Keith wrote in news: snipped-for-privacy@4ax.com:
Good point. That's the principle we use for trackside signal lights here in Norway, too. A typical lineside signal has three lights - two with green glass, one with red glass.
Two green means clear and next signal down the line green too One green means clear, but next signal not green One red means stop. No light means stop So if one light bulb burns out, your speed goes down (or you stop).
Same with the train control board at the traffic control center. Dark section means occupied, lit section means clear. Light burn out, and the section looks like it is occupied instead of clear. Slows things down if a light bulb burns out, but you don't get an accident.
You cannot prevent equipment failure or human error. They *will* happen. What you can do is try to minimize the consequences of error.
Thanks for the line to General code of operating rules.
Smile, Stein