Lesson 76 of 78 · Design the System
Safety, Human Work & Lifecycle Economics Package
Technical performance is one axis of the capstone. This package proves the system can be introduced responsibly.
Safety file
Include intended use and foreseeable misuse, lifecycle tasks, hazard identification, risk estimates, selected risk reductions, safety-function specification, safeguard layout, stopping assumptions, energy-isolation map, procedures, validation protocol, residual-risk communication, and applicable standards/register. OSHA’s robot manual supplies an application-oriented checklist for U.S. workplaces 1.
Human-work design
Provide current/future task allocation, staffing and role changes, operator and maintenance journeys, interface mockups, reach/sightline/access review, workload and alarm review, training/qualification, recovery tasks, authority to stop or override, worker feedback, and job-quality measures. State what skill remains human and how it is maintained.
Lifecycle economics
Update capital, integration, facilities, internal labor, ramp, training, spares, energy, maintenance, licenses, downtime, change, and retirement. Link benefits to requirements and operational realization. Show discounted cash flow plus downside scenarios.
Cyber and data
Inventory assets and accounts; define trust boundaries, remote access, least privilege, logging, backup/restore, patch/change process, and behavior during network loss. NIST OT guidance keeps safety and reliability alongside security 2.
Ethics and distribution
State who gains time, who gains workload, who bears new monitoring or recovery, how performance data could be used, what privacy is protected, and whether the design expands or narrows skill. MIT’s work research makes these institutional choices part of technology outcomes 3.
Gate 4
Pass when risk reduction is designed and testable, affected roles are prepared, lifecycle value remains plausible, recovery work is visible, and authority for residual-risk and production-release decisions is named.
Source trail
References
- 1OSHA Technical Manual, Section IV, Chapter 4 - Industrial Robot Systems and Industrial Robot System Safety. Occupational Safety and Health Administration. 2021. verifiedRobot-system components, lifecycle hazards, risk assessment, safeguards, collaborative modes, training, evaluation, and applicable U.S. requirements. Cited at: evaluation considerations.
- 2NIST SP 800-82 Rev. 3 - Guide to Operational Technology Security. National Institute of Standards and Technology. 2023. verifiedSecurity guidance for OT systems, including PLC, DCS, SCADA, physical-process interactions, reliability, performance, and safety constraints. Cited at: OT requirements.
- 3The Work of the Future - Building Better Jobs in an Age of Intelligent Machines. MIT Task Force on the Work of the Future. 2020. verifiedTask-level account of automation, new work creation, skills, technology diffusion, job quality, institutions, and shared prosperity. Cited at: report framing.
Further reading
- 29 CFR 1910.147 - The Control of Hazardous Energy (Lockout/Tagout). Occupational Safety and Health Administration. verifiedU.S. general-industry minimum performance requirements for controlling unexpected energization, startup, and release of stored energy during service and maintenance.
- ISO 10218-2:2025 - Safety Requirements for Industrial Robot Applications and Robot Cells. International Organization for Standardization. 2025. verifiedCurrent requirements for integration, commissioning, operation, maintenance, decommissioning, and disposal of robot applications and cells.
Check your understanding
- Why integrate safety, human factors, and economics in detailed design?
- They change layout architecture staffing controls access cost and acceptance
- They are post-launch paperwork
- Only mechanics affects design
- Economics replaces safety
These concerns shape the technical system and must be resolved before design freeze.
- What is residual risk?
- Risk remaining after implemented risk-reduction measures and communicated for responsible use
- Risk ignored by the team
- Purchase price
- A controller variable
Residual risk must be evaluated, documented, communicated, and accepted through the appropriate process.