{ "source": "Cooked Index — occupational AI risk register", "page": "https://cookedindex.com/jobs/petroleum-pump-system-operators-refinery-operators-and-gaugers/", "methodology": "https://cookedindex.com/methodology", "notice": "Verdicts are re-examined as evidence accumulates. Re-fetch before relying on this; the page above always carries the current score.", "scored_at": "2026-08-11", "model": "claude-opus-5", "occupation": { "title": "Petroleum Pump System Operators, Refinery Operators, and Gaugers", "soc_code": "51-8093", "category": "Production", "us_employment": 33160, "median_annual_wage": 96710 }, "verdict": "EXPOSED", "risk_resistance": 51, "contested": false, "near_boundary": false, "dimensions": { "task_resistance": 12, "embodiment": 15, "liability_shield": 6, "trust_premium": 4, "judgment_accountability": 14 }, "reasoning": { "task_resistance": "APC and automated tank gauging already run the steady-state loops and log the readings you used to write on a round sheet, but the field side — swinging valves to line up a product run, pulling a sample for the lab, blinding a line for turnaround, and hearing a pump start to cavitate before the DCS alarms — is why this sits at 12 rather than down with pure board work.", "embodiment": "You spend shifts climbing tank stairways and unit structures in the weather, gauging and thieving tanks by hand, connecting hoses and manifolds, wearing FRC and an H2S monitor in areas that can go IDLH, which is uncontrolled-environment work; it lands at 15 rather than 18 because a meaningful share of the rotation is sitting at the console.", "liability_shield": "There is no state license to operate a crude unit — but 29 CFR 1910.119(g) makes the employer document and periodically re-verify your training on the specific process, and Subpart B tanker/barge transfers require a designated person-in-charge, so you carry qualification paperwork without carrying personal liability, which is a 6 not an 11.", "trust_premium": "Product moves to the pipeline and the lab whether you or the operator on nights lined it up; the only relationship that matters is shift-to-shift turnover and the trust of your board partner, which is real but internal and replaceable — hence 4, not 0.", "judgment_accountability": "On an upset you decide whether to ride it out, cut feed, or hit the depressuring valve, and during startup you make sequencing and level calls the DCS will not make for you; Texas City and Chevron Richmond turned on exactly these judgments, which is what puts this at 14 despite written procedures for most of the shift." }, "rationale": "Steady-state operation is already the most automated part of this job — DCS loops, advanced process control, and automated tank gauging have been eating the monitoring, logging, and setpoint-tweaking tasks for two decades, and AI-assisted optimization will thin control-room headcount further. What holds is the field half: walking units, lining up valves, pulling samples, catching a leaking seal or a bad reading by smell and sound, and running startups, shutdowns, and upset response where the consequences of a wrong call are fire and injury. No occupational license protects the role, but OSHA Process Safety Management operator-qualification requirements and refinery insurers keep a trained human on the board and in the field.", "outlook": "Expect fewer operators per refinery as control rooms consolidate and US refining capacity flattens, with the remaining jobs concentrated in field execution, turnarounds, and abnormal-operations response.", "what_would_raise_it": { "levers": [ { "dimension": "liability_shield", "change": "OSHA's long-pending PSM standard update (RIN 1218-AC82, on the reg agenda since the 2013 Executive Order 13650 review) adding an explicit named-operator qualification and sign-off requirement for startup, shutdown, and safe-operating-limit deviation authorizations — plus a rule that autonomous/AI advisory control actions on covered processes require a qualified operator's documented concurrence. California's PSM for Petroleum Refineries (Cal/OSHA 8 CCR 5189.1) already requires documented management-of-change and hierarchy-of-hazard-control analysis with operator participation; extending that to AI-generated control changes would make the human signature legally load-bearing.", "plausibility": "plausible", "would_add": 5 }, { "dimension": "liability_shield", "change": "Insurer or API-standard requirement (e.g. a revision to API RP 754/1173 on process safety and operating discipline) that unmanned or remotely supervised board operation is uninsurable — carriers like Chubb/AIG energy books already price minimum manned-console staffing after Texas City and Philadelphia PES; an explicit written condition naming operator presence would harden this.", "plausibility": "plausible", "would_add": 3 }, { "dimension": "task_resistance", "change": "Genuine two-tier occupation: as APC and AI optimization absorb steady-state setpoint management and logging, the residual job concentrates in upset response, turnaround startups, permit-to-work and lockout/tagout field verification, and abnormal-situation diagnosis — the tier where no model has authority or sensory access. Watch for job postings shifting titles toward 'operations technician / turnaround specialist' and for contractual staffing floors in USW National Oil Bargaining agreements (the 2022 pattern already ties fatigue and staffing language to safety).", "plausibility": "already happening", "would_add": 4 }, { "dimension": "embodiment", "change": "Not a lever so much as a floor: valve lineups, sample pulling, seal and flange inspection in classified (Div 1/Div 2) hazardous areas resist robotics because intrinsically-safe mobile platforms are rare; a formal recognition in NFPA 70/API guidance that autonomous ground robots cannot perform isolation verification would keep this task human. Conversely widescale ANYbotics/Boston Dynamics Spot deployment on refinery rounds (already piloted at bp, Chevron, Shell) erodes the inspection sliver but not the valve-manipulation sliver.", "plausibility": "plausible", "would_add": 2 }, { "dimension": "judgment_accountability", "change": "A CSB investigation report or consent decree that formally assigns the emergency-shutdown decision to a named board operator with defined non-overridable authority (similar to the 'stop work authority' language in post-Deepwater Horizon offshore SEMS rules, 30 CFR 250 Subpart S) would convert de facto responsibility into codified ownership.", "plausibility": "plausible", "would_add": 3 } ], "ceiling_note": "No plausible route to trust_premium: the buyer is a refinery owner buying throughput, not a customer choosing a human. Nobody pays extra for human-operated gasoline. Also note the counter-pressure — this is a shrinking headcount occupation regardless of the levers above; liability and judgment gains would protect the remaining jobs' defensibility, not their number." }, "adjudication": null, "employment_history": { "points": [ { "y": 2017, "emp": 38700, "wage": 67770 }, { "y": 2018, "emp": 38930, "wage": 70860 }, { "y": 2019, "emp": 40370, "wage": 74180 }, { "y": 2020, "emp": 40480, "wage": 78840 }, { "y": 2021, "emp": 34230, "wage": 79540 }, { "y": 2022, "emp": 31360, "wage": 85090 }, { "y": 2023, "emp": 33360, "wage": 94580 }, { "y": 2024, "emp": 34860, "wage": 97540 }, { "y": 2025, "emp": 33160, "wage": 96710 } ], "from": 2017, "to": 2025, "change_pct": -14.3, "comparable_from": 2019, "spans_soc_revision": true }, "pivots": [ { "slug": "ship-engineers", "title": "Ship Engineers", "verdict": "SAFE", "risk_resistance": 73, "median_wage": 109530, "overlap": 72, "skills_to_close": [ "Installation", "Repairing", "Critical Thinking", "Equipment Maintenance" ] }, { "slug": "nuclear-power-reactor-operators", "title": "Nuclear Power Reactor Operators", "verdict": "SAFE", "risk_resistance": 70, "median_wage": 122890, "overlap": 54, "skills_to_close": [ "Active Listening", "Critical Thinking", "Persuasion", "Science" ] } ], "license": "https://cookedindex.com/terms" }