Leon Odendaal is a mechanical engineer at Beruseal, with a strong background in pressurised equipment design and analyses, as well as asset integrity management. Leon is a highly valued member of our engineering team. He offers a unique, holistic perspective on industrial plant maintenance and leverages his technical experience to troubleshoot and implement reliable, long term repair solutions.

On-Line Leak Sealing

Composite Repair
Definition of Design life
The design life of an on-line leak sealing enclosure should be defined as the period during which the repaired component, together with the repair system, can be shown to remain fit for continued service within an agreed operating envelope. In other words, it is the period during which the entire repaired pressure boundary can still be justified as safe for continued service This is an important distinction.
The design life is not simply how long a clamp remains bolted in place or how long a sealant continues to suppress visible leakage. Rather, it is the period over which the remaining load-carrying capacity of the degraded component and the repair arrangement can still be justified by analysis, inspection data, and operating limits. ASME PCC-2 is explicit that design life must be based on the remaining strength of the repaired component, the corrosion resistance, and the mechanical properties of the engineered leak sealing enclosure.
This definition has an important practical consequence. A repair may be sealing the localised leak however may still be unsafe if the host pipe or component can no longer sustain the applicable mechanical loads. ASME PCC-2 specifically warns that repair clamps can be inadequate where additional structural strength is needed, even if the leak appears to have been sealed. In client terms, leak tightness is only one part of the acceptance basis; structural adequacy over the intended service period is equally important.
Temporary versus Long-Term use
Typically, on-line leak sealing enclosures are treated as temporary repairs unless the asset owner has a formal engineering basis, supported by code principles and operating history, to justify longer retention. API 570 permits temporary nonwelded on-stream repairs on locally thinned sections or circumferential linear defects by means of properly designed enclosures such as bolted clamps and similar devices, and that these should be removed and replaced with a suitable permanent repair at the next available maintenance opportunity. Longer retention requires approval and documentation by the piping engineer.
Both API 570 and ASME PCC-2 recognizes that on-stream bolted enclosures may be used as an acceptable repair method, provided they are properly designed and their structural effects are well understood. This reinforces the principle that the allowable life of the repair is not open-ended and must be controlled by engineering judgement, inspection, and management-of-change discipline.
Effect of Active Damage Mechanisms
One of the most significant factors affecting design life is whether the original cause of the leak is still active. Damage mechanisms such as corrosion, erosion, stress corrosion cracking, thermal fatigue, vibration fatigue, and mechanical wear may continue after the leak sealing device has been installed. If the underlying deterioration is ongoing, the confidence in long-term serviceability reduces accordingly.
An enclosure installed over a corroded area may control leakage, but if corrosion continues beneath or adjacent to the enclosure, the remaining life may be much shorter than expected. For this reason, the root cause of the leak should be investigated as part of the engineering review, and the expected rate of further degradation should be considered when specifying the repair life.
Corrosion Rate as a Governing Input
A design-life assessment cannot be completed without considering corrosion rate. API 570 sets out the use of short-term and long-term corrosion-rate calculations based on measured wall thickness data and requires the selected rate to reflect the current process as judged by the inspector in consultation with corrosion expertise. The code also defines remaining life using the difference between actual thickness and required thickness, divided by the corrosion rate.
This means that the design life of a leak sealing enclosure must be tied directly to the actual rate of material loss affecting the compromised component. If the active degradation rate is high, the safe service window may be short even when the installed clamp appears mechanically robust.
If the inspection records show stable corrosion behaviour and adequate remaining thickness, a continued operating period may be justifiable. Where no reliable corrosion data exist, API 570 requires additional thickness measurements, but do permits the use of corrosion monitoring devices such as coupons or probes to establish the rate. That requirement supports a conservative approach for newly repaired components or ones that have entered a new corrosion environment/envelope.
Remaining life and Required thickness
The remaining life of the compromised component should govern the acceptable design life of the repair. API 570 requires corrosion rates, remaining life, and next inspection intervals to be used in determining the limiting component of a piping spool. This is important as the visibly leaking point may not showcase the total scope or nature of the defect. Nearby areas subject to corrosion under insulation, spec breaks, branch connections, or localized attack may have lower remaining life than the exact defect location and may therefore control the allowable period of continued operation.
For this reason, a life assessment should not stop at confirming that the leak has been enclosed. It should verify the actual wall thickness at the defect and at relevant adjacent locations, establish the required minimum thickness for the operating and design conditions, and then confirm that the component remains above that requirement for the intended repair duration after accounting for continued degradation.
In short, the design life of a leak sealing enclosure should be tied to the remaining life of the compromised component rather than to the nominal strength of the enclosure alone. API 570 makes clear that remaining life is determined from the actual measured thickness, the required minimum thickness for pressure and other load effects, and the applicable corrosion rate. If the wall thickness is already close to the required minimum, the repair may only be justified for a very limited period.
