SCADA operation & alarm response
Monitor a simulated plant and respond to alarms per procedure.
20 project-authored proposals · taxonomy v1.1 · 0 new benchmark runs. Verifiers and partial-credit rules below are designs, not executed results.
- Typical applications
- Ignition client · WinCC Runtime
- Class GUI-need label
G3· GUI-only
Task proposals · 20
Expand to inspect the complete original wording and proposed checks. Original proposal text remains English in both interfaces.
R07.07.02.03-T01 Hold a tank level in band through a 10-minute inflow disturbance
Original instruction
You are the operator on the Ignition Perspective client 'WaterPlant' connected to a simulated plant. Acknowledge the 3 active alarms, switch pump P-101 to Standby and P-102 to Duty per docs/sop_pump_swap.pdf, then keep Tank1 level between 40% and 60% for the next 10 minutes while a scripted inflow disturbance occurs, using the outlet valve FV-110 in Manual.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clickrt· Real-time controlvis· Visual judgment- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro appinterrupt· Interruptions- Proposed difficulty
- 4 / 5
Proposed verifier
Historian: fraction of 10-min window with level in 40-60% (≥95% full credit); alarm journal shows 3 acks by operator session; pump modes changed in SOP order (audit log). OPC/gateway APIs not reachable from agent; audit log must show the Perspective session as actor.
Proposed partial credit
15% alarms acked; 25% pump swap per SOP; 60% time-in-band (scaled from 0.70 to 0.95 of the window)
R07.07.02.03-T02 Find the root-cause alarm in a flood of thirty alarms
Original instruction
A burst of 30 alarms hits the Ignition client for the compressor area within 40 s. Using the alarm status table (sort/filter by time), trends and the area screen, identify the single root-cause event that triggered the cascade and report its tag path and timestamp in the shift-note form on the 'Notes' page. Do not acknowledge anything.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clicknav· Pan/zoom/scrollvis· Visual judgment- Work product
WP12· Answer/decision- Conditions
licensed· Licensed pro app- Proposed difficulty
- 3 / 5
Proposed verifier
Notes DB row contains the seeded root-cause tag path (exact) and timestamp ±1 s; alarm journal shows no acknowledgements during task. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
70% correct root-cause tag; 15% timestamp; 15% no acknowledgements
R07.07.02.03-T03 Execute a seven-step unit shutdown SOP in the correct order
Original instruction
Follow docs/sop_unit2_shutdown.pdf on the WinCC Runtime (Unified, browser) of the simulated Unit 2: stop feed pump, close FV-201 after flow <5%, ramp heater to 0 over ≥2 min, wait for temp <60 °C, stop agitator, drain to 10%, put unit in 'Shutdown' mode. Each step has a permissive shown on screen.
- Platforms
web· Any OS (web)win· Windows- Applications
- WinCC Runtime
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clickvis· Visual judgmentrt· Real-time control- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro app- Proposed difficulty
- 3 / 5
Proposed verifier
Sim event log: 7 commanded actions in order; each executed only after its permissive true; heater ramp duration ≥2 min; final state Shutdown with level ≤10%. The agent VM has no OPC UA or runtime-API credentials, so the plant is reachable only through WinCC Runtime screens; every command must appear in the runtime audit log with the HMI session as source.
