Safety lead at the gatehouse turnstile at first light in green high-visibility vest, white hard hat and clear safety glasses, holding a tablet showing the live permit and RAMS dashboard — Cranebank data centre.
Cranebank · Gatehouse · 06:48 GMT · 142 inducted, 109 expected on shift

You see everything that matters, the moment it matters — and nothing gets buried.

Safety Officers don't want dashboards. They want control, clarity, and zero surprises. The Spine is built to deliver exactly that: nine live channels, one screen, one named owner per item, one signed loop. The system never decides; the competent person does.

The Safety Spine · nine channels, one record

Authority, calm, competence — in the order Cassidy reads them at 06:55.

The Spine is the safety officer's working surface, in the sequence the morning actually happens. Top-of-screen first — what is happening right now and is the workforce authorised to do it. Mid-screen — the controls that govern it. Bottom-of-screen — the patterns and the readiness. Every cell is a live query against the same record that feeds the PM, the SM, and the HSE evidence pack. Nothing reconciled in arrears; nothing rebuilt at gateway.

Live high-risk activities

Hot work, working-at-height, confined-space, isolation and lifting operations — visible the moment a permit issues, with named issuer, named operatives, location pinned to the pod, stop-time set. Auto-suspend on stop-time unless explicitly extended by the competent person.

Live · named · timed

Workforce sign-on & competency

Every operative through the turnstile checked in 1.4 seconds against induction, RAMS-of-the-day, permit linkage and statutory training. No badge, no entry, no exception. The CSCS, UKATA, WAH and 18th Edition tickets are reconciled live to the employer-of-record.

Hard block on lapse

Permits, inspections, audits

Permits issued by the competent person against an active method statement, on a witnessed lifecycle. Inspections (scaffold weekly, ladder daily, plant LOLER) tied to assets and to operatives. Internal audits and external HSE inspections recorded against the same spine.

Issuer · witness · record

Near-misses, observations, NCRs

Captured in 22 seconds from a phone in the operative's language, with photo, location and free text. Routed to a named SHE owner, never to a tray. NCRs raised against a clause, an asset, a sub. Patterns surfaced — Cassidy decides what becomes a controlling action.

Forensic, not decorative

Weather, wind, site conditions

Live wind speed at crane height, ground-level gust, lightning radius, temperature and visibility — against the thresholds in the active lift plan, the WAH permit, the concrete pour. Auto-warn at threshold, auto-suspend at hard limit, named reinstatement.

Met Office · site sensors

Temporary works, RAMS, toolbox talks

Temporary-works register signed by the TWC against design check certificates. RAMS versioned against the activity, signed by a named competent reviewer. Toolbox talks acknowledged by the operative on their phone, in their language, timestamped to them — not to a printout.

Versioned · signed · owned

First-aid presence & emergency readiness

FAW and EFAW responders by name, current ticket dates, location on shift. Defibrillator stations checked-in daily. Fire wardens by hall and floor, weekly drill log. Spill kits, eye-wash, escape routes — all asset-tagged, last-checked timestamped, gaps surfaced before the morning briefing.

Always present · always ready

Subcontractor training matrix

Every employer-of-record's training record reconciled to the live permit board. Statutory entitlements (CITB-funded SSSTS/SMSTS, UKATA, IOSH, Mates in Mind) surfaced for the operative on their phone. Lapsed tickets hard-block the next permit until the competent person signs reinstatement.

By sub · by ticket · by name

Building Safety Act golden thread

Drawings, calculations, RAMS, design-change records and competence records indexed live against gateway 2 and gateway 3 requirements. Evidence packs are exports of the live record — not rebuilds in panic at the gateway. Cassidy and the principal designer review and sign; the system records.

Gateway-ready, every day

The day before · the day with

The day before Loadbearer

  • Permit binder lives at the gatehouse — three lever-arch files, last reconciled by hand on Tuesday afternoon.
  • RAMS revisions tracked in a shared drive folder where seven different subcontractors save with seven different naming conventions.
  • Near-misses captured on a paper card in the canteen tray — half of them never reach the SHE meeting.
  • Toolbox talk attendance: a printed sheet with signatures, scanned on Friday, lost by Monday.
  • A subcontractor's site induction has lapsed and nobody noticed because the spreadsheet is two weeks behind.
  • Golden thread for the BSA gateway: a binder owned by one person, rebuilt by hand at every gateway approach.
  • HSE inspector arrives unannounced; the safety lead spends 90 minutes finding the F10 and the latest PCI.
  • The same near-miss happens on three pods over four weeks before anyone joins the dots.

