Lockout / tagout audits, machine-guarding inspections, and robot-cell fence integrity - written against the LOTO program your plant already runs.
Built for factory-floor EHS managers and the procurement leads who approve the evaluation. Speaks the language a plant safety officer already speaks - OSHA 29 CFR 1910.147 (Control of Hazardous Energy) procedures and periodic inspection, OSHA 29 CFR 1910.212 (General Requirements for all machines) point-of-operation protection, and the machine-specific subparts 1910.213 (woodworking machinery) and 1910.215 (abrasive wheel machinery). Every signal Pactwell reasons across maps to a named CFR subparagraph, so the audit-ready PDF is the same evidence the OSHA inspector opens the morning of the walk.
The three surfaces a factory-floor EHS manager signs for.
OSHA 1910.147, 1910.212, 1910.213, and 1910.215 are not aspirational - they are the subparts a plant safety officer already names on a citation walk-around. Pactwell’s sensor + permit + CCTV correlator writes to those subparts directly, so the evidence the morning of the walk is the same evidence the platform wrote at the second of the breach.
OSHA 29 CFR 1910.147 · Control of Hazardous Energy (Lockout/Tagout)
LOTO written into the audit trail, not into an annual binder.
Pactwell reasons across the energized-equipment permit, the lock and tag state, the energy-isolation point camera, and the worker badge the moment the lock should be applied. A missed lockout during a maintenance window is no longer reconstructed after the fact — every deviation from the written procedure is captured at the second the lock is absent on the isolation point the program specifies.
OSHA 29 CFR 1910.212 · General Requirements for All Machines
Machine-guarding integrity the second-shift inspection keeps skipping.
Guard interlock state, point-of-operation sensor, and the operating-cycle compare the correlator reasons across in real time. When an interlock is bypassed, removed, or held open during cycle — the second-shift condition the morning walkthrough rarely catches — the evidence pack is written against 1910.212(a)(1) the moment of the breach, not at the next scheduled inspection.
Woodworking and abrasive-wheel machinery, correlated against the subparagraph that names the guard.
Abrasive-wheel RPM overspeed, wood-working guard presence, tongue-guard gap, and the wheel-tool-rest envelope the operator workstation is keyed to — the correlator reads the machine-specific sensor set against 1910.213(c) / 1910.215(b) the same way 147 reasons across the lockout. The machine-specific citation surfaces automatically when the correlator fires on a wood line or a wheel station.
Skeptical factory-floor EHS managers, answered
Three objections a factory-floor EHS manager brings to the demo.
The conversations we lose are the ones where the manager already trusts the annual LOTO binder, has a walk-around ticket that closes clean on first shift, or has weathered an OSHA visit where the citation landed on a propped cell-fence he never saw opened. The answers below are the ones we open with.
Our LOTO program is on paper — the audit cycle is once a year and we pass it.
A paper program tells the auditor the procedure exists. It does not tell the auditor the lock was applied on the air-line at station 4 during the 2 a.m. bearing swap. Pactwell reads the isolation point camera, the lock-state sensor, the worker badge interval, and the energized-work permit in the same second — surfacing a missed lockout the moment the maintenance window opens, not eleven months later at the certificate review.
Machine-guarding inspections get skipped on second shift; we find out at the OSHA visit.
The walk-around clip board cannot cover 1910.212(a)(1) on three lines at 2 a.m. with four leads out. Pactwell reads the guard interlock state, the point-of-operation sensor, and the cycle counter continuously, and writes the bypass the cycle the interlock is open beyond the procedural threshold. The supervisor dashboard surfaces the gap while the line is still running, not when the inspector opens the log.
AMR / AGV paths and robot-cell fence gates get propped open; we have no record.
A propped fence gate and an e-stop chain with a bypassed switch are the second most common audit finding on a robot cell after LOTO. Pactwell points the correlator at the cell-fence gate sensor, the e-stop contact state, the AMR pedestrian-proximity reading, and the cell entry badge - and writes the propped-open condition to the audit trail while the production shift is still on the floor. AMR near-miss events surface separately, with the trajectory written to the same pack.
