• Rough draft
  • Enclosure Safety Functions

    Enclosure Motion Control LIC

    The Enclosure Motion Control LIC is responsible for interlocks, limits, and emergency stop functions for the Enclosure Azimuth, Shutters, Cable Wraps, Entrance Aperture; Bridge Crane, Jib Cranes, Rear Access Doors, and TEOA Platform.

    This LIC is also the connection point for emergency stop devices located at or near the above items.

    Enclosure Azimuth Axis

    Enclosure Azimuth Positive Final Travel Limit

    When an Enclosure Azimuth Positive Final Limit is detected by using combinational logic of the End Stop position and the final limit switches, the reaction of the GIS is to remove Enclosure Azimuth drive power (category 0 stop) and apply the brakes.

    Safety Function

    Enclosure Positive Azimuth Final Travel Limit

    Hazard

    Damage to cable chain

    Triggering Event

    Enclosure motion exceeding positive azimuth limit

    Priority

     

    Modes

    Automatic modes, can be overridden in manual mode

    Reaction

    Enclosure drives disabled, brakes applied

    Safe State

    Enclosure drives disabled, motion stopped

    Required Integrity

    SIL 2

    Enclosure Azimuth Negative Final Travel Limit

    When an Enclosure Azimuth Negative Final limit is detected by using combinational logic of the End Stop position and the final limit switches, the reaction of the GIS is to remove Enclosure Azimuth drive power (category 0 stop) and apply the brakes.

    Safety Function

    Enclosure Negative Azimuth Final Travel Limit

    Hazard

    Damage to cable chain

    Triggering Event

    Enclosure motion exceeding negative azimuth limit

    Priority

     

    Modes

    Automatic modes, can be overridden in manual mode

    Reaction

    Enclosure drives disabled, brakes applied

    Safe State

    Enclosure drives disabled, motion stopped

    Required Integrity

    SIL 2

    Enclosure Azimuth Cable Wrap Over Tension

    The GIS shall inhibit motion and remove power to the Enclosure Azimuth Drives if the tension of the Azimuth Cable Wrap exceeds predetermined limits.

    Safety Function

    Enclosure Azimuth Cable Wrap Over Tension

    Hazard

    Damage to cable chain

    Triggering Event

    Tension on cable in cable chain excessive

    Priority

     

    Modes

    Automatic mode

    Reaction

    Enclosure drives disabled, brakes applied

    Safe State

    Enclosure drives disabled, motion stopped

    Required Integrity

    SIL 2

    Enclosure Azimuth Personnel Trapped Key Interlock

    This is actually a group of trapped keys which when one or more are removed inhibit Enclosure Azimuth motion by removing power. This key is required to enter the Azimuth Cable Wrap or Azimuth Mechanical areas. In manual mode (Enclosure Pendant installed and enabling grip held) it may be muted to allow Enclosure Azimuth rotation. It is also be required to enable the exterior boom lift.

    Safety Function

    Enclosure Trapped Key Interlock

    Hazard

    Pinch/crush hazard from moving parts

    Triggering Event

    Trapped key removed

    Priority

     

    Modes

    Automatic mode, may be overridden in manual mode

    Reaction

    Enclosure drives disabled, brakes applied

    Safe State

    Enclosure drives disabled, motion stopped

    Required Integrity

    SIL 3

    Altitude Axis

    Shutter Personnel Trapped Key Interlock

    This is actually a group of trapped keys which when one or more are removed inhibits Enclosure Shutter motion by removing power.

    Safety Function

    Enclosure Trapped Key Interlock

    Hazard

    Pinch/crush hazard from moving parts

    Triggering Event

    Trapped key removed

    Priority

     

    Modes

    All modes

    Reaction

    Enclosure drives disabled, brakes applied

    Safe State

    Enclosure drives disabled, motion stopped

    Required Integrity

    SIL 3

    Cranes

    Bridge Crane Not Stowed

    When in automatic mode, if the Bridge Crane is not stowed (i.e. hook not fully up, trolley at end-of-travel, and bridge fully towards the rear of the enclosure) the GIS removes drive power from the both the Altitude and Azimuth telescope drive controllers (category 0 stop).

    If the enclosure has the pendant connected, Enclosure Azimuth motion may be enabled for safe-limited speed.

    Safety Function

    Bridge Crane Not Stowed

    Hazard

    Collison between Telescope and crane

    Triggering Event

    Bridge Crane not in stowed position

    Priority

     

    Modes

    Automatic (may be overridden in manual mode)

    Reaction

    Inhibit Enclosure rotation

    Safe State

    Bridge Crane in Stowed Position (hook up, bridge at rear of enclosure)

    Required Integrity

    SIL 2

    Bridge Crane Interlock

    The GIS shall inhibit (category 0 stop) the Bridge Crane unless the following conditions are true:

    • The telescope is parked.

    • The telescope azimuth and altitude drives are disabled.

    • The telescope brakes are engaged.

    Safety Function

    Bridge Crane Interlock

    Hazard

    Collison between Telescope and crane

    Triggering Event

    Telescope not parked

    Priority

     

    Modes

    Automatic (may be overridden in manual mode)

    Reaction

    Disable Motion of Bridge Crane

    Safe State

    Telescope Mount stopped

    Required Integrity

    SIL 2

    Jib Crane Not Stowed

    If the GIS detects that the Jib Crane is not stowed (i.e. hook not fully up, jib fully towards the wall of the enclosure) the GIS removes drive power from the both the Altitude and Azimuth telescope drive controllers (category 0 stop).

