Community
Improving Rebreather Safety: The View from Rebreather Forum 3
By Michael Menduno. This story was originally published in Diver and X-Ray magazine.
How can rebreather diving be made safer?
That was the question at the core of the numerous presentations and discussions at Rebreather Forum 3 (RF3) held in Orlando, Florida, this May. Sponsored by PADI Inc., Divers Alert Network (DAN) and the American Academy of Underwater Scientists (AAUS), the international conclave brought together over 400 industry insiders from the sport, from scientific, media, and from government diving communities. Also attending was a self-selecting group of high-end photographers and consumers who came to talk rebreathers, learn, share experiences, network, ogle the latest gear, and hopefully help steer the community forward.
PADI CEO Drew Richardson proposed contributing to rebreather diving safety and reducing incidents as the conference’s number one goal. The last forum, Rebreather Forum 2.0, which I organized with rebreather engineer Tracy Robinette, was held 16-years earlier, in 1996, at a time when rebreathers were just being introduced to the sport diving market.
The issue of improving safety is of critical importance today when manufacturers like Poseidon Diving Systems Ltd. and Hollis Inc., in conjunction with PADI and other training agencies, are now actively promoting rebreathers for use by recreational divers, which is a source of controversy. Until recently, rebreather use was limited primarily to tech divers because of their complexity, operational requirements, and cost. The concern is that rebreathers may be too advanced for a typical open water diver who is still mastering their basic diving skills. However, PADI has developed a simplified diving protocol using rebreathers designed specifically for recreational use, which it believes will prove efficacious.
Though no one knows the actual risks, there have been more than 200 reported rebreather fatalities worldwide since 1998, which have averaged approximately 10 fatalities per year prior to 2005 and about 20 per year since. To put these numbers in perspective, on average there are about 100-120 scuba diving fatalities annually in the US, Canada, UK, and Europe combined, which represents the majority of the worldwide market.
Given that there are millions of open circuit divers compared to, at most, tens of thousands of rebreather divers, the fatality rate for rebreather diving is evidently much higher than its open circuit counterpart, as industry insiders are all too well aware. During one of the opening sessions, Dr. Andrew Fock, head of hyperbaric medicine at The Albert Hospital in Melbourne, Australia, asked for a show of hands from the audience, “How many people in this room believe that the current rebreather safety record is acceptable?”
No one raised a hand.
Pushing the Envelope (Again)
First conceived of in the 17th century by Giovanni Borelli, closed circuit rebreathers (CCR) remained an elusive invention until the advent of galvanic oxygen sensors in the early 1960s made their construction possible. Like simple, non-electronic oxygen rebreathers before them, the technology was primarily limited to military divers until the late 1980s when pioneers like Dr. Bill Stone, Olivier Isler, Stuart Clough, and Rob Palmer began experimenting with rebreathers for cave exploration, just as technical diving was emerging.
Though the early tech community immediately seized upon their potential for extending bottom times and optimizing decompression, it took until the late 1990s for the first production units like the Cis-Lunar Mk-IV, Ambient Pressure Diving’s Inspiration and the KISS Classic to become available.
Today, rebreather diving represents one of the fastest growing areas of sport diving. At the Forum, Poseidon reported that they had sold more of their Mk-VI recreational rebreathers in the last four and half months, than in the prior two and half years. And PADI is scaling up its ranks with newly certified recreational rebreather instructors to meet the demand. In certain countries, such as the UK, which is regarded as rebreather “ground zero,” it’s actually becoming rare to see a set of doubles on a dive boat.
Industry insiders estimate there as many as 10,000-15000 active rebreather divers worldwide, and there are more than a dozen rebreather manufacturers. At one of the Forum sessions, the three oldest technical training agencies, ANDI, IANTD and TDI, which have been responsible for the majority of rebreather training to date, estimated that collectively they issued 30,000 basic, intermediate and advanced rebreather certifications from 1990-2011, and are currently trending at about 2500-3000 certs a year. (Data from the British Sub-Aqua Club, PSA International, and Rebreather Association of International Divers was not included). These numbers are likely to grow significantly as PADI recreational rebreather courses proliferate.
