Integrated Automation Control of Sequences for Conveying Equipment Installation AHA (Activity Hazard Analysis / Job Hazard Analysis)
Updated 2026-06-23
An Integrated Automation Control of Sequences for Conveying Equipment Installation AHA (Activity Hazard Analysis / Job Hazard Analysis) plans the work of the automated sequences that operate conveying equipment — the elevator and escalator sequences, including the critical fire-service-recall and emergency sequences. These are the most sensitive sequences in the automation, because they cascade into moving equipment that carries people and include life-safety functions that must perform.
Why integrated automation control of sequences for conveying equipment needs its own AHA
This doc sits at the intersection of two high-stakes concerns: the sequence cascade and conveying equipment. A conveying sequence cascades into operating people-movers — so a triggered sequence can move an elevator or escalator, with the entrapment and people-safety hazards that conveying equipment always carries. And conveying sequences include life-safety sequences: the elevator fire-service recall (which sends cars to a designated floor and takes them out of normal service in a fire) and emergency operations that must work correctly when called. So these sequences both move people-carrying equipment (a physical-safety hazard during testing) and include life-safety functions (that must be verified) — the most sensitive combination in the sequences sub-family.
Three concerns carry the plan: the conveying-equipment sequences, the people-mover cascade and fire-recall life-safety, and coordination with the elevator trade.
Breaking integrated automation control of sequences for conveying equipment into steps
- Confirm the conveying-equipment sequences, including fire recall and emergency operations
- Map what each sequence operates on the conveying equipment
- Coordinate all sequence work with the elevator trade, whose controller retains safety authority
- Test sequences only with the equipment cleared of people and secured
- Verify the fire-recall and emergency sequences perform correctly
- Confirm the dedicated safety controls remain intact
The hazards step by step
The people-mover cascade
A conveying sequence cascades into moving people-carrying equipment — so triggering an elevator or escalator sequence can move a car or step band, with the entrapment and crushing hazards conveying equipment always carries. As with all conveying integration, a sequence that moves the equipment while someone is in the shaft, pit, on the car, or on the escalator is a life-safety event. So conveying sequences are never exercised with anyone in a position the equipment could reach: the equipment is cleared and secured, and locked out for anyone working on it, before any sequence test that could move it. The sequence's automatic, cascading nature makes this especially important — a conveying sequence could fire on its trigger and move the equipment without a manual command, so the trigger conditions are controlled and the equipment secured during testing.
The fire-recall and emergency life-safety sequences
Conveying sequences include life-safety functions that must work. Elevator fire-service recall automatically sends cars to a designated level and removes them from normal service on a fire signal — a code-required life-safety sequence that protects occupants and firefighters. Escalators have emergency-stop functions. So these sequences aren't just operational; they're life-safety, and commissioning verifies they perform correctly — recall actually recalls the cars, emergency operations actually function — because a fire-recall sequence that fails is a life-safety gap. So the verification of these sequences is as important as the caution in testing them, and the building automation's role respects that the elevator's dedicated controller performs the safety-critical recall while the integration coordinates it.
The conveying-equipment sequences and dedicated safety authority
The sequences operate conveying equipment that has its own dedicated safety controls, so — as with all conveying integration — the automation's role is limited and coordinated: it signals and coordinates while the elevator's own controller keeps safety authority and performs the safety-critical functions. So the sequences are designed and verified never to override or defeat the equipment's dedicated safety systems, and the fire-recall sequence works through the elevator's own recall capability rather than the automation taking it over.
The coordination, code, and sequence fundamentals
Coordination with the specialized elevator trade, the elevator and fire-life-safety codes, the AHJ, and the general sequences and conveying-integration fundamentals apply.
A simple Integrated Automation Control of Sequences for Conveying Equipment Installation AHA structure
| Step | Hazard | Control | Reference |
|---|---|---|---|
| Test conveying sequence | Moving people-mover on someone | Clear/secure/LOTO equipment; control triggers | OSHA 1910.147 |
| Verify fire recall | Life-safety sequence failing | Confirm recall/emergency sequences perform | fire/elevator code |
| Preserve safety authority | Overriding dedicated controls | Elevator controller keeps safety; automation coordinates | elevator code |
| Coordinate with elevator trade | Uncontrolled movement | Test with elevator trade; they secure equipment | coordination |
| Commission | Unexpected conveying operation | Coordinate as people-safety operation | commissioning plan |
Where the people-movers and life-safety define the work
These sequences are the most sensitive because they combine the sequence cascade with people-movers and life-safety recall. So the plan carries the people-safety caution of conveying equipment (never move it on someone, via a sequence that could cascade or fire automatically) and the life-safety verification of the fire-recall and emergency sequences (they must perform), all under the elevator trade's coordination and the dedicated controller's retained safety authority. It's where the sequence sub-family meets the highest-stakes equipment.
