The systematic anesthesia machine safety check performed before every single case — gas supply, leak test, breathing circuit, ventilator/alarms, scavenging
Every anesthesia machine checkout begins at the source: is there actually enough oxygen, and is the machine physically incapable of delivering a hypoxic gas mixture if that supply fails? The gas supply check verifies pipeline pressures (typically 50–55 psi), confirms backup E-cylinder reserves are adequate, and tests the oxygen failure-protection ("failsafe") device that shuts off or proportionally reduces nitrous oxide and other gas flow if oxygen pressure falls — a mechanical safeguard that exists precisely because human vigilance alone has not been enough to prevent hypoxic mixture delivery in the history of anesthesia.
The anesthesia machine draws gas from two sources that must both be checked:
Pipeline supply (hospital central source): • Color-coded, diameter-indexed hose connections (DISS) physically prevent cross-connecting O2, N2O, and air lines • Normal working pressure: 50–55 psi, regulated far upstream at the hospital manifold • Checkout step: confirm each pipeline gauge reads within the normal working range before relying on it as the primary source for the case
Backup E-cylinders (mounted on the machine yoke): • Oxygen cylinders are the critical backup: a full E-cylinder holds ~625 L at ~1,900 psi, and because O2 remains gaseous in the cylinder, pressure falls linearly with volume — a cylinder at 1,000 psi is roughly half full • N2O cylinders behave differently: N2O is stored as a liquid, so pressure stays roughly constant (~745 psi) until nearly all liquid has vaporized, then drops rapidly — cylinder pressure is a poor volume indicator for N2O • Checkout step: with pipeline supply disconnected, open the O2 cylinder valve and confirm the gauge reads an adequate reserve (traditionally ≥1,000 psi, i.e., roughly half full), then close the valve — cylinders are a backup, not the primary intraoperative source
Pressure regulation: • A first-stage regulator drops cylinder pressure (up to ~2,200 psi when full) to a stable intermediate pressure (~45 psi) so it behaves like pipeline supply • This is why cylinder-sourced O2 still reads ~45–50 psi at the flowmeter regardless of how full the cylinder is — flow, not pressure, is what declines abruptly at empty
Because N2O cylinder pressure does not decline until the liquid phase is nearly exhausted, a "normal" N2O pressure reading offers almost no reassurance about remaining volume — this is a frequently tested and frequently missed point in checkout teaching.
The failsafe device is a mechanical, pressure-sensing safeguard built into the machine's pneumatic pathway — it does not measure inspired oxygen concentration, only supply pressure, and this distinction matters clinically.
How it works: • A pressure sensor monitors the oxygen supply pressure downstream of the O2 pipeline/cylinder inlet • If O2 supply pressure falls below a threshold (~20–25 psi), the device proportionally reduces or completely shuts off the flow of all other gases (N2O, air) that share the pneumatic manifold • In modern machines this is often paired with an oxygen ratio monitor/controller (proportioning system) that mechanically or electronically links N2O flow to O2 flow, preventing the fresh gas mixture from falling below ~25% oxygen even if both flow control valves remain open
What the failsafe does NOT protect against: • A leak or crossover in the low-pressure circuit downstream of the flowmeters (this is why leak testing is a separate, mandatory step) • An empty O2 cylinder when pipeline O2 has also failed but supply pressure sensors read a transient normal value • Wrong gas in a mislabeled or cross-filled cylinder — a rare but reported cause of catastrophic hypoxic delivery despite a functioning failsafe
Checkout verification: • With the machine on and O2 flowing, slowly close the O2 pipeline supply (simulate failure) and confirm that N2O/other auxiliary gas flow decreases or stops and that an audible/visual low-pressure alarm activates • Confirm flowmeters (or electronic flow displays) rise and fall smoothly across their entire range with no sticking float or erratic needle movement — a sticking flowmeter has itself caused reported hypoxic events
Downstream of the flow control valves and vaporizers lies the "low-pressure system" — the pathway fresh gas travels before reaching the common gas outlet. Unlike the high-pressure supply, this segment operates near ambient pressure and is not protected by the failsafe device or by check valves on many older machines, meaning a cracked vaporizer seal, a loose filler cap, or a perished hose here can silently dilute or entrain room air into the fresh gas without triggering any alarm. The leak test is the only checkout step designed specifically to find these faults before they reach a patient.
