The control panel would include a mode selector, enabling the operators to state their primary operational modes .
The supertanker steering lever was set unintentionally to the Command mode.
Unintentional selection of the wrong option may be prevented by warning the operators, based on the operational rules.
In the recommended architecture, they can be implemented using the gates.
Guidelines for error prevention
Special run-time tests should detect situations in which the operators forgot to resume the Navigation mode after completion of the Maintenance procedures, and indicate the operators about the need to change the mode selector.
Guidelines for mistake detection
Updated on 18 May 2016.