You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: STAMP.md
+3-3
Original file line number
Diff line number
Diff line change
@@ -134,11 +134,11 @@ are not adequately considered in the control algorithm, accidents can result.
134
134
Many accidents relate to *asynchronous evolution* where one part of the system
135
135
changes without the related necessary changes in the other parts.
136
136
137
-
Communication is a critical factor here as well as monitoring for changes that may occur and feeding back this information to the higher-level control. For example, the safety analysis process that generates constraints always involves some basic assumptions about the operating environment of the process. When the environment ment changes such that those assumptions are no longer true.
137
+
Communication is a critical factor here as well as monitoring for changes that may occur and feeding back this information to the higher-level control. For example, the safety analysis process that generates constraints always involves some basic assumptions about the operating environment of the process. When the environment changes such that those assumptions are no longer true.
138
138
139
139
#### Inconsistent, incomplete or incorrect process models
140
140
141
-
Accidents, particularly component interaction accidents, most often result from inconsistencies between the models of the process used by the controllers (both human and automated) and the actual process state. When the controller's model of the process (either the human mental model or the software or hardware model) diverges from the process state, erroneous control commands (based on the incorrect rect model) can lead to an accident.
141
+
Accidents, particularly component interaction accidents, most often result from inconsistencies between the models of the process used by the controllers (both human and automated) and the actual process state. When the controller's model of the process (either the human mental model or the software or hardware model) diverges from the process state, erroneous control commands (based on the incorrect model) can lead to an accident.
142
142
143
143
The most common form of inconsistency occurs when one or more process models is incomplete in terms of not defining appropriate behavior for all possible process states or all possible disturbances, including unhandled or incorrectly handled component failures.
144
144
@@ -233,7 +233,7 @@ CAST - causal analysis based on STAMP
233
233
5. Analyze the loss at the physical system level. Identify the contribution of each of the following to the events: physical and operational controls, physical failures, dysfunctional interactions, communication and coordination flaws, and unhandled disturbances. Determine why the physical controls in place were ineffective in preventing the hazard.
234
234
6. Moving up the levels of the safety control structure, determine how and why each successive higher level allowed or contributed to the inadequate control at the current level.
235
235
236
-
For each system safety constraint, either the responsibility for enforcing it was never assigned to a component in the safety control structure ture or a component or components did not exercise adequate control to ensure their assigned responsibilities (safety constraints) were enforced in the components below them.
236
+
For each system safety constraint, either the responsibility for enforcing it was never assigned to a component in the safety control structure or a component or components did not exercise adequate control to ensure their assigned responsibilities (safety constraints) were enforced in the components below them.
237
237
238
238
Any human decisions or flawed control actions need to be understood in terms of (at least):
Copy file name to clipboardExpand all lines: intro.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -83,7 +83,7 @@ Two great introductory papers (alas, both paywalled) are:
83
83
84
84
*[Reconstructing human contributions to accidents: the new view on error and performance](https://www.sciencedirect.com/science/article/pii/S0022437502000324)
85
85
by Dekker
86
-
*[The eror of counting errors](https://doi.org/10.1016/j.annemergmed.2008.03.015) by Robert Wears
86
+
*[The error of counting errors](https://doi.org/10.1016/j.annemergmed.2008.03.015) by Robert Wears
0 commit comments