Stop-Work Authority, Supervisor Intervention, or Peer Challenge: 3 Decision Routes for an Uncontrolled Risk

A worker notices that a lifting path has changed, a guard is missing, or a permit no longer matches the job. What should happen first? The answer is not always “call the supervisor,” and it is not always “stop everything.” The right route depends on the immediacy of exposure, the worker’s authority, and the decision that must be made before work continues.

Stop-work authority, supervisor intervention, and peer challenge are three different response routes. They should not compete for status. A mature safe-behavior system makes each route easy to recognize, gives it a defined response, and prevents the person who raises the concern from carrying the whole burden of resolving it.

Evaluation criteria for choosing a response route

The comparison should begin with four questions. Is someone exposed now, or is the concern a weakness that can be corrected before the task starts? Does the person who sees the condition have authority to pause the work? Does the correction require resources or coordination outside the immediate team? Can the task restart without a formal decision from a named supervisor?

These questions matter because the same phrase, “speak up,” can hide very different expectations. A worker may be invited to raise concerns while still being expected to negotiate with production, diagnose the control failure, and decide whether the task is safe. That is not a response system. It is a transfer of responsibility.

James Reason’s work on latent conditions helps explain why the choice cannot be reduced to individual courage. The visible unsafe condition may be connected to planning, design, maintenance, supervision, or communication, which means the route must carry the concern toward the part of the organization that can change it.

Stop-work authority is the lead route for immediate exposure

Stop-work authority should lead when a person is facing an uncontrolled exposure and waiting for permission would increase the danger. The worker’s first duty is to move to a safe position when possible, make the pause visible, and communicate what condition has changed. The route is protective because it interrupts the work before the organization has finished debating the issue.

The permission must be practical rather than ceremonial. If a worker can stop a task only after proving that a fatal event is certain, the authority is narrower than the policy suggests. A missing isolation, an unstable load, a failed gas test, or a changed line of fire can justify a pause because the control is no longer trustworthy, even when no injury has occurred.

Stop-work authority does not give the worker responsibility for the final risk decision. The responsible supervisor still needs to verify the condition, involve the right technical support, and define the requirements for restart. That distinction protects the worker from being treated as the owner of a system problem that was already present before the intervention.

The common failure is a slow or defensive response. When the person who pauses work is questioned more aggressively than the condition itself, future workers learn that the formal permission has a personal cost. The program then records fewer concerns while the exposure remains.

Supervisor intervention should lead when authority and coordination are needed

Supervisor intervention should lead when the issue cannot be resolved through a simple pause and correction. This route is appropriate when the task needs a new sequence, a different crew, a revised permit, equipment support, or a decision about whether the original plan remains valid.

The supervisor’s role is not to persuade the worker to continue. It is to make the risk legible, protect the pause from production pressure, and coordinate the correction. If the supervisor cannot answer what changed, which barrier is affected, and who can verify the new condition, the work is not ready to restart.

Supervision also matters when two groups own different parts of the exposure. A maintenance team may control isolation, operations may control access, and a contractor may control the method statement. The person who spots the conflict may not have authority over any of those interfaces, which is why the supervisor route must connect the concern to a named decision owner.

Across 25+ years of executive EHS experience, Andreza Araujo has consistently positioned safety leadership as a decision practice rather than a communication slogan. Applied here, that position means a supervisor earns trust by making the next safe decision visible, not by keeping the shift moving at any cost.

Peer challenge is the lead route for early correction

Peer challenge should lead when a colleague can interrupt an emerging error before the condition becomes an uncontrolled exposure. It is especially useful during preparation, handover, line-up, and the first moments of a task, when a question can correct an assumption without creating a major operational pause.

A useful peer challenge is specific. “The isolation point is not the one on the drawing” is more actionable than “be careful.” “The load path crosses the access route” identifies the condition that needs attention. The person raising the concern should not need to deliver a speech, because the system should make a concise challenge acceptable.

Peer challenge becomes unsafe when it is treated as a substitute for supervision. A worker may notice a problem but lack the authority to change the equipment, stop a contractor, or resolve a conflict between permits. The challenge should therefore have a clear handoff, so that an early correction can become a formal decision when the risk exceeds the team’s control.

The strongest peer systems also protect disagreement. A colleague who asks a difficult question is testing the work, not attacking the person. Andreza’s book Safety Culture: From Theory to Practice is useful here because it separates declared values from the decisions that reveal what the organization truly accepts.

Decision matrix: which route should lead?

