How Chairlift works:
member-tier AI with page citations.
One question, from your library to a cited answer. Access is checked before a word is written.
Your library goes in, tagged by tier.
Standards, guidance, reports and course material. Each document carries a tier, and every page can be cited.
- eCFR29 CFR
1910.11929 CFR 1910.119Process safety management 
OSHA 3132Process Safety Management
CSB 2005-04-I-TXBP Texas City
CSB 2008-3-I-FLT2 Laboratories
CSB 2013-02-I-TXWest Fertilizer
CSB 2019-04-I-PAPES refinery
- eCFR40 CFR
Part 6840 CFR Part 68EPA Part 68 - EPARMP
guidanceEPA RMP guidanceEPA RMP guidance
Each person holds the tiers their membership includes.
A student opens Public. A member adds Member. A corporate member opens all three.
How sign-in and membership data connect is on the trust page.
| Person | Public | Member | Corporate | Searches |
|---|---|---|---|---|
| Maren HoltProcess safety engineer | Open | Open | Open | 8 of 8 |
| Luis ArcePlant operations supervisor | Open | Open | Locked | 6 of 8 |
| Jordan PikeEngineering student | Open | Locked | Locked | 2 of 8 |
Access is checked before the answer is written.
Chairlift searches only what a person’s grants open. Locked documents are never searched for them, so nothing locked can reach the answer.
- eCFR29 CFR
1910.119Process safety managementsearched - Process Safety Managementsearched
- BP Texas Citysearched
- T2 Laboratoriessearched
- West Fertilizersearched
- PES refinerysearched
- eCFR40 CFR
Part 68EPA Part 68locked, never searched - EPARMP
guidanceEPA RMP guidancelocked, never searched
Every claim points to its page.
The page opens beside the answer, with the cited lines highlighted. Members check the source in one click.
What were the root causes of the Texas City explosion?
The CSB traced the March 2005 explosion, 15 killed and 180 injured1, to failures at three levels:
- Board
- The Group Board “did not provide effective oversight” of safety culture2
- Site
- No reporting and learning culture; procedures were not enforced2
- Unit
- No flare on the blowdown system; no automated high-level controls3
CSB 2005-04-I-TX p.17
p.210
p.211
When the library doesn’t cover it, it says so.
No invented limits, doses or torque values. Your own rules attach warnings where they apply.
What’s the safe operating limit for our reactor R-101?
“I can only answer from the Process Safety Library materials, and they don’t cover that.”
R-101’s limits live in your own process safety information. The standard says where:
- Reactor R-101Harrow Bend Chemical
- Your PSISafe upper and lower limits
1910.119(d)(2)(i)(D) - Operating procedureOperating limits
1910.119(f)(1)(ii)
Why it refused
- 13 tiers searched0 passages on R-101
- 2Rule P-02Plant-specific value
- 0 numbers madeRefuse and redirect
What lessons does West Fertilizer offer for ammonium nitrate storage?
- Combustible bins and materials stored near the pile fed the fire1
- No fire detection and no automatic sprinklers1
- Soot and molten asphalt contamination made a detonable mixture1
CSB 2013-02-I-TX, West Fertilizer · p.240 · 10.0 Key findings
Written by Rina Castell · fired on 41 answers last week
Beyond answers. Safely.
Requests become drafted actions a person approves, and members’ own AI tools get the same tiers.
Drafts the request. A person approves it.
A dry run shows every field first. Nothing is written until the named approver says yes, and a no is recorded with its reason.
- Requested
- Dry run
- TBApproving
- Approved
- Record
moc.open_reviewHarrow Bend MOC registerdry runtitleNew relief valve PSV-3107 on drum D-310technical_basisRelief load for revised feed rate(l)(2)(i)safety_health_impactRevalidate PHA node 4(l)(2)(ii)procedure_changesSOP-D310-02, revision C(l)(2)(iii)time_periodPermanent(l)(2)(iv)authorizationTomasz Brandt, PSM manager(l)(2)(v)Inside members’ own AI tools. Paywall intact.
Every MCP call runs as the token’s owner, with their grants, and lands in the audit log.
search_knowledge(“When is a pre-startup safety review required?”)mcp_••••71Maren Holtsearch_knowledge(“What does RMP Program 3 require?”)mcp_••••19Luis Arce| Person | Time | Query | Outcome |
|---|---|---|---|
| Maren Holt | 09:41 | PSSR requirements | 3 passages |
| Luis Arce | 09:38 | RMP Program 3 requirements | access note |
| Maren Holt | 09:20 | MOC failures across CSB reports | 6 passages |
| Maren Holt | 08:57 | PHA revalidation interval | 2 passages |
Read-only · audit on every call
Every gap comes back as a fix.
Unanswered questions go to your content team and become test questions. A release is held until every one passes, and you see which locked documents people want.
Release v14 needs 43 of 43. Live stays on v13.
- v1140/40passed
- v1241/41passed
- v1342/42live
- v1442/43held
Q43What PSM thresholds and storage rules apply to hydrogen?
+ cites 29 CFR 1910.103(b)+ cites 1910.119(a)(1)(ii)+ strong match− no passage on hydrogen− gap response− 0 citations11:47 1910.103 indexed · 43/43 pass · live at 11:52
The upgrade your membership team can sell next.
Examples are built on public documents; access tiers are simulated. People and companies in the examples are fictional.
Questions
How are member tiers set up?
Each document gets a tier, such as public, member or corporate, and each person gets grants for the tiers their membership includes. When they ask, Chairlift searches only the documents those grants open.
What happens when someone asks about locked content?
They get an access note instead of the locked content, plus what the public record says. The locked document is never searched for them, so nothing from it can appear in their answer.
What happens when the library doesn’t cover a question?
Chairlift says so instead of guessing, points to where the answer should live, and logs the question so your content team can fill the gap.
Can members use Chairlift from their own AI tools?
Yes, through MCP. Each call runs as the person who owns the token, with their grants, so the same tier rules apply and every call is recorded in an audit log.
Can Chairlift change records in our systems?
Only through governed actions. Chairlift drafts the request, shows a dry run of every field, and nothing is written until a named approver says yes.
How do we know a new release still answers correctly?
Each release runs a set of test questions with the expected behaviour for every tier. If one fails, the release is held and the current one stays live.
See it on your own library.
30 minutes, with your documents and your tiers.