Scenarios are used for operator-machine cooperation. Cooperation is possible if
The operator is coordinated with the machine whenever the active scenario corresponds to the active mode.
Many accident reports include descriptions of forgetting to re-enable a backup
system after disabling it (often, violating safety rules) during routine
operation.
If a backup sub
system may be closed for maintenance, but
should never be closed in
routine operation, then these
constraints are
expressed as follows:
Updated on 26 Dec 2016.