What gets watched on a factory floor
Six watch surfaces, each with its own evidence puck.
The matrix below names the surfaces the correlator is tuned to on a factory floor - from lockout / tagout absence on an isolation point, to AMR / AGV pedestrian proximity on the line. Each card pairs the input combination with the evidence puck Pactwell writes the moment the combination fires.
Lockout / tagout absence during energized work at an isolation point
InputEnergized-equipment permit + lock-state sensor on the isolation point + worker badge reader + isolation-point camera
LOTO-absence puck: energized work permit open, isolation-point lock-state sensor reads "no lock", worker badge present at the equipment, isolation-point camera confirms exposed energy isolation - written with the procedure step the program specifies and the badge identity of the worker at the point.
Machine-guard interlock open or bypassed during machine cycle
InputGuard interlock state + point-of-operation sensor + machine-cycle counter
Guard-interlock puck: interlock state reads "open" with the machine in cycle above the procedural threshold, bypass switch state checked, point-of-operation sensor cross-referenced - written to 1910.212(a)(1) the cycle the breach registers.
Robot-cell fence propped or e-stop chain bypassed during production
Robot-cell puck: fence gate sensor reads "open" beyond the permissible interval, e-stop contact state checked against the bypass position, cell-entry badge present without a logged entry permit - written to the audit trail while the shift is still on the floor.
AMR / AGV pedestrian proximity on the line (within the programmed envelope)
AMR-proximity puck: AMR trajectory inside the programmed pedestrian envelope with a worker badge on the same coordinate, written with the AMR identifier, the pedestrian identifier, and the line speed at the moment of the proximity event.
Abrasive-wheel RPM overspeed or missing tool-rest / tongue guard
Abrasive-wheel puck: wheel RPM exceeding the nameplate limit, OR tool-rest gap above the 1910.215(b)(9) threshold, OR tongue-guard missing - written to the wheel-machine audit log with the wheel serial and the operator badge on duty.
Conveyor pull-cord / e-stop absent or disabled during shift handover
Conveyor-estop puck: pull-cord or e-stop continuity reading a fault sustained across the shift-handover window, with both shifts’ badge activity in the same timestamp range - written to the maintenance dispatch and to the line audit trail at the moment the next operator picks up the line.
Inputs → outputs
Sensor + permit + CCTV, mapped to the subparts the OSHA inspector opens.
The matrix below pairs the inputs Pactwell reasons across - lock-state sensors on isolation points, guard interlock state, point-of-operation sensors, AMR / AGV proximity sensors, wheel RPM and tool-rest sensors, conveyor pull-cord / e-stop continuity sensors, and the CCTV feeds covering the cell and line - with the factory-floor signal each combination reasons over and the compliance output the audit-ready PDF references.
Inputs
Energized-work permit registryLock-state sensor on the isolation pointWorker badge reader at the equipmentIsolation-point camera
Factory-floor signal Pactwell reasons across
Energized-work permit is open for the equipment, the lock-state sensor at the named isolation point reads "no lock" (or lock removed before the permit window closes), the worker badge is present at the equipment, and the isolation-point camera confirms exposed energy isolation without a posted tag.
Compliance output
OSHA 29 CFR 1910.147· §1910.147(c)(4) Procedures · §1910.147(d) Training · §1910.147(e) Periodic inspection - lockout application on the isolation point the procedure specifies
Plant audit trail· Procedure step, isolation point, and badge identity written with the missed-lockout evidence pack
Inputs
Guard interlock statePoint-of-operation sensorMachine-cycle counterBypass-switch state
Factory-floor signal Pactwell reasons across
Guard interlock reads "open" or "bypassed" while the machine cycle is running above the procedural threshold, the point-of-operation sensor detects material inside the operating envelope, and the bypass-switch state is checked against the procedure’s frequency.
