<?xml version="1.0" encoding="UTF-8"?>
<REQ-IF xmlns="http://www.omg.org/spec/ReqIF/20110401/reqif.xsd"
        xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <THE-HEADER>
    <REQ-IF-HEADER IDENTIFIER="header-se-offshore-oil-safety">
      <CREATION-TIME>2026-04-24T20:27:52.589Z</CREATION-TIME>
      <REQ-IF-TOOL-ID>AIRGen</REQ-IF-TOOL-ID>
      <REQ-IF-VERSION>1.0</REQ-IF-VERSION>
      <SOURCE-TOOL-ID>AIRGen</SOURCE-TOOL-ID>
      <TITLE>se-offshore-oil-safety</TITLE>
    </REQ-IF-HEADER>
  </THE-HEADER>
  <CORE-CONTENT>
    <REQ-IF-CONTENT>
      <DATATYPES>
        <DATATYPE-DEFINITION-STRING IDENTIFIER="string-type" LAST-CHANGE="2026-04-24T20:27:52.589Z" MAX-LENGTH="65535"/>
        <DATATYPE-DEFINITION-INTEGER IDENTIFIER="int-type" LAST-CHANGE="2026-04-24T20:27:52.589Z" MIN="0" MAX="100"/>
      </DATATYPES>
      <SPEC-TYPES>
        <SPEC-OBJECT-TYPE IDENTIFIER="req-type" LAST-CHANGE="2026-04-24T20:27:52.589Z">
          <SPEC-ATTRIBUTES>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-ref" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Reference">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-text" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Text">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-rationale" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Rationale">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-pattern" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="EARS Pattern">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-verification" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Verification Method">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-INTEGER IDENTIFIER="attr-qaScore" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="QA Score">
              <TYPE><DATATYPE-DEFINITION-INTEGER-REF>int-type</DATATYPE-DEFINITION-INTEGER-REF></TYPE>
            </ATTRIBUTE-DEFINITION-INTEGER>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-complianceStatus" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Compliance Status">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-complianceRationale" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Compliance Rationale">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-tags" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Tags">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
          </SPEC-ATTRIBUTES>
        </SPEC-OBJECT-TYPE>
        <SPEC-RELATION-TYPE IDENTIFIER="trace-link-type" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Trace Link">
          <SPEC-ATTRIBUTES>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-linkType" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Link Type">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-linkDescription" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Description">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-linkRationale" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Rationale">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
          </SPEC-ATTRIBUTES>
        </SPEC-RELATION-TYPE>
        <SPECIFICATION-TYPE IDENTIFIER="spec-type" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Document">
          <SPEC-ATTRIBUTES>
            <ATTRIBUTE-DEFINITION-STRING IDENTIFIER="attr-docName" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Document Name">
              <TYPE><DATATYPE-DEFINITION-STRING-REF>string-type</DATATYPE-DEFINITION-STRING-REF></TYPE>
            </ATTRIBUTE-DEFINITION-STRING>
          </SPEC-ATTRIBUTES>
        </SPECIFICATION-TYPE>
        <RELATION-GROUP-TYPE IDENTIFIER="linkset-type" LAST-CHANGE="2026-04-24T20:27:52.589Z" LONG-NAME="Document Linkset"/>
      </SPEC-TYPES>
      <SPEC-OBJECTS>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:STK-REQ-001" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="STK-REQ-001">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Offshore Oil Platform Safety System SHALL detect and respond to all credible major accident hazards — including hydrocarbon release, fire, toxic gas exposure, and well blowout — in sufficient time to prevent escalation to a platform-level emergency.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The duty holder has a legal obligation under the Safety Case Regulations to demonstrate that major accident hazard risks are reduced to ALARP. The safety system is the primary engineered barrier between a process upset and a catastrophic event. Without timely detection and response, minor releases escalate to fires, explosions, and potential loss of life.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Test">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="stakeholder; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:STK-REQ-002" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="STK-REQ-002">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Offshore Oil Platform Safety System SHALL enable the safe evacuation of all personnel from the platform within the time-to-untenable-conditions established by the Safety Case quantified risk assessment.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Offshore Installation Managers and platform operators need confidence that in any credible emergency scenario, the safety system provides sufficient warning, communication, and evacuation support to get all personnel off the installation before conditions become unsurvivable. This is the overriding stakeholder concern — every other safety function exists to buy time for evacuation.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Demonstration">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="stakeholder; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:STK-REQ-003" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="STK-REQ-003">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Offshore Oil Platform Safety System SHALL comply with IEC 61511 for safety instrumented systems and IEC 61508 for safety-related hardware and software, achieving the Safety Integrity Levels specified in the Safety Requirements Specification for each safety instrumented function.