<?xml version="1.0" encoding="UTF-8"?>
<BarrierProject Name="HydrogenFuellingOptions.xml" ManCalculationMethod="NoEffect">
	<BarrierProjectDescription>Safety barrier analysis of Liquid Hydrogen Station based on the FMEA analyses and other information from: "Failure Modes and effects analysis for hydrogen fuelling options, California Energy Commission (CEC) Consultant report Nov. 2004, CEC-600-2005-001/Technical Consultant report TR-03-177 TIAX Case D0130.
The analysis is performed by Nijs Jan Duijm, Risø National Labortory, Denmark, using the barrier type classification as developed under the ARAMIS project</BarrierProjectDescription>
	<AllManagementIssues>
		<ManagementIssue ID="N1st_ARAMIS_Item_Manpower_Planning_And_Availability" Name="1st ARAMIS Item, Manpower Planning and Availability" Performance="1">
			<Description>Manpower Planning covers allocating the necessary time (or numbers) of competent people to the tasks that have to be carried out, at the moment (or within the time frame) when they should be carried out. It also covers the process of planning and allocation of tasks over time, including coverage for:
Holidays, Sick leave, Peak loads, Ensuring breaks and rest pauses, and Limiting overtime and fatigue.

Personnel Availability ensures that personnell is available for all relevant tasks in relation to the functioning and management of barriers (operations, maintenance, emergency), including: 
Operating personnel, Maintenance personnel, Inspection &amp; testing incl. general plantwalk-rounds, Supervision, and Back-up &amp; emergency crews,.</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
		<ManagementIssue ID="N2nd_ARAMIS_Item_Competence_And_Suitability" Name="2nd ARAMIS Item, Competence and Suitability" Performance="1">
			<Description>Competence covers the knowledge, skills, and abilities of first-line and/or back-up personnel for the safe execution of safety-critical tasks related to barrier functioning or management. Competence covers the cognitive aspects of behaviour, which can be learned through training, experience and practice. They include:

Job content/safety, e.g.: Plant &amp; process knowledge:
- Operating procedures, critical tasks, action alternatives, skills
- Boundary of safety operations
- Hazards, safety consequences of actions, safety priorities
- Safety responsibility/task boundaries

Inspection &amp; testing procedures:
- Fault diagnosis &amp; response
- Emergency procedures
- Maintenance diagnosis
- Safe isolation and recommissioning
- Equipment dismantling, repair, testing &amp; reassembly

Other skills:
- Communications
- Team work
- Supervision/management
- Issuing instructions

Suitability covers physical attributes that are usually more permanent characteristics of an individual, though some can be modified or compensated for over the longer term. They include: Size, strength, dexterity, Physical condition, health, Visual acuity, colour blindness, and Hearing.</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
		<ManagementIssue ID="N3rd_ARAMIS_Item_Commitment_Compliance_And_Conflict_Resolution" Name="3rd ARAMIS Item, Commitment, Compliance and Conflict resolution" Performance="1">
			<Description>Commitment and conflict resolution are concerned with:
- Information, training and discussion on what is important and has priority
- Rapid confrontation and correction of deviations from the desired working method, state or condition
- High (publicity) profile and reward for achievements on safety
- Appraisal schemes with explicit attention to safety performance
- Recurrent active attention to safety in meetings, discussions and actions
- Procedure violations
- Keeping to the prescribed operating envelope
- Safety and production/time pressures e.g. production pressures reducing scheduled maintenance/inspection, operations which come under time pressure for implementation, reluctance to declare emergencies or shutdown plant because of loss of production
- Safety critical maintenance priority over production
- Balancing production targets, resource availability/costs and inspection and maintenance requirements via e.g. time schedules and budget setting
- Safety budget (increased/decreased)</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
		<ManagementIssue ID="N4th_ARAMIS_Item_Communication_And_Coordination_" Name="4th ARAMIS Item, Communication and Coordination " Performance="1">
			<Description>The communication and coordination concerns itself with:
- Communication channels (phone, radio, minutes, reports, etc.)
- Coordination methods (e.g. meetings, supervision)
- Communication between: 
Different persons engaged on one task as team or working in sequence, and 
Shifts at changeover
- Communication about:
Work content
Barrier/plant status
Job instructions
Priorities
Who does what, where and when
Need for action or (back-up) personnel and equipment
- Communication systems for sharing operation/maintenance hazard concerns and experience</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
		<ManagementIssue ID="N5th_ARAMIS_Item_Procedures_Rules_And_Goals" Name="5th ARAMIS Item, Procedures, rules, and goals" Performance="1">
			<Description>The procedures, rules and goals delivery system is occupied with identifying tasks that need (detailed) written rules and procedures, and subsequently providing and promulgating these. This system also delivers output goals for tasks that do not need a detailed procedure.
Procedures and rules are specific performance criteria, which specify in detail, usually in written form, a formalised 'normative' behaviour or method for carrying out an activity (checklist, task list, action steps, plan, instruction manual, fault-finding heuristic, form to be completed, etc.).
Output goals are performance measures for an activity, which specify what the result of the activity should be, but not how the results should be achieved. They are objectives, goals or outputs.
