| Rev | Date | Author | Reviewed By | Description of Change | Actions |
|---|---|---|---|---|---|
| 1 | Initial issue | ||||
| 2 |
| CB Model | |
| Firmware / SW Version | |
| Voltage Configuration | |
| I/O Config | |
| Number of Axes | |
| Absolute Motors Count | |
| Remote I/O Modules | |
| Robot Integration | None / EPSON / Universal Robots / Other |
| Vision System | None / Keyence / Cognex / Other |
| Intended Use | |
| Foreseeable Misuse | |
| Operator Skill Level | |
| Operating Mode(s) | |
| Machine Speed / Force | |
| Parts / Materials Handled | |
| Production Rate | |
| Shift Pattern |
| Space Limits | Define the machine's total working envelope — safeguarded perimeter, max axis travel, robot reach, etc. |
| Time Limits | Design life, tool change intervals, periodic safety verification schedule, maintenance frequency. |
| Environmental Limits | Temperature range, IP rating of enclosure, EMI environment, vibration, ambient conditions. |
Pre-populate with typical hazards below. Add machine-specific rows. Assign risk level BEFORE and AFTER controls. Delete rows that do not apply.
| # | Hazard / Source | Affected Person / Situation | S | F | P | Initial Risk | Safety Measures Applied | Residual Risk | Actions |
|---|---|---|---|---|---|---|---|---|---|
| Mechanical Hazards | |||||||||
| M1 | Crushing — linear actuator trapping hand/finger at end of stroke | Operator loading parts, maintenance | Very High / PLe | Light curtain on approach zone; door interlock on guard; E-stop at operator station; CB PLe safety controller cuts motor power. | Low / PLa | ||||
| M2 | Shearing — scissor point between moving carriage and fixed frame | Operator, maintenance | High / PLd | Fixed guards eliminating access; safety fencing with interlocked door; E-stop accessible from operator station. | Low / PLa | ||||
| M3 | Impact — unexpected axis motion striking operator or maintenance person | Operator, maintenance, setup | Very High / PLe | Safety fencing; light curtain; CB safety controller — E-stop deactivates all motor power via safety relay; controlled stop timeout configured; auto-restart prevention enabled. | Low / PLa | ||||
| M4 | Entanglement — rotating tooling, motor shaft, or lead screw | Operator, maintenance | Medium / PLc | Fixed guards over exposed shafts; LOTO procedure required before guard removal; Absolute Motors include integrated brakes that hold position on E-stop. | Low / PLa | ||||
| M5 | Stored energy — motor brake release after power loss / LOTO | Maintenance personnel | High / PLd | Mechanical gravity block or support fixture for vertical axes; LOTO procedure documented; Absolute Motors' integrated brakes engage on power loss. LOTO training required for all maintenance staff. | Low / PLa | ||||
| Electrical Hazards | |||||||||
| E1 | High-voltage shock — 120/240 VAC exposure inside CB enclosure | Maintenance, unauthorized access | High / PLd | CB enclosure is IP54 rated; lockable main disconnect required per NFPA 79; LOTO procedure; qualified personnel only per CB manual §3.7; opening CB voids warranty and requires authorized personnel only. | Low / PLa | ||||
| E2 | Low-voltage shock — 24 VDC bus terminals (10 terminals, 50W) | Maintenance, qualified integrator | Medium / PLb | 24V bus connections by qualified personnel only; overvoltage/short circuit/reverse polarity protection built into CB; LOTO before wiring; terminals labeled per NFPA 79. | Low / PLa | ||||
| E3 | Unexpected restart after power interruption or fault reset | Operator, maintenance in machine workspace | High / PLd | AutoCode program requires explicit operator RESET and START commands after E-stop or fault — no auto-restart. CB safety controller requires safety device reset before motion is re-enabled. Pendant E-stop must be physically released by operator. | Low / PLa | ||||
| Safety System Hazards | |||||||||
| SS1 | Safety device bypass — light curtain or door switch defeated during production | Any personnel in safeguarded space | Very High / PLe | CB Safety Settings screen restricted to Safety-level credentials; Test Mode (bypass) logs to audit trail; test mode disables automatically after configurable timeout; physical bypass of M12 safety device triggers fault; dual-channel wiring on all safety devices. | Low / PLa | ||||
| SS2 | Software/program fault causing unintended axis motion | Operator, nearby personnel | High / PLd | CB dedicated safety controller operates independently of AutoCode PLC — hardware E-stop path not software-dependent; real-time fault detection; safety I/O monitored each scan cycle; software changes require Safety-level credentials and re-commissioning validation. | Low / PLb | ||||
| Process / Application-Specific Hazards — Add Machine-Specific Rows Below | |||||||||
| P1 | Describe hazard here | Affected person | Describe safeguards applied | ||||||
| P2 | Ergonomic — awkward loading posture or heavy part handling | Operator | Medium / PLb | Workstation height adjustment; part assist fixtures or lift assists; operator training; weight limits labeled on any manual loading fixtures. | Low / PLa | ||||
Complete this table for each safety device installed on the machine. Verify wiring, port assignment, AutoCode mapping, and function test before commissioning.
