We're running simultaneous operations on a Marcellus pad in Washington County, PA. One well is flowing back after frac. On the well next to it, a workover rig is pulling tubing. A third well is still producing to the facility. The flowback crew just reported H₂S at 12 ppm at the flowback tank hatch. Wind is shifting toward the workover rig. The rig crew has an open hot work permit for a cut on the wellhead flange. It's 2 AM, the company man is offsite, and two of the rig hands are contractors on their first week. What do we do, in order, in the first 60 minutes? Who has stop-work authority, and what has to be reported, to whom, and by when?
Simultaneous Operations Emergency Action Plan
First 60 Minutes: H₂S at Flowback + Hot Work + Workover (Marcellus Pad, Washington County, PA)
Location: Marcellus pad, Washington County, PA
Conditions at trigger: Flowback well active; adjacent workover pulling tubing; third well producing to facility; H₂S 12 ppm at flowback tank hatch; wind shifting toward workover; open hot work permit (cut on wellhead flange); 02:00; company man offsite; two rig hands first-week contractors
Purpose
Give the pad a non-negotiable, time-ordered actions list for the first 60 minutes after H₂S ≥10 ppm is reported at flowback while SIMOPS and ignition sources are live. Priority order: life safety → kill ignition → isolate/stop source pathways → account for people → notify → stabilize SIMOPS → document/report.
Scope
All personnel on pad (company, flowback, workover, production, water haulers, third parties). Covers H₂S alarm/response, hot work stop, workover and flowback secure, producing-well awareness, PA/OSHA/company notification. Does not replace the site ERP, but is the immediate execution spine until the company man or Incident Commander (IC) assumes control.
Command intent (read once, then execute)
12 ppm H₂S at the hatch with wind toward an open hot-work cut and an open workover is a life-safety and ignition event. You do not wait for the company man. You stop hot work first, pull people out of the downwind/plume path, secure sources, then notify. 12 ppm is above the common 10 ppm occupational action level used on most O&G sites (OSHA Ceiling for H₂S is 20 ppm under 1910.1000 Table Z-2; NIOSH REL/ceiling practices and company ERPs are typically more conservative; treat 10 ppm as stop/evacuate-from-zone).
WHO HAS STOP-WORK AUTHORITY (SWA)
Everyone. Absolute, no-rank, no-penalty:
| Role | SWA | Notes |
|---|---|---|
| Any worker (including first-week contractors) | Full SWA | May stop hot work, leave the zone, pull others |
| Flowback lead / operator who saw 12 ppm | Full SWA + initiate pad alarm | Already triggered by report |
| Workover toolpusher / driller | Full SWA on rig + hot work | Must kill permit and hot work immediately |
| Welder / cutter / fire watch | Full SWA | Must stop torch/arc on the spot |
| Night watch / lease operator / producing-well tender | Full SWA | May shut in or call for shut-in per authority matrix |
| HSE / medic (if on site) | Full SWA + evacuation control | |
| Company man (when contacted) | IC authority when on comms or on site | Does not need to be present for SWA to be valid |
| Any contractor | Same as company | First week is irrelevant. SWA is not earned by tenure |
Nuance: If anyone is told to “keep cutting” after H₂S + wind toward the rig, that order is invalid. SWA overrides production and schedule.
FIRST 60 MINUTES: ORDERED ACTIONS
MINUTE 0 to 5: LIFE SAFETY + KILL IGNITION (NON-NEGOTIABLE)
- Stop hot work immediately
- Cutter/welder: torch/arc OFF, purge down, tools clear of flange.
- Fire watch: remain only if safe upwind with escape path; otherwise withdraw with crew.
- Hot work permit: SUSPENDED / PULLED; stamp time, who pulled it.
- Nuance: 2 AM fatigue + new contractors = toolpusher or senior hand verbally confirm the cut has stopped; do not assume.
- Sound / initiate site alarm and radio call (plain language):
“All stations, H₂S 12 ppm flowback tanks, wind toward workover. Stop hot work. Assemble upwind at [muster]. No ignition.” - Move people out of the plume path
- Workover floor, monkey board, cellar, and anyone between tanks and rig → upwind / crosswind muster (pre-designated).
- Flowback crew: back off hatch; do not lean hatch or tank-top.
- Account for: rig crew (including two new contractors), flowback, production tender, truck drivers, any sleepers in trailers in plume path.
- Buddy check the two first-week hands; assign a named mentor for the next hour.
- Breathing protection
- Don escape packs / SCBA per site H₂S plan if entering or if levels rise; no work in unknown atmosphere without supplied air.
