What if the HSE don't want the system to be overrided in the first place? Then some other thing would be needed (some key to access it or something).
That is already how the system is - on just about all rides. There are a number of key-switches on a rides control panel(s) that enable various functions. The maintenance team do their morning checks on the ride & leave all the switches in the Auto / Run position.
The ride operator for the day is given one key for the ride. This allows them to turn the power on or off & do nothing else....*snipped*
Very much the case, I've said this from a early stage that in mind a human mistake has happened, where policy and procedure has not been followed by those with the ability to take the system out of auto, the ride did exactly what it was supposed to do. I struggle to imagine any other catastrophic failure of multiple redundant systems that would allow this otherwise.
Merlin isn't exactly the best company to work for, it wouldn't surprise me if some of the more experienced staff/engineers had not long recently walked and these were not (as) experienced engineers.
But I'm still of the opinion of wait for HSE report.
Yeah it stopped but how could not 1 member of staff not notice a stalled train train for 15 to 20 mins. Like they should have checked why it had stopped at the top.
That would be a human error.
On that day the ride system did everything it was supposed to.
What happened afterwards? We can only speculate.
But the system needs upgrading then that allows the ops to know where all trains are at all times. Couldn't they have sensors on the trains that picks up sensors on the track so if it does stall again and it E stops on the lift hill they know straight away that a train still on the circuit and where.
It's called human error, but it's also called policy and procedure, something that tells you what has to happen, start to finish when something happens, whether that defines now the track is checked is anyone guess.
If you place sensors out of reach on high loops, this increases maintenance challenges when they fail, they typically are on accessible, maintained areas. The system very much appeared to do what it was supposed to do, what has to be reviewed here is policy and procedure and review what extra steps can be put in place to stop them being avoided.