Safe Opening Authorization and Procedure

Purpose

A safe opening is the one job in this trade the customer cannot inspect before it happens and cannot undo after. The moment a bit goes through hardplate the container's rating is spent, the insurance rider written against that rating may be spent with it, and whatever the safe was holding is in open view of everyone in the room. This procedure guarantees that authority was proven at a higher bar than an ordinary opening, that the method was consented to in writing before a drill came out, and that the container's condition and contents were witnessed rather than remembered.

Without it the pattern repeats: a shop drills an estate safe on the word of the adult child who called, the container holds a will two heirs are arguing over, and the shop becomes a witness in somebody's probate case with nothing in the file but an arrival time. The opening was probably lawful; nothing in the record proves it.

Scope

Covers burglary-rated and fire-rated containers, gun safes and depository chests: container survey, the non-destructive ladder, drilling to a published point, scoping, restoration or red-tagging, and combination handover.

Does not cover the identity and authority gate itself, which is owned by the Identity and Authority Verification SOP and runs first; safe work is one of its elevated classes and takes second-channel confirmation with no exception. Does not cover ATM or bank-floor equipment under a manufacturer service contract, which routes to the authorized servicer because opening one outside that contract voids it, or a container a law enforcement agency has named in an active matter, which waits for the agency.

Roles and responsibilities

The handoff that decides the outcome is technician to lead at the end of the time box, where a shop either gets a second opinion on the drill point or quietly starts making holes.

Procedure

Step 1: Confirm authority and the second channel before the truck loads. Run the elevated path in the Identity and Authority SOP and record the reason for the opening in the customer's own words. Acceptance: a logged live callback to an independently sourced number, with time, person reached and stated authority. Wrong looks like a voicemail left with a property manager and a truck rolling anyway, or an executor whose letters are promised but not in hand. Stop rule: no live second channel, no truck. The hazard here is commercial, and a safe opening reversed after the fact is a claim, not a refund.

Step 2: Survey the container and secure the work area before touching the dial. Photograph nameplate, door face, hinge side and base; record make, model, serial, rating, lock type and anchoring; then chock or strap the unit and put the customer outside the swing arc and outside the chip line at a distance you name out loud. Acceptance: every survey field filled, including "not present" where a plate has been removed, plus a note on any filled hole, replaced dial ring or body that does not match its door, and the container immobile under a firm two-hand push at the top corner. Stop rule: evidence of a previous forced attempt or repair goes to the lead before any attempt, because the published drill data no longer describes what is in front of you. Hazard: a tall unanchored safe is top-heavy and goes over if you haul on a stuck handle, so strap or block it before applying hand pressure, and eye protection rated for metal chipping goes on before any cut.

Step 3: Exhaust the non-destructive ladder against a stated time box. Work it in order: manufacturer-published defaults for that model, the customer's own recollection, a code retrieved from the manufacturer under your registered account, key override where the model carries one, then dial manipulation on a mechanical lock. Time-box the ladder at 45 minutes for a residential fire safe and 90 for a rated burglary container. Acceptance: it opens or the clock runs out, and both outcomes are logged with elapsed time. Stop rule: at the end of the box you stop and call the lead, and no destructive method starts until step 4 is complete; three hours of manipulation because nobody wants to make the call is the failure this box exists to prevent. Hazard: repeated forcing of a jammed handle pre-loads the boltwork and can spring it against your hand when it releases, so keep fingers off the handle spokes and clear of the bolt ends.

Step 4: Get written consent for destructive work, consequences named. The signer signs a consent stating that the container will be drilled, that its rating is void afterward whether or not it is repaired, that a relocker may fire and turn a small repair into a large one, and that restoration is a separate decision made once the door is open. Acceptance: signed and dated consent naming the container by serial, in the file before the drill is chucked, with the range of outcomes given in labor hours and never as a guarantee. Wrong looks like verbal consent from a customer who later tells an insurer nobody mentioned the rating. Stop rule: unsigned means undrilled, and a signer who will not sign ends the visit.

Step 5: Drill to a published point referenced from two landmarks. Pull the point from your drill-data subscription for that exact model and lock footprint, reference it from two independent landmarks on the door such as the spindle centre and a hinge edge, and measure twice before the bit touches metal. Acceptance: the two measurements agree and the scope shows the lock package where the data says it should be, rather than plain fill or structure that does not match. Stop rule: stop on any disagreement between what you see and what the data says, and re-reference or call the manufacturer's technical line before another hole. Hazard: hardplate throws hard fragments, and drilling fire-safe fill releases respirable dust from a gypsum or concrete composite, an inhalation route eye protection does nothing about, so wear a respirator under your shop's 29 CFR 1910.134 program; on a container predating roughly 1980 treat unknown fill as possibly asbestos-containing, which means no dry abrading and no vacuum without HEPA.

