A worker reading each tank to determine if the process is safe is a poor form of safety. It is "administrative control". A worker must understand rules, read the tank, and correctly decide if the process is safe. That's only one layer of safety, and a weak one.
"Engineered controls" would place the tank in a blast-proof container and not allow filling to start until that container is locked shut. The equipment should allow operation from a safe distance while filling. That's two layers of protection from the hazard, containment and distance.
What we often have is "customer control". The process has no built-in safety, except a sign saying no fills for pre-1990 cylinders. If the process was built to be safe, we would not have all the fuss about the tanks going into it.
"Engineered controls" would place the tank in a blast-proof container and not allow filling to start until that container is locked shut. The equipment should allow operation from a safe distance while filling. That's two layers of protection from the hazard, containment and distance.
What we often have is "customer control". The process has no built-in safety, except a sign saying no fills for pre-1990 cylinders. If the process was built to be safe, we would not have all the fuss about the tanks going into it.