While the number of users remains small, rebreather technology has greatly expanded tech divers’ underwater envelope. It has also been a boon to photographers and videographers, as well as the early adopters among scientific and recreational divers. The community’s sessions, chaired by explorer and instructor trainer Martin Robson, made that very clear.
Dives that would be logistically difficult or even impossible on open-circuit are routinely done with rebreathers, and some explorers like Robson, Richard Harris, and others are now pushing limits of human physiology. During a Friday afternoon session, Harris detailed his team’s exploration dives to 209 m/680 ft at the Pearse River Resurgence (caves) in the South Island of New Zealand, where divers are hitting up against the limits of “respiratory sufficiency” (and arguably surface-based diving).
However, as David Conlin, Chief of Submerged Resources Center for the National Park Service, explained to the assembly, “The real value of rebreathers is not deep diving at all, but staying longer at 20-30 m/70-100 feet. You can work at those depths nearly all day long when the conditions are good.” Conlin reported that rebreathers have increased Park Service divers’ productivity by nearly 40%. “We gain nearly one day for every three days we’re in the field.”
Killing Them Softly
Dr. Fock, who himself is a very accomplished rebreather diver, took the stage Saturday morning with an important and sobering presentation on the risks of rebreather diving, titled, ”Killing Them Softly.” One of the problems in the industry is the lack of an accident reporting system that records and details the cause of diver fatalities and near misses in order to inform and improve diver safety. In many cases, information about specific fatalities is sequestered for fear of litigation. As a result, existing accident data is incomplete and in many cases inaccurate.1
Fock analyzed available data from multiple sources from 1998-2010 to answer some basic safety questions like: How dangerous is rebreather diving? What causes fatalities? Are manual units (that depend on the diver to manually add oxygen) like the KISS Classic, which represents about 15% of the installed base of rebreathers, safer to dive than their electronic counterparts? Are any specific brands of rebreathers more dangerous than others i.e. the so-called “box of death”? And finally, is the risk reduced when diving within the recreational envelope (i.e. no-stop diving to 40 m/130 ft)?
With the caveat that they are “best guess numbers,” Fock concluded that rebreather diving is likely 5-10x as risky as open circuit scuba diving, accounting for about 4-5 deaths per 100,000 dives, compared to about 0.4 to 0.5 deaths per 100k dives for open circuit scuba. This makes rebreather diving more risky than skydiving at .99/100k, but far less risky than base-jumping at 43 deaths/100k.
He found that there was no difference in fatality rates between manual or electronic units, or specific brands of rebreathers; accidents were roughly proportional to market share. Fock also pointed out that while the data suggests that deeper dives carry greater risks, a large number of rebreather fatalities occur in shallow depths within the recreational envelope.
As far as the causes or “triggers” that precipitated accidents, Fock concluded that the source of most problems was the human-machine interface, or so-called “pilot error,” involving assembly and pre-dive preparation, maintenance, training and high risk behaviors like ignoring checklists, carrying insufficient bailout and diving beyond one’s limits. “The question,” posed Fock,” is whether the risk can best be mitigated by training [reinforced by dive culture] or engineering out potential problems or both.”
Creating A Safety Culture
Though veteran explorers and educators Jill Heinerth and Terrence Tysell chaired an open-discussion session on training, enabling Forum participants to present views on a host of training related topics, more of the discussion on improving safety centered around diving culture.
Currently, one of the biggest safety issues surrounding rebreathers is the fact that divers become complacent and don’t rigorously adhere to a pre-dive checklist in assembling and preparing their unit for diving as they (presumably) learned in class, and they neglect to perform the required post-dive maintenance. (Some experienced rebreather divers don’t follow checklists either.) Even worse, some divers choose to dive knowing that there are problems with their unit such as a faulty sensor or small leaks.
Methodically working through one’s rebreather’s checklist which typically includes a 5-minute pre-breathe (and only diving if everything checks out) is the best way to insure that the unit is functioning properly and avoid any problems which could jeopardize safety during the dive. The use of checklists is standard in aviation and is increasingly becoming so in medicine, because it saves lives.
