Guru
Joined: 05/10/2019
Location: United KingdomPosts: 8964
| Posted: 07:25pm 08 Sep 2023 |
In that sort of situation it is *essential* that local control to handle the high temperature situation is done. If it could result in a dangerous situation then it must also be done in hardware, not software. It's fair enough to monitor the system and allow control (within limits set locally) using software. You should be unable to send a command that could cause a problem or force something out of limits no matter what happens to the software.
Once again, it *must* be impossible for the system to get into a dangerous condition no matter what the software does at either end. You must assume that any software will always fail at some point and into the most dangerous mode. Hardware must take control away from the software and force the system into a safe mode that requires local resetting. This could be as simple as an automatic pressure-operated release valve (venting to a safe place) if there is a danger of fluid boiling in the system.
All this is basic control systems stuff.