A permit-required confined space is a confined space that also holds at least one of four hazards: a hazardous atmosphere, engulfment material, an entrapment configuration, or any other recognized serious hazard. Under 29 CFR 1910.146, entering one requires a written permit-space program.
The word that carries the weight is "permit-required." Almost any tank, pit, silo, or vessel is a confined space; what turns it into a permit space is the presence of a serious hazard, and that single classification decides whether you can send someone in with a checklist or must build an entire program around the entry. This post is about the classification and the program, not the moment-to-moment entry sequence, which is covered separately in the confined space entry guide. It draws on OSHA 1910.146 and is educational, not legal advice.
What makes a confined space permit-required?
A space is permit-required when it is first a confined space and then holds one or more of four specific hazards. It is a confined space if all three are true: it is large enough for a worker to bodily enter and do work, it has limited or restricted means of entry or exit, and it is not designed for continuous human occupancy. Given that, it becomes a permit-required confined space if it also has any one of these: it contains or has the potential to contain a hazardous atmosphere; it contains a material that could engulf an entrant; it has an internal configuration such that an entrant could be trapped or asphyxiated by inwardly converging walls or by a floor that slopes downward and tapers to a smaller cross-section; or it contains any other recognized serious safety or health hazard.
The phrase "potential to contain" is what catches people. A tank that tests clean today can still be a permit space if its normal contents or a connected line could introduce a hazardous atmosphere, because the classification is about what the space can do, not only what it is doing at the moment you look in. By contrast, a non-permit confined space is a confined space that does not contain, and has no potential to contain, any hazard capable of causing death or serious physical harm. It is still a confined space; it simply lacks the trigger that would require a permit.
It helps to make the four triggers concrete. A hazardous atmosphere is one that can expose an entrant to death, incapacitation, impaired escape, injury, or acute illness: too little oxygen, too much, a flammable gas or vapor above a threshold, or a toxic contaminant over its exposure limit. Engulfment is being surrounded and captured by a liquid or a finely divided flowable solid, like grain, sand, or sludge, that can bury a person or fill the airway. An entrapment configuration is a shape (inwardly converging walls or a floor that funnels down) that can trap or asphyxiate someone as they move deeper. And the fourth trigger, any other recognized serious hazard, is deliberately broad: unguarded machinery, extreme heat, or the risk of a fall inside the space can all qualify.
What must a written permit-space program contain?
If your workplace has permit spaces and employees will enter them, you must develop and implement a written permit-space program. This is the piece people confuse with the permit itself: the permit is one document for one entry, while the program is the overall system that governs every entry. The written program must, among other things, identify and evaluate permit-space hazards before entry, establish the means and procedures for safe entry (including acceptable entry conditions), provide and maintain the necessary equipment (testing and monitoring instruments, ventilation, communication, personal protective and rescue equipment), test and monitor conditions, provide an attendant outside the space, designate the entrant, attendant, and entry supervisor roles, develop and implement procedures for summoning rescue, and operate the entry permit system.
Two program elements get neglected. First, contractor coordination: when outside crews enter your permit spaces, the host and the contractor must exchange information about the spaces and hazards, and coordinate operations. Second, the program must be reviewed, using canceled permits, so recurring problems get fixed rather than repeated. A program that is written once and filed is not a program; it is a binder. Isolation of hazardous energy is part of nearly every entry, which is why the program leans on your lockout/tagout procedures to keep lines and equipment dead while someone is inside.
What is the difference between reclassification and alternate entry?
The standard offers two ways to reduce the controls on a permit space, and they are not interchangeable. Reclassification eliminates the hazards; alternate entry controls a single atmospheric hazard. Confuse them and you strip protections a space still needs.
| Path | When it applies | What you still do |
|---|---|---|
| Full permit entry | Any permit-space hazard is present or possible | Test, isolate, permit, attendant, rescue, continuous monitoring |
| Alternate entry procedures | The only hazard is atmospheric and continuous forced-air ventilation can control it | Ventilate and monitor continuously; document; restore full permit conditions if anything changes |
| Reclassification to non-permit | Every hazard is eliminated, and no atmospheric hazard remains | Document how hazards were eliminated; re-evaluate if the space or contents change |
The trap is the difference between controlling a hazard and eliminating it. Forced ventilation controls an atmospheric hazard; it does not eliminate it, because the moment the fan stops the hazard can return. So a space kept safe by ventilation is a candidate for alternate entry, not reclassification. Reclassification requires that the hazard be truly gone, and if eliminating it requires entering the space, that entry must be performed under full permit procedures. When a permit space "usually tests fine," that is a reason to keep the program, not to abandon it.
How do you build a permit-space program?
Work the program in order, and let the documentation carry it so it survives staff turnover.
- Survey the whole site for confined spaces, then evaluate each against the four triggers to decide which are permit-required.
- Post and inform, marking permit spaces with danger signs and informing employees that the spaces exist and must not be entered without authorization.
- Decide the entry approach for each space, full permit, alternate entry, or reclassification, and document the basis for anything less than full permit.
- Write the program, covering hazard evaluation, acceptable entry conditions, equipment, testing and monitoring, roles, the permit system, and rescue.
- Arrange rescue in advance, evaluating that your chosen rescue capability can actually reach and extract an entrant from each specific space in time.
- Coordinate contractors, exchanging space and hazard information with any outside crew and folding them into the same permit system.
- Train the roles, making sure entrants, attendants, and supervisors know their duties and the warning signs that trigger evacuation.
- Review and improve, using canceled permits and any close call fed through near-miss reporting to correct recurring problems and re-evaluate classifications.
The entire program hinges on the first two steps. If a space is misclassified as non-permit, none of the protections downstream ever get applied, which is why classification is where a permit-space program is won or lost. Treat the space inventory as a living document: every time you add equipment, change a process, or alter what a vessel holds, a space can shift from non-permit to permit-required, and the program only protects people if the list keeps pace with the plant.
What does the standard say?
The classification and program requirements are set by regulation, and these are the anchors:
- The definitions of a confined space and a permit-required confined space, the four hazard triggers, and the written program requirements are in 29 CFR 1910.146.
- The reclassification and alternate-entry procedures are set within the same standard, at 1910.146(c).
- NIOSH reports that a large share of confined space fatalities, on the order of 60%, are would-be rescuers which is why rescue must be arranged before entry.
The failures in confined-space deaths trace back upstream almost every time: a space that was never correctly classified, so the program that would have saved someone was never applied to it.
Where classification falls apart
A permit-space program usually fails at its foundation: the list of spaces itself. A new vessel gets installed and never added to the inventory. A space gets "reclassified" verbally because it tested fine last time. The written program lives in a binder while the actual classifications live in a supervisor's head. Harmony is an AI-native layer that connects machines, software, and paperwork into one operational layer, with no rip-and-replace. The space inventory, each classification and its basis, the permits, and the reclassification certifications become structured data captured where the space is, so a misclassified or newly installed space is a visible gap rather than a silent one.
Harmony is not a confined-space product and it does not replace your written program, your air monitoring, or your rescue arrangements. It keeps the classification and the program from being paper nobody can find, so the permit-space inventory ties into the same operational record as your lockout/tagout, your job safety analysis and the file you build for OSHA inspection preparation. AI search returns cited answers across those records, so the classification and last permit for a specific tank surface when someone asks. See what a single operational layer looks like on a real plant floor in the CLS case study.