Presenters saw the problem as an issue of creating a safety culture to support rebreather diving. Expedition leader and educator Richie Kohler made an impassioned, no-nonsense case for the use and efficacy of checklists in his presentation, “Failure Is NOT an Option: The Importance of Checklists.” During the presentation, Kohler put up a picture of eight close friends and mentors including his rebreather instructor, all who lost their lives as a result of diver error. “They were not fools,” explained Kohler, “but each of them made foolish mistakes and died as a result.” Checklists are designed to prevent such mistakes from occurring.
In another session, Heinerth presented her “Five Golden Rules” for rebreather diving which included; be properly trained and current for the dive you are about to conduct, follow your checklist, pre-breathe your unit, make the decision to dive (responsibly), and be prepared to abort the dive safely (with sufficient bailout gas!). Heinerth told a story of being on a dive boat with five rebreather veterans. During her pre-breathe, she detected a small problem with her rebreather, and told the assembly she would be sitting out the dive, only to be pressured by the other divers to make the dive anyway. “It’s only a minor problem,” some opined, “You can still fly the unit manually.” To her credit, Heinerth didn’t back down.
How do we as a community encourage divers to do checklists and support their adoption within the culture? “Industry leaders need to become role models,” offered Heinerth. “We need to make it cool to do checklists.”
Heinerth along with industry pioneers Dr. Richard Pyle, Database Coordinator for Natural Sciences at Bishop Museum, Kevin Gurr, CEO of VR Technology Ltd., and others are now spearheading an effort to create a set of best practices for rebreather diving dubbed “Blueprint For Survival 3.0,” referring to the original set of 10 safety principles for cave diving developed by legendary cave explorer Sheck Exley in his monograph, “Basic Cave Diving: A Blueprint for Survival.” The early tech community created a similar set of consensus-standards for open circuit mix diving, “Blueprint for Survival 2.0,” which was published in the now defunct “aquaCORPS Journal.” Watch this space.
Engineering The CCR Blues Away
In addition to training and creating a culture that reinforces safe diving practices, experts agree that a number of safety issues might be resolved through better engineering. Indeed, this is the basis behind PADI’s so-called “Type R” rebreathers that are suitable for recreational divers. For example, a Type R rebreather will turn itself on if the user forgets and jumps in the water, and it won’t operate without the scrubber canister correctly in place, or if the cylinders are turned off.
What became clear, however, at the Forum, is that better engineering solutions are needed for one of the most fundamental aspects of rebreathers: knowing precisely the composition of the breathing gas in the loop at any point in the dive. Unlike open circuit, of course, where the fraction of gas is constant and known with certainty, the gas mix in a diver’s breathing loop dynamically changes with every breath and gas addition.
Ten years from now, we will likely look back at our current technology and regard it as primitive, or what explorer and engineer Dr. Bill Stone, CEO of Stone Aerospace refers to “test pilot era” technology. “Geez, you actually dived those units without knowing exactly what you were breathing? OMG!” It’ll be like us looking back at early cave divers using J-values (reserve) and empty Clorox bottles for buoyancy, and going, Really?”
Bruce Partridge, CEO of Shearwater Electronics summed up the current state of art in his presentation on information systems this way, “Divers must interpret the readouts from three roaming O2 sensors, which are known to be unreliable. They dive with no CO2 gauge, and they don’t have good data on the risks or what is most likely to go wrong.”
The Trouble With O2 sensors
Most experts agree that current O2 sensing systems are the weakest links on a rebreather and also the most critical. If the PO2 in the loop is too low, the diver will suffer hypoxia, become unconscious, and drown. If it is too high, the diver risks hyperoxia, convulsions, and drowning.
Most divers might not appreciate the limitations of current O2 sensing systems on the market, which was made clear in a pair of presentations by biomedical instrumentation engineer Dr. Arne Sieber, CEO of Seabear Diving Technology, and Nigel Jones, principal at RMB Consulting who works with Stone Aerospace.
Sieber began by explaining that the galvanic O2 sensors, that had been made for the biomedical industry were never designed to be used in diving and are in fact being used outside manufacturer’s specs, to wit: sensors are meant to be calibrated under the same conditions that they will be used for in measurement, in the same measurement range and temperature. That’s not how it’s done in diving.