Compliance output
OSHA 29 CFR 1910.212· §1910.212(a)(1) Machine guarding general duty · §1910.212(a)(3) Point of operation protection
Plant maintenance dispatch· Restoration ticket opened automatically with line, machine, and cycle count at the breach
Cell-fence gate sensor reads "open" beyond the permissible interval, the e-stop contact state shows a bypassed switch, the cell-entry badge registers presence without a permit open in the cell log, and the cell-area CCTV confirms personnel inside the working envelope.
Compliance output
OSHA 29 CFR 1910.212· §1910.212(a)(1) Machine guarding - insofar as the robot cell qualifies as a machine under the general-duty clause
Plant audit trail· Cell entry, e-stop bypass, and personnel identity written to the cell audit pack in real time
Inputs
AMR / AGV proximity sensorPedestrian badge reader on the lineLine / AMR speed sensorLine-floor CCTV
Factory-floor signal Pactwell reasons across
AMR trajectory inside the programmed pedestrian envelope while a worker badge registers presence on the same coordinate, with the AMR speed above the pedestrian-zone programmed limit, and the line-floor CCTV confirming the proximity reading.
Compliance output
Plant audit trail· AMR identifier, pedestrian identifier, AMR speed, and line speed at the proximity event - written to the AMR near-miss log
Plant maintenance dispatch· Zone-reprogramming and AMR-pedestrian envelope refresh dispatched
Inputs
Wheel RPM sensorTool-rest gap sensorTongue-guard presence sensorWheel nameplate RPM registry
Factory-floor signal Pactwell reasons across
Wheel RPM exceeds the nameplate limit OR the tool-rest gap reads above the 1910.215(b)(9) threshold OR the tongue-guard presence sensor reads absent, with the operator badge on duty and the wheel serial registered to the workstation.
Plant maintenance dispatch· Wheel replacement or guard restoration ticket opened with the wheel serial and the operator badge in the ticket
Inputs
Woodworking guard presence sensorBlade RPM sensorWood-line CCTVOperator badge on duty
Factory-floor signal Pactwell reasons across
Woodworking guard presence reads absent on a blade not in the procedural pause state, blade RPM exceeds the procedural idle limit, the wood-line CCTV confirms an exposed blade above the workpiece, and no operator badge is at the pause position during the guard-absent window.
Plant audit trail· Guard-absent window timestamped with the blade RPM trace, CCTV frame reference, and operator badge in the wood-line pack
Inputs
Pull-cord continuity sensorE-stop continuity sensorShift-handover badge logConveyor run state
Factory-floor signal Pactwell reasons across
Pull-cord or e-stop continuity registers a sustained fault across the shift-handover window with both shifts’ badge activity overlapping the fault interval, and the conveyor run state remains powered through the fault.
Compliance output
OSHA 29 CFR 1910.212· §1910.212(a)(1) Machine guarding - insofar as a conveyor pull-cord / e-stop chain counts as safeguarding, on a powered conveyor
Plant maintenance dispatch· Pull-cord / e-stop repair ticket opened with the shift-handover timestamp and the next-operator badge identity
Compliance citations are written against the published OSHA general industry standards - 29 CFR 1910.147 (Control of Hazardous Energy / Lockout-Tagout), 29 CFR 1910.212 (General Requirements for All Machines), 29 CFR 1910.213 (Woodworking Machinery), and 29 CFR 1910.215 (Abrasive Wheel Machinery). Pactwell capability claims cross-check against the competitor matrix and the enterprise FAQ.
Run the correlator on the LOTO program first
Two doors in, depending on where you sit.
If you already have lock-state sensors on the LOTO isolation points, guard interlocks telemetry, the energized-work permit registry, AMR / AGV proximity sensors, and the cell / line CCTV online, start free at /signup and run the same pilot the matrix above is written against - connect the LOTO sensors, register the energized-work permits, point Pactwell at the cell-fence gate sensors, and watch a flagged event arrive inside two weeks on the worst isolation point the program guards. If you’re still evaluating the shortlist, the door for that is open too.