If, however, the component has adequate remaining thickness and the deterioration rate is low and well understood, a longer temporary service period may be justified, subject to monitoring. This approach would ensure that a successfully installed enclosure, when designed with all the load cases in mind, that the underlying pressure boundary remains structurally sound.
Corrosion Allowance and Future Degradation
Corrosion allowance must be considered explicitly in the life assessment of on-line leak sealing enclosures. API 570 states that when evaluating metal loss in excess of the corrosion allowance using fitness-for-service methods, a future corrosion allowance must be established based on the corrosion-rate assessment. ASME PCC-2 likewise addresses the role of corrosion allowance in repair design, including cases where the compromised pipe has retained, exceeded, or lost its corrosion allowance.
In practical terms, corrosion allowance is the thickness margin that remains available to absorb continued deterioration during the intended repair period. A repair designed only for present conditions, with no allowance for expected future loss, is not a true design-life assessment. The engineer must therefore consider not only whether the component is adequate today, but also whether it will remain adequate at the end of the proposed service interval. ASME PCC-2 reinforces this point by requiring that the calculated remaining strength of the degraded component at the end of the design life, including expected continuing degradation in service, be sufficient.
Combined Assessment of Corrosion Rate and Corrosion Allowance
Corrosion rate and corrosion allowance should be treated as a combined integrity check rather than as separate topics. Corrosion rate establishes how quickly thickness is being lost with corrosion allowance establishing how much loss can be tolerated before the component falls below the required section. Together they define the remaining service window. A low corrosion allowance combined with a high active corrosion rate will usually support only a short design life. A higher allowance or lower degradation rate may support a longer, but still controlled, service interval.
Where uncertainty exists, the assessment should be conservative. This is particularly true for localized corrosion, pitting, under-deposit attack, corrosion under insulation, and mixed damage mechanisms where average thinning rates may understate local risk. API 570’s focus on piping spool limiting locations and successive measurements reflects that concern.
Structural Strength Versus Leak Tightness
A common misunderstanding in the field is the assumption that if a leak has been sealed, the equipment has been effectively repaired. In reality, leak tightness and structural integrity are not the same thing. A device may stop a leak without restoring the pressure-containing component’s ability to resist axial loads, bending forces, thermal expansion, vibration, or pressure-induced stresses.
This distinction is especially important where the original defect has significantly reduced wall thickness or compromised load-carrying capacity. For a design life statement to be meaningful, it must address both containment performance and structural adequacy over the intended service period
Structural Loads Within the Repair Limits
The acceptable design life of the repair depends not only on corrosion and pressure, but also on the ability of the bounded component set to tolerate structural loads over time. ASME PCC-2 warns that repair enclosures may be inadequate unless additional measures are taken to provide sufficient structural strength, underscoring that containment and strength are not synonymous. It similarly addresses thrust loads, full circumferential separation scenarios, and the need to verify that remaining strength at the end of design life remains adequate; it also notes that additional restraints may be required to reduce the loads on a leak sealing enclosure.
Accordingly, the assessment should consider pressure thrust, thermal expansion, vibration, transient loads such as fluid hammer or slugging where relevant, support conditions, local flexibility, and the effect of nearby fittings and branch connections. If one component within the bounded section governs the load path and has lower remaining strength than the leak location itself, that weaker component should control the design life decision.
Where the damaged section can no longer safely carry mechanical loads on its own, the leak sealing enclosure may need to provide more than sealing capability. In some cases, external restraint or a means of transferring axial load may be necessary to prevent structural failure of the pipe beneath the clamp. This is particularly relevant for through-wall defects, severe corrosion, or repairs located near changes in direction, branch connections, or other areas with elevated stress. If restraint or load-sharing features form part of the repair concept, they must be considered integral to the design life assessment. A repair that relies on restraint is only as reliable as that restraint over time.
Influence of Operating Loads and Conditions
The design life of an on-line leak sealing enclosure is strongly influenced by the loads and conditions it will experience during service. Internal pressure is only one part of the picture. Temperature and thermal cycling, piping movement, vibration, hydraulic transients, external loading, support conditions, and axial thrust can all affect repair performance. A repair that appears acceptable under steady-state conditions may be unsuitable if the system is subject to startups, shutdowns, trips, pressure surges, or significant temperature swings.
Likewise, chemical compatibility between the process fluid and the sealing materials must be considered, since some sealants, gaskets, and packing materials may degrade, harden, soften, or lose effectiveness over time. These factors must be captured in the design basis if the specified life is to remain valid.
