{ "ftaDoc": { "version": "5.0", "standard": "IEC61025", "savedAt": "2026-03-10T03:38:07.485325Z" }, "projects": [ { "id": "p818fb7e5", "name": "Rail \u2014 Train Control", "expanded": true, "settings": { "description": "Fault tree analysis for SPAD \u2014 train passing a stop aspect signal without authority. Developed against EN50126, EN50128, EN50129 with CENELEC risk analysis framework. Addresses signalling failure, ATP failure and driver error pathways.", "organization": "FTA Studio Template Library", "analyst": "", "revision": "A", "standard": "IEC61025", "silTarget": "SIL4", "missionTime": 8760, "anaMethod": "exact", "sciNotation": true }, "ftas": [ { "id": "f2f1762c2", "name": "Signal Passed at Danger (SPAD)", "nodes": [ { "id": "n1458b823", "uid": "TOP-001", "ntype": "top", "gateType": "OR", "name": "Train Passes Signal at Danger (SPAD)", "desc": "Train proceeds past a stop aspect signal without authority. Ref: EN50126, EN50128, EN50129. Risk category: Catastrophic/Frequent \u2192 requires risk reduction to Tolerable.", "outputId": null, "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 540.0, "y": 80 }, { "id": "n7eba46b5", "uid": "G-001", "ntype": "gate", "gateType": "OR", "name": "Signalling System Failure", "desc": "Signal infrastructure presents wrong aspect or no aspect.", "outputId": "n1458b823", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 20.0, "y": 250 }, { "id": "n16801644", "uid": "BE-001", "ntype": "basic", "gateType": null, "name": "Signal lamp / LED unit failure", "desc": "Signal head lamp or LED matrix failure resulting in no aspect output.", "outputId": "n7eba46b5", "refId": null, "prob": null, "lambda": 5e-05, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Dark signal \u2014 no aspect displayed", "detection": "Lamp proving circuit, central monitoring", "hazards": [], "evidence": "", "mitigation": "Dark signal treated as most restrictive aspect by operating rules", "severity": null, "occurrence": null, "detectability": null, "x": -140.0, "y": 420 }, { "id": "n9f5fc963", "uid": "BE-002", "ntype": "basic", "gateType": null, "name": "Signal controller logic fault", "desc": "Relay or electronic interlocking logic failure outputting incorrect aspect.", "outputId": "n7eba46b5", "refId": null, "prob": null, "lambda": 2e-06, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Wrong aspect output", "detection": "Vital relay cross-checking; double-check output monitoring", "hazards": [], "evidence": "", "mitigation": "Safety-certified relay logic with vital proving", "severity": null, "occurrence": null, "detectability": null, "x": 20.0, "y": 420 }, { "id": "nd178f704", "uid": "BE-003", "ntype": "basic", "gateType": null, "name": "Signal cable / wiring fault", "desc": "Wiring failure between interlocking and signal head \u2014 short, open or earth fault.", "outputId": "n7eba46b5", "refId": null, "prob": null, "lambda": 1e-06, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Loss of control signal to lamp", "detection": "Lamp proving circuit detects open/short", "hazards": [], "evidence": "", "mitigation": "Cable route protection; periodic inspection", "severity": null, "occurrence": null, "detectability": null, "x": 180.0, "y": 420 }, { "id": "nfbebe4c5", "uid": "G-002", "ntype": "gate", "gateType": "AND", "name": "Automatic Train Protection Failure", "desc": "ATP must fail AND emergency brake must fail to allow a SPAD.", "outputId": "n1458b823", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 580.0, "y": 250 }, { "id": "n6c31ea51", "uid": "G-003", "ntype": "gate", "gateType": "OR", "name": "ATP System Failure", "desc": "On-board ATP fails to generate or transmit stop command.", "outputId": "nfbebe4c5", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 420.0, "y": 420 }, { "id": "n3ea9c274", "uid": "BE-004", "ntype": "basic", "gateType": null, "name": "Balise / transponder reader fault", "desc": "On-board antenna/reader fails to correctly receive Eurobalise telegram.", "outputId": "n6c31ea51", "refId": null, "prob": null, "lambda": 