Flame Arrestor: Isolation Is the Fix, Not Assumption

A flame arrestor beside an atmospheric vessel does not correct an undefined fire-escalation scenario. Start with the operator-visible state: the loading or offloading line is idle, purged, shut in, and isolated from the vessel by a ball valve. The hazard chain then requires residual flammable material, an external fire, loss of pipe containment, ignition inside the pipe, an open propagation path, and a combustible atmosphere at the vessel connection. Break or disprove any required link before selecting hardware.

What is the hazard review telling you?

The proposed event begins after transfer, when purging might have failed or liquid might remain in low points. A later external fire heats the nominally empty line until it loses containment. The released or flashed material then ignites, and a flame is presumed to travel through the line into a blanket-gas atmospheric vessel.

That description combines two initiating conditions: failure to remove flammable inventory and simultaneous exposure to an unrelated external fire. API 521 was identified during the review as treating the combination as double jeopardy in the context of relief provisions. That observation does not automatically close an ignition or escalation study, but it prevents the combined event from being treated as an ordinary single failure without examining the project risk criteria.

Observed or proposed condition	Question that decides the case	Engineering effect
Line is purged after transfer	Does the purge procedure clear low points, and is completion verified?	A successful purge removes one required part of the hazard chain.
Liquid may remain in low points	What retained volume is physically possible?	The volume, composition, and temperature determine whether enough vapor can form to support propagation.
External fire heats the idle line	Is the affected segment blocked in or pressure-connected to another system?	A blocked liquid pocket, blocked vapor space, and open connected system have different pressure responses.
Pipe is assumed to burst	Does a heat-transfer and stress calculation predict loss of containment?	Without pipe failure, the proposed internal ignition path does not begin as described.
Ball valve at the vessel is closed	Is its closed position required and verifiable outside transfer?	A closed valve interrupts the direct flame-propagation path.
Vessel contains blanket gas	What are the actual oxygen and fuel concentrations?	Blanketing alone does not prove that the atmosphere is outside its flammable range.

Which safeguard fits the actual propagation path?

Two configurations can interrupt the path, but they solve different problems. The existing ball valve provides positive process isolation when closed. A flame arrestor permits flow while quenching a flame under the combustion conditions for which it was selected and installed. Installing both does not compensate for an undefined combustion case.

Approach	Operating state	What it controls	Main decision point
Close the existing vessel ball valve	Line idle and transfer complete	Separates the vessel from the exposed line	Confirm the valve is closed, remains closed, and is not bypassed during the fire scenario.
Add an automatic fire-safety shutoff valve adjacent to the vessel	Where manual isolation cannot be credited	Provides an independent isolation action near the vessel	Define the trip stimulus, fail position, closure function, testing method, and behavior during loss of utilities.
Add a flame arrestor close to the vessel	Flow path must remain open while flame propagation remains credible	Quenches a qualified flame front	Define mixture, direction, flame regime, pipe geometry, location, pressure, temperature, fouling, and allowable pressure drop.
Improve purge and drainage	After loading or offloading	Removes the fuel inventory that enables the event	Verify low-point removal instead of crediting purge initiation alone.

For the stated idle condition, use the existing ball valve as the primary recommendation if the operating procedure requires it closed after transfer and its position can be verified. Consider an automatic isolation valve only if the risk assessment cannot credit the manual valve or if the hazardous state can arise while that valve is open. Reserve a flame arrestor for a demonstrated open-path propagation case with enough combustion data to specify the device.

Is this flashback, flash-forward, or external ignition?

The propagation direction must be drawn rather than inferred from the word flashback. If an external fire ruptures the line and flame enters at the rupture before moving toward the vessel, the event is a flame advancing from the damaged segment toward the vessel. A bidirectional loading and offloading line can expose an arrestor from either face, so device directionality becomes a selection criterion.

The flame regime also matters. A flame can accelerate along sufficiently long piping, and bends, restrictions, branches, and obstacles affect that acceleration. A device selected for one regime or direction cannot be credited for a faster front or reverse exposure unless its documented qualification covers those conditions. Obtain the arrestor manufacturer's application data for the actual mixture, geometry, pressure, temperature, installation distance, and direction before assigning risk reduction.

A normal ball valve is not a flame arrestor while open. When fully closed and maintaining isolation, however, it removes the continuous vapor path on which flame propagation depends. The review must therefore evaluate the valve position at the same time as the initiating fire, not merely note that a valve appears on the piping drawing.

Can the external fire rupture the line as proposed?

Separate pressure failure from heat-weakened mechanical failure. If the pipe remains open to the atmospheric vessel, heating also pressurizes the connected volume and challenges the vessel or its relief path before the stronger piping necessarily reaches burst pressure. If the vessel valve is closed, analyze the isolated pipe segment itself. A trapped liquid pocket can expand under heating; a nominally empty vapor-filled segment follows a different pressure and wall-temperature response.

