A safety system should be provided to ensure that serious
malfunction in machinery or boiler operations, which presents an immediate
danger, should initiate the automatic shutdown of that part of the
plant and that an alarm should be given at the locations required
by 8.7.1. Shutdown of the propulsion
system should not be automatically activated except in cases which
could lead to serious damage, complete breakdown, or explosion. Where
arrangements for overriding the shutdown of the main propelling machinery
are fitted, these should be such as to preclude inadvertent operation.
Visual means should be provided to indicate when the override has
been activated.