Safety architecture
Define safe states and authority boundaries
Heavy machinery needs explicit answers for stop behavior, overload, guarding, interlocks, sensor disagreement, power loss, actuator failure, and manual override. Control authority should never be ambiguous.
- Map hazardous motion, stored energy, pinch points, and thermal or pressure risks.
- Define what the machine does when sensors conflict or become unavailable.
- Keep emergency stop, service mode, and manual override behavior simple and testable.
