Where plant has two or more emergency stops and is designed for two or more people to run or attend, the design must ensure that after any emergency stop is used the plant can restart only when that same device has been manually reset and the start function has then been manually activated. Any designer who includes an emergency stop must also ensure the design makes the device prominent, marked clearly and durably, and within immediate reach of every operator, gives any associated handle, bar or push button a red colour, and protects the device from being adversely affected by any electrical or electronic circuit malfunction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.