The Control Layers a Penetration Goes Through
Why this matters
An exterior wall or a ceiling looks like one thing and does four jobs, each handled by a different layer at a different depth. A 3 inch hole for a line set goes through all four in about seven inches of wall. Seal the outside and walk away, and you have handled one of them. The other three fail quietly: a cold draft at the outlet next to the new unit, a damp batt that molds behind the drywall, a sweating line inside the cavity that stains the ceiling below two summers later. Knowing which layer is which, in this particular house, is what lets you restore each one instead of caulking the siding and hoping.
Four layers, four jobs
Each layer controls one thing. The first question at any penetration is which material in front of you is doing which job.
- Water control keeps liquid water (rain, wind-driven rain, snowmelt) out of the structure. In a wall it is the cladding shedding most of it and the water-resistive barrier (WRB) behind it, housewrap, felt, a taped sheathing product or a fluid-applied membrane, catching what gets past. It works by lapping, upper over lower, not by sealing.
- Air control stops air moving through the assembly. It is whichever layer is continuous and sealed at its edges: taped sheathing, a sealed WRB, sealed drywall, or sealed polyethylene. A layer that is airtight in the field but loose at its edges is not an air barrier.
- Vapor control slows water vapor diffusing through solid materials. IRC R702.7 sorts vapor retarders into classes by permeance: Class I at 0.1 perm or less (polyethylene, foil), Class II over 0.1 up to 1.0 perm (kraft facing), Class III over 1.0 up to 10 perm (latex paint).
- Heat control is the insulation, plus anything that conducts heat across it.
One material can do two jobs. Taped sheathing is often both the air and part of the water control; sealed poly is both vapor and air control. That doubling is why you identify the designated layer for each job before cutting, rather than assuming the outermost sheet is the important one. The underlying science lives in the library already: see related, Building Envelope Fundamentals, and Moisture and Vapor Management Reference.
Where each layer sits, wall and roof
In a frame wall, outside to inside: cladding, often a small drainage gap, the WRB, sheathing, the stud cavity with insulation, then the vapor retarder (in a cold climate) and the interior drywall. Air control may be at the sheathing, at the drywall, or both.
In a vented attic roof, the roof covering and underlayment do the water job up at the deck, the attic is deliberately ventilated outdoor air, and the air, heat and vapor jobs all sit down at the ceiling plane: the drywall ceiling, the insulation lying on it, and in cold climates a vapor retarder at the ceiling (kraft facing or a vapor-retarder paint). That is why a hole through a vented-attic ceiling is an envelope penetration even though it is nowhere near the outside.
In an unvented attic or a cathedral ceiling insulated at the deck, the air, heat and vapor layers have moved up to the roof deck. A plumbing vent through that roof now crosses all four at once, in a few inches, and the attic below is inside the house.
What a penetration does to each one
The same hole affects each layer differently, which is why one sealant never covers it.
| Layer | What the hole does | What restores it |
|---|---|---|
| Water | Opens a path behind the WRB that gravity and wind feed | Flashing lapped into the WRB, upper over lower; sealant is the backup |
| Air | Leaves a gap that pressure differences push air through | A sealed joint at the designated air layer, all the way around |
| Vapor | Leaves a hole that air carries moisture through | Usually the air seal, plus taping the retarder in cold climates |
| Heat | Compresses or displaces insulation, and the penetrant may conduct | Insulation packed back to full depth, penetrant insulated through |
The vapor row deserves a sentence. Diffusion through a small hole is trivial. What moves moisture is air leaking through the hole, because air carries vapor with it, and building-science calculations routinely show air leakage through a small gap carrying many times what diffusion moves through the whole surrounding sheet. So in practice a vapor retarder is defeated by the air leak at its hole, and sealing that air leak does most of the vapor repair. See related: How to Repair a Vapor Retarder You Cut.
Worked example: a line set through a cold-climate wall
House in climate zone 5. Wall is 2x6, so about 5-1/2 inches of cavity plus 7/16 inch sheathing and 1/2 inch drywall, call it 6-1/2 inches of structure before siding. From outside in: vinyl siding over housewrap, OSB sheathing with untaped seams, an R-21 unfaced batt, 6 mil polyethylene, drywall. The poly is taped at its seams and sealed to the plates, so in this house the poly and drywall are the designated air control and the OSB is not. A ductless head goes on the inside of this wall, and its line set, communication cable and condensate line leave through a 3 inch hole with a sleeve.
