Terminal commissioning where custody transfer is the gate that matters.

Tank farm, pumping and manifold areas, the metering skid, the jetty and its loading arms, and the fire water ring main are structured as subsystems that can be certified and handed over independently, because that is how a terminal is actually commissioned and started.

Third-party documents attach to the tag they qualify, not to a folder. A strapping table sits under the tank. A prover run sits under the meter. A pump performance curve sits under the fire pump. Each carries the issuing party, the date and the acceptance status, so an outstanding third-party document reads as a visible gap in readiness rather than as an absence nobody was tracking.

The register is drafted from the P&IDs, tank data sheets, the instrument index and the fire and gas cause and effect matrix, with drawing references retained for engineer review.

Fiscal metering carries its own certification path: instrument calibration, flow computer configuration, proving runs, uncertainty calculation and, on most terminals, a witness signature from the authority or the buyer's representative. It is small in tag count and disproportionately large in consequence.

The metering skid is its own subsystem with its own ladder, so its readiness is never diluted inside a terminal-wide percentage. The gate above it lists exactly what is outstanding — an uncertainty calculation not yet accepted, a witness signature not yet obtained — instead of a number that says ninety-four per cent complete.

Because signatures carry name, role, organisation and timestamp, the witnessed records are usable as fiscal evidence rather than as an internal claim that a witness attended.

Foam systems, deluge, fire water pumps, gas detection, ESD valves and the cause and effect logic behind them are the elements the authority and the insurer will read together. On most projects they are scattered across mechanical, electrical, instrument and specialist vendor scopes.

Tagging safety-critical elements in the register lets the whole set be filtered as one view: every ITR, every function test, every punch item and every certificate against those tags, in one list, for the review meeting. The same filter shows what is outstanding while there is still time to close it.

Cause and effect testing is recorded against the initiator and the final element, so a matrix line that has been proven is distinguishable from one that has only been assumed from the design intent.

Fire water ring main pressure tests, diesel and electric fire pump starts on demand, foam concentrate induction rates, ESD level 1 behaviour, gas detection voting and cause and effect, bund drainage and interceptor valves: each is a test with a pass criterion and a witness.

Those witnesses are rarely all from the same organisation. Operator HSE, the insurer's surveyor and the local fire authority may each need to see a different subset, and each expects a record with a name, a role and a timestamp on it.

The emergency systems test set is held against the tags it protects, so product is not accepted into a tank whose protection set is unproven — and the pack produced is the same one the insurer asks for at first renewal, not a separate assembly exercise.