The procedures, rules and goals delivery system concerns itself with: Coverage (i.e. all safety situations), Accuracy, Readability/usability, Size/complexity/overload or rule sets, Clarity/ambiguity, Up-to-date, Indicating priorities.</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
		<ManagementIssue ID="N6th_ARAMIS_Item_Hard_Software_Purchase_Build_Interface_Install" Name="6th ARAMIS Item, Hard/software purchase, build, interface, install" Performance="1">
			<Description>Management of barrier (and spares) purchase, construction, installation and adjustment deals with the management process for ensuring that the hardware/ software barriers and barrier elements in agreement with specifications are acquired, either by purchase from outside, or by construction on site, are put in place and adjusted and that the spare parts or replacements purchased and stored for the maintenance phase of their life cycle are the correct ones and are in good condition when used. The process should pay explicit attention to the human factors aspects of the interface between barrier elements and their users in the case of mixed barriers.</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
		<ManagementIssue ID="N7th_ARAMIS_Item_Hard_Software_Inspection_Maintenance_And_Replacement" Name="7th ARAMIS Item, Hard/software Inspection, Maintenance, and Replacement" Performance="1">
			<Description>Management of inspection, maintenance and replacement deals with the management processes for ensuring that the specified hardware/software barriers and barrier elements are kept in an effective state. It covers all hardware and software which has a function within any barrier designed to fulfill a safety function in the plant. It forms the part of the life cycle of these barrier elements from the point where they have been installed and adjusted and are ready for use. It covers all the activities which monitor the working of the barriers, detect the (chance of) deviation from the designed working and identify the need for work to be done to restore the functioning or replace the barrier (elements) with new ones.
This process also manages small modifications which are carried out at the same time as, and under the same management as the maintenance activities. Where the modifications are of a more major type, which are (or should be) dealt with by a change management process, these are covered by the protocol on learning and change.</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
		<ManagementIssue ID="N0th_ARAMIS_Item_Safety_Culture" Name="0th ARAMIS Item, Safety Culture" Performance="0.75">
			<Description>Safety culture can be assessed by questionnaire surveys of the personnel. Safety culture addresses the following issues:
Learning and willingness to report: the employees' willingness / reluctance to report accidents and incidents, their perception of feedback from reporting and dissemination of lessons learned.
Safety prioritisation, rules and compliance covering use of and familiarity with rules and instructions; the prioritisation of safety versus productivity and ease of work; the extent to which and the circumstances under which safety procedures may be violated
 Leadership involvement and commitment concerns both the avowed involvement and commitment of management and supervisors and team leaders as well as employee perception of their commitment and involvement 
Risk and human performance limitation perception concerns management and employee awareness of hazards, risks and human error potentials (fatigue, automation etc.) relevant to their work.
Felt responsibility concerns the employee's perception of who is responsible for safety at work including felt ownership of responsibility
Trust and fairness involves management's trust in employees and, crucially, employees' trust in top management and their immediate leaders and employee perception of fairness in the workplace
Work team atmosphere and support comprises employees' perception of teamwork and the 'spirit' in their respective teams; the extent to which the team gives its members support and help; and the extent to which respondents are willing to speak up and warn each other of dangers.
Motivation, influence and involvement comprises (i) work as meaningful; (ii) own influence on work planning and execution; (iii) motivation and involvement; and (iv) feeling informed and finding work predictable</Description>
			<TimeStamp TS="2005-12-29"/><Color>clBlack</Color></ManagementIssue>
	</AllManagementIssues>
	<AllBarrierTypes>
		<BarrierType ID="N1_Permanent_Passive_Control_" Name="1 Permanent Passive (Control)">
			<Description>Detection: none; Diagnosis: none; Activation: hardware.
Passive controls are those elements in a process system that are necessary for the system to operate, and essential to avoid the hazardous situations. Typical examples are tanks (tank walls) pipes (pipewalls), anticorrosion paint, floating tank lids, viewing ports in vessels</Description>
			<ManagementFactors>
				<ManagementFactor ID="N1_Permanent_Passive_Control_6th_ARAMIS_Item_Hard_Software_Purchase_Build_Interface_Install" Name="1 Permanent Passive (Control)_6th ARAMIS Item, Hard/software purchase, build, interface, install" Value="0.8" Performance="0" ManagementIssue="6th ARAMIS Item, Hard/software purchase, build, interface, install">
					<Description></Description><TimeStamp TS="2005-12-29"/></ManagementFactor>
				<ManagementFactor ID="N1_Permanent_Passive_Control_7th_ARAMIS_Item_Hard_Software_Inspection_Maintenance_And_Replacement" Name="1 Permanent Passive (Control)_7th ARAMIS Item, Hard/software Inspection, Maintenance, and Replacement" Value="0.2" Performance="0" ManagementIssue="7th ARAMIS Item, Hard/software Inspection, Maintenance, and Replacement">
					<Description></Description><TimeStamp TS="2005-12-29"/></ManagementFactor>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N2_Permanent_Passive_Barrier" Name="2 Permanent Passive Barrier">
			<Description>Detection: none; Diagnosis: none; Activation: hardware.
Passive Barriers are elements in a system that are constantly present (i.e. they do not need to be activated), and that are installed with the only reason to avoid or limit hazardous situations (i.e. the installation can in principle operate without those barriers). Typical examples are tank bunds, dyke, blastwalls, fire protection, drainage sump, fence, lightning conductors</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N3_Temporary_Passive_Barrier_-_Put_In_Place_And_Removed_By_Person_" Name="3 Temporary Passive Barrier - Put in place (and removed) by person"><Description>Detection: none; Diagnosis: none (must be put in place); Activation: hardware.
Barriers temporary put in place such as barriers round repair work, blind flanges over open pipes, spades in pipes, inhibitors in substances</Description><ManagementFactors/><TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType><BarrierType ID="N4_Permanent_Active_Barrier" Name="4 Permanent Active Barrier">
			<Description>Detection: none; Diagnosis: none (need operator activation in some conditions); Activation: hardware.
These barriers are constantly present, but need an energy source to work, such as ventilation, active corrosion protection, inerting, heating or cooling.</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N5_Activated_Barrier_-_Hardware_On_Demand" Name="5 Activated Barrier - Hardware on demand">
			<Description>Detection: hardware; Diagnosis: hardware; Activation: hardware.
