LOTO/tagout audit with AI — the living lockout dossier, step by step.

The problem

The procedure exists; the evidence does not.

Any serious industrial plant has its LOTO procedure documented and trained: notify, shut down, isolate every energy source, lock with a personal padlock, tag, verify zero energy, intervene. The procedure is good — but the audit usually finds that:

1. The record is filled in by the technician at the end. Sometimes from memory, sometimes with a bit of reconstruction. With no real timestamp per step.
2. There is no photo of the padlock at each isolation point. Just one general photo “just in case”, or none at all.
3. Zero-energy verification comes down to a tick in a box. There is no trace of the tester reading, nor of who took it.
4. When there is a group LOTO or work handed across shifts, the transfer is verbal. The incoming technician assumes the outgoing one locked everything, and sometimes that is true — until it is not.

The classical system works 99.9% of the time. That 0.1% is exactly the unexpected start-up accident that costs a life or a hand. The auditor knows it — which is why they ask for more and more objective evidence, not just the signed form.

How it fits the IRIS system

iLEAN turns every LOTO step into objective evidence — and takes the paperwork off the technician.

iLEAN does not change your LOTO procedure and does not force you to buy new padlocks. It acts as the filler that seals the crack between the written procedure and the archivable evidence: it captures the sequence at second zero, validates that it is complete, and delivers a living dossier that stands up to any audit.

Connect hears the technician say “padlock 4 fitted”. Edge sees the electrical room. The agent verifies the sequence. The person signs the close-out.

The three iLEAN pieces applied to LOTO/tagout:

• Connect — the technician carries a phone or tablet. At each step of the procedure the system asks for the photo of the padlock/tag and a short spoken sentence (“disconnector L3 locked, padlock 4, 0V verified with Fluke tester”). Photo, transcribed audio, timestamp and position are cryptographically signed. Shift handover runs through the same channel — the incoming technician sees the outgoing one's sequence and signs an explicit acceptance.
• Edge — optional, in the main electrical room or facing the critical isolation panel. It visually verifies that the padlock and the tag are in place, and logs any unauthorized intervention inside the locked-out area. It works without a network — what is critical does not depend on WiFi.
• Agent — lives in Central. It cross-checks the captured sequence against the master procedure (every declared energy source, the established order, the list of authorized people). If a step is missing or the order does not add up, it holds the close-out and alerts the supervisor. It assembles the audit dossier with the full sequence, the photos in order and the signatures. The three rings guarantee that the LOTO close-out of critical operations is signed by a person, not by the system alone.

See the full IRIS architecture →

Before and after

LOTO with a paper form vs. LOTO with iLEAN

Aspect	Procedure + paper form	With iLEAN Connect + Agent
Step capture	Tick in a box at the end of the job	Photo + voice + timestamp per step, at second zero
Padlock evidence	“I saw it fitted”	Signed photo of the padlock and the tag at every disconnector
Zero-energy verification	Ticked checkbox	Voice + photo of the tester reading, transcribed
Shift handover	Verbal, sometimes unrecorded	Signed acceptance with the full sequence visible
Offline coverage	n/a	Local capture; deferred sync guaranteed
Audit dossier	Reconstructed by the technician the night before	Living, ordered, exportable in one click

Impact estimate

Impact estimate for your plant — to be validated with your numbers.

The block below is an estimate to be validated with the specific data of your plant. We set it out so the committee has an order of magnitude; we refine it during the diagnostic.

• Industrial plant with 15-50 maintenance technicians, 5-20 master LOTO procedures, external audit at least annually (OSHA, Bureau Veritas, AENOR, the customer's certification body).
• Connect pilot across the technician fleet plus a LOTO document-management agent. First value expected within a few weeks: every new intervention is documented with objective evidence; shift handovers become auditable.
• Indicative payback between 5 and 9 months, conservative. Levers: less paperwork time for the technician, fewer audit-preparation hours, and the hard lever — the cost of one avoided unexpected start-up accident.
• Expected reduction in audit-preparation effort of ≥40% (estimate to be validated).

And the reasonable doubt from industrial IT

“What if the agent signs off a LOTO that was not properly done?” — hallucination is a problem of free generation, not of anchored tasks. Comparing a captured sequence against a master procedure and flagging what is missing is the very definition of an anchored task — on this kind of task the best models brought the error rate below 1.5% ^[1]. And the critical LOTO close-out is signed by a person, not by the system — the three rings are there precisely for this. It fits the direction the European AI Act is taking: human oversight in high-risk operations.

^[1] OpenAI paper “Why Language Models Hallucinate”, 2025 — on the reliability of AI in anchored tasks.