 + 0.25 = 6.70 bar(g) at the defined battery limit for this operating case. This is an interface calculation, not a compressor setpoint or safety rating. Validate loss curves at the actual flow, operating temperature, and media. The supplier must verify available capacity at 6.70 bar(g) and the system authority must verify relief and control constraints.

14. Worked scenario E — Acceptance conflict and deviation closure

Illustrative only. FAT confirms that a package reaches the specified capacity under test-stand conditions. At site, the integrated system fails to reach required flow because a treatment skid and undersized tie-in piping add pressure loss. The package supplier’s FAT can remain valid without proving facility acceptance. The deviation record should separate package compliance, installed pressure-loss measurement, as-built pipework, treatment condition and process demand. The integrator assigns corrective work and the facility owner signs a witnessed retest. Do not close SAT merely by accepting an equipment-only FAT certificate.

15. Quantitative interface checks and traceability

A project calculation register should contain the equation, input units, reference conditions, revision, uncertainty and responsible checker. For a steady nonreacting ideal-gas approximation, inlet actual volumetric flow changes with absolute pressure and absolute temperature according to Q₂ = Q₁ × (P₁/P₂) × (T₂/T₁), provided the same mass flow and gas composition apply. Do not apply this equation blindly to phase-changing cryogenic streams, strongly nonideal gases or multiphase mixtures. Use an appropriate specialist property model and confirm compressibility when needed.

Pressure budgeting is an interface sum only after flow basis and loss curves agree: P_required at package outlet = P_required at user + ΣΔP_downstream. Different operating cases may have different pressure drops. Static nameplate pressure is not a substitute for performance-curve verification, and design pressure is not interchangeable with operating pressure.

16. Procurement deliverable hierarchy

Stage 0 — enquiry readiness

Owner issues process design basis, operating modes, preliminary P&ID, regulatory location and named design authority. Missing critical inputs trigger a written qualification, not a guessed quotation.

Stage 1 — technical bid

Supplier provides completed compliance matrix, datasheets, battery limits, performance guarantees, utility consumption, certifications, exceptions and provisional FAT/SAT boundaries.

Stage 2 — design freeze

Integrated P&IDs, interface control document, hazard-study actions, electrical single-line, cause-and-effect, instrument index, relief philosophy and deviation register are approved.

Stage 3 — manufacture and FAT

Approved drawings, inspection plan, calibration records, materials traceability and supplier FAT evidence are compiled with deviations and punch items.

Stage 4 — installation and SAT

Mechanical completion, as-builts, loop checks, interlock tests, measured duty tests and emergency-state demonstrations are witnessed and recorded.

Stage 5 — operations handover

Approved operating instructions, training, maintenance schedules, spare-parts lists, final software backups, passwords under controlled custody, certificates and residual-risk register are transferred.

17. Interface control document (ICD) minimum fields

For every physical or digital interface, record unique identifier, source and destination, service, medium, design/operating limits, tag and drawing references, connector/flange/terminal specification, power/signal protocol, control owner, mechanical installer, commissioning test, witness requirement, change history and acceptance status. Every ICD entry must link to the latest P&ID or wiring diagram; an orphan interface should be a blocking issue.

18. Design changes and deviation control

Any change affecting pressure, flow, media, material, protection settings, operating mode, alarm logic, interface point or required test must be screened for impact on connected packages. Change control should capture the proposed change, reason, technical assessment, revised documents, affected suppliers, new test obligations and approval before implementation. “Approved by email” is not a sufficient configuration baseline unless the approval is captured in the controlled record with document revision and scope.

19. Commissioning and acceptance protocol

Every witness record must include date, test ID, instrument serial/calibration status, observed values, pass/fail criteria, deviation number and signatures. An unperformed test is recorded NOT TESTED, never assumed PASS.

19.1 Document readiness

All approved revisions, certificates and open-action list available at site. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.2 Mechanical completion

Pressure boundaries, supports, isolation and relief arrangements inspected. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.3 Electrical readiness

Protection, grounding, panel certification and cable checks completed as applicable. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.4 Instrumentation

Calibration and end-to-end scaling verified at the point of use. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.5 Logic verification

Every critical permissive, alarm, trip, loss-of-signal and recovery state tested. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.6 Operating envelope

Minimum, normal and peak duties measured at defined inlet and delivery boundaries. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.7 Quality verification

Media-specific analytical testing witnessed by qualified specialist. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.8 Utility interruption

Power, cooling and communication failures exercised without unsafe restart. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.9 Punch closure

Critical deficiencies closed; residual items approved with restrictions. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

19.10 Final handover

As-built package, training and ownership acceptance signed. Record the actual outcome and any required corrective action against the agreed acceptance criterion.

20. Evidence and engineering-claim ledger

21. Troubleshooting responsibility disputes

Supplier says “outside our scope”

Locate the relevant battery-limit row, purchase specification and approved deviation. If no allocation exists, appoint a system owner and raise a formal scope clarification before testing.

Control signal exists but action is wrong

Compare tag scaling, signal polarity, logic revision and cause-and-effect. Separate device health from functional consequence; retest the complete chain.

All skids passed FAT but plant fails SAT

Measure interfaces simultaneously. Check inlet state, pressure drops, piping and simultaneous demand. Open an integration deviation rather than assigning blame without evidence.

As-built differs from design

Freeze affected work, assess safety and performance impact, issue revised drawings and repeat impacted tests.

Approval authority is unclear

Stop the release gate. Assign a named accountable party with authority to accept risk and technical exceptions; do not substitute an unsigned meeting note.

22. Frequently asked engineering questions

FAQ 1. Who owns the integrated system?

The owner-appointed competent design authority or integrator named in the contract; individual OEMs retain their defined package obligations.

FAQ 2. Does a package certificate approve the whole plant?

No. Certification applies to the stated product, scope and conditions. Integration and installation require separate review.

FAQ 3. Can a supplier approve its own interface?

It may verify its package boundary, but the project authority must resolve impacts on other packages and facility functions.

FAQ 4. What is the minimum handover evidence?

Approved as-builts, operating limits, test records, certificates, configuration backups, training and open-item disposition.

FAQ 5. Who approves protective trip logic?

The responsible process/safety authority approves intent; controls specialists implement and commission to the approved cause-and-effect.

FAQ 6. How are incompatible vendor assumptions resolved?

By documenting the conflict, selecting a common design basis and obtaining signed changes from affected parties.

FAQ 7. Does FAT replace SAT?

No. FAT proves a defined factory scope; SAT demonstrates the integrated installation under agreed site conditions.

FAQ 8. Can an open item be accepted?

Only where a competent authority documents risk, restrictions, closure owner and deadline; safety-critical holds cannot be bypassed.

FAQ 9. What is the best time to assign responsibilities?

Before RFQ and equipment selection, then refine the matrix at design freeze and commissioning.

FAQ 10. What is an ICD?

A controlled interface control document defining technical endpoints, limits, responsibilities and tests.

FAQ 11. How is a design change traced?

Through a numbered change request, impact review, document revisions, approvals and repeat testing as needed.

FAQ 12. How should flow units be handled?

State actual/reference basis, pressure, temperature, humidity and composition before comparing values.

FAQ 13. Who owns final operator training?

The facility operations owner accepts training; relevant suppliers provide scoped technical instruction.

FAQ 14. Can general compressor capability prove specialist suitability?

No. Specialist qualification depends on the full system and applicable media, hazard and facility requirements.