The FDA 1993 Anesthesia Apparatus Checkout Recommendations and current manufacturer procedures describe two complementary test philosophies, and the correct one depends on machine design:
Negative-pressure (suction bulb) leak test: • A hand-held suction bulb is attached to the common gas outlet and repeatedly squeezed and released, drawing the bulb to a collapsed, evacuated state • If the low-pressure system is intact, the bulb stays collapsed for at least 10 seconds • If the bulb re-inflates on its own, gas is being drawn IN through a leak point (a crack, loose vaporizer mount, or disconnected hose) — this method is most sensitive on machines without a check valve between the low-pressure system and the common gas outlet • Each vaporizer is tested individually, turned on one at a time, because a leak inside one vaporizer can be masked when another is selected
Positive-pressure leak test: • Required on machines that have a check valve near the common gas outlet, because that valve prevents the negative-pressure bulb technique from pulling vacuum through the whole low-pressure pathway • The common gas outlet is occluded, the system pressurized to the test pressure specified by the manufacturer (commonly ~30 cmH2O using the O2 flush or a test pressure gauge), flow is closed, and the pressure is observed for decay over a fixed time • A pressure drop exceeding the manufacturer's stated threshold (often <100–250 mL/min equivalent) indicates a clinically significant leak requiring repair before use
Both methods share the same principle: pressurize or evacuate an isolated, closed system and watch whether it holds — any change reveals a path to atmosphere that fresh gas, and therefore volatile anesthetic and oxygen, could also be silently leaking through, or through which room air could dilute the mixture.
Vaporizers must be included in the leak test with each one switched ON in turn — a leak confined to the vaporizer's internal seal or filler port is invisible if the device is left off during testing, and interlock systems that allow only one vaporizer on at a time make sequential testing mandatory rather than optional.
A low-pressure leak does not simply "waste" fresh gas — depending on its location and the phase of the circuit, it can produce two distinct hazards:
1. Loss of anesthetic delivery / awareness risk: • A leak between the vaporizer output and the common gas outlet reduces the actual concentration of volatile agent reaching the patient below the dialed setting • At low fresh gas flows (increasingly common with low-flow and closed-circuit techniques to reduce volatile agent cost and environmental impact), a modest absolute leak represents a much larger fraction of total flow, making low-flow anesthesia more, not less, sensitive to undetected leaks
2. Hypoxic or diluted mixture risk: • A leak that entrains room air (21% O2, no anesthetic) dilutes both the oxygen concentration and the anesthetic concentration delivered to the circuit • Because this occurs downstream of the failsafe device and any oxygen ratio controller, none of the high-pressure safety systems described in Stage 1 can detect or correct it
Historically, low-pressure system leaks — cracked vaporizer sight glasses, loose corrugated hose connections, perished O-rings — were implicated in a meaningful share of reported anesthesia machine critical incidents before leak testing became a mandatory, standardized checkout step. Modern machines increasingly incorporate automated, machine-driven leak tests that run as part of a self-check sequence at power-on, but manual verification per the manufacturer's checklist remains the required practice whenever automated self-tests are unavailable, incomplete, or the machine configuration has changed (e.g., a vaporizer swapped, a hose replaced).
The circle breathing system is where the patient physically connects to the machine, and it must accomplish two things simultaneously: deliver fresh gas and volatile anesthetic to the patient on inspiration, and remove exhaled carbon dioxide before the next breath is rebreathed. This depends on two mechanically simple but clinically critical components — unidirectional (one-way) valves that enforce gas flow direction, and a CO2 absorbent canister that chemically neutralizes exhaled CO2 — both of which must be inspected and functionally tested before every case.