Barriers and controls that by hardware take action: Pressure relief valves, interlock systems with "hard" logic, sprinkler installation (barriers)
Pressure/temperature/level control (controls or barriers)</Description>
			<ManagementFactors>
				<ManagementFactor ID="N5_Activated_Barrier_-_Hardware_On_Demand_ARAMIS_Item_6_Hard_Software_Purchase_Build_Interface_Install" Name="5 Activated Barrier - Hardware on demand_ARAMIS Item 6 Hard/software purchase, build, interface, install" Value="0.5" Performance="0" ManagementIssue="6th ARAMIS Item, Hard/software purchase, build, interface, install">
					<Description></Description><TimeStamp TS="2005-12-29"/></ManagementFactor>
				<ManagementFactor ID="N5_Activated_Barrier_-_Hardware_On_Demand_ARAMIS_Item_7_Hard_Software_Inspection_Maintenance_And_Replacement" Name="5 Activated Barrier - Hardware on demand_ARAMIS Item 7 Hard/software Inspection, Maintenance, and Replacement" Value="0.5" Performance="0" ManagementIssue="7th ARAMIS Item, Hard/software Inspection, Maintenance, and Replacement">
					<Description></Description><TimeStamp TS="2005-12-29"/></ManagementFactor>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N6_Activated_Barrier_-_Automated" Name="6 Activated Barrier - Automated">
			<Description>Detection: hardware; Diagnosis: software; Activation: hardware.
Programmable automated device, control system or shutdown system</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N7_Activated_Barrier_-_Manual_Human_Action_Triggered_By_Active_Hardware_Detection_" Name="7 Activated Barrier - Manual (Human action triggered by active hardware detection)">
			<Description>Detection: hardware; Diagnosis: behaviour (Rule, Skill or Knowledge based); Activation: Behaviour with possible hardware assist.
Actions of operators in response to instrument reading, signals or alarms, e.g.
Manual shutdown or adjustment, evacuation, donning breathing apparatus or calling fire brigade on alarm, action triggered by remote camera, drain valve, close/open (correct) valve</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N8_Activated_Barrier_-_Warned_Human_Action_Based_On_Passive_Warning_" Name="8 Activated Barrier - Warned (Human Action based on passive warning)">
			<Description>Detection: hardware; Diagnosis: behaviour (Skill or Rule); Activation: behaviour.
Donning personal protection equipment in danger area, refraining from smoking, keeping within white lines, opening labelled pipe, keeping out of prohibited areas</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N9_Activated_Barrier_-_Assisted_Software_Presents_Diagnosis_To_Operator_" Name="9 Activated Barrier - Assisted (Software presents diagnosis to operator)">
			<Description>Detection: hardware; Diagnosis: Software/Behaviour (Rule or Knowledge based); Activation: Behaviour with possible hardware assist.
Using an expert system or other software that determines the plant state based on some combination of inputs</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N10_Activated_Barrier_-_Procedural_Observation_Of_Local_Conditions_Not_Using_Instruments_" Name="10 Activated Barrier - Procedural (Observation of local conditions not using instruments)">
			<Description>Detection: Human; Diagnosis: Behaviour (Skill or Rule based); Activation: Behaviour with possible hardware assist.
(Correctly) follow start up/shutdown/batch process procedure, adjust setting of hardware, warn others to act or evacuate, (un)couple tanker from storage, empty &amp; purge line before opening, drive tanker, lay down water curtain</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
		<BarrierType ID="N11_Activated_Barrier_-_Emergency_Ad-hoc_Observation_Of_Deviation_And_Improvised_Response_" Name="11 Activated Barrier - Emergency (Ad-hoc observation of deviation and improvised response)">
			<Description>Detection: Human; Diagnosis: Behaviour (Knowledge based); Activation: Behaviour with possible hardware assist.
Response to unexpected emergency, e.g. improvised jury-rig during maintenance, fight fire</Description>
			<ManagementFactors>
			</ManagementFactors>
			<TypeSettings><TypeOptions.Height Value="0"/><TypeOptions.Width Value="0"/><TypeOptions.VerSeparation Value="0"/><TypeOptions.GateSeparation Value="0"/><TypeOptions.HorSeparation Value="0"/><TypeOptions.Radius Value="0"/><TypeOptions.Offset.X Value="0"/><TypeOptions.Offset.Y Value="0"/><TypeOptions.Brush.Color Value="12632256"/><TypeOptions.Brush.Style Value="bsSolid"/><TypeOptions.Pen.Color Value="0"/><TypeOptions.Pen.Width Value="1"/><TypeOptions.Pen.Style Value="psSolid"/><TypeOptions.Pen.Mode Value="pmCopy"/><TypeOptions.Font.Color Value="-16777208"/><TypeOptions.Font.Size Value="8"/><TypeOptions.Font.Name Value="Tahoma"/><TypeOptions.Font.Style Value="NormalFont "/></TypeSettings><TimeStamp TS="2005-12-29"/></BarrierType>
	</AllBarrierTypes>
	<AllGenericBarriers>
		<GenericBarrier ID="Tank_Wall" Name="tank wall" BarrierType="1 Permanent Passive (Control)" ManagementFactorType="Default" PFD="0">
			<Description>1 Permanent Passive (Control)</Description>
			<TimeStamp TS="2005-12-29"/></GenericBarrier>
		<GenericBarrier ID="Pressure_RV" Name="Pressure RV" BarrierType="5 Activated Barrier - Hardware on demand" ManagementFactorType="Default" PFD="0.001">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></GenericBarrier>
		<GenericBarrier ID="Operator_Control_Operation" Name="Operator control operation" BarrierType="7 Activated Barrier - Manual (Human action triggered by active hardware detection)" ManagementFactorType="Default" PFD="0.01">
			<Description>Type: Activated Barrier - Manual (Human action triggered by active hardware detection)
Normal control operation in response to instrument reading - highly routine operation (rule based)</Description>
			<TimeStamp TS="2005-12-29"/></GenericBarrier>
	</AllGenericBarriers>
	<AllConditions>
