I did my homework, purchased certified devices, and specified physical redundancy. I expected an uneventful SIL Verification but the assessor is telling me that I have functions failing Architectural Constraints in the sensor and final element groups. How can that be?
Low demand mode Safety Instrumented Function (SIF)…