A key-operated jumper across a guard interlock cannot be declared compliant, Category 3, or PL c from the available evidence. The decision depends on the task requiring access, the machine state during access, the bypass architecture, the risk assessment, and the validated safety-function calculation.
Do not treat a bypass as an automatic legal exception
The evidence cites Machinery Directive 2006/42/EC as allowing safety devices to be neutralized for certain tasks, including maintenance and cleaning, when protective conditions such as warnings and limited machine speed apply. However, it does not provide the directive text, an applicable conformity route, or enough machine details to determine whether a proposed bypass is lawful.
EN 954-1 and EN 13849-1 are also cited, but the evidence does not establish that either document authorizes or prohibits a key-switch bypass. Treat those documents as requirements to check against the complete safety function; do not infer compliance from the presence of a key switch, acoustic warning, beacon, or reduced speed.
Separate direct bypass, muting, and safe motion
| Approach | Evidence-supported description | Engineering decision |
|---|---|---|
| Direct bypass | Bridges or neutralizes a magnetic or guard-locking interlock. | The evidence questions whether directly defeating a safety relay or interlock can satisfy the required safety performance. |
| Managed muting | Uses a safety device with muting inputs, continues observing the protective-device input, and permits muting only under a defined condition. | Confirm that the condition distinguishes the intended material or event from personnel access, indicates when muting is active, and addresses residual risk. |
| Safety-related motion limitation | Uses integrated safety functions such as limiting torque, position, or direction instead of necessarily stopping all movement. | Determine whether the specific equipment and safety function support the required maintenance or operating task; no device or function identifier is supplied. |
Evaluate the proposed access mode
- Define why the magnetic or guard interlock must be neutralized, such as maintenance or cleaning. If the task is not defined, the required protective mode cannot be selected.
- Identify the hazards that remain while the guard is open and determine whether limited speed, limited torque, limited position, limited direction, warnings, or additional protective measures address them.
- Choose a controlled safety architecture. Do not assume that a selector wired as a simple jumper is equivalent to managed muting or a safety-related motion function.
- Calculate the achieved performance under EN 13849-1 for the complete safety function, including the bypass or mode-selection path. The evidence supplies no architecture data or calculation results from which Category 3 or PL c can be confirmed.
- Validate the operating sequence and residual-risk controls on the finished machine, including indication while muting or neutralization is active.
What must be verified before acceptance
Test that the bypass or muting condition operates only in the intended machine state, that protective-device inputs remain handled as designed, and that leaving the permitted condition restores the normal protective response. Verify all warning indications and every safety-related motion restriction used to justify access.
Document the task, hazards, selected control measures, safety-function architecture, EN 13849-1 calculation, and validation results. Without those records, the available evidence cannot support a Category 3, PL c, or legal-compliance claim.
FAQ
Can a key switch legally bypass a machine guard interlock?
The evidence does not support a universal yes or no. Evaluate the specific task, residual hazards, protective operating mode, applicable requirements, and validation results before accepting the design.
Does limited speed make an interlock bypass Category 3 or PL c?
No conclusion can be drawn from limited speed alone. Calculate and validate the complete safety function under EN 13849-1, including the selector, bypass logic, sensing, outputs, and fault response.
What is preferable to directly jumpering a safety interlock?
The evidence identifies managed muting or supported safety-related motion limitations as alternatives to assess. Muting must occur only under a defined condition, be indicated while active, and include an evaluation of residual risk.