- Personal H₂S monitors: confirm on, not in coat pockets; note readings at muster.
- Ignition control blanket
- No grinding, no smoking, no truck starts in plume if LEL risk, no non-essential vehicle traffic through tank area.
- Diesel equipment: be ready for air-intake shutoff if gas migrates (especially if richer slug develops).
Do not in minutes 0 to 5: chase the company man before stopping the cut; open more hatches; continue pulling tubing; “finish the cut.”
MINUTE 5 to 15: ISOLATE, SECURE SIMOPS, ESTABLISH IC
- Establish on-pad Incident Commander (interim)
- Default night hierarchy if company man offsite: Workover Toolpusher or senior company lease op / night supervisor on pad; whoever is competent and present.
- Name them on radio: “[Name] has pad IC until company man or superintendent assumes.”
- IC only coordinates; does not cancel anyone’s SWA.
- Flowback source control (without heroic tank-top work)
- Stop non-essential flowback operations that increase venting at hatch.
- Close or verify tank vent paths per procedure; route to scrubber/flare if designed for it.
- If tanks are venting free to atmosphere at hatch: increase standoff, consider reducing flowback rate or diverting only if it can be done from safe position with monitors.
- Re-check wind with sock/flag; relocate muster if wind keeps swinging.
- Nuance (Marcellus flowback): 12 ppm at hatch often = localized vapor; wind shift can push a ribbon across the pad; treat workover as downwind exclusion until cleared by meter.
- Workover secure
- Stop pulling tubing; secure pipe; set slips/elevators in safe condition; blind or secure well control status per BOP/workover condition.
- Confirm well control equipment status (annular/rams as applicable); no “open hole” complacency while distracted by H₂S.
- Withdraw non-essential contractors from rig floor.
- Producing well (third well)
- Do not ignore it. Confirm heading, ESD status, and that facility inlet is stable.
- If H₂S can migrate to production equipment or facility is manned downwind, alert facility operator.
- Shut-in authority: per company matrix; if plume threatens facility or manned areas, IC may order shut-in of producing well and/or pad ESD.
- Atmospheric monitoring plan (immediate)
- Continuous personal monitors on all who remain in warm zone.
- Fixed or portable survey: flowback tanks, workover floor, cellar, hot work flange area, muster, trailers.
- Log: O₂, LEL, H₂S, CO if available; time, location, wind, initials.
- Work must remain stopped in any area where H₂S ≥ company action level (typically 10 ppm) or LEL elevated.
- Nuance: Hatch readings ≠ whole-pad clearance. Clear the workover and hot-work zone with fresh readings after wind shift, not by averaging.
MINUTE 15 to 30: NOTIFY: PEOPLE, THEN AGENCIES/COMPANY CHAIN
- Call company man / night superintendent NOW (if not already):
- Facts only: 12 ppm H₂S hatch; wind to workover; hot work stopped; muster status; headcount; well states (flowback / WO / producing); injuries none/yes; need for SCBA team / air trailer / shut-in.
- Request: IC confirmation, H₂S tech, operations decision on flowback rate cut or shut-in, hot work cancel for the night.
- Headcount & medical
- Written headcount vs gate sheet / tour sheet.
- Any symptoms (eye burn, headache, nausea, cough, confusion): oxygen, remove from exposure, EMS.
- H₂S can drop people fast above ceiling levels; if anyone was at the hatch without monitor, treat as potential exposure.
- Emergency services (as needed)
- 911 / local EMS-Fire if: injury, missing person, loss of consciousness, fire/ignition, uncontrolled release, levels climbing toward IDLH-type conditions, or IC judges pad cannot self-manage.
- Give: pad name, GPS/access road, Washington County, H₂S event, hot work stopped, best approach upwind.
- Facility / midstream / gas control
- Notify if producing well or flowback ties can send off-spec gas, trip compressors, or if pad ESD may hit gathering pressures.
MINUTE 30 to 45: STABILIZE FOR THE NIGHT (NO RESTART OF HOT WORK)
- Hot work permit
- Formal cancellation for this shift; not “pause.” New permit only in daylight after: atmosphere clear, wind assessed, SIMOPS JSA rewritten, company man/HSE approval, fire watch restored, gas test logged.
- 2 AM + H₂S + new hands = no re-issue tonight under normal conservative practice.
- SIMOPS board update
- Red-tag: Flowback H₂S event active; WO hot work killed; exclusion zone tanks→rig corridor.
- Only essential tasks: monitoring, well secure, emergency shutdown capability.