| ID | Safety Device | CB Port / Connector | Wiring Type | AutoCode Safety Mapping | Installed / Model | Tested ✓ | Notes |
|---|---|---|---|---|---|---|---|
| SD1 | Pendant E-Stop Built-in, DB15 port |
DB15 — front panel | N.C. dual-channel (integrated) | Safety Device 1 — Teach Pendant E-Stop | Autoblocks Pendant (integrated) | ||
| SD2 | Remote E-Stop Field-wired |
M12 — rear panel (dedicated E-stop port) | N.C. dual-channel | Safety Device 2 — Remote E-Stop | Vendor / Model | ||
| SD3 | Light Curtain TX | M12 — LC Transmitter port | N.C. OSSD dual-channel | Safety Device 3 — Light Curtain | Keyence GL-R / Other | ||
| SD4 | Light Curtain RX | M12 — LC Receiver port | N.C. OSSD dual-channel | Safety Device 3 — Light Curtain (pair) | Keyence GL-R / Other | ||
| SD5 | Door Interlock 1 Daisy-chain port — up to 8 total |
M12 — Door interlock port (daisy-chain) | N.C. dual-channel, daisy-chain | Safety Device 4 — Door Switch | Keyence GS / Other | ||
| SD6 | Door Interlock 2 (repeat SD5 row for each additional door, up to 8 total) |
M12 — daisy-chained from SD5 | N.C. dual-channel | Safety Device 4 — Door Switch (chain) | Keyence GS / Other / N/A | ||
| SD7 | Light Tower | M12 — light tower port | Output (PNP, 3-color) | System status output — Red/Yellow/Green per AutoCode state | Banner EZ-Light / Other | ||
| SD8 | Additional safety device | Port | N.C. / OSSD | AutoCode mapping | Vendor / Model |
All tests must be performed before handover to the customer. Record tester name and date. Failures must be resolved and re-tested.
| # | Test Description | Expected Result | Pass / Fail | Tested By | Date | Notes |
|---|---|---|---|---|---|---|
| T1 | Actuate Pendant E-Stop during machine run cycle | All motor power cut immediately; motion stops; light tower → Red; CB fault log entry created | ||||
| T2 | Actuate Remote E-Stop button during machine run cycle | Same as T1; motor power cut; program halts; operator must physically release and issue RESET to restart | ||||
| T3 | Interrupt light curtain beam during machine auto cycle | Machine stops immediately; light tower → Red; auto-restart does NOT occur; operator must RESET and START | ||||
| T4 | Open interlocked guard door during machine auto cycle | Machine stops immediately; door switch fault logged; machine will not restart until door closed, safety reset, and operator START | ||||
| T5 | Attempt to start machine with light curtain beam interrupted (blocked) | Machine will not start; CB displays light curtain fault; operator cannot bypass without Safety-level credentials | ||||
| T6 | Power-cycle CB — verify machine does NOT auto-restart | Machine powers up in STOPPED state; operator must issue START command; no axis movement on power-up | ||||
| T7 | Verify light tower states: Running → Green, Faulted/E-stop → Red, Idle/Ready → Yellow | All three states confirmed visual and/or audible as configured in AutoCode | ||||
| T8 | Verify integrated motor brakes hold position on E-stop (vertical axes) | Vertical axes do not back-drive after E-stop; brakes engage within configured stop timeout | ||||
| T9 | Verify safety audit log records E-stop and safety fault events | CB HMI safety log shows timestamps and device IDs for all T1–T8 events triggered above | ||||
| T10 | Machine-specific test — describe | Expected result |
List any residual risks that remain after all engineering controls, safeguards, and procedures have been implemented. These must be documented, communicated to the customer, and addressed through training and PPE.
| Hazard Ref. | Residual Risk Description | Risk Level | Mitigation / Warning Provided |
|---|---|---|---|
| e.g. M3 | Describe residual risk | Low | Operator training, warning label on machine, PPE requirement |