Issue 5 - September 2006 Page 30 of 65The Version of RTTS should be confirmed by commanding the System History Report. Thisreport provides a print of the version number of RTTS in its header. The Library version islinked to TriBuild and the version number can be confirmed during the start-up window.4.4.2 General Description - Shutdown ProcedureThe process shutdown sequence will be Process dependent and documented in the BespokeOperation Manual.If power is to be removed from the Safety System, this should only be instigated after a safeprocess shutdown and the instigation of appropriate manual safety interlocks. The process andplant must be brought to a safe state and all hazardous materials removed.System power should first be removed from the main chassis and subsequently the externalchassis power should then be removed from the field outputs and inputs. The processor shouldthen be set in the reset mode by front panel keyswitch operation.4.4.3 Application Changes During CommissioningIn the ideal situation there should be no application changes during the commissioning phase ofa Safety Systems Project. When, however, changes are required it is mandatory to follow thefull life cycle change sequence, including re-confirmation of HAZOPS and full validation. Allchanges must be fully documented and under version control to the same standard as theoriginal system design. All changes must be completed prior to the final Site Acceptance TestValidation.4.4.4 Site Acceptance Test ValidationPrior to the plant going 'live', a full system validation (proof test) must be completed. Thisvalidation follows the cause and effect/fault schedule using the plant sensors and final elementsas well as the logic solver.Where practical, random causes should also be tested during this final validation cycle.Fault tolerances and maintainability should also be re-validated during the Site Acceptance Test(SAT) including, where practical, field sensors and actuators.4.4.5 Permits to WorkPrior to the plant going "live" the formalised permit to work procedure for the plant must be inoperation.4.4.6 Module Slot SecurityPrior to the plant going "live" a slot polarisation-coding blocks on each SC300E chassis shouldbe sealed to prevent polarisation changes during maintenance operation.