In 1999 I worked in a call center for General Motors. Customers called with questions about features on the cars they had just bought, and we answered them. A man called and asked if, because his new car had airbags, he could skip the seatbelt. I told him he only need look at his steering wheel and see three letters: SRS. Supplemental Restraint System. The airbag was supplemental. The seatbelt was the primary safety device. The airbag does its work with the belt, not instead of it.
A few months later, the same man called back. "I don't know who I talked to last time," he said, "but whoever it was saved my life." I immediately recalled our conversation and replied, trembling, "That was me." The day after our first call, he had buckled up leaving work. Pulling out of the parking lot, he was struck by another vehicle that never knew he was there. The doctors told him that without the belt, he would have died.
He had crumple zones. He had driver's ed. He had a road that traffic engineers designed for safety, and all manner of traffic control devices. Everyone involved had everything they needed to know to avoid the accident, and it happened anyway. The thing that kept his body inside the car was the belt. Drilling has a direct corollary, and almost no one in shallow geoexchange is honest about it yet.
The Primary Barrier
In most places, in most weeks, you will not get a kick. Kicks are not the daily reality. The daily reality is turn right, make hole, and get on to the next bore — the things that make or break the schedule and the price. The kick is the sudden high-pressure energy event the schedule never planned for. Like the car with high kinetic energy that didn't care where you were, it arrives without warning and gives you about a second to be the driller you said you were.
When it comes, your primary safety is what saves your life. The primary safety on a drilling rig is mud weight. In shallow geothermal it is the only available safety. There is no BOP. There is no diverter. There is no flare. Those devices save lives in deep wells when the worst happens, and a serious deep operation should not run without them. But they are supplemental. The thing they supplement is the column of fluid in the hole. In shallow geothermal, the column is all there is.
The driller's seatbelt is drilling fluid density. A mud balance is a two-hundred-dollar instrument and thirty seconds of measurement. Both — the seatbelt and the mud balance — are the most asymmetric safety devices in their domains. Almost no cost, almost no effort, and the line between a life saved and a life lost when the moment comes.
The Fallacy of "We Haven't Had One Yet"
Hydrostatic head from a properly weighted column holds formation pressure off the wellbore minute to minute, hour to hour, foot to foot. It is the barrier doing its work continuously, not waiting for an alarm. When the mud weight is right and the column is intact, the well is balanced. When the mud weight is wrong, or the column is compromised by a swab or a lost-circulation event or a connection gas the driller did not flow-check, equilibrium is gone — and on a shallow geothermal rig there is nothing else to fall back on.
The argument I hear runs like this: "We haven't had a kick yet, so we don't expect one on the next job." This is the engineering equivalent of "hold my beer." Or: "We've drilled across the street and didn't have trouble, so we won't have trouble here either." Both are elementary hasty generalizations — the inductive fallacy of inferring a universal rule from a sample too small to support it.
There is a difference between driving home at 5 PM and driving home at 2 AM. Most drivers make it home safely at either hour. Everyone recognizes the second carries a different risk. The safest driver at 2 AM is still subject to the drunkest driver on the road, and the road does not care how clean his record is. Drilling past the aquifer into brine-bearing zones or gas-bearing shales is the 2 AM hour. Most trips you go home safe. Some trips the formation gives you something you were not prepared for, and the discipline of the operator does not change what the rock has decided to flow.
Cherokee, Oklahoma — 2014
In 2014, my team was drilling in Cherokee, Oklahoma. While drilling the surface section — before casing and BOP were set, which is exactly how shallow geoexchange wells are almost exclusively drilled — we hit an overpressured brine zone. It was not indicated from offsets. We had just finished a well across the highway. We felt safe.
That is, until we took 300,000 barrels of fully saturated brine. The brine literally salted the earth, and we had to buy 40 acres of farmland that was permanently destroyed. Thankfully, we were not near surface waters; that level of contamination would have been catastrophic to a river.
The case for primary-barrier discipline in shallow geothermal is not new science. It is old science being asked to govern a new industry that has not yet decided to be governed.
The Standard
In every jurisdiction I know of, it is illegal to drive without a seatbelt. The infraction is small; the principle is not. Society decided the primary restraint is non-negotiable because the cost of the primary restraint being absent is paid by people who never agreed to take the risk. The same principle applies on the rig floor and on the property the rig is sitting on. The crew, the neighbors, the aquifer, the building that will one day depend on the bore — none of them agreed to be the test of an undermanaged column.
On a rig, clicking the belt means: measure mud weight at the suction and the flowline every connection. Calibrate the densitometers and trust the calibration. Run a pit volume totalizer the driller actually watches. Flow check on every connection that smells off. Build the kill sheet before the well needs it. Rehearse the response before the response is required. The supplemental devices stay where they belong: ready, tested, and not the plan. The belt is the plan.