The circle system uses two one-way valves — inspiratory and expiratory — positioned so that fresh gas and exhaled gas are forced into a single circular flow path rather than allowed to move back and forth in the same tubing. This directionality is what allows CO2 absorption to work efficiently and prevents rebreathing of CO2-laden gas that has not passed through the absorbent.
Visual and functional inspection: • Confirm each valve disc is present, seated correctly, and not stuck open (missing or stuck-open valve = rebreathing of CO2) or stuck closed (obstruction to ventilation) • Look for the disc "fluttering" appropriately during a test breath — a disc that fails to move causes significant resistance; a disc that never seats causes rebreathing • Confirm the CO2 absorbent canister is properly seated and its seals are intact — a poorly seated canister is itself a common source of a circuit leak found in Stage 2-style testing repeated at the patient-circuit level
Circuit leak / compliance check: • With the circuit Y-piece occluded and the adjustable pressure-limiting (APL) valve closed, the circuit is pressurized (commonly to ~30 cmH2O) using the O2 flush or fresh gas flow • Pressure should hold with minimal decay; a rapid drop indicates a leak in the hoses, canister seal, bag, or valve seating • This step also lets the operator observe circuit compliance — how much fresh gas volume is "absorbed" by hose and bag expansion rather than reaching the patient, information used later to correct ventilator-delivered tidal volumes, especially in pediatric patients where compliance loss is proportionally much larger
A stuck-closed unidirectional valve can silently prevent effective ventilation on the very first breaths of a case, while a stuck-open or missing valve permits CO2 rebreathing that may not be recognized until the patient is already hypercapnic — both faults are found by direct inspection, not by pressure testing alone.
Modern CO2 absorbents are calcium hydroxide-based granules (having largely replaced soda lime formulations containing strong alkalis linked to compound A and carbon monoxide production with older volatile agents) that neutralize CO2 through an exothermic acid-base reaction:
CO2 + H2O → H2CO3 H2CO3 + Ca(OH)2 → CaCO3 + 2H2O + heat
Key chemical and practical features: • The reaction is exothermic — a fresh, actively absorbing canister feels noticeably warm to touch; a cold canister during a case is itself a soft sign of exhaustion or bypassed gas flow • An indicator dye (commonly ethyl violet) is embedded in the granules and changes from white/off-white to violet/purple as the granules become alkaline-depleted and exhausted — this pH-driven color change is the single most reliable visual cue of exhaustion • Color change can partially reverse after several hours of disuse (as CO2 desorbs and pH partially recovers), which is why absorbent that shows ANY violet discoloration should be assumed exhausted and changed, regardless of whether it looks "fresher" after sitting overnight • Channeling — gas finding a low-resistance path through settled or poorly packed granules rather than passing through the full bed — causes early clinical CO2 rebreathing even though much of the canister still appears white; canisters should be gently tapped/settled per manufacturer instructions and inspected for gaps
Clinical signs of absorbent exhaustion during a case (relevant even though the checkout happens beforehand): • Rising baseline (inspired) CO2 on capnography — normally near zero, exhaustion causes it to rise above zero • Progressive rise in end-tidal CO2 despite stable minute ventilation • Canister feels cool rather than warm
Because exhaustion can occur mid-case even after a normal-appearing pre-use check, many practices standardize absorbent changes on a fixed schedule (e.g., daily, or after a defined number of cases) in addition to appearance-based decisions made at checkout.
A ventilator that silently fails to deliver the set tidal volume, or a machine whose alarms are disabled, muted, or mis-set, converts a survivable equipment fault into an unrecognized one. This stage of the checkout confirms two related but distinct things: that the ventilator mechanically and pneumatically delivers what it is set to deliver on a test lung, and that the three alarms every anesthesia machine must have — disconnect/low-pressure, high-pressure/high-airway-pressure, and low-oxygen/low-FiO2 — are active, correctly configured, and audible before the patient is connected.
