Microlearning · Module 2 of 3 · Display

What the cab showed

Where the display is silent, habit fills the gap.

In the cab the ‘safety systems isolated’ light was on, and the door interlock indicator stayed dark. Five doors were open. This module shows what a display reports in a special condition, what it does not report, and what follows for describing displays.

About 7 minutes
4 questions with feedback
No sign-in; answers are not stored

Start the module All modules

What this is about

A train moves off with five doors open, although two indicators are in view in the cab. After this module you can, using the case:

distinguish what the cab reported about the doors from what was really the case,
explain why an indicator that is always dark in normal operation cannot report anything in a special condition,
recognise where a habit took the place of a missing reply,
select the details that a description of displays for the special condition has to contain.

Each voice is followed by a question, and an application task comes at the end. If your answer is right, you get more depth. If it is wrong, a hint shows where the answer is in the case note, and you get a second attempt; after that, the solution appears with the reasoning.

The three people are fictitious roles at another operator and at a train manufacturer, not people involved in the case. They speak about what the report describes; their view is my reading.

The scene

Operator’s control (maintenance controller and duty control manager)
Signaller
Isolating switches EBS (brake circuit) and TIS (traction interlock), vertical when normal
Light ‘safety systems isolated’
Door interlock indicator on the driver’s desk
Leading cab
Rear cab
Doors on the platform side
Driver
Conductor

Styal, 3 May 2023, 15:24. The TIS is isolated, and the door interlock is out of action. The driver walks through the train checking circuit breakers, doors and passenger alarms. Five of the six doors on the platform side are open: two were opened by the driver during fault finding, three by passengers getting off.

At 15:25 the driver runs to the leading cab. There, the ‘safety systems isolated’ light is on. The door interlock indicator on the driver’s desk is dark. Only the doors immediately behind the leading cab are closed, the last ones the driver sees before boarding.

The whole case in brief is in the overview of the modules. The drawing shows the situation at 15:24.

An indicator that is always dark

Train driver at another operator, fictitious role

At Styal the door interlock indicator on the driver’s desk stayed dark, as it always does at Northern in normal operation. It lights only when the door control panel in the cab is switched on, and that panel is not used in the active cab. For the person at the desk, a dark indicator is therefore normal. In a special condition it stays just as dark and says nothing about the doors.

Question 1 of 4

The driver gets into the leading cab. What did the cab report about the doors?

The door interlock indicator was dark, so all doors were closed.
The ‘safety systems isolated’ light reported that doors were open.
Nothing: the light reported the isolation, and the door interlock indicator stayed dark as always.

That is not correct. In the case note, read the section ‘What the cab showed and what was really the case’ and try again.

Solution and explanation

Solution: c. The cab said nothing about the doors.

An indicator that is always dark in normal operation cannot report anything in a special condition. Anyone describing it has to state when it lights at all, and check in everyday practice whether that condition ever occurs.

A reply without a signal

Conductor at another operator, fictitious role

The conductor dispatches the train and gives the ready-to-start signal, and the driver acknowledges it with the buzzer. At Styal the conductor asked the passengers to board again and did not expect the train to move, having not dispatched it. The driver sounded the buzzer twice and moved off. Something was confirmed that did not exist.

Question 2 of 4

What does the double buzzer before departure show?

The driver acknowledged a ready-to-start signal from the conductor.
A habitual reply was given although there was no ready-to-start signal.
In degraded operation the buzzer replaces dispatch.

That is not correct. In the case note, read the step ‘Departure without dispatch’ and try again.

Solution and explanation

Solution: b. There was no ready-to-start signal; the buzzer confirmed nothing.

The report describes how expectation and stress narrow perception. Where a display is silent and a reply is missing, habit fills the gap. A habitual action is not a check.

A condition, not its consequences

Technical writer at a train manufacturer fictitious role, thought experiment

The ‘safety systems isolated’ light did what it was meant to do: it reported that something was isolated. It did not report what followed from it, namely that the door interlock was out of action and that open doors no longer held the train. When I describe displays, their meaning according to the specification is not enough. I also describe what they show in a special condition and what the person in the cab then has to check themselves.

The report does not reproduce the manufacturer’s information. This voice shows how the case note reads the role of the manufacturer’s information.

Question 3 of 4

What does the ‘safety systems isolated’ light report?

That something is isolated, but not what follows from it.
That the door interlock is out of action and which doors are open.
That the signaller has been told about the isolation.

That is not correct. In the case note, read the link of the chain ‘Display in the cab’ and try again.

Solution and explanation

Solution: a. The light reports the condition ‘isolated’, not its consequences.

The chain has a link of its own for this: the display has to show the special condition and its consequences, not only that something is isolated. As long as it does not, the information has to do it, in the operating manual, in control’s instructions and in training.

Describing displays

This task brings the three voices together. Imagine you are revising the description of the displays in the cab.

Question 4 of 4

You are describing the displays of a cab for the case in which safety systems are isolated. Which details belong in it? Select all that apply.

When each display lights and when it stays dark, including in the special condition
Which consequences of an isolation no display reports
What the person in the cab then has to check themselves, for example all doors after every door release
That a dark indicator means that everything is in order

That is not correct; at least one choice is wrong. In the case note, read the weak point ‘Doors that open during fault finding’ and try again.

Solution and explanation

Solution: a, b and c. Statement d is exactly the assumption the case disproves.

There was no indicator in use in the cab that would have shown open doors. The Rule Book requires a new check of all doors after every door release. A description of the displays that leaves this out leaves open the gap that habit steps into.

Apply it to your documentation

Think of a display in your documentation that always looks the same in normal operation, for example always dark or always green.

Your note. It stays on this screen and is neither sent nor stored.

Check the description of this display with the questions from the case note:

What does the display show in a special condition, in everyday practice and not only according to the specification?
Does it report a condition, or its consequences as well?
What does the person have to check themselves when the display reports nothing?
Which habitual action could take the place of a missing reply?

The key points in three sentences

An indicator that is always dark in normal operation cannot report anything in a special condition.
The ‘safety systems isolated’ light reports a condition, not its consequences. The information has to name the consequences.
Where the display is silent and the reply is missing, habit fills the gap. A habitual action is not a check.

Continue with module 3: When the automatic systems no longer help

All modules

Read the case note

Basis and source

This microlearning does not replace instruction. Procedures, instruction and supervision in rail operation remain with the operator.

Source

Report 07/2024 of the British Rail Accident Investigation Branch (RAIB), ‘Unsafe movement of a train at Styal station, 3 May 2023’, as retold in the case note ‘Five open doors’. Roles, quotes and drawings are my own. How the series is built is described in the overview of the modules.