OUTSIDE INSIDE
siding WRB OSB cavity, R-21 batt poly drywall
| | | | |
| | | | |
block | | | |
==+======+=====+==============================+===+== set
| tape | seal| batt packed around set, |tape cover
| laps | gap | suction insulation through |to plate
| | | |sleeve
| | | | |
sheds WATER backup HEAT VAPOR AIR
water layer air layer plus AIR
The sleeve falls toward the outside so any water that reaches it drains out, not in. Walking the layers:
- Water. Vinyl siding manufacturers call for a mounting block at penetrations so the siding can move and the block's flange can be lapped into the WRB. The block's top flange goes under the housewrap above; the bottom flange laps over the housewrap below. Caulk at the siding is not the water control. See related: How to Flash an Exterior Wall Penetration Into the WRB.
- Air. The poly is taped to the sleeve, and the cover plate at the drywall is sealed with a compressible sealant around the set. Sealing the sleeve to the OSB as well is cheap secondary insurance, but it does not substitute for the interior seal in a house whose air control is interior.
- Vapor. The tape that makes the poly an air seal is also the vapor repair. The poly was cut with an X so the flaps could be folded and taped to the sleeve rather than torn away.
- Heat. The batt was slit, not pushed aside, and packed back around the sleeve to full depth. The suction line's insulation runs continuously through the sleeve.
That last bullet is where the callback lives. Installers often strip the suction line insulation back where it enters a tight sleeve. In cooling mode that bare copper might run at 45 F (illustrative) inside a wall cavity whose air has a summer dew point of 58 F (illustrative). The pipe surface is 13 degrees below the dew point, so moisture condenses on it inside the wall all summer, out of sight, soaking the bottom of the batt and the plate. The fix is a sleeve big enough to pass the insulated line, which is why a 3 inch hole and not a 2 inch one.
The hole is about 7.1 square inches (a 1.5 inch radius, squared, times pi). Left unsealed at the interior, that is an opening the house's stack effect works on every winter day, pulling warm moist room air into a cavity whose OSB is near outdoor temperature. In a zone 5 winter that is how sheathing gets wet behind a line set.
What changes the answer
- Hot-humid climate. In much of zones 1 to 3 there is no interior poly, and adding one is wrong: air conditioning makes the inside the cold side, and interior poly becomes the surface moisture condenses on. Air control is still restored; the vapor step changes to "do not add one."
- Exterior foam board. When rigid foam over the sheathing is taped as the WRB and air layer, the water and air seals move to the foam face, and the block or sleeve has to be flashed to the foam.
- Stucco or EIFS. The WRB detail is cladding-specific. See related: Stucco and EIFS and the Hole You Cut.
- Unvented attic or spray-foamed roof deck. A roof penetration crosses all four layers at the deck; the attic floor is no longer the envelope.
- Fire-rated wall. A wall that is also a garage or unit separation adds a fifth job. See related: The Garage-to-House Fire Separation.
How to verify you got it right
Before closing, name the designated layer for each job in this house and point to where you restored it: the lapped flashing, the sealed air joint, the taped retarder, the packed insulation. If you cannot point to one, it is not done. From inside on a windy or cold day, a hand or a smoke pencil at the cover plate should show no draft. In cooling season, a follow-up look at the plate below the head for staining catches the sweating-line failure before the drywall does. Photograph each layer as it is closed, because each one is hidden by the next. See related: Restoring What You Cut Through: The Closing Checklist.
References
- IRC R702.7 (vapor retarder classes and climate-zone requirements) and R703 (exterior coverings and the WRB), as adopted by your jurisdiction; the 2018 and 2021 editions reorganized the Class III vapor retarder table.
- Cladding and WRB manufacturers' installation instructions for penetrations.
- See related: Building Envelope Fundamentals; Moisture and Vapor Management Reference; Flashing + Weatherproofing Details Reference.
- See related: Before You Cut: The Four Things a Hole Can Break; How to Run a Line Set or Cable Through an Exterior Wall.