SuperbaKnowledge Demonstration release
Platforms
ENIT
Operational guide · Safety & equipment

Ammonia Engines: Safety and Reliability of the First Units in Service

Ammonia-engine safety and reliability also depend on supply, containment, detection, ventilation and services. Understanding the installed arrangement, observing abnormalities and documenting response, maintenance and results supports availability assessment with comparable service evidence.

ammoniadual-fueltwo-stroke enginesfuel safety

Operational Explanation

An ammonia engine depends on the whole fuel chain: storage, preparation, supply, combustion and handling of residues or emissions. Reading the plant diagram helps identify where a leak or loss of a service could expose people, stop a consumer or make propulsion unavailable.

Ammonia presents toxic and corrosive hazards and, under certain conditions, fire or explosion hazards. Cold liquid can also cause contact injuries. A leak can involve liquid, vapour and contaminated water; dispersion depends on the release conditions and ventilation. Exposure areas and escape routes come from the approved design, without assuming that vapour always collects at high or low level.

Function to identifyWhat to establish for the installed plant
Storage and preparationTanks, spaces and pressure/temperature limits; necessary services and the route to the consumer.
Containment and isolationBarriers, protected piping, leak collection and isolation devices; which signals activate the safeguards.
Detection and ventilationMonitored areas and points, detector availability, ventilation flows and consequences of their loss.
Services and engine responsePilot or alternative fuel, inert gas, cooling and automation, where provided; the effect of failure on available modes.
Treatment and protection of peopleHandling of releases and residues, PPE, emergency equipment, access and escape routes.

One technical example is the two-stroke WinGD X-DF-A: pilot fuel initiates ammonia combustion and its safety system distinguishes transfer to diesel, load reduction and shutdown according to the fault. This is a manufacturer’s architecture: alternative-fuel availability and engine behaviour must be checked for the ship’s configuration. WinGD, X-DF-A Safety Concept, Rev. D, §§1, 2.1 and 2.7.

Regulatory Reference

MSC.1/Circ.1687; MSC.1/Circ.1702; STCW.7/Circ.27; applicable SOLAS/IGF or IGC and ship-specific approval.

MSC.1/Circ.1687 excludes ships covered by the IGC Code from its scope. MSC.1/Circ.1702 addresses ammonia cargo used as fuel: the two references are not cumulative obligations for every ship. Identify the ship’s approval route first. IMO MSC.1/Circ.1687, 1.1.

MSC.1/Circ.1702 (7 July 2026) supplements IGC chapter 16 for gas carriers using ammonia cargo as fuel. Its annex, 2.1.1, applies outside the cargo area except where risk assessment or specific provisions require otherwise. The whole-system risk assessment also covers fuel arrangements inside the cargo area (2.5.1). Ship- and equipment-specific familiarization is addressed in 2.4.1. MSC.1/Circ.1702, annex 2.1.1 / 2.4.1 / 2.5.1.

Failure assessment should include leak containment and isolation, detection, ventilation and protection availability, as well as the engine. Maintenance procedures should cover all ammonia installations and personnel should have protection appropriate to the operation’s exposure risk; the emergency plan must also address toxic exposure. IMO MSC.1/Circ.1687, chapters 4, 18 and 20.

To assess reliability, record actual operating hours on ammonia, operating mode, failures, downtime, interventions and component version. Separate trial, delivery and commercial-service evidence: a single demonstration does not quantify fleet reliability. IMO: ISM maintenance and safety management.

STCW.7/Circ.27 (6 July 2026), annex 1–3, provides ammonia-specific training guidance based on Circ.25. It distinguishes familiarization for all seafarers, basic training for designated safety duties and advanced training for masters, engineer officers and personnel immediately responsible for fuel and systems. Applicable mandatory instruments take precedence (1.3); verify training and evidence accepted by the Administration. IMO — STCW.7/Circ.27.

The suggested reliability-comparison fields are a practical proposal; the ISM Code addresses maintenance, non-conformities, corrective action and records, without prescribing this list of indicators here.

Scope of Application

This card supports study and familiarization for engineer officers and machinery personnel on ships approved to use ammonia as fuel. It covers the engine, supply and safety services, observation during operation and maintenance. A gas carrier using cargo as fuel requires attention to the specific arrangements under the IGC route.

Installed manuals, risk assessment, the cause-and-effect chart and the SMS determine duties and operating conditions. This card defines no setpoints, live-fuel tests, valve sequences, purging or re-entry procedures. Order, bench test, delivery and commercial service remain distinct statuses when assessing the first units.

Procedure / How to Complete It

Use this sequence to prepare familiarization or a review of work; actions on the plant follow ship procedures and assigned responsibilities.