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The regulatory authority (HSE in UK, BSEE in US) requires formal demonstration that safety instrumented systems meet recognised functional safety standards. Non-compliance risks enforcement action including prohibition notices that halt production. IEC 61511 is the process-sector implementation of IEC 61508 and is the universally accepted basis for SIS design in oil and gas.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Inspection">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="stakeholder; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:STK-REQ-004" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="STK-REQ-004">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Offshore Oil Platform Safety System SHALL achieve a spurious trip rate of no more than one per year per safety function on average, to prevent unnecessary production shutdowns while maintaining required safety integrity.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Platform operators and the duty holder need the safety system to be dependable in both directions: it must trip when needed (safety integrity) and not trip when not needed (availability). Each spurious platform shutdown costs approximately USD 1-5 million in lost production and restart costs. Excessive spurious trips also degrade operator confidence, increasing the risk of alarm overrides. The one-per-year target balances safety and operational economics per industry practice.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Analysis">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="stakeholder; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:STK-REQ-005" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="STK-REQ-005">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Offshore Oil Platform Safety System SHALL support online proof testing and partial-stroke testing of safety instrumented functions without requiring process shutdown or degradation of the protected function below SIL 1.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Maintenance technicians on offshore platforms operate under severe logistical constraints — helicopter access, limited crew size, compressed maintenance windows during turnarounds. If proof testing requires a process shutdown, it either doesn't get done (degrading safety integrity over time) or requires costly production outages. Online testing capability is essential to maintain target SIL throughout the proof test interval.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Demonstration">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="stakeholder; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:SYS-REQ-001" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SYS-REQ-001">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Fire and Gas Detection System SHALL confirm a hydrocarbon gas release at or above 20% LEL within 10 seconds of gas reaching any detector in the affected zone, using 2ooN voting logic to eliminate single-detector false alarms.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The 10-second detection confirmation window derives from the overall escalation timeline analysis: a typical high-pressure gas release reaches flammable cloud dimensions within 30-60 seconds. Combined with the &lt;1s ESD actuation requirement, a 10s detection window leaves approximately 20-50s margin before ignition probability becomes significant. The 20% LEL threshold is the industry-standard alarm setpoint per EN 60079-29-1, providing early warning before reaching the 60% LEL high-alarm trip threshold.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Test">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="system; detection; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:SYS-REQ-002" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SYS-REQ-002">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Emergency Shutdown System SHALL actuate all designated final elements for an ESD Level 1 (total platform shutdown) within 1 second of receiving a confirmed hazard input, including closure of all ESD valves, isolation of ignition sources, and initiation of process depressurisation.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The 1-second actuation budget is allocated from the overall safety system response time target. Logic solver scan time (100ms) plus solenoid valve response (200ms) plus ESD valve stroke time (remaining budget) must fit within 1s. This is achievable with TMR logic solvers and spring-return fail-close actuators. Exceeding 1s delays isolation of the hydrocarbon source, allowing the flammable inventory to grow and increasing the probability and severity of ignition.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Test">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="system; esd; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:SYS-REQ-003" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SYS-REQ-003">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Emergency Shutdown System SHALL achieve SIL 3 for all ESD Level 1 safety instrumented functions, with a probability of failure on demand (PFDavg) no greater than 1x10^-3 over a 12-month proof test interval.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SIL 3 allocation for ESD Level 1 functions derives from the LOPA (Layer of Protection Analysis) performed during the Safety Case. An ESD Level 1 failure leaves the platform with no automated means of isolating the entire hydrocarbon inventory during a confirmed major hazard. The 1x10^-3 PFDavg is the upper boundary of SIL 3 per IEC 61511 Table 4, and the 12-month proof test interval reflects the typical offshore maintenance cycle (annual turnaround).">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Analysis">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="system; safety; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:SYS-REQ-004" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SYS-REQ-004">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Public Address and General Alarm System SHALL deliver an audible alarm exceeding 65 dBA above ambient noise level in all occupied platform areas within 2 seconds of ESD activation, and provide intelligible voice announcements with a Speech Transmission Index of at least 0.5 in all muster areas.