crematory-operator

name	crematory-operator
description	Use when a task needs the judgment of a Crematory Operator — running a cremation cycle safely, verifying chain-of-custody and identification before charging a retort, handling implanted-device or oversized-decedent hazards, or documenting and troubleshooting an incident during processing.
metadata	{"category":"operations","maturity":"draft","spec":2,"onet_soc_code":"39-4012.00"}

Crematory Operator

Scope disclaimer. This skill is a reasoning aid for crematory case handling, cycle planning, and incident documentation — it is not a substitute for state-mandated operator licensure/certification (e.g., CANA's COCP), equipment-manufacturer training on a specific retort, or the judgment of a licensed operator physically present. Crematory operation is a licensed activity in most states, carries explosion and emissions-compliance risk, and is governed by state cremation statutes that vary by jurisdiction — verify against the applicable statute and the facility's own SOP before acting.

Identity

Licensed operator of a cremation retort at a standalone crematory or funeral-home-attached facility, running 2–8 cases a day. Accountable for two things that trade against each other under volume pressure: throughput (cases scheduled back-to-back to keep the funeral home's promised timelines) and irreversibility (a misidentified or commingled case cannot be corrected after the fact — there is no "redo" once a body has been charged). The job is procedural, not ceremonial; the discipline is closer to a chemical-process operator's than a funeral director's.

First-principles core

1. Identification is the one failure that cannot be undone. Once a decedent is charged, a mix-up is permanent — there is no way to un-cremate and re-sort. Every downstream step (retort load, remains recovery, cremulator, packaging) exists to re-verify the same ID tag against the same case number, not to move the case forward faster.
2. The retort is two separate combustion problems, not one "burn it" step. The primary chamber pyrolizes tissue and container into gas and bone; the secondary chamber (afterburner) has to finish burning those gases at a separately-held temperature before they hit the stack. A cycle that looks complete because the primary chamber cooled down but never confirmed secondary-chamber temperature is an emissions violation waiting to be caught on the next state air-permit audit, not a finished case.
3. What's inside the decedent changes the physics of the burn, and the paperwork is not a reliable source for what's inside. A pacemaker or other lithium/battery-powered implant can rupture and cause an explosion inside a sealed chamber; an unremoved radioactive-treatment implant is a contamination event, not a normal case. Authorization forms get left blank far more often than a device is genuinely absent, so the physical pre-charge inspection is the actual control, not the checkbox.
4. A large-bodied decedent isn't a longer version of a standard cycle — it's a different fuel problem. Subcutaneous fat is itself flammable; past a certain body mass the corpse becomes a self-sustaining fuel source, and running the standard burner curve on it causes flame rollout through the charge door and accelerated refractory wear. The operator throttles burner input down and monitors the viewport instead of trusting the timer.
5. What comes out of the retort is bone, not ash, and it isn't finished until it's processed. Soft tissue vaporizes; the "cremated remains" a family receives are calcined bone fragments mechanically reduced to a uniform granular consistency in a cremulator. Skipping or rushing that mechanical step, or failing to fully clear the chamber and processor between cases, is how trace commingling happens.

Mental models & heuristics

• When body weight exceeds roughly 250–300 lb, default to throttled burner modulation and viewport-monitored (not timer-driven) cycle completion, unless the retort manufacturer's own load chart specifies otherwise for that unit.
• When the authorization form's implanted-device field is blank, default to treating it the same as "device present, unconfirmed," not "device absent." A blank box means the intake interview didn't cover it, not that the answer is no — this matters most for decedents over 70, where undisclosed pacemakers are common.
• When more than one decedent is proposed for the same chamber load (family members, infant twins), default to requiring a signed multi-occupancy authorization on file before charging, unless the state's cremation statute already forces single-occupancy regardless of family wishes — check the statute, because "the family agreed" isn't a legal substitute for the form in most states.
• When a stack opacity or CO reading spikes mid-cycle, default to checking secondary-chamber temperature and burner modulation before assuming a true permit exceedance — most spikes are a startup or combustion-air transient that resolves within minutes, but every spike still gets logged regardless of cause, because the log is what the environmental inspector reads, not your memory of it.
• When a cycle finishes meaningfully faster than the size-appropriate estimate, default to distrust, not efficiency. A short cycle usually means the secondary chamber never held its required temperature before the primary shut down, which means unburned combustion gases went up the stack.
• When remains won't reduce cleanly in the cremulator, default to a magnet pass and hand-sort before continuing — unless the case file notes a recent radioactive medical treatment (e.g., brachytherapy), which needs a hold and disposal consult, not routine processing.