- Flowback decision tree (IC + company ops)
- Option A: Reduce rate / route to controlled flare-scrubber if available and safe.
- Option B: Shut in flowback well until wind daylight/remediation.
- Option C: Continue only if continuous monitoring shows muster and WO zone non-detect/below action, hatch work banned, and written ops approval.
- Default at 2 AM with wind toward rig: favor shut-in or hard rate cut over “keep flowing.”
- Workover decision
- Tubing left in safe position; no open flame/spark work.
- Resume only cold work that is upwind and non-ignition, if at all; many operators will stack out until daylight.
- Trailer / sleeping camp
- If downwind: evacuate sleepers to upwind musters or off-pad lodging decision.
MINUTE 45 to 60: DOCUMENT, REPORT CLOCKS, HAND OFF
- Written event log (start now, not at dawn)
- Timeline: detection time, who reported, reading 12 ppm, wind, hot work stop time, muster time, headcount, notifications, monitor readings, shut-in actions.
- Preserve monitor data / download if capable.
- Reporting (see dedicated section below); start company internal notifications inside this window; statutory clocks as applicable.
- Hand-off package for company man / day tour
- Status of three wells
- Permit state (cancelled)
- Exclusion zones
- Open actions (tank vapor control, need for vapor recovery/scrubber, air monitoring trailer)
- Names of first-week contractors and confirmation they were briefed/mustering OK
- Do not declare “all clear” until:
- Multiple consecutive readings below action level at hatch and WO/hot work zone and muster
- Wind stable or favorable
- IC + company ops agree
- Hot work remains cancelled pending new permit
WHAT HAS TO BE REPORTED, TO WHOM, BY WHEN
Times below are practical compliance targets. Company ERP and counsel may be stricter; follow the most stringent. Statutory triggers depend on whether this is only a localized occupational reading vs. a reportable release off-pad, injury, ignition, or well control event.
A. Immediate (minutes): life safety & company
| What | Whom | When |
|---|---|---|
| H₂S ≥ action level, hot work stopped, headcount | All pad personnel (radio/alarm) | Immediate |
| Same + well status | Company man / night superintendent / TOC | Immediate (as soon as life safety actions started; do not delay stop-work to call) |
| Injuries, missing, fire, uncontrolled release | 911 / Washington County emergency dispatch | Immediate |
| Gathering / facility impact or ESD | Gas control / facility operator | Immediate upon decision or trip |
| Contractor employer (rig contractor supervision) | Toolpusher → contractor company night call tree | Immediate / ASAP within first hour |
B. OSHA (federal): if injury/illness thresholds met
| Trigger | Whom | When |
|---|---|---|
| Fatality | OSHA | Within 8 hours |
| In-patient hospitalization, amputation, loss of eye | OSHA | Within 24 hours |
| No injury, internal only | None | No OSHA immediate call solely for 12 ppm with no adverse outcome, but record/investigate per company and 29 CFR 1904 if later classified |
Nuance: H₂S exposure medical treatment or hospitalization can start the clock; IC must track medical outcomes all night.
C. Pennsylvania / environmental / oil & gas
| Situation | Whom | When |
|---|---|---|
| Release of gas/vapor that threatens public, leaves pad, or hits waters of the Commonwealth / causes pollution | PADEP (and National Response Center if federal reportable quantity / CERCLA-type criteria met for listed materials; H₂S has federal reporting dimensions in release-to-environment scenarios) | Immediately as soon as knowledge of a reportable incident. Company environmental/compliance on call makes the formal notification; pad IC feeds facts without delay |
| Well control incident, blowout, fire, explosion, serious injury on oil & gas site | PADEP Oil & Gas / emergency notification per operator’s PA practices and 25 Pa. Code Chapter 78/78a incident expectations | As soon as practicable / immediate for emergencies |
| Public nuisance odor / off-pad H₂S complaint risk (Washington County residences near many Marcellus pads) | Company community/regulatory + PADEP if confirmed off-pad | Immediate investigation; regulatory call per confirmation |
| Spill of flowback fluid accompanying event | PADEP + maybe NRC depending on material/volume | Immediate / as required by SPCC and PA rules |
Nuance (important): A 12 ppm reading at a tank hatch confined on pad with no off-pad detection, no injury, and controlled response may remain a company high-potential incident (stop-work, investigation, possible PADEP courtesy/compliance call per operator policy). If monitors or neighbors show off-pad H₂S, or someone goes down, or you shut in with venting, treat as regulatory emergency notification and let EHS make the formal PADEP/NRC notifications the same night.