  1. Identify the configuration. Connect the approval route, engine version, fuel diagram and service documentation. Identify consumers, spaces and interfaces with the bridge and other systems.
  2. Establish availability. For the intended mode, understand permitted conditions, required services and safeguards, limitations and open defects. A selection on a panel does not prove that the mode is usable.
  3. Observe and compare. Read detector and ventilation status, fuel and engine parameters, alarms and behaviour at the load in use. Record abnormalities and mode changes with time and context.
  4. Manage the abnormality. Report it and carry out the response assigned by the ship’s plan from a safe position, distinguishing protection of people from machinery status. Do not approach the source to find a leak or use a reset to declare the problem resolved.
  5. Prepare the work. With competent personnel, establish risk, isolation, access, protection and residue handling under permits and manuals. Include detectors, ventilation, isolation devices and services in the PMS alongside engine components.
  6. Demonstrate the result. After intervention, document work, changed components or versions, prescribed checks and results. Return to service or ammonia mode requires the prescribed verification and authorization, with explicit limitations and remaining defects.
  7. Follow up. Connect an alarm or failure to the work order, corrective action and verification. Hand over actual status and pending tasks to the next watch; discuss recurring events with the Company and manufacturer.

Restoration conditions after automatic fuel interruption are part of the safeguards: establishing the cause and prescribed precautions comes before reopening the supply. IMO MSC.1/Circ.1687, §15.11.1.

Practical Example

Teaching example: while operating on ammonia, a detection alarm appears in the fuel circuit. The watch reports the indicated point, time, mode and load; it follows the prescribed response and verifies the status reported by the safeguards. An engine continuing on another fuel, where designed to do so, does not demonstrate that the space or circuit is safe to enter. Investigation and work follow the ship’s safety arrangements; close-out includes cause, intervention, verification and authorized status.

To compare reliability, two records with equal total engine hours may have very different ammonia hours, loads and conditions. Specify hours by mode, the event, downtime resulting from the failure and the installed version; distinguish trials, delivery and service. These are useful assessment fields, not a universal mandatory form.

What Typically Goes Wrong

A plant can appear available while a safety barrier is degraded: a detector out of service, inadequate ventilation, unavailable release treatment or uncontrolled access. Odour, absence of an alarm or continued engine operation do not demonstrate absence of exposure. Do not bypass a safeguard to maintain service or improvise venting, purging, entry or rescue in a potentially contaminated area; follow the ship’s plan and duties for which you are trained.

Common Mistakes Mistake Library

MistakeConsequence / prevention
Using odour or absence of a single alarm to declare a space safeIncomplete exposure assessment; use the prescribed detection, access conditions and response.
Treating a transfer to another fuel as proof that the whole plant is safeA leak or impaired safeguard may remain unresolved; check people, the circuit and availability separately.
Closing maintenance without a verified result or restoration of safeguardsA hidden remaining defect; record the check, result, limitations and authorized status.
Comparing total hours or trial results as equivalent ammonia-service dataReliability is not demonstrated; distinguish mode, operating profile, version and evidence.
Confusing guidance 1687/1702/27 or inferring a universal 2028 deadline from itIncorrect approval or training route; verify applicable instruments and ship conditions.

What the PSCO Checks

Check the approval route, manuals, training and familiarisation, detection and protection system status, maintenance and defect management. Compare leak and exposure response capability with the ship’s plan and assigned duties.

IMO, PSC procedures 2025: Appendix 6 §3 and Appendix 7.

Operational Tips

Preparation checklist

FAQ

What is the general guidance for ammonia as fuel?
MSC.1/Circ.1687 excludes ships covered by the IGC Code. For gas carriers using ammonia cargo as fuel, MSC.1/Circ.1702 supplements the IGC route; identify the ship’s approval before applying the references.
Which guidance covers training?
STCW.7/Circ.27, listed by IMO in July 2026 for ammonia, within the framework of generic guidance STCW.7/Circ.25. Verify flag-accepted competence and training requirements for the duties performed.
Do the guidelines establish a universal deadline on 1 July 2028?
No. Publication of interim guidelines does not establish universal commencement of new amendments on that date. Verify applicable mandatory instruments, their dates and the ship’s approval conditions.
Does an engine that keeps running prove that a leak has been resolved?
No. Continued engine operation, including on alternative fuel where provided, is distinct from circuit and personnel safety. Response, investigation and verification follow the ship’s plan and manuals.
What makes reliability data comparable?
Actual hours by mode, operating profile and conditions, installed version, events, downtime, interventions and results. Distinguish trial, delivery and service; identify missing information and comparison limits.

Related Topics

Certified substantive revision: 12 October 2026 · page fingerprint 58201a94249a