		<Condition ID="Tank_Filling_Operation" Name="Tank filling operation" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Initial">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Overpressure_Storage_Tank" Name="Overpressure storage tank" ExpectedFreq="0" Visible="True" EventOrCondition="Condition" Severity="" TypeOf="Intermediate">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Tank_Burst_-_Instantaneous_Release_Of_Full_Tank_Contents" Name="tank burst - instantaneous release of full tank contents" ExpectedFreq="0" Visible="True" EventOrCondition="Condition" Severity="" TypeOf="Consequence">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Release_Of_Full_Tank_Contents" Name="Release of full tank contents" ExpectedFreq="0" Visible="True" EventOrCondition="Condition" Severity="" TypeOf="Consequence">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Unnoticed_Explosive_Atmosphere" Name="Unnoticed explosive atmosphere" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Consequence">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Pressure_Rise_In_Tank" Name="Pressure rise in tank" ExpectedFreq="0" Visible="True" EventOrCondition="Condition" Severity="" TypeOf="Intermediate">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Truck_Has_Defects_On_Arrival" Name="Truck has defects on arrival" ExpectedFreq="0.000114155251141553" Visible="True" EventOrCondition="Event" Severity="" TypeOf="Initial">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Release_From_Unloading_Facility" Name="Release from unloading facility" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Intermediate">
			<Description>Release form either truck or unloading hose or connection facility at station</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Defects_In_Unloading_Hoses" Name="Defects in unloading hoses" ExpectedFreq="0" Visible="True" EventOrCondition="Event" Severity="" TypeOf="Initial">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Incorrect_Coupling_To_Fixed_Facility" Name="Incorrect coupling to fixed facility" ExpectedFreq="0" Visible="True" EventOrCondition="Event" Severity="" TypeOf="Initial">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Continued_Release_From_Unloading_Facility" Name="Continued release from unloading facility" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Intermediate">
			<Description></Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Cryogenic_Burn_Personnel" Name="Cryogenic burn/personnel" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Consequence">
			<Description>Cryogenic burn of operating personnel</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Cryogenic_Burn_Third_Parties" Name="Cryogenic burn/third parties" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Consequence">
			<Description>Cryogenic burn of third parties and personnel not involved in the unloading operation</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Liquid_Hydrogen_Spill" Name="Liquid hydrogen spill" ExpectedFreq="0" Visible="True" EventOrCondition="Event" Severity="" TypeOf="Intermediate">
			<Description>uncontrolled spill of liquid hydrogen from damaged truck or unloading facility</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Liquid_Hydrogen_In_Unloading_Hose" Name="Liquid hydrogen in unloading hose" ExpectedFreq="0.000114155251141553" Visible="True" EventOrCondition="Event" Severity="" TypeOf="Initial">
			<Description>There is always liquid hydrogen in the unloading hose after unloading and before disconnection</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Vehicle_Movement_Into_Truck_Or_Unloading_Facility" Name="Vehicle movement into truck or unloading facility" ExpectedFreq="0" Visible="True" EventOrCondition="Event" Severity="" TypeOf="Initial">
			<Description>Two possibilities exists: third party vehicles moving into the direction of the truck at the unloadng facility, and the truck itself threatening the fixed installations</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Liquid_Hydrogen_Release" Name="Liquid hydrogen release" ExpectedFreq="0" Visible="True" EventOrCondition="Condition" Severity="" TypeOf="Consequence">
			<Description>In case of overfilling or pressure rise, the PRV will dump liquid hydrogen. In that case the safe relief location may need further protection against fire and explosion</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Loss_Of_Vacuum_Insulation" Name="Loss of vacuum insulation" ExpectedFreq="0" Visible="True" EventOrCondition="Condition" Severity="" TypeOf="Intermediate">
			<Description>In case of failure of the outer tank (jacket) the vacuume insulation will disappaer and heat transfer to the inner tank will cause excessive boil off an pressure rise in the inner tank</Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Boil-off_Exceeds_Consumption" Name="Boil-off exceeds consumption" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Initial">
			<Description>Evaporation in tank due to lack off vehicle filling (less than 1 vehicle per 2 weeks), </Description>
			<TimeStamp TS="2005-12-29"/></Condition>
		<Condition ID="Loss_Of_Containment_Unloading" Name="Loss of containment/ unloading" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Intermediate"><Description>Vehicle impact may lead to loss of containment</Description><TimeStamp TS="2005-12-29"/></Condition><Condition ID="Release_Form_Inner_Tank" Name="Release from inner tank" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Initial"><Description>Leakage of inner tank will cause pressure built up in the vacuum shell between jacket and inner  tank</Description><TimeStamp TS="2005-12-29"/></Condition><Condition ID="Hydrogen_Release_From_Jacket" Name="Hydrogen release from jacket" ExpectedFreq="0" Visible="True" EventOrCondition="Condition" Severity="" TypeOf="Consequence"><Description>The jacket (outer tank) is not designed to withstand internal pressure, leakage from the inner tank will pressurise the vacuum space</Description><TimeStamp TS="2005-12-29"/></Condition><Condition ID="External_Damage_Of_Jacket" Name="External damage of jacket" ExpectedFreq="0" Visible="True" EventOrCondition="Undetermined" Severity="" TypeOf="Initial"><Description>External damage will destroy the vacuum inside the jacket</Description><TimeStamp TS="2005-12-29"/></Condition></AllConditions>
	<BarrierDiagrams>
		<BarrierDiagram ID="Liquid_Hydrogen_Station_-_Truck_Delivery_And_Unloading_Action" Name="Liquid Hydrogen Station - Truck delivery and unloading action">
			<Description>Safety analysis of the truck delivery and unloading activities
This analysis does not include the liquid hydrogen storage tank</Description>
			<BarrierGraphSize UpperLeftX="953" UpperLeftY="-940" LowerRightX="1723" LowerRightY="-380"/>
			<DiagramBarriers>
				<Barrier ID="Unloading_Inspection" Name="Unloading Inspection" BarrierType="10 Activated Barrier - Procedural (Observation of local conditions not using instruments)" ManagementFactorType="Default" PFD="0.01">
					<Description>10 Activated Barrier - Procedural (Observation of local conditions not using instruments)
On arrival of the truck, the truck is inspected visually for defects by driver or station operator (need to be decided who). The mitigation action what to do in case defects are noted need to be included.