“Divers do all the wrong things,” explained Sieber. “We calibrate the sensors at 0.2 bar (air) and 1.0 bar (O2) at ambient pressure and temperature, and then use the sensors at up to 1.6 bar at much hotter temperatures.” Sieber said that this leads to increased sensor errors as well as a decreased lifespan.
Sensors can fail high or low as a result of the gradual consumption of their reactive material and aging and also fall out of calibration. In addition they commonly fail from condensation on the sensor. Worse is that “transient failures” from a loose electrical connection, or more commonly condensation, causes the sensor to generate erroneous data, and then go back to working correctly when the condition abates. Jones believes that these “transient failures” are insidious and likely the cause or trigger of many unexplained rebreather diver fatalities.
Because of known unreliability of these sensors, early designers like Walter Stark who in the late sixties invented the “Electrolung,” built the first closed circuit rebreathers with three O2 sensors and a voting logic algorithm—the computer averages the readings from the two sensors whose readings are closest and uses that average for its O2 calculations. They believed the redundancy of three voting sensors would greatly reduce the risk of sensor failure, and the concept stuck; today virtually all rebreathers today, except the Poseidon, use this 50-year old sensing technology. The problem, Jones explained, is that said sensing technology is simply not as reliable as once thought.
First, Jones showed mathematically that the voting logic algorithm itself actually reduces the benefits of redundancy. For example, instead of having a system that is “hundreds” of times more reliable (ex: with pure triple redundancy), a voting logic system can reduce the improvement to single digits.
Second, voting logic is based on the assumption that sensors fail independently i.e. the failure of one sensor does not change the likelihood that others will fail too. Unfortunately that is NOT the case with the O2 sensors in a rebreather. The sensors are dependent because they share a common history; they may have come from the same manufacturer’s lot, but even if not, they experience similar use, they share a common environment, suffer common abuse, and use shared measurement and calibration gas. The lack of independence greatly decreases the reliability. “Having three sensors is barely better than one in some circumstances,” emphasized Jones.
Third, risk reduction is eroded even further by the fact that there are more than two outcomes to the system, i.e., heads: a correct reading or tails: an incorrect reading. The third outcome is when the diver doesn’t know if the reading is correct or incorrect, which Jones equated to having the coin land on its edge.
He offered a real-world example reported by Rich Pyle, where during a dive his PO2 sensors read 0.4, 1.0 and 1.3 (Setpoint=1.0) and asked the audience to make the call, “what is the correct PO2?” (The computer’s voting logic would average the 1.0 and 1.3 reading and call it 1.15). Unfortunately, the majority of the audience got it wrong! The correct answer was 0.4; the system had experienced a double sensor failure. Fortunately, Pyle got it right. If he had ascended at that point in the dive thinking his PO2 was 1.15, he would have risked hypoxia and possible drowning.
An animated discussion ensued prompted by Leon Scamahorn, CEO of Inner Space Systems—makers of the Megalodon rebreather. He pointed out that “Meg” users could go to the “millivolt screen” on their handset, which shows actual sensor voltage; and with some simple math, they could determine that the low sensor was correct. This assumes of course that the diver was alerted to the problem in time. (Scamahorn’s arguments however did not address the limitations of voting logic systems].
I’m sure Pyle, who has thousands of hours on his rebreather, wouldn’t have a problem with Scamahorn’s procedure (Pyle was tipped off to the faulty sensors by the lack of voltage fluctuations). But, I couldn’t help wondering if I’d have the presence of mind to do “millivolt math” at 100 meters with the stress of knowing my sensors were crapping out. Definitely a test pilot-esque notion! Couldn’t a computer do this better than me?
Both Sieber and Jones urged the industry to develop and adopt “active validation” type systems, such as used in the Poseidon MK-VI, which calibrates and tests the validity of the oxygen sensors (the MK-VI uses two sensors) throughout the dive using onboard diluent and oxygen. Sieber added that solid-state sensors, which are currently in prototype form, also hold promise for the future.