The day with Loadbearer

  • The badge-in flow at the turnstile checks induction, RAMS, permit-of-the-day, and competency in 1.4 seconds. No badge, no entry, no exception.
  • RAMS are versioned, signed by the right competent reviewer, and tied to the activity — the operative gets the current revision on their phone before the toolbox talk starts.
  • A near-miss is captured from a phone in 22 seconds with photo, location, and free-text — and routed automatically to the relevant SHE owner.
  • Toolbox talk acknowledgement is a tap on the phone, multilingual, and timestamped to the operative — not the printout.
  • A lapsing induction is a 14-day notice, then a 7-day notice, then a hard block at the turnstile. No surprises.
  • The golden thread is the live record. Every gateway evidence pack is the export, not a rebuild.
  • The HSE inspector arrives; the safety lead opens one screen. Everything they want is one filter away.
  • Three near-misses on three pods cluster on the dashboard the moment the third one is raised — the pattern is visible, not buried.

At your fingertips, every shift

A live picture of who is on site, and on what authority.

On site now 109 Inducted, RAMS-current, permit-linked Every operative tagged to a subcontractor package, an active permit, and the RAMS revision they acknowledged at the morning toolbox talk. Two have just badged out for a delivery.
Permits live 23 Hot work · WAH · confined space · isolation Six hot-work permits issued by 06:55 — every one tied to a competent issuer, a current fire watch, an extinguisher position, and a stop-time. Auto-revoke at the stop-time unless explicitly extended.
Near-misses · 7 days 14 Captured · 11 closed · 3 in flight The three open ones include the second-floor handrail issue, raised at 11:14 yesterday from a phone, photographed, and on the SM's screen at 11:15. Closed by 16:00 with a permanent control change.
Inductions lapsing 4 Within 14 days · 1 within 48 hours Apex's senior pipefitter induction lapses Friday. Reminder sent to him, his supervisor, his subcontractor admin and the safety lead at 09:00 today. He cannot badge in on Saturday until it is renewed.
RAMS active 63 Current revision · reviewed competent Every active RAMS reviewed by a competent reviewer named on the record — not just "approved" by an inbox. Two flagged for re-review because the activity scope changed at the Tuesday SHE.
BSA gateway evidence 100% Indexed against gateway 2 / 3 requirements Every drawing, calculation, RAMS, design-change record and competence record indexed against the Building Safety Act gateway it serves. The export is the export. The binder is dead.
Toolbox talks · today 9 Multilingual · acknowledged 91% English, Polish, Romanian, Portuguese, Lithuanian. Operatives acknowledge in their language, on their phone, in 6 seconds. The 9% who haven't acknowledged are flagged before the gangs leave the welfare unit.
Patterns surfaced 2 From the live near-miss feed "Three handrail near-misses on Hall 2 / Floor 3 in 11 days." "Two unattended hot-work permits at lunchtime in the last fortnight." Cassidy decides what becomes a controlling action — the system never does.

Training matrix · by subcontractor, by ticket, by name

One screen. Every subcontractor's training record on Cranebank, reconciled to the live permit board.

Cassidy sees the full training picture across every subcontractor on site — not a binder collected at induction, but the live record each employer-of-record has logged against each operative on their books. Statutory entitlements (CITB-funded, UKATA, Mates in Mind, IOSH, HSE) are surfaced for the operative on their phone; gaps are flagged here before the next permit is issued. The system never decides; Cassidy reviews, the subcontractor admin signs, the operative is notified by name.