This need to be documented and trained as a standard procedure. 
</Description>
					<AbsPos X="1133" Y="-890" XM="1133" YM="-870"/>
					<DemandCondition Name="Truck has defects on arrival"/>
					<ConditionOnFailure Name="Release from unloading facility"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Hydrogen_Sensors" Name="Hydrogen sensors" BarrierType="8 Activated Barrier - Warned (Human Action based on passive warning)" ManagementFactorType="Default" PFD="0">
					<Description>8 Activated Barrier - Warned (Human Action based on passive warning)
Hydrogen sensors are located near the unloading facility
The sensors themselves do not mitigate the presence of an explosive atmosphere, so a follow up has to be find in terms of alarms, evacuation, close down of unloading operation, close down of potential ignition sources
</Description>
					<AbsPos X="1573" Y="-790" XM="1583" YM="-790"/>
					<DemandCondition Name="Continued release from unloading facility"/>
					<ConditionOnFailure Name="Unnoticed explosive atmosphere"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Inspection_Of_Hoses" Name="Inspection of hoses" BarrierType="10 Activated Barrier - Procedural (Observation of local conditions not using instruments)" ManagementFactorType="Default" PFD="0">
					<Description>10 Activated Barrier - Procedural (Observation of local conditions not using instruments)
Inspection of hoses before unloading/connection
</Description>
					<AbsPos X="1133" Y="-790" XM="1133" YM="-790"/>
					<DemandCondition Name="Defects in unloading hoses"/>
					<ConditionOnFailure Name="Release from unloading facility"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Inspection_Of_Connections" Name="Inspection of connections" BarrierType="10 Activated Barrier - Procedural (Observation of local conditions not using instruments)" ManagementFactorType="Default" PFD="0">
					<Description>10 Activated Barrier - Procedural (Observation of local conditions not using instruments)
Connections are inspected before unloading action is started
</Description>
					<AbsPos X="1133" Y="-690" XM="1133" YM="-690"/>
					<DemandCondition Name="Incorrect coupling to fixed facility"/>
					<ConditionOnFailure Name="Release from unloading facility"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Supervision_During_Unloading" Name="Supervision during unloading" BarrierType="10 Activated Barrier - Procedural (Observation of local conditions not using instruments)" ManagementFactorType="Default" PFD="0">
					<Description>10 Activated Barrier - Procedural (Observation of local conditions not using instruments)
The unloading action is monitored by personnel.
Note that the personnel may become disabled by freeze burn - consider additional remote monitoring
Deviations of the unloading lead to aborting the unloading action</Description>
					<AbsPos X="1383" Y="-790" XM="1383" YM="-790"/>
					<DemandCondition Name="Release from unloading facility"/>
					<ConditionOnFailure Name="Continued release from unloading facility"/>
					<TimeStamp TS="2005-12-29"/><Links/></Barrier>
				<Barrier ID="Personal_Protection" Name="Personal protection" BarrierType="3 Temporary Passive Barrier - Put in place (and removed) by person" ManagementFactorType="Default" PFD="0">
					<Description>3 Temporary Passive Barrier
Unloading operator and truck driver have donned protective clothing against cryogenic burn ("Nomex suit")
</Description>
					<AbsPos X="1573" Y="-560" XM="1578" YM="-560"/>
					<DemandCondition Name="Liquid hydrogen spill"/>
					<ConditionOnFailure Name="Cryogenic burn/personnel"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Limited_Access" Name="Limited access" BarrierType="8 Activated Barrier - Warned (Human Action based on passive warning)" ManagementFactorType="Default" PFD="0">
					<Description>8 Activated Barrier - Warned (Human Action based on passive warning)
A safety distance atround the truck and unloding facility where access is prohibited to third parties and personnel not involved in the unloading action
Barrier can be enforced by signs, lights (when unloading) and supervision of personnel
</Description>
					<AbsPos X="1573" Y="-450" XM="1583" YM="-450"/>
					<DemandCondition Name="Liquid hydrogen spill"/>
					<ConditionOnFailure Name="Cryogenic burn/third parties"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Gate ID="OrGate1" Name="OrGate1" TypeOf="OR" Visible="False">
					<Description></Description>
					<AbsPos X="1373" Y="-500" XM="1443" YM="-490"/>
					<OutputCondition Name="Liquid hydrogen spill"/>
					<InputConditions>
						<ConditionReference Name="Release from unloading facility"/><ConditionReference Name="Loss of containment/ unloading"/></InputConditions>
					<TimeStamp TS="2005-12-29"/></Gate>
				<Barrier ID="Venting_Prior_Disconnection" Name="Venting prior disconnection" BarrierType="10 Activated Barrier - Procedural (Observation of local conditions not using instruments)" ManagementFactorType="Default" PFD="0">
					<Description>10 Activated Barrier - Procedural (Observation of local conditions not using instruments)
Unloading hoses need to be vented prior to disconnection
</Description>
					<AbsPos X="1133" Y="-500" XM="1133" YM="-500"/>
					<DemandCondition Name="Liquid hydrogen in unloading hose"/>
					<ConditionOnFailure Name="Liquid hydrogen spill"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Collision_Prevention" Name="Collision prevention" BarrierType="3 Temporary Passive Barrier - Put in place (and removed) by person" ManagementFactorType="Default" PFD="0">
					<Description>3 Temporary Passive Barrier
The unloading facility can be protected against external impacts such as third party traffic. 
Different options are possible. The FMEA report suggests that driver puts caution cones around the truck. This would be an "activated barrier - warned (Human action based on warning, sign, alarm), where the barrier is also temporary, i.e there are two failure modes: the cones are not placed or the driver ignores the warning.
