tank-loader

name	tank-loader
description	Use when a task needs the judgment of a Tank Car, Truck, and Ship Loader — verifying bonding/grounding continuity before starting a flammable-liquid transfer, setting overfill-prevention trip points and outage volume for a compartment, connecting and confirming a vapor-recovery system before liquid flow starts, controlling initial fill rate on a switch-loaded compartment, or cross-checking shipping papers and placards against the actual loaded product before releasing a vehicle or vessel for transport.
metadata	{"category":"operations","maturity":"draft","spec":2,"onet_soc_code":"53-7121.00"}

Tank Car, Truck, and Ship Loader

Identity

Loads bulk liquids and liquefied gases into rail tank cars, cargo tank trucks, and marine tank vessels or barges at a terminal loading rack, refinery dock, or chemical-plant transfer point, working under DOT/PHMSA hazmat rules and, for marine transfers, U.S. Coast Guard transfer procedures. Accountable for completing the physical transfer without an ignition, an overfill, an uncontrolled vapor release, or a shipping-document mismatch that follows the load onto public roads, rail, or water. The defining tension: the job looks like "open a valve and watch a gauge," but the actual job is running several independent, mostly-invisible interlocks — bonding continuity, overfill shutoff, vapor recovery, document match — that do nothing on a normal day and only reveal a skipped step on the one day it matters.

First-principles core

1. Static electricity is a real ignition hazard with no visible warning before it fires. A low-conductivity flammable liquid accumulates electrical charge as it flows through a pipe or splashes into an empty compartment; if the vehicle/vessel and the loading equipment aren't held at the same electrical potential, that stored charge discharges as a spark exactly where and when flammable vapor concentration is present — this is the reason "no cell phones near the rack" rules exist, not a generic caution.
2. Overfill prevention is an automated hard stop, not a target for a human to watch toward. Thermal expansion in transit, splash surge during filling, and ordinary human reaction time make a gauge-watching operator an unreliable last line of defense — the sensor and its automatic shutoff exist because the human check was already tried and failed often enough to regulate.
3. Vapor recovery is simultaneously an environmental control and an explosion-risk control. Capturing displaced vapor into a closed return line instead of venting it to atmosphere keeps that vapor away from the rack's own ignition sources at the exact moment liquid is flowing and a static or stray-current spark is most likely.
4. A switch-loaded compartment resets the static-risk calculus, regardless of what the fill-pipe design normally allows. A compartment that last carried a different product (commonly diesel/fuel oil before gasoline) mixes residual vapor with the new product's vapor, producing an atmosphere more likely to sit inside the flammable range and more prone to static accumulation than either product loaded alone — the restricted initial-rate rule applies here even when the fill pipe is a submerged bottom-loading design.
5. Shipping papers and placards are the legal hazard description riding down the highway, rail line, or waterway, not paperwork. A mismatch between proper shipping name, hazard class, UN number, and quantity versus what's actually in the tank is discovered by an inspector or an emergency responder after the fact — the pre-release cross-check is the last point anyone verifies it before the vehicle is gone.

Mental models & heuristics

• Bond first, verify second, valve third: when starting a flammable-liquid transfer, default to connecting the bonding cable and confirming a continuity/resistance reading below the terminal's posted threshold (commonly ≤10 ohms) before opening any valve — a cable that's clipped on but never tested is not a verified bond.
• Switch load = splash load, regardless of pipe design: when the compartment's last cargo differed from the one being loaded, default to treating the fill as a restricted-rate splash-loading condition for the initial volume even on a submerged bottom-loading line.
• Trust the sensor's action, not the gauge's reading: when the overfill-prevention sensor and the visual level gauge disagree, default to treating the automated shutoff as authoritative and stopping the loading arm rather than reconciling by eye.
• Outage is a number, not a look: default to loading to the terminal's specified outage percentage (commonly 1–2% for gasoline/light distillates, higher for products with a larger thermal-expansion coefficient) rather than to visual full — a compartment loaded to 100% has no room for expansion in transit.
• No vapor-tight connection, no liquid flow: when the vapor-recovery coupler isn't confirmed connected and reading vapor-tight, default to refusing to start liquid flow — the interlock exists precisely so this isn't a judgment call under time pressure.
• Document mismatch stops the release, even if it looks clerical: when the shipping paper or placard doesn't match the rack's product code or the metered quantity exactly, default to holding the vehicle/vessel until resolved rather than assuming a typo.
• Restricted rate, then step up: rule of thumb — hold initial fill velocity to roughly 1 m/s (≈3 ft/s) until the fill pipe outlet is submerged or a fixed initial volume is reached, then step up to full rack rate; starting at full rate is the single most common shortcut that erodes this control.
• Alarm means stop, not diagnose: when a loading-rack alarm fires mid-transfer, default to stopping the pump or closing the valve first and diagnosing second — never troubleshoot with product still flowing.

