Enclosure Safety Functions
Enclosure Motion Control LIC
The Enclosure Motion Control LIC is responsible for interlocks, limits, and emergency stop functions for the Enclosure Azimuth, Shutters, Cable Wraps, Entrance Aperture; Bridge Crane, Jib Cranes, Rear Access Doors, and TEOA Platform.
This LIC is also the connection point for emergency stop devices located at or near the above items.
Enclosure Azimuth Axis
Enclosure Azimuth Positive Final Travel Limit
When an Enclosure Azimuth Positive Final Limit is detected by using combinational logic of the End Stop position and the final limit switches, the reaction of the GIS is to remove Enclosure Azimuth drive power (category 0 stop) and apply the brakes.
Safety Function | Enclosure Positive Azimuth Final Travel Limit |
Hazard | Damage to cable chain |
Triggering Event | Enclosure motion exceeding positive azimuth limit |
Priority |
|
Modes | Automatic modes, can be overridden in manual mode |
Reaction | Enclosure drives disabled, brakes applied |
Safe State | Enclosure drives disabled, motion stopped |
Required Integrity | SIL 2 |
Enclosure Azimuth Negative Final Travel Limit
When an Enclosure Azimuth Negative Final limit is detected by using combinational logic of the End Stop position and the final limit switches, the reaction of the GIS is to remove Enclosure Azimuth drive power (category 0 stop) and apply the brakes.
Safety Function | Enclosure Negative Azimuth Final Travel Limit |
Hazard | Damage to cable chain |
Triggering Event | Enclosure motion exceeding negative azimuth limit |
Priority |
|
Modes | Automatic modes, can be overridden in manual mode |
Reaction | Enclosure drives disabled, brakes applied |
Safe State | Enclosure drives disabled, motion stopped |
Required Integrity | SIL 2 |
Enclosure Azimuth Cable Wrap Over Tension
The GIS shall inhibit motion and remove power to the Enclosure Azimuth Drives if the tension of the Azimuth Cable Wrap exceeds predetermined limits.
Safety Function | Enclosure Azimuth Cable Wrap Over Tension |
Hazard | Damage to cable chain |
Triggering Event | Tension on cable in cable chain excessive |
Priority |
|
Modes | Automatic mode |
Reaction | Enclosure drives disabled, brakes applied |
Safe State | Enclosure drives disabled, motion stopped |
Required Integrity | SIL 2 |
Enclosure Azimuth Personnel Trapped Key Interlock
This is actually a group of trapped keys which when one or more are removed inhibit Enclosure Azimuth motion by removing power. This key is required to enter the Azimuth Cable Wrap or Azimuth Mechanical areas. In manual mode (Enclosure Pendant installed and enabling grip held) it may be muted to allow Enclosure Azimuth rotation. It is also be required to enable the exterior boom lift.
Safety Function | Enclosure Trapped Key Interlock |
Hazard | Pinch/crush hazard from moving parts |
Triggering Event | Trapped key removed |
Priority |
|
Modes | Automatic mode, may be overridden in manual mode |
Reaction | Enclosure drives disabled, brakes applied |
Safe State | Enclosure drives disabled, motion stopped |
Required Integrity | SIL 3 |
Altitude Axis
Shutter Personnel Trapped Key Interlock
This is actually a group of trapped keys which when one or more are removed inhibits Enclosure Shutter motion by removing power.
Safety Function | Enclosure Trapped Key Interlock |
Hazard | Pinch/crush hazard from moving parts |
Triggering Event | Trapped key removed |
Priority |
|
Modes | All modes |
Reaction | Enclosure drives disabled, brakes applied |
Safe State | Enclosure drives disabled, motion stopped |
Required Integrity | SIL 3 |
Cranes
Bridge Crane Not Stowed
When in automatic mode, if the Bridge Crane is not stowed (i.e. hook not fully up, trolley at end-of-travel, and bridge fully towards the rear of the enclosure) the GIS removes drive power from the both the Altitude and Azimuth telescope drive controllers (category 0 stop).
If the enclosure has the pendant connected, Enclosure Azimuth motion may be enabled for safe-limited speed.
Safety Function | Bridge Crane Not Stowed |
Hazard | Collison between Telescope and crane |
Triggering Event | Bridge Crane not in stowed position |
Priority |
|
Modes | Automatic (may be overridden in manual mode) |
Reaction | Inhibit Enclosure rotation |
Safe State | Bridge Crane in Stowed Position (hook up, bridge at rear of enclosure) |
Required Integrity | SIL 2 |
Bridge Crane Interlock
The GIS shall inhibit (category 0 stop) the Bridge Crane unless the following conditions are true:
The telescope is parked.
The telescope azimuth and altitude drives are disabled.
The telescope brakes are engaged.
Safety Function | Bridge Crane Interlock |
Hazard | Collison between Telescope and crane |
Triggering Event | Telescope not parked |
Priority |
|
Modes | Automatic (may be overridden in manual mode) |
Reaction | Disable Motion of Bridge Crane |
Safe State | Telescope Mount stopped |
Required Integrity | SIL 2 |
Jib Crane Not Stowed
If the GIS detects that the Jib Crane is not stowed (i.e. hook not fully up, jib fully towards the wall of the enclosure) the GIS removes drive power from the both the Altitude and Azimuth telescope drive controllers (category 0 stop).