D. PHMSA / midstream
Only if the event affects jurisdictional pipeline/gathering in a way that meets Part 191 (gas, including regulated gathering) or Part 195 (hazardous liquid) incident/accident definitions (release, injury, fire, etc.). Pure on-pad flowback tank vapor often stays operator/PADEP/OSHA lane; confirm with compliance if gas was released to atmosphere from jurisdictional piping.
E. Company internal (typical Marcellus operator)
| What | Whom | When |
|---|---|---|
| High-potential H₂S + SIMOPS + hot work conflict | HSE on-call, Superintendent, sometimes VP Ops night desk | 1 hour max for formal internal flash report |
| Written incident flash | Company incident system | Before end of shift / within 4 to 6 hours |
| Hot work permit cancellation & SIMOPS MOC | Permit office / safe work system | Same night |
| Drug/alcohol or fatigue follow-up if required by policy after incident | HR/HSE | Per policy (not before medical stability) |
| Contractor first-week failure factors | Contractor management + company bridging document owner | Next business day formal; verbal same night |
F. What the pad must give reporters (keep on one card)
- Pad name / API well numbers (flowback, WO, producing)
- Time of first 12 ppm reading and monitor type/calibration date if known
- Wind direction/speed (even estimate)
- Hot work stop time + permit number
- Headcount / injuries
- Actions: shut-in yes/no, rates cut, ESD
- Whether plume left the pad
- Caller name/callback
HAZARDS (THIS SPECIFIC SETUP)
- H₂S toxicity (hatch concentration; plume to rig)
- Ignition: open hot work on wellhead flange during gas/vapor presence
- SIMOPS collision: flowback vapor + WO open systems + live producer
- Night: fatigue, lighting, slower recognition
- Inexperienced contractors: may freeze or follow bad orders
- Well control distraction while tubing pulled
- Secondary: LEL, fire watch gap, trailer occupants downwind
CONTROLS (ENGINEERING / ADMIN / PPE / MITIGATION)
- Engineering: tank VRU/scrubber/flare if installed; wind sock; fixed H₂S where required; ESD on producer; BOP on WO
- Administrative: SWA universal; SIMOPS matrix; hot work gas test continuous; night IC designation; no hot work restart without new permit; buddy for new hands
- PPE: personal H₂S monitors (worn), escape respirators, SCBA for re-entry, FR clothing, eye protection
- Mitigation: hard cancel hot work; upwind muster; rate cut/shut-in; continuous logging; EHS/PADEP clocks owned by company on-call
ROI / risk nuance: One night of deferred tubing pull and flowback is cheap next to an ignition in an H₂S plume or a single serious exposure claim on a Washington County pad; schedule loses to SWA every time.
REFERENCES
- OSHA 29 CFR 1910.1000 (air contaminants; H₂S Table Z-2 ceiling concepts), 1910.147 (LOTO if isolation), 1910.119 where PSM applies, 1910.1200 HazCom, 1904 (recordkeeping/reporting)
- OSHA 29 CFR 1910.252 / 1910 Subpart Q and applicable 1926 hot work / welding fire prevention practices; NFPA 51B principles for hot work
- API RP 49 (safe drilling/work in H₂S environments; practices widely adopted for H₂S ops discipline)
- API RP 54 (drilling and well servicing safety) and API RP 55 (production operations with H₂S); hot work practices as adopted in company manual
- API RP 76 (contractor safety management) and operator SIMOPS guidance elements
- 25 Pa. Code Chapters 78 / 78a (oil and gas wells; operations, incidents, notifications as applicable)
- PADEP emergency notification practices; NRC for federally reportable releases
- Operator ERP, H₂S contingency plan, hot work procedure, SIMOPS matrix, bridging documents for contractors
- Washington County emergency dispatch / site-specific ERP call tree
Order for the first hour: (1) kill hot work, (2) alarm and upwind muster with headcount; especially the two new hands, (3) secure flowback/WO/producer pathways without cowboy tank-top heroics, (4) name an on-pad IC and call the company man, (5) monitor and decide shut-in/rate cut, (6) cancel the permit for the night, (7) run notification clocks (company immediate; OSHA only if injury thresholds; PADEP/NRC if off-pad, pollution, or emergency release criteria).
SWA: every person on that pad, including night-one contractors.
If you want next deliverables from this: a one-page night-tour pocket card, a structured root cause analysis shell once facts freeze, or a SIMOPS matrix rewrite for flowback + workover + hot work on Washington County pads; say the word.