A safety system shall be provided to ensure that serious
malfunction in machinery or boiler operations, which presents an immediate
danger, shall initiate the automatic shutdown of that part of the
plant and that an alarm shall be given. Shutdown of the propulsion
system shall not be automatically activated except in cases which
could lead to serious damage, complete breakdown, or explosion. Where
arrangements for overriding the shutdown of the main propelling machinery
are fitted, these shall be such as to preclude inadvertent operation.
Visual means shall be provided to indicate when the override has been
activated.