Safety Function | Jib Crane Not Stowed |
Hazard | Collison between Telescope and crane |
Triggering Event | Jib Crane not in stowed position |
Priority |
|
Modes | Automatic (may be overridden in manual mode) |
Reaction | Inhibit Enclosure rotation |
Safe State | Jib Crane in Stowed Position (hook up, jib against side of enclosure) |
Required Integrity | SIL 2 |
Jib Crane Interlock
The GIS shall inhibit (category 0 stop) the Jib Crane unless the following conditions are true:
The telescope azimuth and altitude drives are disabled.
The telescope brakes are engaged.
Safety Function | Jib Crane Interlock |
Hazard | Collison between Telescope and crane |
Triggering Event | Telescope not parked |
Priority |
|
Modes | Automatic (may be overridden in manual mode) |
Reaction | Disable Motion of Jib Crane |
Safe State | Telescope Mount stopped |
Required Integrity | SIL 2 |
Entrance Aperture Cover Interlock
The enclosure entrance aperture cover is allowed to open under specific circumstances.
If the M1 cover is closed or there is no sunlight on the M1 the Entrance Aperture Cover may open. Additionally if the telescope is pointed at the sun and the heat stop shutter is open and heat stop is not in an over-temperature condition the Entrance Aperture Cover may open.
TEOA Access Platform
The TEOA Access Platform may only be deployed when the telescope mount is aligned in azimuth with the platform and the telescope altitude is at least 25° (this measurement needs to be verified). This allows the platform and then the guard rails to be deployed. The TEOA Platform may only be raised once the telescope altitude is above 25° and the guard rails have been stowed.
Operating Sequence
To deploy the TEOA Access Platform:
With telescope altitude above 25°, align telescope azimuth with TEOA maintenance position.
Lower TEOA platform fully.
Deploy TEOA guardrails.
Lower telescope altitude to TEOA maintenance position.
To retract the TEOA Access Platform:
With the telescope parked at the TEOA maintenance position, raise telescope altitude to above 25°.
Retract the TEOA guardrails.
Raise the TEOA platform fully.
Safety Function | TEOA Access Platform Permissive |
Hazard | Pinch/crush hazard from moving components |
Triggering Event | Enclosure Azimuth at TEOA maintenance position AND Telescope Azimuth at TEOA maintenance position AND Telescope Altitude above 25°. |
Priority |
|
Modes | All modes |
Reaction | Enable TEOA maintenance platform drives |
Safe State | TEOA maintenance platform disabled |
Required Integrity | SIL 2 |
Additionally, when the TEOA Access Platform is not stowed, Enclosure Azimuth motion and Telescope Azimuth motion is inhibited.
Safety Function | TEOA Access Platform Not Stowed |
Hazard | Pinch/crush hazard from moving components |
Triggering Event | TEOA Access Platform not stowed |
Priority |
|
Modes | All modes |
Reaction | Disable Telescope Azimuth and Enclosure Azimuth drives |
Safe State | Enclosure Azimuth drives disabled AND Enclosure Azimuth brakes set AND Telescope Azimuth Drives disabled AND Telescope Azimuth brakes set |
Required Integrity | SIL 2 |
Remarks | See section 4.6.1 |
However, the Telescope Altitude axis is required to lower into position when the TEOA Access Platform in not stowed. Telescope Altitude motion shall be permitted only when the TEOA Access Platform is fully deployed or fully retracted.
Safety Function | TEOA Access Platform Not In Position |
Hazard | Pinch/crush hazard from moving components |
Triggering Event | TEOA Access Platform not stowed AND TEOA Access Platform not fully deployed |
Priority |
|
Modes | All modes |
Reaction | Disable Telescope Altitude drives |
Safe State | Telescope Altitude Drives disabled AND Telescope Altitude brakes set |
Required Integrity | SIL 2 |
Remarks | See section 4.6.2 |
Facility Thermal System LIC
Vent Gates
None currently identified
Enclosure Cooling
Enclosure Coolant Leak
This safety function monitors supply and return flow rates. If the delta of supply and return rates exceeds a predetermined threshold the GIS commands a controlled stop of the pumps and then disables power (category 1 stop).
Safety Function | Enclosure Coolant Leak |
Hazard | Coolant on equipment |
Triggering Event | Mismatch of supply and return rates |
Priority | Low |
Modes | All modes |
Reaction | Stop affected pumps Close valves to isolate leak |
Safe State | Pumps stopped Isolation valves closed |
Required Integrity | n/a |
Enclosure Dehumidification High High Humidity
In the event of a high wet bulb temperature in the Enclosure exceeds a predetermined level the GIS shall close the M1 cover, close the Aperture Cover, command a controlled stop of the Enclosure Altitude Axis, inflate the shutter seals, and command the Enclosure Dehumidification system to start.
Safety Function | High High Humidity |
Hazard | Condensation on equipment |
Triggering Event | Interior enclosure humidity above a predetermined level |
Priority | Lowest |
Modes | Automatic modes |
Reaction | Close M1 Cover Close Aperture Cover Enclosure Altitude Axis stopped Inflate the shutter seals Start enclosure dehumidification system |
Safe State | Aperture Cover closed Shutter seals inflated Dehumidification system running |
Required Integrity | n/a |
Enclosure Rear Door
None currently identified