Reinjection and Loss of Repair Confidence
For sealant injected leak sealing enclosures, the need for repeated re-pressurising or reinjection is an important indicator that the original repair assumptions may no longer hold. While reinjection may restore the seal’s performance in the short term, it may also signal ongoing deterioration, movement, sealant instability, or inadequate structural support.
Repeated reinjection should therefore not be treated as routine without engineering review. Instead, it should prompt reassessment of the condition of the host component and the continued validity of the assigned design life. In many cases, repeated sealant loss reduces confidence in the repair and shortens the acceptable remaining period of service.
Need for Documentation and Defined Duration
A leak sealing enclosure should never remain in service on an open-ended basis without formal documentation. The specified design life must be clearly stated in the repair package, engineering assessment, or management-of-change record. This documentation should identify the intended duration of use, the operating envelope covered by the assessment, the assumptions made, the inspection and monitoring requirements, and the specific conditions that would trigger repair removal, re-evaluation, or escalation. A robust design-life statement should also identify the deadline for permanent repair or replacement, whether that is a specific calendar date, the next planned shutdown, or the first suitable maintenance opportunity.
Inspection, Monitoring, and Revalidation
A design-life assignment is only credible if it is supported by a monitoring plan. API 570 ties corrosion-rate and remaining-life assessment directly to inspection intervals and requires responsibilities and timelines around temporary engineered pressure enclosures. For an on-line leak sealing enclosure, this should translate into planned visual surveillance, bolt and restraint checks where relevant, leak observation, thickness monitoring at defined condition-monitoring locations, and reassessment if measured degradation departs from expectation.
Revalidation should be triggered if leakage resumes, if re-injection becomes necessary, if operating pressure or temperature changes materially, if vibration or movement increases, or if updated thickness readings show that the assumed corrosion rate is no longer representative.
In such cases, the original design-life basis should be regarded as superseded until reviewed. API 570 specifically requires leak-sealing-fluid procedures to be reviewed by the inspector or piping engineer and to consider matters such as sealant compatibility and service effects.
Monitoring frequency should reflect the criticality of the service, the known damage mechanism, and the uncertainty in the life assessment. The more temporary or uncertain the repair, the more rigorous the monitoring should be.
Effect of Services Changes
The design life is only valid within the boundaries of the operating conditions for which the repair was assessed. If those conditions change, the original life assignment may no longer be reliable. Changes in pressure, temperature, flow regime, vibration level, product chemistry, cycling frequency, or upset exposure can all affect the behaviour of the repaired system.
For this reason, any significant service change should trigger engineering review of the leak sealing enclosure. This is especially important where the repair was designed based on stable operating conditions and may not have been evaluated for transient or abnormal events.
Recommended Basis for a User Design-Life Statement
A robust user design-life statement for an on-line leak sealing device should identify the defect type, the repaired component, and the bounded section of existing components included within the assessment. It should state the actual measured thickness values, the required minimum thickness, the corrosion rate adopted, the future corrosion allowance assumed, the expected remaining life of the limiting location, and the structural loads or restraints considered.
It should also define the operating envelope, inspection interval, reassessment triggers, and the event by which permanent repair or replacement is to be completed, such as the next shutdown or a fixed date. This aligns with API 570’s treatment of temporary repairs and with ASME PCC-2’s requirement that remaining strength at the end of the design life be considered.
Practical Interpretation of Design Life
In practical terms, the design life of an on-line leak sealing enclosure should be understood as a justified window of continued safe operation, not as a guarantee of indefinite performance. A well-written life statement should explain that the repair remains acceptable only so long as the assumptions used in the assessment remain valid.
It should also make clear that the repair is subject to removal or re-evaluation if leakage resumes, deterioration accelerates, operating conditions change, or inspection findings indicate reduced reliability. A useful wording approach is to define the repair as valid until the next shutdown, or until a defined trigger condition is reached, whichever occurs first.
Critical Success Factors for Field Implementation
| Service Status | Treat devices as temporary risk-control measures unless a formal, documented engineering basis supports extended use. |
| Assessment Basis | Validate the host component's remaining strength through the end of the service period, rather than relying solely on enclosure capability. |
| Data Integrity | Prioritize measured corrosion rates; use conservative life estimates and increased inspection if data is incomplete. |
| Safety Margin | Explicitly include a future corrosion allowance to ensure the pressure boundary remains sound at the end of the design life. |
| System Scope | Define clear battery limits including adjacent fittings and supports that affect the load path. |
| Structural Load | Confirm the assembly can resist axial thrust and operating loads; leak-tightness does not equal structural adequacy. |
| Monitoring | Establish triggers for immediate re-evaluation, such as renewed leakage, the need for reinjection, or process changes. |
| Exit Strategy | Align the design life with a definitive permanent repair date or the next planned outage. |