From the field: what actually goes wrong
The grave scenarios are the conveying ones applied to sequences: a sequence that moved an elevator or escalator on someone in the shaft, pit, or on the unit — because the equipment wasn't cleared and secured, or a sequence fired automatically on a trigger — and a fire-recall or emergency sequence that didn't perform when tested (or wasn't properly verified), a life-safety gap. The lessons: never test a conveying sequence with anyone in a position the equipment can reach; clear, secure, and lock out the equipment and control the triggers; verify the fire-recall and emergency sequences actually perform; keep the elevator's dedicated safety controls intact; and coordinate everything with the elevator trade.
The bottom line
An Integrated Automation Control of Sequences for Conveying Equipment Installation AHA covers the most sensitive sequences in the automation — they cascade into moving people-carrying equipment and include the fire-recall life-safety function. Never move conveying equipment on someone via a sequence, control the triggers and secure the equipment during testing, verify the fire-recall and emergency sequences perform, and keep the dedicated safety controls intact, all with the elevator trade. The sequences head and the conveying-integration AHA set the principles this applies.
Frequently asked questions
Why are these the most sensitive sequences?
Because they combine two high-stakes concerns: the sequence cascade and conveying equipment. A conveying sequence can move people-carrying equipment (elevators, escalators), so triggering it carries the entrapment and people-safety hazards that conveying equipment always has — and the sequence's automatic, cascading nature means it can move the equipment without a manual command. On top of that, conveying sequences include life-safety functions — notably elevator fire-service recall and emergency operations — that must perform correctly when called. So these sequences both physically move people-movers (a testing hazard) and carry life-safety functions (that must be verified). That combination — people-movers plus life-safety, driven by automatic sequences — makes them the most sensitive in the sequences sub-family, warranting the greatest care in testing and the most important verification.
What is elevator fire-service recall, and why verify it?
Fire-service recall is a code-required elevator life-safety sequence: on a fire signal (from smoke detectors in specific locations), elevators automatically return to a designated recall floor (or an alternate if the primary is affected), open their doors, and remove themselves from normal service — so occupants don't use elevators during a fire and firefighters can then take manual control. It's a critical life-safety function that protects people from being trapped in elevators during a fire. So when the conveying sequences are commissioned, fire-service recall must be verified to perform correctly — the cars actually recall to the right floor and go out of service on the fire signal. A recall sequence that failed would be a serious life-safety gap, potentially leaving elevators in normal service during a fire. So verifying recall (and other emergency sequences) is a paramount part of commissioning conveying-equipment sequences.
Why is the caution in testing so high?
Because a conveying sequence can move equipment that carries people, and it can do so automatically. So a sequence test — or a sequence firing on its trigger during commissioning — can move an elevator car or escalator step band, and if anyone is in the shaft, pit, on top of the car, or on the escalator (including workers during construction), they can be trapped or crushed. The automatic, cascading nature adds risk: the sequence can move the equipment without someone manually commanding it, if a trigger condition is met. So conveying sequences are tested only with the equipment cleared of people and secured, locked out for anyone working on it, and with the trigger conditions controlled so the sequence doesn't fire unexpectedly. The high caution reflects that the consequence — moving a people-mover on someone — is a life-safety event, the most severe in the sequences sub-family.
How does the elevator trade's role fit in?
Conveying equipment is specialized and has its own dedicated safety controls, so — as with all conveying integration — the automation's role is limited and coordinated with the elevator trade. The elevator's own controller retains safety authority and performs the safety-critical functions (including the actual fire-recall operation), while the building automation signals and coordinates. So the conveying sequences are designed so the automation never overrides the dedicated safety controls, and the fire-recall works through the elevator's own recall capability. And the elevator trade — who know the equipment, control shaft and pit access, and manage movement — coordinate the sequence testing, securing and clearing the equipment. So the elevator trade is central: they safeguard the equipment during testing, and the dedicated controller keeps the safety-critical authority, with the automation coordinating rather than taking over.
Related AHAs and JHAs
- Integrated Automation Control of Sequences AHA — the sequence fundamentals
- Integrated Automation Control of Conveying Equipment AHA — the conveying-integration fundamentals
- Integrated Automation Control of Sequences for Facility Equipment AHA — sequences for facility equipment
- Elevators AHA — the elevator fundamentals
Written by Mustafa Tok, CSP, ASP, CHST — OSHA Authorized Outreach Trainer with 14+ years of international construction safety experience across federal, heavy civil, and industrial projects.