A more robust option would be a combination of collision-resistant barriers (e.g. concrete poles, steel barrier)  around the unloading facitily in combination with a collision-resistant temporary barrier (fence) on the access way to the truck's unloading position 
</Description>
					<AbsPos X="1133" Y="-590" XM="1133" YM="-590"/>
					<DemandCondition Name="Vehicle movement into truck or unloading facility"/>
					<ConditionOnFailure Name="Loss of containment/ unloading"/><TimeStamp TS="2005-12-29"/></Barrier>
			</DiagramBarriers>
			<InitialConditions>
				<ConditionReference Name="Truck has defects on arrival"><AbsPos X="1033" Y="-890" XM="1033" YM="-870"/></ConditionReference><ConditionReference Name="Defects in unloading hoses"><AbsPos X="1033" Y="-790" XM="1033" YM="-790"/></ConditionReference><ConditionReference Name="Incorrect coupling to fixed facility"><AbsPos X="1033" Y="-690" XM="1033" YM="-690"/></ConditionReference><ConditionReference Name="Liquid hydrogen in unloading hose"><AbsPos X="1033" Y="-500" XM="1033" YM="-500"/></ConditionReference><ConditionReference Name="Vehicle movement into truck or unloading facility"><AbsPos X="1033" Y="-590" XM="1033" YM="-590"/></ConditionReference></InitialConditions>
			<IntermediateConditions>
				<ConditionReference Name="Release from unloading facility"><AbsPos X="1253" Y="-790" XM="1253" YM="-790"/></ConditionReference><ConditionReference Name="Continued release from unloading facility"><AbsPos X="1473" Y="-790" XM="1473" YM="-790"/></ConditionReference><ConditionReference Name="Liquid hydrogen spill"><AbsPos X="1413" Y="-500" XM="1453" YM="-490"/></ConditionReference><ConditionReference Name="Loss of containment/ unloading"><AbsPos X="1253" Y="-590" XM="1253" YM="-590"/></ConditionReference></IntermediateConditions>
			<Consequences>
				<ConditionReference Name="Unnoticed explosive atmosphere"><AbsPos X="1653" Y="-790" XM="1663" YM="-790"/></ConditionReference><ConditionReference Name="Cryogenic burn/personnel"><AbsPos X="1653" Y="-560" XM="1658" YM="-560"/></ConditionReference><ConditionReference Name="Cryogenic burn/third parties"><AbsPos X="1653" Y="-450" XM="1663" YM="-450"/></ConditionReference></Consequences>
			<TimeStamp TS="2005-12-29"/></BarrierDiagram>
		<BarrierDiagram ID="Liquid_Hydrogen_Station_-_Liquid_Storage" Name="Liquid Hydrogen Station - Liquid Storage">
			<Description>Design Intent: Store 2000 gallons (7.6 m3) of liquid hydrogen at 10 psig (0.7 barg) and -420 F (22 K)</Description>
			<BarrierGraphSize UpperLeftX="-327" UpperLeftY="-139" LowerRightX="473" LowerRightY="221"/>
			<DiagramBarriers>
				<Barrier ID="Overfilling_Protection" Name="Overfilling protection" BarrierType="7 Activated Barrier - Manual (Human action triggered by active hardware detection)" ManagementFactorType="Default" PFD="0">
					<Description>Overfilling protection may consists of several independent systems, instruments, alarms and human intervention
7 Activated Barrier - Manual (Human action triggered by active hardware detection)</Description>
					<AbsPos X="-137" Y="151" XM="-137" YM="151"/>
					<DemandCondition Name="Tank filling operation"/>
					<ConditionOnFailure Name="Pressure rise in tank"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Pressure_Relief_Valve" Name="Pressure Relief Valve" BarrierType="5 Activated Barrier - Hardware on demand" ManagementFactorType="Default" PFD="0">
					<Description>5 Activated Barrier - Hardware on demand
The inner tank is provided with two pressure relief valves. 
The release will be vented to a safe location (vertical upwards and well above the ground level)
These relief valves will be able to handle pressure rise due to normal evaporation rates in the tank by venting vapour. Overfilling will cause the PRV's to dump liquid as well. Capacity will probably be too limited to handle full loss of insulation.
</Description>
					<AbsPos X="163" Y="151" XM="163" YM="151"/>
					<DemandCondition Name="Pressure rise in tank"/>
					<ConditionOnFailure Name="Overpressure storage tank"/>
					<ConditionOnSuccess Name="Liquid hydrogen release"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Barrier ID="Rupture_Disc" Name="Rupture disc" BarrierType="5 Activated Barrier - Hardware on demand" ManagementFactorType="Default" PFD="0">
					<Description>5 Activated Barrier - Hardware on demand
On the line to the Pressure Relief Valve a ruspture disc is mounted, that will release the tank pressure if the pressure rises above the set pressure of the PRV's. The release will be vented to a safe location (vertical upwards and well above the ground level)
</Description>
					<AbsPos X="323" Y="151" XM="323" YM="151"/>
					<DemandCondition Name="Overpressure storage tank"/>
					<ConditionOnFailure Name="tank burst - instantaneous release of full tank contents"/>
					<ConditionOnSuccess Name="Release of full tank contents"/>
					<TimeStamp TS="2005-12-29"/></Barrier>
				<Gate ID="OrGate3" Name="OrGate3" TypeOf="OR" Visible="False">