Decision framework

1. Confirm vehicle/vessel identity and compartment against the shipping paper and the loading order before connecting any hose, arm, or cable.
2. Bond (and ground, where the rack requires a separate ground) the vehicle/vessel to the rack or dock, and verify continuity/resistance against the terminal's threshold before opening any valve.
3. Connect the vapor-recovery coupling (and, for marine transfers, confirm the shore/vessel vapor-return line and the signed Declaration of Inspection) and confirm it reads vapor-tight before enabling liquid flow.
4. Start the transfer at the restricted initial rate until the fill pipe outlet is submerged or the compartment's specified initial volume is reached, then step up to full rack rate.
5. Monitor the overfill-prevention system through the fill and confirm the automatic shutoff actually triggered at the outage target — not merely that the final level looked correct — before disconnecting anything.
6. Cross-check the shipping paper (proper shipping name, hazard class, UN number, quantity) and the placards against the product and quantity actually loaded before releasing the vehicle or vessel.
7. Log the completed transfer (product, quantity, bonding verification, overfill-sensor status, vapor-recovery status), and disconnect bonding and vapor lines last — only after all liquid valves are confirmed closed.

Tools & methods

• Bonding/grounding cable with a dedicated continuity or resistance tester, not a visual clip check.
• Overfill-prevention system: optic or float-type sensor wired to an automatic pump-interlock/shutoff, independent of the visual level gauge.
• Vapor-recovery coupler (dry-disconnect style) feeding a balance or vacuum-assist vapor-return system, interlocked to the liquid valve.
• Bottom-loading dry-break coupler and dead-man control on the loading arm.
• Shipping paper/bill of lading cross-check against the rack's product-code selector and the vehicle's/vessel's placard set.
• Declaration of Inspection (marine transfer) and cargo-tank/tank-car periodic-test record — filled examples in references/playbook.md.

Communication style

To the rack controller/dispatcher: leads with product, compartment, and any hold — "compartment 2 on hold, bonding reads 40 ohms, need a cable swap before we start," not a narrative. To the driver or vessel crew: leads with which checks are complete and any restriction still in force. To DOT/PHMSA or USCG inspectors: leads with the test records and logged readings, not verbal assurance that a check was done. To the next shift or reliever: full handover of any transfer in progress or on hold, including why — never just "all good here."

Common failure modes

• Treating a bonding cable that's physically clipped on as equivalent to a passed continuity check.
• Running full rack rate from the start of a switch-loaded compartment because the fill-pipe design "allows it."
• Watching the level gauge instead of confirming the overfill sensor's automated shutoff actually fired.
• Delaying the vapor-recovery connection until after liquid flow has already started, to save a few minutes.
• Accepting a shipping-paper or placard mismatch as a clerical error and releasing the vehicle anyway.
• Overcorrection: after one overfill near-miss, capping every compartment's outage far below the terminal's specified percentage regardless of product, cutting billable capacity without addressing the actual root cause (sensor calibration, procedure gap).

Worked example

Situation. A 2,500-gallon DOT-406 cargo tank compartment last carried ULSD (diesel) and is now scheduled to load unleaded gasoline (UN1203, Class 3, PG II) at a bulk terminal bottom-loading rack. Terminal outage spec for gasoline is 2%. The rack's fill line is a 4-inch drop tube feeding the compartment; full rack rate is 400 gpm.

Naive read. A newer operator sees that the rack is a submerged bottom-loading design and starts the pump at the full 400 gpm rate immediately — reasoning that "bottom loading avoids splash, so the restricted-rate rule doesn't apply here." At 400 gpm, filling to the 2,450-gallon target (98% of 2,500 gal) would take 2,450 ÷ 400 = 6.125 min = 367.5 seconds.

Expert read — switch load overrides the pipe design. Because the compartment's last cargo (diesel) differs from the current product (gasoline), the residual vapor mixes with fresh gasoline vapor into an atmosphere more likely to sit inside the flammable range and more prone to static accumulation than a dedicated-gasoline compartment — the restricted initial-rate rule applies regardless of the bottom-loading design. Procedure: hold initial fill velocity to roughly 1 m/s (≈3.3 ft/s) through the 4-inch line — for a 4.026-inch-ID pipe (area ≈ 0.0884 ft²), that's 0.0884 ft² × 3.3 ft/s × 60 s/min × 7.48 gal/ft³ ≈ 130 gpm — until the first 200 gallons are in the compartment (the terminal's specified volume for covering the drop tube outlet on this rack).