Subcontractor
On site
CSCS · current
Statutory training
Gaps
Apex MechanicalM-USR · cooling pipework · Hall 2
23of 27 inducted
23 / 23100%
WAH · MH · UKATA21 / 23 current
2 lapsed
Verdant ScaffoldingM-USR · access · all halls
14of 16 inducted
14 / 14100% · CISRS held
CISRS · WAH · SSSTS14 / 14 current
None
Halloran ElectricalM-USR · LV containment · Hall 1, Hall 2
19of 22 inducted
19 / 19JIB · ECS held
SMSTS · 18th Edition17 / 19 current
1 expiring · 14d
Shankar CivilsM-USR · slab pours · Hall 3
11of 14 inducted
11 / 11100%
CPCS · SSSTS · MH11 / 11 current
None
Vasquez DryliningM-USR · partitioning · Hall 2 floors 1-2
9of 12 inducted
8 / 91 holding labourer card
UKATA · MH · WAH9 / 9 current
CSCS upgrade due
Donnelly CxAIndependent commissioning authority
3witnesses on shift
3 / 3AM2 held
SMSTS · IOSH MS3 / 3 current
None

The two lapsed Apex tickets are UKATA Asbestos Awareness (Cat. A) on the cooling pipefitter — free e-learning, 36 days overdue, hard-blocked from any permit involving ACMs until refreshed; and one Manual Handling refresh, 9 days overdue. Halloran's expiring 18th Edition is on a senior electrician, 14-day notice now active to him, his supervisor, his JIB account, and Cassidy. Recommendations only; Cassidy signs the reinstatement, the subcontractor signs the booking, the operative completes the course.

Lessons learned · forensic, not decorative

The pattern that broke the last hall is the pattern that won't break this one.

  • S-007

    Hot-work permits left unattended at lunchtime account for 62% of fire near-misses on UK data-centre fit-out across the last 18 months.

    A permit issued before 11:30 now auto-prompts a 12:30 check-in to the issuer. Miss the check-in and the permit suspends. Cassidy reviews and reinstates only if the conditions hold.

  • S-013

    Inductions allowed to lapse silently caused 17 turnstile blocks on Hall 1 — every one of them with 14 days of warning unread in someone's inbox.

    Lapsing-induction notices now go to four addresses, not one — operative, supervisor, subcontractor admin, safety lead. Hard turnstile block on day 0. No grace-day exceptions without a Cassidy sign-off and a reason logged.

  • S-019

    Near-misses raised in English-only forms were submitted at one-third the rate of near-misses raised in operative-language forms across the same workforce.

    Capture is multilingual at source. The translation is for the SHE register; the operative reports in their own language. Submission rate on Hall 2 is 3.1× the Hall 1 baseline.

  • S-024

    BSA Gateway 2 evidence packs assembled by hand at the last hall took 94 person-hours and contained 11 inconsistencies between source documents and the indexed pack.

    The pack is the live record. Indexing is automatic against gateway requirements; Cassidy and the principal designer review the export, sign, and submit. Person-hours: 6. Inconsistencies in the last dry run: 0.

What stops happening

  • The lever-arch binder at the gatehouse that nobody trusts.
  • The "I'll add it to the register on Monday" near-miss that gets forgotten by Thursday.
  • The induction that lapsed silently because the spreadsheet was behind.
  • RAMS revisions confused between Apex's iPad and the project drive.
  • Toolbox talk acknowledgement on a printout that nobody scans.
  • Building Safety Act gateway evidence rebuilt from scratch at the gateway, in panic, by one person.
  • The HSE inspector who waits 90 minutes while the F10 is found.

The signed loop

Law first. The competent person decides. The system records.

The Building Safety Act 2022 is absolute and takes total priority over every recommendation the system surfaces. Loadbearer generates the picture, the warnings, the patterns, the draft evidence pack. Cassidy reads, judges, signs, issues. If a recommendation contradicts current legislation, the system says so and refuses to draft. Liability sits where it must — with the competent person.

The system never decides. Principle 4. Principle 6. Principle 7.

"I used to be afraid of the question 'where's the evidence?'. Now I'm afraid of the day I don't have it on one screen."

— Cassidy · Safety Lead · Marauder Construction (fictional)

Adjacent

The same record, different views.

The same induction, permit, and near-miss data feeds the PM dashboard for programme effects, and the Operative phone for "is my RAMS current?". One source. Eleven views. Always reconciled.