Alarms Trips Permissives

Alarms, Trips & Permissives

Quick Answer: Alarms warn; trips shut fuel off (or otherwise force a safe state); permissives are conditions that must be true before the BMS will start or continue firing. A low-water cutoff trip means secure the fire and find the cause—do not reset and refill blindly. Never bypass interlocks to keep production online.

Instrumentation only protects the plant if the operator understands the hierarchy. Minnesota DLI scenarios repeatedly test whether you silence a horn and keep firing, or whether you treat a trip as a hard stop. Learn the vocabulary, the typical trip list, and the reset discipline.

Three Words That Must Stay Distinct

Examples of permissives: combustion air switch proven, purge complete, gas pressure within limits, oil temperature adequate, scanner not faulted, limits not already tripped. If a permissive is false, the sequence should not light—or should not release to main flame.

Core Boiler Trips You Must Respect

Low-Water Cutoff (LWCO)

The LWCO interrupts the burner when water falls below a safe level. Test by blowdown at least once per shift (or every 24 hours of continuous operation per plant practice and manufacturer guidance): open the LWCO blowdown, confirm the burner shuts down, close the valve, allow level to recover, and document the test. A cutoff that does not trip on test is a failed safety device—tag out firing until repaired.

On an actual LWCO trip during operation:

1. Confirm the burner is secured.
2. Do not add cold water until you know the boiler is not overheated.
3. Investigate feed pumps, makeup, open blowdowns, leaks, and false level indication.
4. Restart only after level is proven safe and the cause is corrected.

Auxiliary low-water alarms may sound before the cutoff. Treat the alarm as a chance to restore feed before a trip—not as noise.

Flame Failure / Scanner Trip

Loss of flame signal closes fuel valves within FFRT. After a flame failure:

• Do not immediately hammer the reset.
• Check for fuel supply issues, air/draft problems, scanner sight-tube fouling, and whether the trip followed a purge or light-off attempt.
• Complete any required post-purge and written restart steps before another trial for ignition.

Repeated failed light-offs mean stop and troubleshoot—fuel can accumulate if you keep trying without purge discipline.

High Pressure / High Temperature Limits

Steam high-pressure limits and hot-water high-temperature limits are backups to the operating control. If the limit trips, the operating control already failed to hold the setpoint or the load collapsed faster than modulation could respond. Find why before returning to service. Safety valves are the last mechanical relief—limits should act earlier.

Combustion Air, Fuel Pressure, and Draft Interlocks

Air switches, fuel pressure switches (high and low), and draft/proof-of-flow devices are permissives and trips. A low gas pressure trip may indicate supply problems; a high gas pressure trip may indicate regulator failure. Either way, firing without those protections invites explosion or unstable flame.

Alarm Response Discipline

Good watchstanding:

1. Acknowledge so you can think—but do not clear the underlying condition from memory.
2. Read the point (level, pressure, flame, pump status) before changing anything.
3. Stabilize with procedure (secure fire, start standby pump, reduce load)—not with guesswork.
4. Log time, alarm/trip, actions, and readings.
5. Report recurring alarms; nuisance alarms that are silenced daily hide real failures.

Never jump out a LWCO, scanner, or high-limit switch "just for the weekend." That is how dry-fire and furnace explosion case studies begin. If a device is defective, shut down or run only under a formal temporary procedure with compensating measures—not a hidden wire nut.

Permissives During Startup

Startup is when permissives earn their keep. Typical sequence gates:

• Power and control voltage healthy
• Limits reset and not latched in trip
• Water level proven in safe band
• Fuel valves proven closed before purge (as designed)
• Purge airflow proven for the timed purge
• Pilot and main trials only after purge complete
• Release to modulation only after main flame proven

If the panel will not leave "wait for permissive," chase the first false input—do not hold the reset button hoping the logic will ignore it. Intermittent permissives (fluttering air switch, marginal gas pressure) need repair, not operator "technique."

Relating Alarms to Instrumentation

False high level from a plugged column can delay a low-water alarm until it is too late—another reason column blowdowns belong with controls knowledge. Likewise, a stuck pressure gauge can hide a rising pressure until the limit or safety valve speaks. Alarms and trips are only as good as the sensors feeding them; your rounds prove both the devices and the logic.

Exam Focus

Expect: LWCO first action, shift testing, alarm vs trip vs permissive, FFRT/fuel shutoff on flame loss, and the prohibition on adding water after low-water/out-of-sight events until the boiler is safe. The licensed engineer’s default is secure, verify, correct, then restart—never reset, hope, and walk away.