Before connecting to a patient, the ventilator is switched from manual/bag mode to mechanical/automatic mode and tested against an artificial test lung (a simple compliant bag substituted at the Y-piece):
• Set a representative tidal volume and rate (e.g., 500 mL, 12 breaths/min) and confirm the test lung visibly rises and falls with each mechanical cycle • Confirm the displayed/measured delivered tidal volume and peak airway pressure on the machine's monitor reasonably match the set values — a persistent mismatch suggests a leak, an obstructed limb, or a bellows/piston fault • Observe the ventilator bellows (in bellows-driven machines) for the correct motion pattern — an ascending bellows that fails to fully rise on expiration is a classic, easily recognized sign of a circuit leak or disconnection, which is precisely why ascending-bellows designs are preferred over descending-bellows designs: a descending bellows can continue to cycle under gravity even when disconnected from the patient, masking the fault • Switch back to manual ventilation and confirm the bag fills and the APL valve functions before returning to test mode
Modern electronic/turbine or piston ventilators replace the bellows with different mechanisms but the verification principle is identical: does measured output match commanded input on a known test load, and does the machine flag a discrepancy if it does not.
Disconnect / low-pressure alarm: • Purpose: detect that the breathing circuit has become disconnected from the patient (or the ventilator has failed to generate pressure) — historically one of the most dangerous unrecognized events in anesthesia because a disconnected but ventilating machine produces no obvious visual cue • Test: with the ventilator cycling on the test lung, briefly disconnect the circuit at the Y-piece and confirm the alarm triggers within the expected window (international standards call for detection within about 15 seconds) • Because this alarm can be defeated by low alarm-threshold settings or accidentally silenced, checkout should also confirm the alarm volume/audibility is adequate for the room
High-pressure / high-airway-pressure alarm: • Purpose: detect an obstruction, kink, or a dangerous rise in airway pressure that could cause barotrauma • Test: partially occlude the test-lung limb (per manufacturer instructions, without exceeding safe pressures) and confirm the alarm triggers at or near the set threshold (commonly defaulting to around 40 cmH2O, adjustable per patient population — lower for pediatric/neonatal cases)
Low-oxygen / low-FiO2 alarm: • Purpose: detect that the inspired oxygen concentration has fallen below a safe threshold — this is the alarm that most directly backstops the pneumatic failsafe described in Stage 1, because it measures the gas the patient is actually receiving rather than inferring it from supply pressure • Test: confirm the oxygen analyzer is calibrated (commonly to room air = 21% and then to 100% O2) before the case, and confirm the low-O2 alarm limit is set appropriately and is enabled, not silenced • This is the last line of defense against a hypoxic mixture and, unlike the failsafe device, it queries the actual delivered gas rather than a supply-pressure proxy — the two systems are complementary, not redundant
The oxygen analyzer and its low-FiO2 alarm are considered the single most important monitor for preventing hypoxic gas delivery, precisely because every upstream safety feature — pipeline pressure, cylinder reserve, the failsafe device, ratio controllers — can be defeated or bypassed by a fault the analyzer alone is positioned to catch: it measures what the patient is actually about to breathe.
The final steps of the checkout move outward from the patient circuit to the room: does the scavenging system remove waste anesthetic gas without disturbing the pressures inside the breathing circuit itself, and has every prior step actually been performed and documented, rather than assumed? The 2008 ASA Recommendations for Pre-Anesthesia Checkout Procedures — developed with the FDA and device manufacturers — organize the entire process into a repeatable structure so that nothing is left to memory or improvisation, especially under the time pressure of a busy operating room schedule.
The scavenging system captures gas vented from the circuit's APL valve (during manual ventilation) and ventilator relief valve (during mechanical ventilation) and carries it away from the operating room, protecting staff from chronic low-level exposure to waste anesthetic gases (WAGs) linked to occupational health concerns.
