Issue: Incorrect “X-Ray On” Indicator When Safety Interlock is Active
An issue was observed where the system showed the “X-Ray On” indicator as active even when the safety interlock was open. Although the X-ray generation was correctly blocked for safety, the indicator on the display did not reflect the actual safe condition, which could confuse the operator.
Issue: Incorrect “X-Ray On” Indicator When Safety Interlock is Active
System
Xonar X-Ray Imaging System
Overview
An issue was observed where the system showed the “X-Ray On” indicator as active even when the safety interlock was open.
Although the X-ray generation was correctly blocked for safety, the indicator on the display did not reflect the actual safe condition, which could confuse the operator.
Expected Behavior
When the safety interlock is active/open:
- X-ray generation must be disabled
- “X-Ray On” indicator must remain OFF
- System should display a safe condition
Actual Behavior
- Safety interlock activated correctly
- X-ray output was blocked correctly
- However, the “X-Ray On” indicator stayed ON incorrectly
Root Cause
The issue was caused by a firmware logic mismatch.
The indicator was linked to the X-ray request signal instead of the final X-ray enable signal after safety interlock verification.
As a result:
- The system requested X-ray operation
- Safety interlock blocked actual X-ray generation
- But the indicator still showed “ON”
Why This Happened
The following gaps were identified:
- Indicator logic did not check safety interlock status
- Display logic was not synchronized with final enable output
- No validation layer existed for safety-critical indicators
Impact
Safety Impact
- No unsafe X-ray emission occurred
- Safety interlock function worked correctly
Operational Impact
- Incorrect status indication could confuse operators
Compliance Impact
- Safety status display did not accurately represent system state
Fix Implemented
The firmware was updated with the following improvements:
- “X-Ray On” indicator now follows the final X-ray enable output
- Added interlock dependency check in indicator logic
- Improved synchronization between safety logic and UI display
- Verified operation through repeated interlock testing
Validation Results
|
Test Condition |
Expected Result |
Status |
|
Interlock Open |
Indicator OFF |
Pass |
|
Interlock Closed |
X-Ray allowed |
Pass |
|
Multiple Toggle Cycles |
Stable operation |
Pass |
Preventive Actions
To avoid similar issues in future releases:
- Added validation for all safety-related indicators
- Added dedicated interlock test cases
- Improved firmware regression testing
- Included UI verification in safety validation process
Conclusion
The issue was caused by incorrect firmware mapping of the “X-Ray On” indicator.
The updated logic now ensures that the indicator reflects the actual X-ray enable status after all safety conditions are verified, providing accurate and reliable system feedback to the operator.