					<Description></Description>
					<AbsPos X="43" Y="151" XM="73" YM="161"/>
					<OutputCondition Name="Pressure rise in tank"/>
					<InputConditions>
						<ConditionReference Name="Loss of vacuum insulation"/><ConditionReference Name="Boil-off exceeds consumption"/></InputConditions>
					<TimeStamp TS="2005-12-29"/></Gate>
				<Barrier ID="Pressure_Safety_Valve" Name="Pressure Safety Valve" BarrierType="5 Activated Barrier - Hardware on demand" ManagementFactorType="Default" PFD="0"><Description>5 Activated Barrier - Hardware on demand
A pressure safety valve is mounted on the vacuum space between outer jacket and inner tank, that releases at 0 psig (0 barg, i.e. atmospheric pressure)</Description><AbsPos X="283" Y="-89" XM="283" YM="-89"/><DemandCondition Name="Release from inner tank"/><ConditionOnFailure Name="Hydrogen release from jacket"/><TimeStamp TS="2005-12-29"/></Barrier><Gate ID="OrGate2" Name="OrGate2" TypeOf="OR" Visible="False"><Description></Description><AbsPos X="-117" Y="-9" XM="-107" YM="1"/><OutputCondition Name="Loss of vacuum insulation"/><InputConditions><ConditionReference Name="Release from inner tank"/><ConditionReference Name="External damage of jacket"/></InputConditions><TimeStamp TS="2005-12-29"/></Gate></DiagramBarriers>
			<InitialConditions>
				<ConditionReference Name="Tank filling operation"><AbsPos X="-247" Y="151" XM="-247" YM="151"/></ConditionReference><ConditionReference Name="Release from inner tank"><AbsPos X="-247" Y="-89" XM="-247" YM="-89"/></ConditionReference><ConditionReference Name="Boil-off exceeds consumption"><AbsPos X="-247" Y="71" XM="-247" YM="71"/></ConditionReference><ConditionReference Name="External damage of jacket"><AbsPos X="-247" Y="-9" XM="-247" YM="-9"/></ConditionReference></InitialConditions>
			<IntermediateConditions>
				<ConditionReference Name="Pressure rise in tank"><AbsPos X="83" Y="151" XM="83" YM="151"/></ConditionReference><ConditionReference Name="Overpressure storage tank"><AbsPos X="243" Y="151" XM="243" YM="151"/></ConditionReference><ConditionReference Name="Loss of vacuum insulation"><AbsPos X="-77" Y="-9" XM="-77" YM="-9"/></ConditionReference></IntermediateConditions>
			<Consequences>
				<ConditionReference Name="Liquid hydrogen release"><AbsPos X="403" Y="-9" XM="403" YM="-9"/></ConditionReference><ConditionReference Name="tank burst - instantaneous release of full tank contents"><AbsPos X="403" Y="151" XM="403" YM="151"/></ConditionReference><ConditionReference Name="Release of full tank contents"><AbsPos X="403" Y="71" XM="403" YM="71"/></ConditionReference><ConditionReference Name="Hydrogen release from jacket"><AbsPos X="403" Y="-89" XM="403" YM="-89"/></ConditionReference></Consequences>
			<TimeStamp TS="2005-12-29"/></BarrierDiagram>
	</BarrierDiagrams>
	<AllCommonElements/><ProjectSettings><Version Value="2.0.1019"/><FailureQuantification Value="faqPFD"/><BarrierOptions.Height Value="50"/><BarrierOptions.Width Value="14"/><BarrierOptions.VerSeparation Value="70"/><BarrierOptions.GateSeparation Value="0"/><BarrierOptions.HorSeparation Value="30"/><BarrierOptions.Radius Value="0"/><BarrierOptions.Brush.Color Value="12632256"/><BarrierOptions.Brush.Style Value="bsSolid"/><BarrierOptions.Pen.Color Value="0"/><BarrierOptions.Pen.Width Value="1"/><BarrierOptions.Pen.Style Value="psSolid"/><BarrierOptions.Pen.Mode Value="pmCopy"/><BarrierOptions.Font.Color Value="-16777208"/><BarrierOptions.Font.Size Value="8"/><BarrierOptions.Font.Name Value="MS Sans Serif"/><BarrierOptions.Font.Style Value="NormalFont "/><ConsequenceOptions.Height Value="60"/><ConsequenceOptions.Width Value="100"/><ConsequenceOptions.VerSeparation Value="40"/><ConsequenceOptions.GateSeparation Value="0"/><ConsequenceOptions.HorSeparation Value="30"/><ConsequenceOptions.Radius Value="30"/><ConsequenceOptions.Brush.Color Value="8421631"/><ConsequenceOptions.Brush.Style Value="bsSolid"/><ConsequenceOptions.Pen.Color Value="0"/><ConsequenceOptions.Pen.Width Value="1"/><ConsequenceOptions.Pen.Style Value="psSolid"/><ConsequenceOptions.Pen.Mode Value="pmCopy"/><ConsequenceOptions.Font.Color Value="-16777208"/><ConsequenceOptions.Font.Size Value="8"/><ConsequenceOptions.Font.Name Value="Tahoma"/><ConsequenceOptions.Font.Style Value="NormalFont "/><GateOptions.Height Value="65"/><GateOptions.Width Value="35"/><GateOptions.VerSeparation Value="0"/><GateOptions.GateSeparation Value="30"/><GateOptions.HorSeparation Value="0"/><GateOptions.Radius Value="0"/><GateOptions.Brush.Color Value="12632256"/><GateOptions.Brush.Style Value="bsSolid"/><GateOptions.Pen.Color Value="0"/><GateOptions.Pen.Width Value="1"/><GateOptions.Pen.Style Value="psSolid"/><GateOptions.Pen.Mode Value="pmCopy"/><GateOptions.Font.Color Value="-2147483640"/><GateOptions.Font.Size Value="8"/><GateOptions.Font.Name Value="MS Sans Serif"/><GateOptions.Font.Style Value="NormalFont "/><SnapSize Value="10"/><Margin Value="20"/><MatrixColorsConseq Value="False"/><InitialCondOptions.Height