However, several rebreather builders I spoke to disagreed with Sieber and Jones’s assessment, and said that they over-stated the problem, given improvements in sensor manufacturing, testing, and voting logic software. As one manufacturer said, “there’s more than one way to skin the cat.”
Nevertheless, in its consensus recommendations, the Forum strongly endorsed industry initiatives to improve oxygen measurement technologies and advocated consideration for new approaches like “active validation” and alternatives to galvanic fuel cells.
PCO2: The Dark Matter of Rebreather Diving
Divers face similar sensing problems with respect to PCO2, which has been dubbed the “dark matter of rebreather diving.” High PCO2’s (0.03 bar and above) can cause hyperventilation, confusion, mental impairment, unconsciousness, and death, may lower CNS O2 toxicity thresholds, and is believed to be a factor in unexplained rebreather fatalities, hence the moniker “dark matter.” Worse, the diver may not be aware of the problem before a full onset of symptoms occurs.
According to Dr. John Clarke, Scientific Director of the Navy Experimental Diving Unit (NEDU), the Navy has been searching for solutions to the problem of CO2 sensing for more than 25 years. The need for CO2 sensing was also identified in the findings of Rebreather Forum 2.0. Divers have two information needs: first to monitor the duration of the scrubber canister, which varies with workload, depth, and temperature. Second, to detect a CO2 breakthrough as a result of a spent canister, mechanical failure, or channeling.
Kevin Gurr, who is regarded as one of the gurus on CO2 sensing, began his session by sharing data from a recent Internet survey of 323 rebreather divers representing 25 different models of rebreathers. The results were surprising. Twenty-three percent of the divers did not know the max operating depth of their unit, and another 19% did not know the manufacturer’s stated scrubber duration. Forty-two percent of divers said that they experienced symptoms of hypercapnia for a total of some 297 incidents (some divers had more than one incident), however 64% said that they didn’t bail out, 19% said they bailed out sometimes. The results suggest better training and a cultural shift are needed!
Gurr next recounted the current methods used to monitor scrubber duration which are; 1) a duration timer based on manufacturer’s test data (usually conducted at two depths at 4 deg. C at a specified CO2 production rate), 2) a timer system based on the diver’s oxygen consumption (divers produce about 0.8 liters of CO2 for every liter of O2 consumed), which takes into account workload but not depth or temp, and 3) thermal sensing, also referred to as the “Temp Stik,” which measures how the scrubber’s thermal reaction front moves through the canister. Gurr explained that the Stik, which is used in the Ambient Pressure, VR technology, and rEVO rebreathers, is a reasonable predictor of duration but is slow to react to fast changing variables like work rate. However, none of these methods are able to detect CO2 breakthrough!
Following Gurr, Dr. Dan Warkander, from the Navy Experimental Diving Unit (NEDU) who holds a patent on thermal sensing, compared the days of early scuba, where divers didn’t have a pressure gauge but instead dived with a J-valve. “Wouldn’t it be nice to have a gauge for your scrubber to tell you how much time you had left,” he offered.
Warkander went on to explain how factors such as workload, depth, and temperature affect scrubber duration and how difficult it is to predict. For example, hard work can reduce duration by 50%, while light work can double duration. He said that scrubber duration can vary by a factor of 5-20x through combined effects of workload, temperature, and depth. What’s worse, when a scrubber is spent, the threshold between no CO2 and too much, can happen in a matter of minutes.
As far as detecting scrubber breakthrough or a seal failure, VR Technology Sentinel is currently the only production unit with a gaseous infrared CO2 sensor (The Sentinel uses all four methods mentioned above in its CO2 monitoring package). Gurr said that we are 80% there in fully characterizing a CO2 absorption system properly. The last piece is a mouthpiece sensor that can measure end-tidal CO2, which is regarded as the “Holy Grail” of CO2 monitoring. Gurr estimated this is still at least 3-plus years away.
The Forum acknowledged the poor understanding of operational limits with regard to depth and scrubber duration among trained rebreather divers and recommended that training agencies do more to emphasize these issues, and manufacturers make data more readily available.
Dive-By-Wire?