5e-07, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "No data reception from balise", "detection": "Data integrity check on received telegram", "hazards": [], "evidence": "", "mitigation": "Two independent balise readers per train (redundancy)", "severity": null, "occurrence": null, "detectability": null, "x": 340.0, "y": 590 }, { "id": "ne6051f62", "uid": "BE-005", "ntype": "basic", "gateType": null, "name": "On-board ATP computer fault", "desc": "On-board vital computer \u2014 hardware fault in processor or I/O.", "outputId": "n6c31ea51", "refId": null, "prob": null, "lambda": 3e-07, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "No brake command output", "detection": "Dual processor comparison; watchdog", "hazards": [], "evidence": "", "mitigation": "Fail-safe: loss of ATP output triggers service brake", "severity": null, "occurrence": null, "detectability": null, "x": 500.0, "y": 590 }, { "id": "n3f518600", "uid": "G-004", "ntype": "gate", "gateType": "OR", "name": "Emergency Brake Failure", "desc": "Emergency brake fails to stop train within required distance.", "outputId": "nfbebe4c5", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 740.0, "y": 420 }, { "id": "n744bd0a8", "uid": "BE-006", "ntype": "basic", "gateType": null, "name": "Brake pipe pressure application failure", "desc": "Emergency brake application via brake pipe pressure dump fails.", "outputId": "n3f518600", "refId": null, "prob": null, "lambda": 2e-07, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Brakes do not apply on dump", "detection": "Brake test at depot; in-service diagnostics", "hazards": [], "evidence": "", "mitigation": "Fail-safe pneumatic design: brakes apply on pressure loss", "severity": null, "occurrence": null, "detectability": null, "x": 660.0, "y": 590 }, { "id": "n3caa006f", "uid": "BE-007", "ntype": "basic", "gateType": null, "name": "Compressed air supply failure", "desc": "Compressor or main reservoir failure resulting in inadequate air supply.", "outputId": "n3f518600", "refId": null, "prob": null, "lambda": 1e-07, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Insufficient air pressure for braking", "detection": "Main reservoir pressure gauge / warning", "hazards": [], "evidence": "", "mitigation": "Low pressure inhibits train departure", "severity": null, "occurrence": null, "detectability": null, "x": 820.0, "y": 590 }, { "id": "n46229a4d", "uid": "G-005", "ntype": "gate", "gateType": "AND", "name": "Driver Error Leading to SPAD", "desc": "Driver fails to observe signal AND fails to apply brakes in time.", "outputId": "n1458b823", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 1060.0, "y": 250 }, { "id": "ne5dd7d08", "uid": "BE-008", "ntype": "basic", "gateType": null, "name": "Driver fails to observe stop aspect", "desc": "Human error \u2014 driver distraction, fatigue, or signal sighting issue.", "outputId": "n46229a4d", "refId": null, "prob": 0.001, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Signal not seen or misread", "detection": "CCTV, driver vigilance device", "hazards": [], "evidence": "", "mitigation": "Driver reminder system (DRS); SPAD indicator boards", "severity": null, "occurrence": null, "detectability": null, "x": 980.0, "y": 420 }, { "id": "nc902cafa", "uid": "BE-009", "ntype": "basic", "gateType": null, "name": "Driver fails to apply brakes in time", "desc": "Given signal observed, driver does not apply adequate braking in time.", "outputId": "n46229a4d", "refId": null, "prob": 0.0001, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Reaction delay exceeds available stopping distance", "detection": "ATP back-up provides automatic intervention", "hazards": [], "evidence": "", "mitigation": "Train speed profile management; reduced speed at SPAD risk signals", "severity": null, "occurrence": null, "detectability": null, "x": 1140.0, "y": 420 } ], "cam": { "x": 360, "y": 40, "zoom": 0.72 }, "analysis": null, "ccfGroups": [], "disjointGroups": [], "diagramPages": [], "seqId": 1 } ], "eventLibrary": [] } ], "_id": 200, "_uid": {}, "ccfGroups": [] }