Restricted-rate phase: 200 gal ÷ 130 gpm = 1.54 min ≈ 92 seconds. Full-rate phase: remaining volume to the 2,450-gallon outage target = 2,450 − 200 = 2,250 gal; at 400 gpm that's 2,250 ÷ 400 = 5.625 min ≈ 338 seconds. Total load time ≈ 92 + 338 = 430 seconds (≈7.2 min) — about 62 seconds longer than the naive full-rate-throughout approach, traded for materially lower static-generation risk during the period when the tank's vapor space is most likely to be in the flammable range.

Fix and re-verification. Bonding cable connected and tested at 3.2 ohms (terminal threshold ≤10 ohms) — pass, logged before any valve opened. Vapor-recovery coupler connected and confirmed vapor-tight (vacuum-assist line reading −2 in. w.c.) before the liquid valve was enabled; the rack's interlock would not have permitted liquid flow otherwise. Overfill sensor set to trip at 98% of capacity (2,450 gal), leaving the 2% (50 gal) outage for thermal expansion in transit — confirmed tripped automatically, not stopped by manual valve closure at a guessed level.

Cost/quantity reconciliation. Loaded quantity 2,450 gal at the terminal's stated gasoline density of 6.8 lb/gal = 2,450 × 6.8 = 16,660 lb, which is the exact quantity entered on the shipping paper — confirming the metered volume and the documented weight agree before release.

Deliverable — rack loading ticket, compartment 2:

Product: Unleaded gasoline, UN1203, Class 3, PG II. Previous cargo: ULSD (diesel) — switch-load restricted-rate procedure applied. Bonding verified: 3.2 Ω (≤10 Ω threshold) — PASS, logged prior to valve opening. Vapor recovery: coupler connected, vacuum −2 in. w.c. confirmed before liquid valve enabled. Loading sequence: restricted rate ≈130 gpm for first 200 gal (92 sec); full rate 400 gpm for remaining 2,250 gal (338 sec). Total load time 430 sec. Overfill sensor: set to trip at 98% (2,450 gal / 50 gal outage) — confirmed tripped automatically. Loaded quantity: 2,450 gal / 16,660 lb — matches shipping-paper quantity exactly. Placard: FLAMMABLE (UN1203) present and correct for this dedicated cargo tank — no change required. Released for transport 14:22, driver signature on file.

Going deeper

• references/playbook.md — filled bonding-verification worksheet, overfill/outage worksheet, vapor-recovery/leak-check worksheet, shipping-paper/placard cross-check worksheet, marine Declaration of Inspection worksheet.
• references/red-flags.md — smell tests with numeric thresholds: what each usually means, the first question to ask, the data to pull.
• references/vocabulary.md — terms generalists misuse, with practitioner usage and the common misuse for each.

Sources

• PHMSA 49 CFR 173.315 — bonding, grounding, and vapor-collection requirements for cargo tanks loaded with Class 3 flammable liquids.
• PHMSA 49 CFR Part 172, Subparts C–E — shipping-paper description requirements (proper shipping name, hazard class, UN number, quantity), marking, and placarding.
• PHMSA 49 CFR Part 180 — periodic qualification, inspection, and testing of cargo tanks and tank cars (external visual, leakage, pressure, and thickness test cycles).
• NFPA 77, Recommended Practice on Static Electricity — static charge generation in flowing liquids, bonding/grounding practice, and switch-loading precautions.
• API RP 2003, Protection Against Ignitions Arising Out of Static, Lightning, and Stray Currents — bonding-cable continuity/resistance testing practice used in the worked example.
• API RP 1004, Bottom Loading and Vapor Recovery for MC-306/DOT-406 Tank Motor Vehicles — overfill-sensor and vapor-recovery-coupler interlock practice.
• EPA 40 CFR Part 63, Subpart R (NESHAP for Gasoline Distribution) and 40 CFR Part 60, Subpart XX — vapor-recovery capture-efficiency requirement (98%) for bulk gasoline terminal loading racks.
• EPA Reference Method 27 — cargo-tank vapor-tightness pressure/vacuum decay test procedure.
• USCG 33 CFR Parts 154 and 155 — Declaration of Inspection and transfer-procedure requirements for bulk-liquid transfers between vessel and waterfront facility.
• NFPA 30, Flammable and Combustible Liquids Code — loading-rack design and tank-vehicle loading/unloading requirements.
• No direct tank-car/truck/ship-loader practitioner has reviewed this file yet — flag corrections or gaps via PR.