| Autoclave door — a quick-opening door never unlocks under pressure | 96 | a state machine, a memory invariant, try / catch |
| Blast furnace top — never open a door against live CO gas | 83 | a state machine, a memory invariant, try / catch |
| Chlorine dosing — no chemical feed without proven water flow | 88 | a state machine, a memory invariant, try / catch |
| Grain conveyor pull-cord — a latched trip, and a broken safety circuit that stays broken | 88 | a state machine, a memory invariant, try / catch |
| Crane load moment — the tipping write is refused by the ledger | 90 | a state machine, a memory invariant, try / catch |
| Drawbridge — the span never moves while the deck is open to traffic | 85 | a state machine, a memory invariant, try / catch |
| Gas burner ignition — purge before spark, lockout is forever | 82 | a state machine, a memory invariant, try / catch |
| Lockout/tagout — a machine with a personal lock on it cannot start | 91 | a state machine, a memory invariant, try / catch |
| Mine hoist — no motion with the gate open, and a trip is forever | 86 | a state machine, a memory invariant, try / catch |
| Pipeline pig trap — the closure never opens against trapped pressure | 99 | a state machine, a memory invariant, try / catch |
| Pressure relief valve — a live vessel can never lose its relief path | 88 | a state machine, a memory invariant, try / catch |
| Railway block signaling — two trains never share a block | 80 | a state machine, a memory invariant, try / catch |
| Robot cell gate — full-speed automation only behind a closed gate | 84 | a state machine, a memory invariant, try / catch, guard blocks |
| Two-hand press control — anti-tie-down, anti-repeat, structural | 78 | a state machine, a memory invariant, try / catch |