OSHA makes permit-space entry a controlled sequence

The first decision is whether entry will occur

The direct answer in 29 CFR 1910.146 is that employers in the covered general-industry scope must evaluate the workplace to determine whether permit-required confined spaces are present. If employees will not enter, the employer must take effective measures to prevent entry. If employees will enter, the employer must develop and implement the required written permit-space program. That decision should be explicit; an inventory label alone does not establish how exposure is controlled.

The record should identify the space, the characteristics that make it a confined space, the hazards that make it permit required, the affected employees, and the approved entry posture. The standard does not apply identically across all sectors—it excludes agriculture, construction, and shipyard employment from this section's scope—so the system also needs a documented applicability basis and links to any other governing requirements. A generic permit template without that scope record can give the appearance of control while using the wrong rule.

Acceptable conditions must be established and continuously verified

For entry, the program must identify and evaluate hazards before work begins, specify acceptable entry conditions, and establish measures to prevent unauthorized entry. It addresses isolation, purging, inerting, flushing, ventilation, barriers, and other controls according to the hazards. The entry process must provide for verification that conditions remain acceptable for the duration of the work, not only at the moment a permit is issued.

The atmospheric sequence is also specific: test first for oxygen content, then combustible gases and vapors, and then toxic gases and vapors. That order protects the meaning and safety of later readings. A digital record should retain the instrument, calibration or functional-check evidence required by procedure, tester, location, time, result, limit, ventilation state, and retest cadence. It should stop or escalate the entry when a required reading is missing, outside criteria, or no longer current.

Roles, communication, and rescue readiness are part of the permit

The standard assigns duties to authorized entrants, attendants, and entry supervisors. Entrants need hazard knowledge and communication; attendants monitor the entry and conditions, remain outside unless properly relieved, and perform specified response duties; entry supervisors verify that permit requirements are complete and that rescue services are available, then authorize, terminate, or cancel entry as conditions require. These are operating responsibilities, not interchangeable signature boxes.

Rescue planning has to be credible before entry. The program must provide procedures for summoning rescue and emergency services, rescuing entrants, preventing unauthorized rescue, and providing necessary emergency services. Where non-entry retrieval is required and feasible, the equipment and arrangements must be in place. A phone number in a permit does not by itself demonstrate availability, capability, response time, access, or familiarity with the space and hazards.

What an entry-control system should prove

A buyer test should follow one space from evaluation through work definition, isolation, atmospheric testing, briefing, permit authorization, active monitoring, entrant and attendant communication, a changed condition, evacuation, cancellation, and retained review. It should show who can perform each action, how expired or conflicting evidence blocks progression, how a rescue service is confirmed, and how a canceled permit feeds the required program review. The historical record should remain readable after the space, equipment, procedure, or personnel changes.

Where host-employer and contractor personnel share the workplace, the workflow must support required information exchange and coordination without obscuring each employer's duties. Software can enforce sequence and preserve evidence, but it cannot make an atmosphere acceptable, isolate energy, train a worker, assess rescue capability, or supervise entry. EHS, operations, industrial-hygiene, rescue, engineering, and legal owners must determine applicability and approve the actual controls.

Enterprise buyer test

Translate this change into the exact population, record type, workflow stage, decision owner, effective date, and evidence that could be affected. Ask current or prospective providers to demonstrate the named workflow with representative data and an exception—not a polished feature tour. Record what official documentation establishes, what a provider states, what the team observes, and what remains unresolved.

A defensible review also identifies the dependency outside the product. Authority interpretation, policy configuration, data quality, integrations, human judgment, approval rights, release governance, training, and retained evidence may remain customer or service responsibilities. The evaluation should preserve those boundaries instead of treating a technology claim as the complete operating model.

What we will watch next

Safety Operations Standard will watch the named source and affected market records for later evidence that changes status, scope, availability, implementation timing, workflow consequence, or the limits of the initial report. A later announcement does not silently overwrite this dated account; the change ledger preserves the sequence.