The Pressure Vessel That Failed Before It Was Built



 This vessel never reached operating pressure. It failed long before that — in a design office, on paper, by a series of decisions that each looked defensible in isolation but compounded into a compliance catastrophe worth $340K and six lost weeks.



1. The compliance failure that triggered this analysis

A mid-scale EPC contractor was fabricating a vertical process vessel for a natural gas sweetening unit on an offshore platform in the Arabian Gulf. Design pressure: 120 bar. Design temperature: 120°C. The fluid was a mixture of amine solvent and sour gas — corrosive, pressurized, in a hazardous area classification.

The vessel cleared multiple internal reviews. It reached third-party inspection — where an ASME-authorized inspection agency reviewed the design documentation — and failed. The finding was unambiguous: the vessel could not be Code-stamped. Fabrication halted mid-sequence. The project schedule took a six-week hit. The client filed a formal non-conformance report (NCR).

The root cause was not shoddy fabrication. It was a cascade of design decisions — each made by qualified engineers — that collectively resulted in a vessel that did not comply with ASME BPVC Section VIII Division 1.

2. Project background

The EPC contractor was a mid-sized firm with a mechanical engineering group that was under-resourced for the volume of static equipment on this project. Three pressure vessels were being designed simultaneously by the same lead engineer, with a junior engineer managing calculation packages. The vessel — designated V-401, an amine contactor absorber — was a tall vertical vessel: 22 metres high, 1,400 mm shell diameter, multiple nozzle penetrations, structured packing, and liquid distributor internals.

The design was classified as an unfired pressure vessel in Category M fluid service — a classification involving toxic fluids where a single small leak can cause serious irreversible harm to personnel. That classification carries significant mandatory code implications. As we will see, they were not fully recognized.

3. Design requirements vs actual conditions

ParameterClient specificationDesign usedResult
Design pressure120 barg + full vacuum120 barg onlyNon-compliant
Design temperature120°C max / −10°C min120°C onlyNon-compliant
Fluid serviceCategory M (H₂S present)Normal fluid serviceNon-compliant
Corrosion allowance3.0 mm1.5 mmNon-compliant
Weld joint efficiency1.0 (full RT)0.85 (spot RT)Non-compliant
Material cert typeEN 10204 Type 3.2EN 10204 Type 3.1Non-compliant
PWHTRequired — sour serviceNot specifiedNon-compliant

Every single design parameter was mishandled to some degree. The pattern is instructive: each deviation looked like a reasonable shortcut in isolation. In combination, they were disqualifying.


4. The critical design decisions — examined one by one

Design Trap 1Wrong material certification tier for hazardous service

The shell material was SA-516 Grade 60 carbon steel — a Code-listed material under ASME Section II Part D. On the surface, reasonable. But three factors made it the wrong choice for V-401.

First, the vessel was in sour gas service with H₂S partial pressure exceeding 0.05 psia — the threshold triggering NACE MR0175/ISO 15156. SA-516 Gr. 60 is permissible in sour service only with hardness controls (max 22 HRC on base metal and all welds), mandatory PWHT, and SSC-resistant weld procedures. None were specified.

Second, the −10°C minimum design temperature required an impact test qualification analysis under UCS-66. The engineer reviewed the exemption figure and estimated the vessel qualified — but documented nothing formal. This is insufficient for Code compliance; the analysis must be on record.

Third, and most critically: the material certificates were EN 10204 Type 3.1 — manufacturer self-certified. The specification required Type 3.2 — independently verified by a third-party inspector. This is not a paperwork preference. It is a fundamentally different level of traceability for a vessel containing toxic, flammable gas at 120 bar.

Why it failed: The material selection was defensible on its own; the documentation tier was not. In Category M service, the Code leaves no room to substitute self-certification for independent verification.
Design Trap 2Vacuum condition ignored — only internal pressure was designed for

The vessel's design conditions included full vacuum — possible during process upsets, steam-out, or cooldown sequences. The team calculated shell thickness solely for internal pressure using ASME UG-27. The vacuum condition is a compressive load requiring a separate external pressure analysis under UG-28 through UG-30. No such analysis existed in the design package.

For a 22-metre-tall vessel with L/Do exceeding 15, this analysis was not academic — it would have flagged the need for intermediate stiffening rings. A vessel sized for internal pressure may buckle catastrophically under the same wall thickness when subjected to full external pressure. The two calculations use entirely different failure modes and different equations.

