MIL-STD-2088B
c. The safety program personnel shall participate in all design reviews as part of the overall safety effort.
5.1.8.1.2 Failure modes, effects and criticality analysis. During the BRU development process, the BRU shall be analyzed for possible failure modes resulting from anticipated environmental and load conditions. This analysis shall evaluate the likelihood of occurrence of identified failure modes. For each failure mode identified, a determination shall be made of the effect of the part, circuit, or unit in question and of the ultimate significance of this effect relative to overall system safety. This analysis shall include a discussion of the factors inherent in the design or the quality program that shall minimize the likelihood of occurrence of those failures having the most significant effect on system safety. This analysis shall be updated as design configuration and load conditions change and shall be reviewed by the procuring activity.
5.1.8.1.3 Inadvertent release. Inadvertent release or arming of a store shall not occur due to the failure or malfunction of one single component of the BRU.
5.1.8.1.4 Locked shut functioning. In a locked shut functioning of the BRU, energy dissipation shall not be accomplished in any manner which could lead to personnel hazard, structural damage, or both. The lock shut firing shall not cause store release, hazard to personnel, system structural damage, or unscheduled maintenance.
5.1.8.1.5 Driven items. Except for the ejector pistons, no driven items shall be externally exposed.
5.1.8.1.6 Impulse cartridges. Impulse cartridge venting into the following areas shall be unacceptable:
a. Area where direct exposure of personnel to hot gas exhaust performing normal duties would occur.
b. Internally in any vicinity where venting would cause degradation of the BRU such as the electrical wiring and mechanical equipment.
5.1.8.1.7 Pneumatic or hydraulic BRU safety requirements. Failure of the vessel pressure sensing device shall be in the fail-safe mode (insufficient pressure present). High pressure failure of the vessel shall not result in ballistic fragmentation unless the vessel is encased so as not to pose hazard to personnel or aircraft. For inspection and servicing, the BRU shall be equipped with a means of relieving any residual pressure from the pneumatic circuit, both upstream and downstream of the release control device(s). Other than potentially requiring the use of hearing protection, venting of the BRU pneumatic circuit shall not be a hazard for ground
personnel, nor physically damage or functionally affect the surrounding structure and equipment. If a removable pressure vessel is used, the following safety aspects shall be addressed: The physical connection to or removal of a pressure vessel from the BRU pneumatic circuit,
33
For Parts Inquires call Parts Hangar, Inc (727) 493-0744
© Copyright 2015 Integrated Publishing, Inc.
A Service Disabled Veteran Owned Small Business