Proposed partial credit
50% order & permissives (≈7 pts per step); 20% heater ramp; 30% final state
R07.07.02.03-T04 Start a booster pump station following permissives and a start sequence
Original instruction
On the Ignition Perspective client 'BoosterStation', start the station per docs/sop_startup.pdf: verify suction pressure >1.5 bar, open suction valves, prime pump, start P-1 at 30% speed, ramp to the discharge pressure setpoint 4.2 bar, then bring P-2 online as lag. Record completion time in the shift log.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clicktype· Text & formsvis· Visual judgment- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro app- Proposed difficulty
- 3 / 5
Proposed verifier
Sim log: steps in order with permissive checks; no dry-run trip; discharge 4.2±0.1 bar steady for 60 s; P-2 lag enabled; shift-log row present. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
45% sequence order; 15% no trips; 30% pressure reached; 10% log entry
R07.07.02.03-T05 Respond to a reactor high-temperature alarm per its response procedure
Original instruction
On the simulated batch reactor (Ignition client), alarm TI-301 HIGH (85 °C) is active and rising. Apply alarm response procedure docs/arp_TI301.pdf: reduce feed FIC-300 by 20%, put cooling TIC-302 in Manual and open to 80%, notify via the on-screen supervisor form, and bring TI-301 below 80 °C within 5 minutes without triggering HIGH-HIGH (95 °C).
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clicktype· Text & formsrt· Real-time control- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro appinterrupt· Interruptions- Proposed difficulty
- 4 / 5
Proposed verifier
Historian: TI-301 <80 °C within 300 s, never ≥95; feed reduced 20±2%; TIC-302 manual 80±2%; supervisor form submitted; OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
20% feed cut; 20% cooling action; 15% notification; 45% temperature outcome
R07.07.02.03-T06 Switch level control to the redundant transmitter after a sensor fault
Original instruction
LT-102A on the separator (WinCC Runtime) freezes (bad-quality flag, flat trend). Detect it, switch LIC-102 to use LT-102B via the transmitter-select faceplate, keep LIC-102 in Auto, and keep separator level within ±5% of setpoint while switching. Log the fault in the maintenance request form.
- Platforms
web· Any OS (web)win· Windows- Applications
- WinCC Runtime
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
vis· Visual judgmentclick· Point & clickrt· Real-time control- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro apphidden· Hidden/stale state- Proposed difficulty
- 4 / 5
Proposed verifier
Sim: transmitter select changed to B within 3 min of fault injection; controller stays Auto (or bumpless return); level within ±5% for ≥95% of window; maintenance form entry names LT-102A. The agent VM has no OPC UA or runtime-API credentials, so the plant is reachable only through WinCC Runtime screens; every command must appear in the runtime audit log with the HMI session as source.
Proposed partial credit
25% fault detected in time; 35% correct switch; 25% level held; 15% maintenance request
R07.07.02.03-T07 Fill in a shift-handover log from alarm summary and trends
Original instruction
At the end of a simulated 8-hour shift on the Ignition client, complete the shift handover form: number of alarms by priority, any equipment still in Manual, the highest reactor temperature and when it occurred, and open maintenance requests. Use the alarm journal, trends and status screens only.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clicknav· Pan/zoom/scrollvis· Visual judgment- Work product
WP02· Records/table- Conditions
licensed· Licensed pro app- Proposed difficulty
- 2 / 5
Proposed verifier
Form DB row: alarm counts exact; manual list equals sim state; max temp ±0.5 °C and time ±2 min; open MR list exact. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
30% alarm counts; 20% manual list; 30% max temp/time; 20% MRs
R07.07.02.03-T08 Shelve a chattering nuisance alarm per site alarm policy
Original instruction
Alarm PSL-415 has chattered 40 times in the last hour on the Ignition client. Per docs/alarm_policy.pdf, shelve it for 60 minutes with the reason 'chattering - MR raised', raise a maintenance request for PSL-415, and leave all other alarms untouched.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clicktype· Text & forms- Work product
WP08· App/system state- Conditions
licensed· Licensed pro app- Proposed difficulty
- 2 / 5
Proposed verifier
Gateway shelving record: PSL-415 shelved 60 min with reason text; MR form row; no other alarm shelved/acked. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
50% correct shelve & duration; 20% reason; 20% MR; 10% no collateral
R07.07.02.03-T09 Track a steam-demand ramp by adjusting boiler firing in real time
Original instruction
The simulated boiler (WinCC Runtime) has its master pressure controller out of service. Over 15 minutes steam demand ramps from 40% to 85% and back. Operate fuel and air manually (keep O2 2-4%) so header pressure stays within 10.0±0.4 bar and drum level within ±50 mm, without tripping the burner.