System components and checkout points: • Gas-collecting assembly: tubing from the APL/ventilator relief valve to the interface — checked for secure connection and patency • Interface (open/active or closed/passive reservoir with positive- and negative-pressure relief valves): regulates evacuation so that suction neither over-scavenges (pulling excess vacuum that could drag on the breathing circuit and affect delivered pressures/volumes) nor under-scavenges (allowing waste gas to spill into the room) • Disposal route: active systems connect to hospital vacuum/evacuation piping with an adjustable flow, typically set per manufacturer guidance (commonly in the range of tens of liters per minute) to balance adequate capture against excessive suction
Checkout verification: • Confirm the scavenging tubing is connected and unobstructed • With the system on, verify that the reservoir bag or interface indicator (if present) shows neither fully collapsed (under-scavenging / vacuum too low) nor fully distended against a positive-relief valve limit (over-scavenging / vacuum too high, or evacuation flow blocked) • Confirm that adjusting the vacuum/evacuation flow does not perceptibly alter breathing circuit pressure — if it does, the interface's pressure-relief valves are not functioning correctly and the scavenging system itself could become a source of circuit over- or under-pressurization
The 2008 ASA/FDA framework deliberately splits checkout items into two tiers so that a full, from-scratch inspection is not required before every single case of the day, while nothing safety-critical is skipped between cases:
1. Items to be completed at the start of each day (before the first case): 1. Verify auxiliary oxygen cylinder and self-inflating manual ventilation device are available and functional 2. Verify patient suction is adequate 3. Turn on anesthesia delivery system and confirm AC power / battery backup 4. Verify availability of required monitors and check alarms are enabled at appropriate limits 5. Perform the high-pressure system check: pipeline and cylinder pressures, verify pipeline supply, check cylinder supply and turn cylinders off 6. Perform the low-pressure system leak check (Stage 2), test the flowmeters, and verify the auxiliary O2 flowmeter 7. Test the scavenging system 8. Calibrate/verify the oxygen analyzer, confirm low-O2 alarm is enabled 9. Verify carbon dioxide absorbent is not exhausted 10. Perform breathing system leak/compliance check (Stage 3) 11. Verify correct breathing system gas flow and unidirectional valve function 12. Document completion of checks
2. Items to be repeated before each subsequent case that same day (an abbreviated re-check, not a full repeat): 1. Verify patient suction is adequate 2. Re-confirm breathing system is calibrated and functioning, absorbent is adequate 3. Re-confirm the alarms and monitors are enabled and appropriately set for the next patient 4. Document
This two-tier structure exists because full checkout (particularly the leak tests) takes meaningful time and the marginal safety benefit of repeating every step between back-to-back cases on an unchanged machine is low, whereas the marginal cost of skipping the abbreviated re-check items (alarms, absorbent, suction) has been implicated in real incidents.
Key checkout sequence to remember, in order: (1) verify emergency ventilation backup and suction, (2) check high-pressure gas supply and failsafe, (3) leak-test the low-pressure system with vaporizers on, (4) inspect valves and absorbent and leak-test the breathing circuit, (5) verify ventilator output on a test lung, (6) confirm disconnect / high-pressure / low-O2 alarms trigger correctly, (7) test the scavenging system, (8) document completion — every item traces back to a documented category of real anesthesia machine-related critical incident.
Anesthesia machine-related critical incidents are, by multiple closed-claims and incident-reporting analyses, disproportionately traceable to preparation and setup errors rather than to unpredictable device failure — misassembled breathing circuits, undetected leaks, exhausted absorbent, disabled alarms, and empty backup cylinders recur across decades of case reports precisely because each is preventable by a already-defined checklist step performed correctly.
The move from ad hoc, memory-based inspection to a standardized, published checkout (first formalized by the FDA in 1986, revised in 1993, and restructured jointly with the ASA in 2008) mirrors a broader pattern in safety-critical industries: aviation pre-flight checklists, surgical safety checklists, and anesthesia machine checkouts all substitute a fixed, externalized sequence for fallible individual recall, especially under fatigue, time pressure, and interruption — the exact conditions under which a purely memory-based check is most likely to omit a step.
Modern anesthesia machines increasingly automate portions of this sequence (electronic self-tests that check leak status, alarm function, and gas supply at power-on), but automation does not eliminate the need for the checklist — it changes what the human operator is responsible for verifying, shifting some manual steps to confirmation that the automated self-test actually ran, completed, and passed, and that any item outside the machine's self-test scope (auxiliary equipment, suction, backup ventilation device) is still checked manually.