Equipment must be so designed that the opening of equipment parts which might be sources of ignition is possible only under non-active conditions or via appropriate interlocking systems.
Emergency stop controls of safety devices must, as far as possible, be fitted with restart lockouts. A new start command may take effect on normal operation only after the restart lockouts have been intentionally reset.