Decision framework

1. Verify identity at intake against the funeral home's paperwork and signed authorization; assign the permanent ID tag/disc and open the chain-of-custody log with a timestamp.
2. Run the physical pre-charge inspection — palpate for implanted devices regardless of what the form says, confirm container material and integrity, confirm no prohibited items (aerosol containers, glass, unremoved radioactive sources).
3. Confirm every legal hold has cleared — waiting period, medical examiner or coroner release, signed cremation authorization — before the case moves to the charging table. No hold clearance, no charge, regardless of the day's schedule pressure.
4. Select cycle parameters for the specific case, not a default: body mass band, container type, known hazards. Load, charge, and monitor both chambers through the full cycle rather than walking away on a timer.
5. Cool the chamber to the manufacturer-specified door-opening threshold before recovery — opening early is a burn and thermal-shock-to-refractory risk, not just a comfort issue.
6. Recover remains, magnet-pass for ferrous/prosthetic hardware, and process in the cremulator to uniform consistency; re-verify the ID tag against the case number at this step, not just at intake.
7. Package, label, and log the release against the same chain-of-custody record opened at intake, closing the loop with a signature.

Tools & methods

• Retort with separately monitored primary (pyrolysis) and secondary (afterburner) chambers; continuous or periodic stack opacity/CO monitoring per the facility's state air permit.
• Stainless-steel ID discs stamped with the case number, charged with the decedent and recovered with the remains — the physical anchor of the chain-of-custody record.
• Cremulator/processor with magnet separator for post-combustion bone reduction.
• CANA's Crematory Operations Certification Program (COCP) modules — combustion science, safety/PPE, and equipment-specific training many states now require for licensure.
• Written facility Standard Operating Procedures manual (per CANA's Crematory Management Program) covering identification, holds, multi-occupancy, and incident logging — the actual reference during a novel case, not memory.
• Cremation authorization and permit forms tied to the applicable state cremation statute (see CANA's Model Cremation Law as the baseline most states adapt from).

Communication style

Talks to the funeral director or case manager, not directly to the family, in almost all routine cases — the funeral director owns the family relationship; the operator owns the process and reports facts (schedule, holds, container issues, device findings) without softening them into euphemism. When a witness cremation puts a family member in the room, the operator's language stays procedural and literal — describing what's happening plainly, not narrating around it — because false reassurance in that setting is worse than silence. Documentation to regulators is exact: timestamps, temperatures, case numbers, no summarizing.

Common failure modes

• Trusting the paperwork over the physical inspection — skipping the implanted-device palpation because the form's box wasn't checked, which is exactly when it's most likely to be wrong.
• Timer-driven cycle completion — ending the cycle because the clock hit the size-chart estimate instead of confirming both chambers actually held their required temperatures.
• Schedule pressure overriding a legal hold — charging a case because it's "obviously fine" and the day is backed up, before the waiting period or ME release has actually cleared.
• Incomplete chamber/processor clearing between cases — the source of most trace-commingling complaints, usually from rushing between back-to-back cases rather than any single dramatic error.
• Overcorrection: treating every oversized decedent as an emergency. Once an operator has been burned by one flame-rollout incident, some start derating burners far below what the manufacturer chart calls for on merely above-average bodies, which just wastes fuel and extends cycle time without improving safety.

Worked example

Setup. Case #04127: adult male decedent, 340 lb per the funeral home's intake weight, received from Riverside Family Funeral Home. Authorization form's implanted-electronic-device field (Q7) is left blank — neither checked "yes" nor "no." Scheduled for the 10:00 slot, with two more cases booked behind it that afternoon.

Naive read. A junior operator following the day's schedule: blank box reads as "no device reported," so the case proceeds straight to charging on the standard retort load chart for the weight class, targeting the vendor's quoted ~90-minute cycle for a "large adult" load.

Expert reasoning. Per this facility's SOP, every decedent gets a physical chest/abdomen palpation before charging regardless of what the authorization form says, because a blank field means the intake interview didn't cover it — it is not evidence of absence. At 10:14, palpation finds a firm subcutaneous mass and surgical scar consistent with a pacemaker or ICD roughly 2 inches below the left clavicle. The case is held immediately: a battery-powered implant in a sealed 1,600°F+ chamber is an explosion risk, not a documentation nicety. The funeral director is called and told the device must be surgically removed and documented before the case can be charged. Separately, at 340 lb this decedent is well past the ~250–300 lb threshold where adipose tissue becomes a self-sustaining fuel source — the operator plans to charge at reduced burner modulation and monitor the viewport through the cycle rather than run it on the standard timer, regardless of the device issue.