The diving press and interested Forum participants were treated to a preview of Poseidon and Stone’s latest lovechild, the Poseidon TECH rebreather, which is scheduled to ship this November and features the latest in diving automation. “Our goal,” explained Poseidon CEO Peter Swartling at the press briefing, “is to increase the level of automation by using smart systems that monitor every breath, make adjustments accordingly, and interact with the user only when they need to know what’s going on.”
In addition to the many automated features in Poseidon’s Mk-VI recreational rebreather, such as a wet switch, an auto-checklist that verifies that cylinders have the correct gasses and that their values are open, as well as auto-oxygen sensor calibration and validation, the new TECH offers a “Dive-by-Wire” handset that is truly breaking new ground. The device, which is smaller than an iPhone, provides system information to the user and enables them to control the rebreather to the extent of doing a loop flush or adding oxygen at the touch of a virtual button. The computer of course would warn and/or prevent the diver from taking an action, like adding O2 if it was ill advised.
This level of automation gave the heebeegeebees to many of the tech divers I spoke with following Poseidon’s press conference, but I couldn’t help wondering if this is indeed the future of dive automation. Granted, 15% or so of rebreather divers prefer a strictly manual unit (sans solenoid), and other groups such as the DIR community don’t even trust dive computers—well not the kind that you strap to your arm anyway. Ironically, I’m sure that most of these people have no trouble trusting their ABS brakes in their cars (versus feathering the brakes on their own). In fact their vehicles depend on computer automation, as do the commercial aircraft that flew them to the forum.
Stone, whose company builds autonomous vehicles for space exploration, addressed the issue head on in his talk, Hazard Analysis and Human Factors, posing the question, “Can we trust automation?” As an example, he recounted the development of the autonomous car that can navigate city streets sans driver and showed video of prototypes in action. Stone said that within five years, you’ll be able to buy a car that will drive you home if you had a bit too much to drink, and it will do it as safely or safer than a human driver. Could rebreathers be far behind?
One of the major problems in rebreather (read car, train, plane, spacecraft etc.) safety is humans’ ability, or rather inability, to manage and operate complex machines without incident. Stone’s solution, along with others such as Gurr with his soon-to-be released Hollis Explorer, is to simplify the human-machine interface by reducing the ways that people interact with these systems, letting the computer do more of the work. “We have to move out of the test pilot era to a new paradigm,” he said.
Given that Stone’s initial vision, 25 years ago, helped drive the creation of a consumer rebreather market (he could arguably be considered the Godfather of modern rebreathers), his ideas should not lightly be dismissed.
At the closing session of the forum, just before Dr. Simon Mitchell, who heads the department of anaesthesiology at the University of Auckland, New Zealand, brilliantly facilitated and crafted a series of community-consensus statements from the assembled Forum participants (no small task!), whereby audience members were encouraged to speak out and share their views. Andrew Fock walked up to the mic and put the following question to the community, “Given that rebreather fatality rates are 5-10 times that of open circuit scuba, should we morally offer this technology to the recreational diving community before putting our house in order?”
There was silence as if no one wanted to tackle the question, then other participants took the stand and changed the topic. Eventually, Mark Caney, PADI’s Vice President of Rebreather Technologies, worked his way to the mic and addressed his comments to Fock.
“Yes we should,” he said. “Within certain parameters.”
Michael Menduno/M2 is InDepth’s editor-in-chief and an award-winning journalist and technologist who has written about diving and diving technology for more than 30 years. He coined the term “technical diving.” His magazine “aquaCORPS: The Journal for Technical Diving” (1990-1996) helped usher tech diving into mainstream sports diving, and he produced the first tek.Conferences and Rebreather Forums 1.0 & 2.0. In addition to InDepth, Menduno serves as an editor/reporter for DAN Europe’s Alert Diver magazine, a contributing editor for X-Ray mag, and writes for DeeperBlue.com. He is on the board of the Historical Diving Society (USA), and a member of the Rebreather Training Council.
The Quest for Symbiosis: Meet Hydrophilis
Diving with a Purpose: Finding Slave Ships and Much More
Cutting the Wires on Halcyon’s new Chestmount Rebreather
THE TALKS: Italian Women Make Waves
How I Spent My Summer Vacation Royale
Forty Years of Dive Rite: 1984-2024
