Limits
What an advisory checker is, and is not
Eyetory is being built to give a controls engineer a second reading of PLC code: possible problems, the line they sit on and the timing that triggers them. The engineer decides what to do with that.
01 / Rating
Not safety-rated
Eyetory is not safety-rated. It is not designed or assessed as a safety function, and it must not be used as one.
It does not replace functional-safety validation, risk assessment or commissioning. Those stay with the people and processes responsible for the machine.
02 / Errors
It will be wrong sometimes
It may miss hazards
A green verdict means only that the questions it asks produced no finding under the timings it tried. Hazards outside those questions, or under other timings, can remain.
It may flag harmless code
An amber or red finding can describe a situation that cannot happen on your machine, for example because of mechanics or wiring the code does not show.
It depends on what it is given
If the I/O list is wrong or incomplete, the verdict can be wrong too.
03 / Responsibility
The engineer stays responsible
The engineer stays responsible for the code, for the machine and for every decision to run it. A verdict from Eyetory is advice to weigh, not approval to proceed.
04 / Stage
In development
Eyetory is in development and nothing about it has been measured yet. When we publish measurements, they will include the cases it gets wrong.