Why it failed: Designing for the normal operating condition only is not designing for the vessel — it is designing for a single loading case. The Code treats every credible condition as mandatory, not optional.
Design Trap 3Joint efficiency chosen for cost, not service classification

The engineer assigned a joint efficiency of E = 0.85, corresponding to spot radiographic examination — a permissible value under UW-11(b) for many vessels. But under UW-2(a), Category M service mandates full radiographic examination (E = 1.0) for all butt welds unless a specific engineering exemption is documented and approved.

ASME Code logic: Joint efficiency is a direct multiplier in the thickness equation — not just a safety factor. Reducing E from 1.0 to 0.85 reduces the effective allowable stress by 15%, requiring a proportionally thicker wall. If the wall is not increased when E is reduced, the vessel is geometrically under-designed for the actual inspection level applied. Choosing E = 0.85 to save on inspection cost — without adjusting the wall — was a cost decision disguised as an engineering one.
Design Trap 4Corrosion allowance borrowed from unrelated precedent

The corrosion allowance applied was 1.5 mm. The client specification — based on their own corrosion engineering team's assessment of the amine-H₂S environment over a 20-year design life — called for 3.0 mm. The engineer appears to have defaulted to values from previous amine service vessels on other projects, without establishing that the conditions were genuinely analogous.

Corrosion allowance is not conservatism for its own sake. It is a calculated margin ensuring the vessel remains above its minimum required thickness at retirement. Halving it reduces the vessel's safe operating life by a proportional amount, in the absence of a monitoring or inspection programme that could compensate. The client's corrosion engineer had done the work. The design team ignored the output.

Why it failed: Substituting precedent from different projects for the client's own corrosion engineering assessment is not engineering judgment — it is an undocumented risk transfer to the client.

5. Where code interpretation went wrong

Three specific misreads drove the failure:

The team treated Category M as an administrative label rather than a technical trigger. The Code language in Appendix M is unambiguous: Category M service involves fluids where a single small leak can cause serious irreversible harm. Every elevated inspection, examination, and documentation requirement that follows is mandatory — not optional conservatism.

The team applied the UCS-66 exemption table without completing or documenting the exemption analysis. Reviewing a figure and estimating compliance is not Code-compliant. The analysis must be calculated, documented, and defensible to an Authorized Inspector.

The team treated PWHT as optional below 38mm wall thickness — which is correct under general Section VIII rules. But when NACE MR0175 requirements apply in sour service, PWHT becomes mandatory regardless of wall thickness. The team had not formally triggered the sour service review that would have surfaced this requirement.

6. Stress analysis breakdown

Here is where the failure becomes counterintuitive — and where mid-level engineers often get lost. The hoop and longitudinal stresses were calculated correctly and appeared compliant. The failure emerged at the weld-adjusted stress level, where the joint efficiency factor directly altered the allowable limit the design was being measured against.

Key insight: this is where the failure transitions from a geometry problem to an inspection-driven problem. The shell dimensions were not wrong — the inspection regime they were paired with was.

Hoop stress
118 MPa
Allowable: 138 MPa ✓
Longitudinal
72 MPa
Allowable: 138 MPa ✓
Weld-adjusted
161 MPa
Allowable: 138 MPa ✗
Nozzle junction
148 MPa
Allowable: 138 MPa ✗
— Correct calculation, E = 1.0 (full RT per Category M), CA = 3.0mm — t = (P × R) / (S × E − 0.6 × P) + CA = (12.0 × 700) / (138 × 1.0 − 0.6 × 12.0) + 3.0 = 8400 / 130.8 + 3.0 = 67.2 mm minimum nominal thickness — As-designed, E = 0.85 (spot RT), CA = 1.5mm — t = (12.0 × 700) / (138 × 0.85 − 0.6 × 12.0) + 1.5 = 8400 / 110.1 + 1.5 = 77.8 mm as-submitted — The paradox — The designed vessel was 10mm THICKER than compliant, yet non-compliant. E = 0.85 + spot RT does not satisfy Category M regardless of wall thickness. Compliance = correct design + correct inspection level together, not separately.