Value="60"/><InitialCondOptions.Width Value="120"/><InitialCondOptions.VerSeparation Value="70"/><InitialCondOptions.GateSeparation Value="0"/><InitialCondOptions.HorSeparation Value="30"/><InitialCondOptions.Radius Value="30"/><InitialCondOptions.Brush.Color Value="8454143"/><InitialCondOptions.Brush.Style Value="bsSolid"/><InitialCondOptions.Pen.Color Value="0"/><InitialCondOptions.Pen.Width Value="1"/><InitialCondOptions.Pen.Style Value="psSolid"/><InitialCondOptions.Pen.Mode Value="pmCopy"/><InitialCondOptions.Font.Color Value="-16777208"/><InitialCondOptions.Font.Size Value="8"/><InitialCondOptions.Font.Name Value="Tahoma"/><InitialCondOptions.Font.Style Value="NormalFont "/><ShowProbabilityInGraph Value="False"/><ConnectorRadius Value="10"/><BarrierOptions.Offset.X Value="0"/><BarrierOptions.Offset.Y Value="0"/><EventTreeOptions.Height Value="50"/><EventTreeOptions.Width Value="14"/><EventTreeOptions.VerSeparation Value="70"/><EventTreeOptions.GateSeparation Value="0"/><EventTreeOptions.HorSeparation Value="30"/><EventTreeOptions.Radius Value="7"/><EventTreeOptions.Offset.X Value="0"/><EventTreeOptions.Offset.Y Value="0"/><EventTreeOptions.Brush.Color Value="12632256"/><EventTreeOptions.Brush.Style Value="bsSolid"/><EventTreeOptions.Pen.Color Value="0"/><EventTreeOptions.Pen.Width Value="1"/><EventTreeOptions.Pen.Style Value="psSolid"/><EventTreeOptions.Pen.Mode Value="pmCopy"/><EventTreeOptions.Font.Color Value="-16777208"/><EventTreeOptions.Font.Size Value="10"/><EventTreeOptions.Font.Name Value="Tahoma"/><EventTreeOptions.Font.Style Value="NormalFont "/><GateOptions.Offset.X Value="0"/><GateOptions.Offset.Y Value="0"/><MeasureOptions.Height Value="40"/><MeasureOptions.Width Value="100"/><MeasureOptions.VerSeparation Value="40"/><MeasureOptions.GateSeparation Value="0"/><MeasureOptions.HorSeparation Value="5"/><MeasureOptions.Radius Value="0"/><MeasureOptions.Offset.X Value="64"/><MeasureOptions.Offset.Y Value="70"/><MeasureOptions.Brush.Color Value="15793151"/><MeasureOptions.Brush.Style Value="bsSolid"/><MeasureOptions.Pen.Color Value="0"/><MeasureOptions.Pen.Width Value="1"/><MeasureOptions.Pen.Style Value="psSolid"/><MeasureOptions.Pen.Mode Value="pmCopy"/><MeasureOptions.Font.Color Value="-16777208"/><MeasureOptions.Font.Size Value="7"/><MeasureOptions.Font.Name Value="Tahoma"/><MeasureOptions.Font.Style Value="NormalFont "/><ShowMarkDependency Value="False"/><ArrowAlign Value="2"/><InitialCondOptions.Offset.X Value="0"/><InitialCondOptions.Offset.Y Value="0"/><IntermediateCondOptions.Height Value="60"/><IntermediateCondOptions.Width Value="80"/><IntermediateCondOptions.VerSeparation Value="70"/><IntermediateCondOptions.GateSeparation Value="0"/><IntermediateCondOptions.HorSeparation Value="30"/><IntermediateCondOptions.Radius Value="0"/><IntermediateCondOptions.Offset.X Value="0"/><IntermediateCondOptions.Offset.Y Value="0"/><IntermediateCondOptions.Brush.Color Value="16777215"/><IntermediateCondOptions.Brush.Style Value="bsClear"/><IntermediateCondOptions.Pen.Color Value="0"/><IntermediateCondOptions.Pen.Width Value="1"/><IntermediateCondOptions.Pen.Style Value="psSolid"/><IntermediateCondOptions.Pen.Mode Value="pmCopy"/><IntermediateCondOptions.Font.Color Value="-16777208"/><IntermediateCondOptions.Font.Size Value="8"/><IntermediateCondOptions.Font.Name Value="Tahoma"/><IntermediateCondOptions.Font.Style Value="NormalFont "/><CriticalCondOptions.Height Value="60"/><CriticalCondOptions.Width Value="80"/><CriticalCondOptions.VerSeparation Value="70"/><CriticalCondOptions.GateSeparation Value="0"/><CriticalCondOptions.HorSeparation Value="30"/><CriticalCondOptions.Radius Value="0"/><CriticalCondOptions.Offset.X Value="0"/><CriticalCondOptions.Offset.Y Value="0"/><CriticalCondOptions.Brush.Color Value="16777215"/><CriticalCondOptions.Brush.Style Value="bsClear"/><CriticalCondOptions.Pen.Color Value="0"/><CriticalCondOptions.Pen.Width Value="1"/><CriticalCondOptions.Pen.Style Value="psSolid"/><CriticalCondOptions.Pen.Mode Value="pmCopy"/><CriticalCondOptions.Font.Color Value="-16777208"/><CriticalCondOptions.Font.Size Value="8"/><CriticalCondOptions.Font.Name Value="Tahoma"/><CriticalCondOptions.Font.Style Value="NormalFont "/><ConsequenceOptions.Offset.X Value="0"/><ConsequenceOptions.Offset.Y Value="0"/><EventQuantification Value="evqFreqYear"/><ConditionQuantification Value="cdqProb"/><ConsequenceQuantification Value="csqFreeText"/><SeverityList Value="insignificant)%(significant)%(serious"/><FrequencyClassList Value="1.14155251141553E-5)%(1.14155251141553E-7)%(1.14155251141553E-9"/><FrequencyClassNames Value="Frequent)%(Probable)%(Improbable)%(Very Improbable"/><ShowMarkDependencyString Value="*"/><ShowMeasuresInGraph Value="False"/><KeepOptionsProject Value="True"/><clMatrixRed Value="255"/><clMatrixYellow Value="65535"/><clMatrixGreen Value="43176016"/><MonthsPerYear Value="12"/><DaysPerYear Value="365"/><DaysPerWeek Value="7"/><HoursPerDay Value="24"/></ProjectSettings><AllMeasures/><ProjectTerminology/></BarrierProject>