The review proposed checking a nominally empty B31.3 pipe using API 521 fire-case heat input and comparing the resulting material strength profile with required stress. A screening basis of fire exposure up to 30 minutes and an exposed area of 300 m2, represented as roughly 20 m of straight pipe, was suggested for that calculation. Treat those values as the stated study basis, not universal acceptance limits. The project fire philosophy, geometry, material data, boundary conditions, corrosion allowance, supports, and actual wetted inventory govern the calculation.

1. Define the fire-exposed pipe segment and whether each boundary valve is open or closed.
2. Survey low points and calculate the maximum trapped liquid volume from the as-built geometry.
3. Apply the project-approved external-fire heat input to the vapor-filled and liquid-containing cases separately.
4. Calculate pressure and pipe-wall temperature versus time using the actual fluid properties and connected volume.
5. Compare pressure with the governing design limits and compare temperature-dependent material strength with the required pipe stress.
6. If failure remains credible, define the opening location and size needed for the subsequent release and flame-propagation analysis.

An atmospheric vessel described as tolerating only a few mbar cannot be treated as pressure-resistant protection against flame entry. Its relief devices, emergency venting, blanketing system, and structural limits must be checked as separate functions. The suggested industry practice of using at least 7 barg design pressure where flashback is possible was not tied to a governing project requirement; it must not be applied to this atmospheric vessel as a generic rule.

What should be recommended for the idle transfer line?

Recommend a defined isolation and inventory-control strategy before adding a flame arrestor. The line is not connected to the vessel outside filling operations when the vessel ball valve is closed. That operating state directly removes the claimed route into the vessel and avoids introducing arrestor pressure drop, inspection burden, contamination risk, and an unverified bidirectional duty.

1. Mark the vessel isolation valve's required position for transfer, purge, and idle states in the operating procedure.
2. Make closure the final step after filling and purging, and record or indicate the closed position using the site's credited method.
3. Identify every low point. Drain, displace, or otherwise remove retained liquid through a defined operation.
4. Specify how purge completion is judged. A timed action alone is insufficient when inaccessible pockets can retain liquid or vapor.
5. Control reopening so that the valve cannot be opened casually while the remote line is exposed to an uncontrolled condition.
6. Define the response to an external fire, including whether transfer stops, the valve closes, and personnel evacuate without approaching the exposed line.

If the line must remain open during an operating mode in which external ignition is credible, repeat the assessment for that mode. An automatic shutoff valve adjacent to the vessel can be the preferred additional barrier when rapid, independent isolation is required. Define its detection and closure philosophy from the fire and process response study rather than assuming any valve marketed for fire service performs the required function.

When is a flame arrestor technically justified?

Use a flame arrestor only after the analysis demonstrates all three conditions: a flammable atmosphere can occupy the connected path, ignition can occur at a defined location, and the vessel connection remains open while the flame approaches. Then prepare a service specification instead of placing a generic symbol near the vessel.

Required input	Where to obtain it	Why it matters
Fuel and oxidant composition	Process composition and purge records	Determines whether propagation is possible and defines the combustion duty.
Pressure and temperature	Operating and fire-case calculations	Sets the qualification envelope.
Ignition location and pipe run	Fire scenario and as-built isometric	Defines flame travel distance and acceleration features.
Required flow direction	Loading and offloading operating modes	Determines whether protection must work from either face.
Expected flame regime	Combustion assessment and manufacturer application review	Prevents crediting a device outside its qualified duty.
Normal flow and pressure drop	Hydraulic calculation	Checks whether transfer performance remains acceptable.
Liquid carryover and deposits	Drainage study and fluid properties	Sets orientation, drainage, inspection, and cleaning needs.

Locate the arrestor only after resolving allowable pipe distance and geometry on both sides. A position described merely as “close to the vessel” is not a design specification. The final selection also needs an inspection method capable of detecting blockage, corrosion, damage, or deposits that compromise the element.

How do you close and verify the HAZID action?

1. Redraw the event as a cause-and-consequence chain: purge failure or retained liquid, external fire, pipe heating, loss of containment, ignition, flame propagation, open vessel path, and vessel consequence.
2. For each link, enter the physical calculation, drawing reference, procedure, valve state, or measurement that confirms or breaks it.
3. Evaluate the idle state separately from loading, offloading, purging, draining, and maintenance. Record when the ball valve is open in each state.
4. Check the double-jeopardy treatment against the project's adopted API 521 basis and risk-assessment rules. Keep relief design, ignition prevention, and escalation control as distinct decisions.
5. Verify the as-built low points, valve location, flow directions, vent and relief connections, and any bypass path in the field.
6. Function-test the credited isolation method and demonstrate purge or drainage effectiveness under the operating procedure.
7. If a flame arrestor remains necessary, obtain documented confirmation that its qualification covers the defined mixture, flame regime, direction, geometry, pressure, and temperature.

FAQ