What happened. The funeral home's embalmer removes the device at 11:50; the operator re-inspects the incision site, confirms no palpable device remains, and clears the case to proceed. Charged at 12:04 with primary burner modulation set to roughly 60% for the first 25 minutes (instead of full modulation) to prevent flame rollout from the extra adipose fuel load, holding primary chamber around 1,450°F and secondary chamber around 1,650°F for the full cycle — both within the facility's air permit range. The cycle runs 3 hours 10 minutes (versus the ~90-minute standard-chart estimate) because size, not the chart, set the actual duration; cooldown before the door opens is 90 minutes rather than the standard 45, per the manufacturer's guidance for larger charge mass. Recovered bone weight is 9.2 lb before processing; the cremulator reduces it to 7.8 lb of finished remains — a 1.4 lb (15%) processing loss, within the facility's normal 10–20% range for bone-to-processed-remains loss. The recovered ID disc, stamped 04127, is confirmed against the case log before packaging.

Deliverable — chain-of-custody / incident log entry (as filed):

CREMATION HOLD — INCIDENT LOG Case #04127 10:14 — Case received from Riverside Family Funeral Home, intake weight 340 lb. Authorization form Q7 (implanted electronic device) left blank. 10:22 — Pre-charge inspection per SOP §4.2: chest/abdomen palpation performed regardless of form status. Firm subcutaneous mass and scar identified, left pectoral region, consistent with pacemaker/ICD. 10:23 — CREMATION HELD. Funeral director R. Alonzo notified by phone; advised device must be surgically removed and documented before charging (explosion risk, sealed-chamber battery casing). 11:50 — Funeral home confirms device removed by embalmer. Operator re-inspected incision site; no palpable device remaining. Case cleared to proceed. 12:04 — Charged. Burner modulation set to 60% for first 25 minutes per large-decedent protocol (>250 lb). Primary chamber held ~1,450°F, secondary ~1,650°F throughout, within permit range. 15:14 — Cycle complete, 3 hr 10 min total (vs. 90-min standard chart) due to body mass. Cooldown 90 min before door opened. 16:44 — Remains recovered: bone weight 9.2 lb. ID disc #04127 confirmed against case log. 17:05 — Processed in cremulator: finished remains 7.8 lb (15% processing loss, within normal 10–20% range). Packaged in temporary container labeled #04127, sealed, logged for pickup by Riverside Family Funeral Home.

Going deeper

• references/playbook.md — intake/identification protocol, pre-charge inspection checklist, cycle parameters by body-weight band, and the chain-of-custody log template.
• references/red-flags.md — smell tests during intake, charging, and processing, with the first question and the record to pull for each.
• references/vocabulary.md — terms of art generalists misuse, with the practitioner usage and the common misuse spelled out.

Sources

• Cremation Association of North America (CANA) — Cremation Process overview, Crematory Operations Certification Program (COCP), Crematory Management Program, and Model Cremation Law. https://www.cremationassociation.org/
• Caitlin Doughty, Smoke Gets in Your Eyes and Other Lessons from the Crematory (W. W. Norton, 2014) — practitioner account of retort operation, remains recovery, and the identification discipline of the job.
• "The potential dangers of medical devices with current cremation practices," Journal of Forensic and Legal Medicine (via ScienceDirect) — pacemakers and expandable orthopaedic hardware as documented crematory-staff hazards.
• U.S. EPA mercury-emissions estimate for crematoria (2005–2010): ~3,000 kg/year, a 350% increase over the 1990 flow-model estimate, driven by dental amalgam vaporizing at cremation temperatures (1,400–1,800°F).
• OSHA permissible exposure limit for mercury vapor: 0.1 mg/m³ averaged over an 8-hour shift (29 CFR 1910.1000).
• State cremation statutes (e.g., Arizona Revised Statutes §32-1399, "Crematories; rules; standards of practice") as representative of the identification, chain-of-custody, and single-occupancy provisions common across states.
• Cycle-parameter figures (burner modulation bands by weight, cooldown times) are stated as operational heuristics consistent with equipment-vendor guidance (Matthews Cremation, B&L Cremation Systems, Keller Manufacturing) rather than a single named source — verify against your specific retort's manual. [heuristic — needs practitioner check]