The matrix below is a practical starting point. It does not replace a site procedure or a legal requirement, but it clarifies the first move when the formal plan and the field condition do not match.

The key distinction is not rank. It is the distance between the concern and the authority needed to close it. A peer challenge is fast but local. Stop-work authority is protective but should trigger a structured response. Supervisor intervention can resolve a broader interface, but it fails when the supervisor treats the pause as an inconvenience.

Context changes the strongest first move

In a routine task, a peer challenge may be enough when the correction is visible and within the crew’s authority. If a tool is wrong, a line of sight is blocked, or a step was misunderstood, the team can correct the condition and continue after a brief verification.

In high-energy work, the threshold changes. Isolation, confined-space entry, lifting, work at height, and vehicle movement can expose people before a conversation is complete. Stop-work authority should be the default first move when the barrier is missing, uncertain, or contradicted by the field condition.

In contractor or multi-shift work, supervisor intervention becomes more important because the person who sees the risk may not own the permit, equipment, or interface. The handover should preserve the concern rather than forcing the next crew to rediscover it.

The practical rule is simple without being simplistic. Use the fastest route that protects the person, then escalate as soon as the required correction exceeds the authority of the person who noticed the risk.

Leaders must make every route safe to use

Leaders shape the response before an intervention occurs. They decide whether production targets can be paused, whether supervisors are trained to receive bad news, and whether corrective actions are funded when the evidence points to design or planning.

Recognition should focus on the quality of the decision, not on the number of interventions. A high count may show healthy visibility, but it may also show weak planning or repeated control failure. A low count may show reliable work, or it may show that people have learned to stay quiet.

Andreza Araujo’s experience across more than 250 cultural transformation projects supports a useful leadership test. When the organization says that every person may intervene, can a worker name the supervisor who will respond, the evidence required for restart, and the path for escalation if the first response is inadequate?

That test moves the conversation from intention to operating design. It also reveals whether the program is built around worker behavior alone or around the conditions that make safe behavior possible.

Rehearsal turns permission into a usable behavior

Training should rehearse the moment of uncertainty rather than repeat the policy definition. Give the team a short scenario in which the plan no longer matches the field, then ask who speaks first, what words they use, where they move, and who owns the restart decision.

Run separate scenarios for each route. A peer challenge may be appropriate when the issue is a small mismatch before exposure begins. Stop-work authority should be rehearsed when the exposure is already present. Supervisor intervention should be tested when the correction requires coordination across work groups.

The debrief should examine the response time, the clarity of the handoff, and the quality of the final control. It should also ask whether the person who raised the issue had to overcome a social barrier that the procedure never acknowledged. A system that works only when a worker is unusually confident is not yet dependable.

Andreza’s book Vamos a Hablar?, whose title can be read in English as “Shall We Talk?”, reinforces the value of the conversation that happens before a shortcut becomes normal. The rehearsal gives that conversation a place in the work rather than leaving it to personality.

Recommendation for EHS managers and shift supervisors

Use the three routes as a ladder of protection rather than as competing programs. Make peer challenge the earliest correction, stop-work authority the protected response to uncontrolled exposure, and supervisor intervention the route that converts a pause into a verified decision.

Then test the ladder against five real operating conditions, including a missing barrier, a changed task, a contractor interface, a handover, and a production delay. If the route is unclear in any of those conditions, the gap is in the operating system, not in the worker’s motivation.

Leaders should also review whether the final action changed the exposure. A reminder, poster, or refresher may be useful, but it is not a sufficient response when the evidence points to design, staffing, maintenance, planning, or decision rights. The action must reach the condition that made the concern necessary.

For Andreza Araujo, the strategic value of safe behavior lies in making risk visible early enough for leadership to act. The organization that protects that visibility will learn faster from weak signals and will make fewer high-consequence decisions in the dark.

Stop-work authority, supervisor intervention, and peer challenge answer different questions. Peer challenge asks whether the team can correct an emerging error. Stop-work authority asks whether a worker can protect people when exposure is uncontrolled. Supervisor intervention asks whether the organization can coordinate a safe restart.

When all three routes are defined, workers do not have to choose between being helpful and being protective. They can use the shortest safe route, hand the issue to the right authority, and see what changed before work resumes.

That is the standard worth measuring. Not how often people repeat the phrase “stop work,” but whether the organization makes it easier to interrupt risk than to explain away the warning.

Explore Andreza Araujo’s books and safety leadership resources for practical ways to turn safety conversations into operating decisions.