- Platforms
web· Any OS (web)win· Windows- Applications
- WinCC Runtime
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
rt· Real-time controlclick· Point & clickvis· Visual judgment- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro applong· Long-horizon- Proposed difficulty
- 5 / 5
Proposed verifier
Historian: % of time pressure in band, O2 in 2-4%, drum level in band; burner trip = 0 score gate; operator writes only through runtime. The agent VM has no OPC UA or runtime-API credentials, so the plant is reachable only through WinCC Runtime screens; every command must appear in the runtime audit log with the HMI session as source.
Proposed partial credit
gate: no trip; 50% pressure time-in-band; 25% O2; 25% drum level
R07.07.02.03-T10 Take a pump out of service with an electronic tag-out in SCADA
Original instruction
Maintenance requests pump P-204 for seal replacement. On the Ignition client, verify P-203 can carry the load, switch P-204 to Out of Service, apply the electronic tag-out with permit number PTW-2610-17, and confirm P-204 cannot be started from the faceplate. Stop at the confirmation dialog for isolating the MCC (that step is for the field).
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G3· GUI-only- Interaction primitives
click· Point & clicktype· Text & formsvis· Visual judgment- Work product
WP08· App/system state- Conditions
licensed· Licensed pro apprisk· Irreversible/risky- Proposed difficulty
- 3 / 5
Proposed verifier
Tag state: P-204 OOS and tag-out with permit text; P-203 running with flow maintained ±5%; start command to P-204 rejected; MCC isolation not confirmed (dialog left open/cancelled). OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
20% load check; 35% OOS + tag-out; 25% start blocked; 20% stopped at boundary
R07.07.02.03-T11 Find when a flow deviation started and which valve caused it from trends
Original instruction
Yesterday's export flow FI-500 drifted 12% low. On the Ignition client, use the Power Chart and historian (last 24 h) to determine when the deviation started (±2 min) and which of the 6 upstream valves' position changes caused it. Enter both in the investigation form.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
nav· Pan/zoom/scrollvis· Visual judgmentclick· Point & click- Work product
WP12· Answer/decision- Conditions
licensed· Licensed pro app- Proposed difficulty
- 3 / 5
Proposed verifier
Form row: start time within ±2 min of seeded event; valve tag exact. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
50% correct valve; 50% start time
R07.07.02.03-T12 Load the next batch recipe and start the batch with checks
Original instruction
On the WinCC Runtime batch screen, the next order (input/order_7731.pdf) requires recipe 'Syrup-B' with temperature 72 °C and mix time 18 min overridden per the order. Load the recipe, apply the overrides, verify raw-material tank levels meet the order's quantities, and start batch 7731. If a tank is short, do not start; raise a hold instead.
- Platforms
web· Any OS (web)win· Windows- Applications
- WinCC Runtime
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clicktype· Text & formsvis· Visual judgment- Work product
WP08· App/system state- Conditions
licensed· Licensed pro appclarify· Ask when unclear- Proposed difficulty
- 3 / 5
Proposed verifier
Batch record: recipe Syrup-B with overrides 72/18; started only if levels sufficient (hidden variant has a short tank → hold raised, no start). The agent VM has no OPC UA or runtime-API credentials, so the plant is reachable only through WinCC Runtime screens; every command must appear in the runtime audit log with the HMI session as source.
