A safety system should be provided to ensure that serious
malfunction in machinery or boiler operations, which presents an immediate
danger, should initiate the automatic shutdown of that part of the
plant and that an alarm should be given at the locations determined
in accordance with paragraph 8.7.1. Shutdown of the propulsion system
should not be automatically activated except in cases which could
lead to serious damage, complete breakdown, or explosion. Where arrangements
for overriding the shutdown of the main propelling machinery are fitted,
these should be such as to preclude inadvertent operation. Visual
means should be provided to indicate when the override has been activated.