Episode 7, Before the Fracture, 5M Leadership
The 40-Minute Decision
Deepwater Horizon, April 20, 2010, Gulf of Mexico, 49 miles offshore
Decision window40 min
Lives lost11
BP cost$65B
5:00 PM, Test begins
Negative pressure test initiated
Standard procedure before sealing the well. Pressure is applied, then released. A properly sealed well shows pressure dropping to zero and holding. The well is, by BP's own internal assessment, the most dangerous they have ever drilled.
Standard procedure
5:05 PM, Anomaly 1
Drill pipe shows unexpected pressure
Pressure readings on the drill pipe do not drop to zero. Under standard well control interpretation, unexpected pressure after release means one thing: the well has not sealed. Gas may be present below.
Anomaly 1 of 3
5:10 PM, Anomaly 2
Kill line shows contradictory readings
The kill line produces readings that contradict the drill pipe data. When two measurement points on the same well show different results, that is not ambiguity. Under standard well control, that is a failed test requiring immediate escalation.
Anomaly 2 of 3
5:20 PM, Anomaly 3
Flow indicators show intermittent flow
Flow registers when there should be none. The crew sees it. Jimmy Harrell, Transocean's installation manager, objects. Multiple crew members voice concern. Mike Williams is watching. By any standard well control interpretation, this test has failed on three independent measures.
Anomaly 3 of 3, Test failed
5:10 – 5:35 PM
The bladder effect explanation emerges
Someone proposes that anomalies are caused by a rubber bladder in the equipment, not gas in the well. This explanation would mean the test has not failed. The well would be safe to seal. Vidrine and Kaluza are six weeks behind schedule. This well costs BP a million dollars per day idle.
Proposed explanation, contradicts standard well control
5:30 PM
Harrell objects. Crew objects. No override mechanism exists.
Harrell formally objects. Multiple crew members question the interpretation. Mike Williams sees what is happening. But Harrell is Transocean. Vidrine and Kaluza are BP, the client. In the contractor hierarchy, BP decides. There is no formal override condition that gives Harrell the structural authority to stop the decision. His objection is heard. It is not binding.
Override authority: nonexistent
5:40 PM, Decision
Well declared safe
Vidrine and Kaluza accept the bladder effect explanation. The well is declared safe. The negative pressure test, which failed on three independent measures, is recorded as passed. Forty minutes. No escalation. No override. The authority structure has produced its outcome.
40 minutes / Authority unclear / Override: none
5:40 PM – 9:49 PM
Four hours and nine minutes
The well has been declared safe. Displacement operations continue. The crew proceeds according to the 5:40 decision. Nothing visible on the rig contradicts it. Below the seabed, gas is moving.
Surface: normal. Subsurface: critical.
9:49 PM
Gas erupts onto the rig
Mud and gas shoot up the drill pipe. The rig's gas detection systems activate. Mud covers the rig floor, the derrick, the equipment. The source is the well that was declared safe four hours and nine minutes ago.
Well integrity failed
9:52 – 9:56 PM
Engine room. First explosion. Second explosion.
Gas reaches the engine room intakes. Engines over-speed and explode. Seven minutes after the first gas eruption, the rig explodes. Eleven men are killed. Mike Williams is thrown across the room. He makes his way to the edge. He is ten stories above the Gulf of Mexico. The water below is on fire. He jumps. He survives.
11 killed, 115 survive, well uncontrolled
April 20 – July 15, 2010
87 days. 4.9 million barrels. $65 billion.
The largest marine oil spill in history. The decision made at 5:40 PM ultimately costs more per minute than the delay it was designed to prevent.
"I watched them accept an explanation that contradicted standard well control practices. I knew it was wrong."
Mike Williams, Chief Electronics Technician, Congressional testimony, June 17, 2010
What Decision Rights Architecture would have required
With an Override Protocol in place at 5:30 PM
Harrell invokes Override Protocol, Safety risk triggered. Catastrophic consequence triggered.
Decision automatically escalates to BP Regional VP. Cannot be resolved at well site level.
VP reviews: three anomalies, crew objections, disputed bladder effect explanation.
Well not declared safe. Additional testing required. Different decision.
The Override Protocol does not require better judgment. It requires that the right judgment reaches the right authority.