(a) Minimum safety trip controls required for specific types of automated vital systems are listed in Table 62.35-50.

(b) Safety trip controls must not operate as a result of failure of the normal electrical power source unless it is determined to be the failsafe state.

(c) Automatic operation of a safety control must be alarmed in the machinery spaces and at the cognizant remote control location.

(d) Local manual safety trip controls must be provided for all main boilers, turbines, and internal combustion engines.

(e) Automatic safety trip control systems must—

(1) Be provided where there is an immediate danger that a failure will result in serious damage, complete breakdown, fire, or explosion;

(2) Require manual reset prior to renewed operation of the equipment; and

(3) Not be provided if safety limit controls provide a safe alternative and trip would result in loss of propulsion.