Deadman system

The BOP also had a deadman system which should have operated automatically. This failed too. The BOP was supposed to be a high-integrity system, probably intended to meet SIL 3 requirements or equivalent. The failure of the BOP is discussed further below. 

Design Changes 6 3 and 61f4, Bulk Outlet Temperature Lockout for The HCR "Deadman" Switch and PCCF System, All Reactors, J. L. Delchman (not yet issued ... 

Recommendation 6. A redesign of the layout is required to ensure appropriate access to the electrical service panel. If possible, it should be located adjacent to the operator console area to enable the operator to easily access the electrical circuits in the event of an emergency. If total relocation of the service panel from one side of the room to another is not possible or feasible because of building limitations, room design, or other factors, then the operator s console should be provided with a deadman switch that will deenergize all electrical power to the vapor degreasing system, including the crane. This relatively simple solution will provide the operator more control over the risk associated with critical electrical systems and subsystems. 

---