Proposed partial credit
30% recipe loaded; 25% overrides; 45% correct start/hold decision
R07.07.02.03-T13 Isolate a water-main burst by operating zone valves from SCADA
Original instruction
On the distribution SCADA (Ignition client with GIS map view), a pressure drop and flow surge indicate a main burst in zone DMA-7. Localize the segment from pressure/flow readings, close the minimum set of remote-operated valves to isolate it (per docs/valve_map.pdf), and keep supply pressure ≥2.0 bar to all customers outside the isolated segment.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
vis· Visual judgmentclick· Point & clicknav· Pan/zoom/scroll- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro appinterrupt· Interruptions- Proposed difficulty
- 5 / 5
Proposed verifier
Hydraulic sim (EPANET backend): burst segment isolated (leak flow <1 L/s); closed valve set equals minimal set (or ≤1 extra); all non-isolated nodes ≥2.0 bar; time to isolation ≤10 min. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
30% correct localization; 40% isolation achieved; 20% minimal valves; 10% pressure elsewhere
R07.07.02.03-T14 Respond to a PLC communications-loss alarm and switch to the backup link
Original instruction
A COMM FAIL alarm for remote station RS-12 appears on the Ignition client and its values show stale quality. Per docs/comm_fail_arp.pdf, switch RS-12 to the cellular backup link via the station faceplate, confirm data quality returns to Good, acknowledge the alarm, and note the outage duration in the log.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clickvis· Visual judgment- Work product
WP08· App/system state- Conditions
licensed· Licensed pro apphidden· Hidden/stale state- Proposed difficulty
- 3 / 5
Proposed verifier
Link-select tag set to backup; tag quality Good within 60 s; alarm acked after recovery (not before); log row with duration ±30 s. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
40% backup switch; 20% quality verified; 20% ack order; 20% log
R07.07.02.03-T15 Line up and run a tank-to-tank transfer stopping at 80% without cross-flow
Original instruction
On the tank-farm WinCC Runtime screen, line up a transfer from T-1 to T-3 (product 'Diesel') through manifold M-2: open only the valves on the correct path (docs/manifold_M2.pdf), start transfer pump P-31, and stop the transfer when T-3 reaches 80% (±0.5%). No valve to tanks with other products may open at any time.
- Platforms
web· Any OS (web)win· Windows- Applications
- WinCC Runtime
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clickvis· Visual judgmentrt· Real-time control- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro apprisk· Irreversible/risky- Proposed difficulty
- 4 / 5
Proposed verifier
Sim: valve set opened equals path; zero cross-product valve openings; pump started after line-up; final T-3 level 80±0.5%; pump stopped and valves closed afterwards. The agent VM has no OPC UA or runtime-API credentials, so the plant is reachable only through WinCC Runtime screens; every command must appear in the runtime audit log with the HMI session as source.
Proposed partial credit
35% correct line-up; 20% no cross-contamination; 35% stop at target level; 10% secure afterwards
R07.07.02.03-T16 Respond to a compressor surge warning by opening the recycle valve
Original instruction
The compressor faceplate on the Ignition client shows a surge-margin warning (<10%). Per docs/arp_surge.pdf, put anti-surge valve FV-650 in Manual, open it in steps of 10% until margin >15%, then return to Auto, and log the event.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clickrt· Real-time controlvis· Visual judgment- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro appinterrupt· Interruptions- Proposed difficulty
- 3 / 5
Proposed verifier
Sim: no surge event; valve moves in ≤10% steps; margin >15% reached; controller back in Auto within 5 min; log row present. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
gate: no surge; 40% stepwise opening; 30% margin target; 20% back to Auto; 10% log
R07.07.02.03-T17 Report alarm-rate KPIs and the top five bad actors for the week
Original instruction
From the Ignition alarm journal (last 7 days) produce out/alarm_kpi.xlsx: average alarms per operator per hour, peak 10-min rate, % time in flood (>10 alarms/10 min), top 5 most frequent alarms, and compare with EEMUA 191 benchmarks in docs/eemua_targets.pdf. Use the client's journal export or the reporting module.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client · Excel
- Interfaces
brow· Browserdesk· Desktop GUI- GUI need · task setting
HY· Hybrid- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clickmulti· Cross-appcode· Code & commands- Work product
WP02· Records/table- Conditions
licensed· Licensed pro appmultiapp· Multi-app- Proposed difficulty
- 2 / 5
Proposed verifier
KPIs within 1% of grader computation from journal; top-5 list exact; benchmark comparison flags correct.