Step 6: Open the door, then keep your hands out of it. Retract the boltwork, swing the door, stop, and photograph the interior before anything moves. The customer removes contents; the technician does not touch them, count them or read them. Acceptance: a timestamped interior photograph with the door open and the customer in frame, plus a signed line that the customer took possession. Wrong looks like a technician helpfully lifting out an envelope, which is how a shop gets named in a dispute about what was inside. Stop rule: contents including a firearm, currency or controlled substances stop the job; handle none of it and call the lead.

Step 7: Restore or red-tag, and hand over a combination the customer sets. Decide with the customer whether the container returns to service, becomes storage, or is scrapped; if it returns, replace the drilled lock, patch to the standard your parts supplier specifies, and say plainly that the original rating does not come back. Acceptance: the customer enters their own new combination and verifies it three times with the door open, then one full lock-and-open cycle with the door closed, witnessed. Wrong looks like handing over a combination the technician set and never watched the customer use, which is a second lockout inside a week. Stop rule: a container that will not cycle cleanly closed is red-tagged non-secure in writing and is not represented as usable.

The record this produces

One safe-opening file per container, completed on site:

• Authority block from the identity SOP, the second-channel call, and the customer's stated reason
• Survey: make, model, serial, rating, lock type, anchoring and prior-work findings, with photos of nameplate, door face and base
• Method log: each rung attempted, its result, and the elapsed clock when the box closed
• The signed destructive-work consent naming the container by serial
• Drill data source and revision, the point used, the two landmarks it was referenced from, and a photo of the hole before plugging
• Relocker status, fired or intact, and what that did to the repair
• Open-interior photograph, the contents-possession signature, and the disposition with the three combination verifications initialed

Readers later: the owner defending a complaint, the insurer deciding whether the container still qualifies for a rider, an estate attorney reconstructing who was present, and the next technician working on a container somebody has already been inside.

Worked pass: an estate fire safe, two steps failing

An executor with letters testamentary calls about a mid-size fire safe. Step 1 clears at 10:15: letters photographed, live callback to the probate attorney at a number pulled from the state bar directory rather than from the customer, authority confirmed for household contents. Reason recorded in the executor's words: locating the deed and the insurance policy.

Step 2 finds a fire-rated body with no burglary rating on the plate, an electronic keypad, no anchoring, and one filled hole low on the door face the executor knows nothing about. Somebody has been in this container before, so the published lock package may not be what sits behind the keypad. Photographed, logged, lead notified, unit strapped to the wall before anyone touches the handle.

Step 3 fails. Manufacturer defaults are tried, the executor's three guesses from the parent's habits are tried, and there is no retrieval path because the model is out of production; manipulation is not available on an electronic lock. The ladder runs 38 minutes of the 45 allowed and closes with the safe shut. Stop rule taken: the technician calls the lead instead of reaching for a drill, and the lead confirms destructive is the only path left. Consent signed at 11:07 with the rating loss and relocker risk read aloud.

Step 5 fails on the first reference. A point measured from the keypad centre alone puts the scope hole into plain fill, and the hinge-edge landmark disagrees with that first mark by roughly two bit diameters. The technician stops at the scope hole rather than opening it out, re-references, and finds the earlier repair moved the lock package. The second point, agreeing on both landmarks, lands on the lock body.

Step 6 opens at 12:40, the executor removes a folder and a small box and signs the possession line. Step 7 lands on storage rather than repair, since the fire rating is gone and the contents are moving to a bank box, so the unit is red-tagged non-secure in writing.

About two and a half hours on site, of which the failed time box was roughly a quarter and the failed drill reference another twenty minutes. Both were cheap: the alternative on step 5 was opening out a hole in the wrong place on a container already repaired once, which turns a fire safe into scrap in front of the person about to pay for it.

References

• UL 687 (burglary-resistant safes) and UL 72 (fire-resistant record containers), in the editions the container was listed under; a nameplate rating describes the container as manufactured and does not survive drilling
• 29 CFR 1910.134 for the respiratory protection program covering fire-safe insulating dust, and 29 CFR 1910.133 for eye and face protection against flying metal chips
• Manufacturer drill-point data from a licensed safe-technician subscription service, referenced by model and revision; a point copied from a forum post is not drill data
• Safe and Vault Technicians Association training material on relocker types and non-destructive method ladders
• See related: Identity and Authority Verification Before Any Work SOP (the authority gate this depends on), Key Blank and Key Control Inventory SOP