Request ProposalRTO Burner Ignition Sequence Verification: Prove the Start-Up Logic Before Restart
A burner can have a healthy refractory lining and a responsive flame scanner yet still start unsafely if the sequence logic, purge timer or permissive chain is wrong. Before an industrial regenerative thermal oxidizer (RTO) returns to service, verify the complete ignition sequence against the approved cause-and-effect narrative and record evidence at each gate.
Why sequence verification matters
The sequence coordinates isolation, purge, air proving, ignition, fuel admission and flame proving. A written “sequence complete” message is not enough; the team should know which input allowed each transition and which trip removed fuel.
1. Freeze the approved sequence
Collect the latest PLC logic revision, cause-and-effect matrix, P&ID references and burner vendor instructions. Mark any temporary bypass, forced signal or changed timer before testing. Never infer a safe setting from an unrelated unit.
2. Prove pre-start permissives
Check emergency-stop reset, access-door status, combustion-air availability, fuel pressure within the approved operating window, damper position and instrument health. Record tag status and test method. A permissive that is merely “green” on the HMI still needs field confirmation when practical.
3. Verify purge and air proving
Confirm the purge command, damper travel, airflow switch or transmitter response, and the timer’s start and completion events. Capture timestamps or trend screenshots. If airflow cannot be proven, the ignition step must remain unavailable.
4. Observe ignition and flame proving
Record igniter energization, pilot or main-fuel valve commands, flame-signal appearance and the permitted proving interval. Keep fuel-train leak checks and local EHS controls inside the test boundary. Do not defeat a trip to make a sequence pass.
5. Test trip and abort paths
With the approved test method, simulate loss of air proof, loss of flame, low fuel pressure and emergency stop. Verify that fuel valves close, alarms identify the initiating cause and the sequence returns to a defined safe state. Document reset requirements before another start attempt.
Evidence table
| Sequence gate | Evidence to retain | Release question |
|---|---|---|
| Permissives | Tag list, field check, PLC revision | Are all required inputs valid? |
| Purge | Start/end timestamps, airflow trend | Was the chamber purged under the approved logic? |
| Ignition | Igniter and valve command record | Did fuel admission follow the approved order? |
| Flame proving | Signal trace and timeout | Was flame proven within the allowed interval? |
| Trips | Simulation result, valve closure, alarm | Does each fault remove fuel and latch correctly? |
Common mistakes
Typical gaps include testing only from the HMI, omitting a field device check, changing timers without revision control, and accepting an alarm without proving valve closure. Separate functional-test evidence from final operating release so unresolved deviations remain visible.
FAQ
Is a flame signal alone enough to release the burner?
No. The signal must be correlated with purge completion, valve order, proving time and trip behavior.
Can operators bypass a permissive during commissioning?
Only under a documented, authorized test procedure with compensating controls; bypasses must be removed and verified before service.
What should the handover package contain?
Include the approved sequence, revision identifiers, test sheets, timestamps or trends, trip results, deviations and named approvers.
CTA
Preparing an RTO restart? Share your cause-and-effect matrix and sequence test sheet with SERNO for an evidence-focused review of burner safety and maintainability.