    Safety Function

    Jib Crane Not Stowed

    Hazard

    Collison between Telescope and crane

    Triggering Event

    Jib Crane not in stowed position

    Priority

     

    Modes

    Automatic (may be overridden in manual mode)

    Reaction

    Inhibit Enclosure rotation

    Safe State

    Jib Crane in Stowed Position (hook up, jib against side of enclosure)

    Required Integrity

    SIL 2

    Jib Crane Interlock

    The GIS shall inhibit (category 0 stop) the Jib Crane unless the following conditions are true:

    • The telescope azimuth and altitude drives are disabled.

    • The telescope brakes are engaged.

    Safety Function

    Jib Crane Interlock

    Hazard

    Collison between Telescope and crane

    Triggering Event

    Telescope not parked

    Priority

     

    Modes

    Automatic (may be overridden in manual mode)

    Reaction

    Disable Motion of Jib Crane

    Safe State

    Telescope Mount stopped

    Required Integrity

    SIL 2

    Entrance Aperture Cover Interlock

    The enclosure entrance aperture cover is allowed to open under specific circumstances.

    If the M1 cover is closed or there is no sunlight on the M1 the Entrance Aperture Cover may open. Additionally if the telescope is pointed at the sun and the heat stop shutter is open and heat stop is not in an over-temperature condition the Entrance Aperture Cover may open.

    TEOA Access Platform

    The TEOA Access Platform may only be deployed when the telescope mount is aligned in azimuth with the platform and the telescope altitude is at least 25° (this measurement needs to be verified). This allows the platform and then the guard rails to be deployed. The TEOA Platform may only be raised once the telescope altitude is above 25° and the guard rails have been stowed.

    Operating Sequence

    To deploy the TEOA Access Platform:

    1. With telescope altitude above 25°, align telescope azimuth with TEOA maintenance position.

    2. Lower TEOA platform fully.

    3. Deploy TEOA guardrails.

    4. Lower telescope altitude to TEOA maintenance position.

    To retract the TEOA Access Platform:

    1. With the telescope parked at the TEOA maintenance position, raise telescope altitude to above 25°.

    2. Retract the TEOA guardrails.

    3. Raise the TEOA platform fully.

     

    Safety Function

    TEOA Access Platform Permissive

    Hazard

    Pinch/crush hazard from moving components

    Triggering Event

    Enclosure Azimuth at TEOA maintenance position AND

    Telescope Azimuth at TEOA maintenance position

    AND Telescope Altitude above 25°.

    Priority

     

    Modes

    All modes

    Reaction

    Enable TEOA maintenance platform drives

    Safe State

    TEOA maintenance platform disabled

    Required Integrity

    SIL 2

    Additionally, when the TEOA Access Platform is not stowed, Enclosure Azimuth motion and Telescope Azimuth motion is inhibited.

    Safety Function

    TEOA Access Platform Not Stowed

    Hazard

    Pinch/crush hazard from moving components

    Triggering Event

    TEOA Access Platform not stowed

    Priority

     

    Modes

    All modes

    Reaction

    Disable Telescope Azimuth and Enclosure Azimuth drives

    Safe State

    Enclosure Azimuth drives disabled AND

    Enclosure Azimuth brakes set AND

    Telescope Azimuth Drives disabled AND

    Telescope Azimuth brakes set

    Required Integrity

    SIL 2

    Remarks

    See section 4.6.1

    However, the Telescope Altitude axis is required to lower into position when the TEOA Access Platform in not stowed. Telescope Altitude motion shall be permitted only when the TEOA Access Platform is fully deployed or fully retracted.

    Safety Function

    TEOA Access Platform Not In Position

    Hazard

    Pinch/crush hazard from moving components

    Triggering Event

    TEOA Access Platform not stowed AND

    TEOA Access Platform not fully deployed

    Priority

     

    Modes

    All modes

    Reaction

    Disable Telescope Altitude drives

    Safe State

    Telescope Altitude Drives disabled AND

    Telescope Altitude brakes set

    Required Integrity

    SIL 2

    Remarks

    See section 4.6.2

    Facility Thermal System LIC

    Vent Gates

    None currently identified

    Enclosure Cooling

    Enclosure Coolant Leak

    This safety function monitors supply and return flow rates. If the delta of supply and return rates exceeds a predetermined threshold the GIS commands a controlled stop of the pumps and then disables power (category 1 stop).

    Safety Function

    Enclosure Coolant Leak

    Hazard

    Coolant on equipment

    Triggering Event

    Mismatch of supply and return rates

    Priority

    Low

    Modes

    All modes

    Reaction

    Stop affected pumps

    Close valves to isolate leak

    Safe State

    Pumps stopped

    Isolation valves closed

    Required Integrity

    n/a

    Enclosure Dehumidification High High Humidity

    In the event of a high wet bulb temperature in the Enclosure exceeds a predetermined level the GIS shall close the M1 cover, close the Aperture Cover, command a controlled stop of the Enclosure Altitude Axis, inflate the shutter seals, and command the Enclosure Dehumidification system to start.

    Safety Function

    High High Humidity

    Hazard

    Condensation on equipment

    Triggering Event

    Interior enclosure humidity above a predetermined level

    Priority

    Lowest

    Modes

    Automatic modes

    Reaction

    Close M1 Cover

    Close Aperture Cover

    Enclosure Altitude Axis stopped

    Inflate the shutter seals

    Start enclosure dehumidification system

    Safe State

    Aperture Cover closed

    Shutter seals inflated

    Dehumidification system running

    Required Integrity

    n/a

    Enclosure Rear Door

    None currently identified