Proposed partial credit
40% rate KPIs; 20% flood %; 25% top-5; 15% benchmark flags
R07.07.02.03-T18 Pause a transfer when a supervisor hold message arrives mid-operation
Original instruction
You are running the T-2 → ship loading transfer on the WinCC Runtime. At an unannounced time a supervisor message pops up on the HMI messaging panel ordering an immediate hold. Execute the hold procedure (stop P-41, close loading arm valve last, keep line pressure), acknowledge the message, and resume only when a 'resume' message arrives.
- Platforms
web· Any OS (web)win· Windows- Applications
- WinCC Runtime
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G3· GUI-only- Interaction primitives
vis· Visual judgmentclick· Point & clickrt· Real-time control- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro appinterrupt· Interruptions- Proposed difficulty
- 4 / 5
Proposed verifier
Sim: hold executed within 60 s of message with correct order; line pressure maintained; no resume before resume message; transfer completes to target quantity ±0.5%. The agent VM has no OPC UA or runtime-API credentials, so the plant is reachable only through WinCC Runtime screens; every command must appear in the runtime audit log with the HMI session as source.
Proposed partial credit
40% timely correct hold; 20% acknowledgment; 20% no premature resume; 20% transfer completes
R07.07.02.03-T19 Switch aeration control to storm mode during a high-flow event
Original instruction
At the wastewater plant (Ignition client), influent flow exceeds 2× ADF. Per docs/storm_mode.pdf, switch blowers to storm mode, set DO setpoints to 1.5 mg/L in basins 1-3, open step-feed gate to 50%, and confirm the clarifier sludge blanket stays under 1.5 m during the 20-minute simulated event.
- Platforms
web· Any OS (web)win· Windows- Applications
- Ignition client
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G2· GUI-essential- Interaction primitives
click· Point & clicktype· Text & formsvis· Visual judgment- Work product
WP11· Game/sim state- Conditions
licensed· Licensed pro app- Proposed difficulty
- 3 / 5
Proposed verifier
Tag log: mode/setpoints/gate per procedure within 5 min of trigger; sim blanket ≤1.5 m throughout; DO within ±0.3 of setpoint ≥80% of window. OPC UA and gateway APIs are not reachable from the agent VM; every write and form entry must appear in the gateway audit log with the operator's client session as actor.
Proposed partial credit
40% procedure actions; 30% blanket constraint; 30% DO tracking
R07.07.02.03-T20 Execute a switching order to open a feeder breaker in a substation simulator
Original instruction
Using the substation SCADA simulator (WinCC Runtime), execute switching order input/so_2610_03.pdf for feeder F-7 maintenance: transfer load via tie breaker, open F-7 breaker, open line isolator, apply SCADA earth tag — each step with select-before-operate and check-back. Stop before the 'Apply field earth' step, which is a field action.
- Platforms
web· Any OS (web)win· Windows- Applications
- WinCC Runtime
- Interfaces
brow· Browserhmi· Device/HMI- GUI need · task setting
G3· GUI-only- GUI need · ordinary access
G3· GUI-only- Interaction primitives
click· Point & clickvis· Visual judgmenttype· Text & forms- Work product
WP08· App/system state- Conditions
licensed· Licensed pro apprisk· Irreversible/risky- Proposed difficulty
- 5 / 5
Proposed verifier
Event log: steps in order with SBO select/confirm each; no customer load lost (tie closed before F-7 open); final states equal order; field earth step not executed. The agent VM has no OPC UA or runtime-API credentials, so the plant is reachable only through WinCC Runtime screens; every command must appear in the runtime audit log with the HMI session as source.
Proposed partial credit
gate: no load lost; 50% step order with SBO; 30% final states; 20% stopped at boundary
Mapped research references
No benchmark reference is assigned to this class in the current mapping.