This is the central misunderstanding that confused the design team: a vessel with more metal in the wall can still fail Code compliance. ASME compliance is not a measure of physical mass — it is a demonstration that the complete design, inspection regime, and documentation together guarantee safety appropriate to the fluid service.

7. Root cause — design vs code mismatch

The root cause was a systemic failure to integrate the fluid service classification into every downstream design decision. Category M was acknowledged in the process datasheet, then effectively forgotten when the mechanical calculations began.

A pressure vessel is not a collection of individually-compliant components. It is a coherent system that must, as a whole, meet the Code requirements for its specific service. The Code does not grade on a curve.

Each engineer's individual decision had a rational basis when viewed in isolation. The material was Code-listed. The joint efficiency was a permitted value. The corrosion allowance had precedent. But the Code requires these decisions to be made as a coherent system, calibrated to the specific service conditions of the vessel — not assembled from a library of previously-used values.

8. Cost of redesign and delay

6 wks
Schedule delay
$340K
Rework cost (est.)
Redesign cost vs original
NCR filed
Formal non-conformance

Partial fabrication had already begun — shell ring rolling was complete and one head had been formed. Steel had to be re-procured with EN 10204 Type 3.2 certification. Weld procedure specifications had to be revised for full RT. PWHT procedures had to be written, qualified, and reviewed. New Authorized Inspector reviews were required for every document package. The redesign cost exceeded the original design cost by a factor of four.

The indirect costs were arguably greater: the EPC-client relationship became adversarial. A project that had been running on a collaborative footing now had a formal NCR on record. The contractor's reputation — and potentially their position on future tenders with the same client — had been damaged by a failure that originated entirely within their own engineering office.

9. Corrective design approach

The redesign followed a methodical sequence that should have been the original design sequence. It began with a formal fluid service classification audit — documenting Category M and identifying every ASME requirement that flows from it before touching any calculation template. A requirements matrix specific to V-401 was created and signed off before design began.

SA-516 Grade 60 was retained as the shell material, but explicitly scoped to NACE MR0175 compliance: maximum 22 HRC hardness on base metal and weld HAZ, mandatory PWHT, SSC-resistant weld consumables. The design condition envelope was fully addressed — both internal pressure and full vacuum were calculated. The external pressure analysis under UG-28/29/30 confirmed the need for two intermediate stiffening rings at 7.3-metre intervals.

Shell thickness was recalculated with E = 1.0 and CA = 3.0mm: nominal thickness 70mm — actually thinner than the as-designed 78mm, because E = 1.0 is more efficient than E = 0.85 with its reduced allowable stress. All nozzle penetrations were re-evaluated under UG-37 area replacement method; three required thicker reinforcing pads. A formal UCS-66/UCS-68 impact test exemption analysis was documented and AI-witnessed before material procurement. An independent design verification gate was added before any IFC release — a gate that had not existed in the original process.

10. Lessons for design engineers

Lesson 01

Classify the fluid service before opening a calculation template. Category M is not a label — it is a mandatory requirement set. Every downstream decision must flow from this classification, not be retrofitted to it.

Lesson 02

Weld joint efficiency is a design decision, not a default. Selecting E = 0.85 to reduce inspection cost without understanding the service implications is a cost decision disguised as an engineering one.

Lesson 03

Design conditions must be enveloped, not cherry-picked. A vessel rated for 120 bar must also be designed for full vacuum. Both loading extremes are real. The Code requires both to be addressed.

Lesson 04

Corrosion allowance from the client specification is based on their corrosion engineering assessment of your specific fluid. Substituting "typical" values from other projects is an undocumented risk transfer.

Lesson 05

EN 10204 3.1 vs 3.2 is the difference between manufacturer-certified and independently-verified. In hazardous fluid service, that distinction is technical, not administrative.

Lesson 06

Sour service adds a parallel compliance framework. NACE MR0175 is not an optional addition to ASME — it is a mandatory independent requirement triggered by H₂S concentration. Both must be satisfied simultaneously.


The central lesson of V-401: The ASME Code is not satisfied by demonstrating that individual design choices were each drawn from a list of permitted options. It is satisfied by demonstrating that the complete design — as a coherent system — meets the safety requirements appropriate to its specific service. That demonstration must be explicit, documented, and defensible to an Authorized Inspector who has never met you and owes nothing to your project schedule.