Interlocks

The DPS system is supposed to pump down the gas entering through the XGM. If it fails, the first thing to do is to close the XGM’s dosing valve, in order to prevent the entire beamline from venting. If the pressure still rises, we have to switch off the gate valves between the chambers, but not before the XFEL beam is switched off.

As a last prerequisite, the roughing valve RV1 should be open if we want to open the gas inlet. This may be closed because we are evacuating the gas lines, in which case the turbo pumps have no roughing valves, so we do not want unnecessary gas load.

Pressure interlock

In case of bad pressure, the first thing we want to do is to close the SCV valve, and to switch off the high voltage HV_LOCK.

The pressures are all a bit lower than they are on the gate valves that close, so that the gas stops flowing first, maybe then we don’t even need to close the valves anymore, as the pressure will most likely drop.

We use the gate valves of the DPSs as a proxy for their entire pumping system: if the turbo pumps behind them are not fine, or the roughing pressure, they are closed by the interlock system. As they are not closing immediately, we are not looking at the IsClosed bit, but at Value, which switches immediately to FALSE should their interlock trigger.

Number Device Parameter Operator Limit
c1 SCS_BLU_XGM/VALVE/GV3.state.IsClosed EQ FALSE
c2 SCS_BLU_DPS-2/VALVE/GV4.state.IsClosed EQ FALSE
c3 SCS_BLU_XGM/GAUGE/LV1_PVALVE.Value GT 1e-3
c4 SCS_BLU_XGM/VALVE/GV1.state.Value EQ FALSE
c5 SCS_BLU_XGM/VALVE/GV2.state.Value EQ FALSE
c6 SCS_BLU_DPS-1/GAUGE/PCC5.Value GT 1e-4
c7 SCS_BLU_DPS-1/VALVE/GV3.state.Value EQ FALSE
c8 SCS_BLU_DPS-1/GAUGE/PCC4.Value GT 1e-6
c9 SCS_BLU_DPS-1/VALVE/GV2.state.Value EQ FALSE
c10 SCS_BLU_DPS-1/GAUGE/CC3.Value GT 5e-7
c11 SCS_BLU_DPS-1/VALVE/GV1.state.Value EQ FALSE
c12 SCS_BLU_DPS-2/GAUGE/PCC7.Value GT 1e-4
c13 SCS_BLU_DPS-2/VALVE/GV3.state.Value EQ FALSE
c14 SCS_BLU_DPS-2/GAUGE/PCC8.Value GT 1e-6
c15 SCS_BLU_DPS-2/VALVE/GV2.state.Value EQ FALSE
c16 SCS_BLU_DPS-2/GAUGE/CC9.Value GT 5e-8
c17 SCS_BLU_DPS-2/VALVE/GV1.state.Value EQ FALSE
c18 SCS_BLU_XGM/GAUGE/LV1_PVALVE.AValueSemiRaw LT 1

If the needle valve controller is switched off, it gives a perfect pressure. This is condition c18.

We close the SCV if pressure is too high. Certainly, we don’t care whether the pressures are bad if the valves to the DPS are closed, which makes the conditions a bit complicated.

Number Logic Action
a1 c3 or c4 or c5 or c18 or (c1 and (c6 or c7 or c8 or c9 or c10 or c11)) or (c2 and (c12 and c13 and c14 and c15 and c16 and c17)) COff

And we put the HV inhibit on. This is weird for a safety interlock, but worst case DOOCS can switch off the HV.

Number Logic Action
a1 c3 or c4 or c5 or c18 or (c1 and (c6 or c7 or c8 or c9 or c10 or c11)) or (c2 and (c12 and c13 and c14 and c15 and c16 and c17)) COn

SCS_BLU_XGM/VALVE/RV2

The roughing line for evacuation of the gas lines must be closed if any of the gases are open.

Number Device Parameter Operator Limit
c1 SCS_BLU_XGM/DCTRL/GS_PV_AR.state.Value EQ TRUE
c2 SCS_BLU_XGM/DCTRL/GS_PV_KR.state.Value EQ TRUE
c3 SCS_BLU_XGM/DCTRL/GS_PV_XE.state.Value EQ TRUE
c4 SCS_BLU_XGM/DCTRL/GS_PV_N.state.Value EQ TRUE
Number Logic Action
a1 c1 or c2 or c3 or c4 CClose

The inverse is also true: if the gas evacuation line is open, the gas lines must be closed. Also, the gas lines should not be opened if the pressure is high, but they should stay open, so we have an interlock on itself. Also, it should not be possible to open one gas line if one of the others is open. The conditions are actually the same, only the action logic is different.

No Device Parameter Op Limit
c1 SCS_BLU_XGM/VALVE/RV2.state.IsClosed EQ FALSE
c2 SCS_BLU_XGM/ASENS/GS_P_OUT.Value GT -0.98
c3 SCS_BLU_XGM/DCTRL/GS_PV_AR.state.Value EQ TRUE
c4 SCS_BLU_XGM/DCTRL/GS_PV_KR.state.Value EQ TRUE
c5 SCS_BLU_XGM/DCTRL/GS_PV_XE.state.Value EQ TRUE
c6 SCS_BLU_XGM/DCTRL/GS_PV_N.state.Value EQ TRUE
No Logic Action
a1 c1 or (c2 and not c3) or c4 or c5 or c6 COff
No Logic Action
a1 c1 or (c2 and not c4) or c3 or c5 or c6 COff
No Logic Action
a1 c1 or (c2 and not c5) or c3 or c4 or c6 COff
No Logic Action
a1 c1 or (c2 and not c6) or c3 or c4 or c5 COff

SCS_BLU_XGM/VALVE/GV1 and /GV2

We want to close the butterfly valve over the turbomolecular pump in case they or their roughing vacuum goes bad. We do not want to close them just because the rouging vacuum is closed, because we may simply be evacuating the gas lines.

Number Device Parameter Operator Limit
c1 SCS_BLU_XGM/TPUMP/TP1.state.RPM80 EQ FALSE
Number Device Parameter Operator Limit
c1 SCS_BLU_XGM/TPUMP/TP2.state.RPM80 EQ FALSE

As the line merges into one, all other conditions are the same for both gate valves.

Number Device Parameter Operator Limit
c2 SCS_BLU_XGM/GAUGE/P2_1.Value GT 3e-2
c3 SCS_BLU_XGM/VALVE/RV1.state.IsOpen EQ FALSE
c4 SCS_BLU_DPS-2/VALVE/SP31_RV2.state.IsOpen EQ FALSE
Number Logic Action
a1 c1 or c2 or c3 or c4 CClose