A keystone is a small wooden or plastic fitting used in ale casks. For some years wooden casks have been effectively obsolete, with the majority now being aluminium or stainless steel, and a few sturdy plastic ones beginning to appear. Nevertheless, the standard tap is still designed to be hammered into yielding material, punching a hole as it goes. All modern casks, even the few wooden ones still in use, use a replaceable keystone to accept the tap.
The bung-hole of the cask is on one of the circular faces, near the rim. When the cask is in service, it is laid on its side with the bunghole at the lowest point on the circumference. The keystone is a small thick wooden or plastic disk inserted into the bunghole which completely seals the cask until it is needed.[1]
The center of the keystone is deliberately weakened, this area may be marked or unmarked and is called the tut. In the plastic variety it is much thinner than the surrounding material; if made of wood it is partially pre-cut so that it is easier to punch out. Some time before the cask is to be served, the end of the tap is placed against this weakened section and, with the aid of a mallet, driven through it. The shaft of the tap is tapered, so that as it is forced in fully it seals against the undisturbed outer part of the keystone. A small amount of beer may leak out during this process, but with sufficient skill and firm action with the mallet, no spillage at all can occur.
When the cask is empty, it is a courtesy to the drayman (the brewery's delivery driver who also collects the empty casks) to stop up the hole in the keystone with a small cork bung which can be obtained for this purpose. This prevents old beer being spilled on him or in his vehicle. Similarly, the shive hole may be sealed with a spile.
It is common for wooden keystones to acquire a layer of mould on the outside between filling and tapping. This does not indicate a problem with the beer, but because part of the keystone is driven into the cask (where it floats on top of the beer) it must be thoroughly cleaned before the cask is tapped. This action is worthwhile even when plastic keystones are used.
Due to the somewhat rustic nature of this standard connection system, leaks occasionally appear. If beer is leaking around the tap then hammering it further in will normally fix the problem; otherwise the keystone itself may be split or the tap may be faulty[1] and the offending item will need to be changed.
Because of the way ale is conditioned, upending the cask to bring the keystone above the level of the liquid would render the beer undrinkable for at least a day and probably longer, and depending on the condition of the finings may have a permanent effect. Instead, the keystone must be changed in situ. Perhaps surprisingly, this can be achieved without serious loss of beer - half a pint or so is reasonable and half that again is eminently possible.
If the tap is the problem, one may either replace the keystone as above and insert a new tap, or perform a similar operation but removing only the tap, leaving the keystone in place, and quickly inserting a new tap in the hole. Some authorities recommend using a small cork bung between removing the old tap and inserting the new one.