A safety system should be provided so that serious malfunctions
in machinery or boiler operations which present an immediate danger
should initiate the automatic shutdown of that part of the plant and
an alarm should be given. Shutdown of the propulsion system should
not be automatically activated except in cases which could lead to
complete breakdown, serious damage or explosion. Where arrangements
for overriding the shutdown of the major propelling machinery are
fitted, these should be such as to preclude inadvertent operation.
If the arrangements are used, the fact should be visually indicated.