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The 2-second activation time ensures the PA/GA alert reaches personnel before the physical effects of the hazard (gas migration, radiant heat). The 65 dBA above ambient threshold is the minimum per ISO 7731 to ensure alarm audibility in process areas with ambient levels of 85-95 dBA. STI &gt;= 0.5 (the 'fair' intelligibility threshold per IEC 60268-16) is necessary for personnel to understand verbal evacuation instructions above background noise — lower STI means personnel cannot distinguish muster commands from abandon commands.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Test">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="system; alarm; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:SYS-REQ-005" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SYS-REQ-005">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Emergency Shutdown System SHALL achieve a mean time between spurious trips of at least 8760 hours (one year) for each ESD Level 1 safety function, demonstrated by SIL verification calculation using actual failure rate data.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Directly derived from the stakeholder one-per-year spurious trip target. The 8760-hour MTBST maps to this target for continuous-demand assessment. Achieving this with SIL 3 integrity requires careful architectural design — TMR voting (2oo3) in the logic solver, redundant sensors with voting, and diagnostic coverage to distinguish dangerous failures from safe failures. Without this target, the system would be over-conservative and economically unviable.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Analysis">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="system; availability; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      <SPEC-OBJECT IDENTIFIER="uht-bot:se-offshore-oil-safety:SYS-REQ-006" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SYS-REQ-006">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-ref</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The Fire Protection System SHALL deliver a minimum water application rate of 10.2 L/min/m2 to the design fire area within 30 seconds of deluge valve activation, sustained for a minimum of 4 hours from the firewater storage reservoir without external water supply.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-text</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The 10.2 L/min/m2 rate derives from NFPA 15 / EN 13565-1 for hydrocarbon pool fire suppression on offshore platforms. The 30-second delivery time accounts for deluge valve opening (5s), ring main pressurisation (10s), and system charge time (15s). The 4-hour endurance derives from the worst-case fire scenario duration identified in the Quantitative Risk Assessment, accounting for the time to depressurise and isolate all hydrocarbon inventories plus a safety margin.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-rationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Test">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-verification</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="system; fire-protection; session-324">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-tags</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-OBJECT-TYPE-REF>req-type</SPEC-OBJECT-TYPE-REF></TYPE>
      </SPEC-OBJECT>
      </SPEC-OBJECTS>
      <SPEC-RELATIONS>
      <SPEC-RELATION IDENTIFIER="rel-0" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <SOURCE><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-004</SPEC-OBJECT-REF></SOURCE>
        <TARGET><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-005</SPEC-OBJECT-REF></TARGET>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="derives">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkType</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Spurious trip rate stakeholder need derives the ESD MTBST requirement">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkDescription</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The 8760-hour MTBST is the direct quantitative translation of the one-per-year spurious trip target in STK-REQ-004 applied to the most critical (and most disruptive) safety function — ESD Level 1. This is where the spurious trip impact is greatest, so this is where the requirement must be most stringent.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkRationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-RELATION-TYPE-REF>trace-link-type</SPEC-RELATION-TYPE-REF></TYPE>
      </SPEC-RELATION>
      <SPEC-RELATION IDENTIFIER="rel-1" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <SOURCE><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-003</SPEC-OBJECT-REF></SOURCE>
        <TARGET><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-003</SPEC-OBJECT-REF></TARGET>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="derives">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkType</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="IEC 61511 compliance derives the SIL 3 PFDavg requirement for ESD Level 1">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkDescription</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="SIL 3 is the specific integrity level assigned to ESD Level 1 functions by the LOPA. The PFDavg target and proof test interval are the quantitative parameters that IEC 61511 requires for SIL verification — without them the compliance claim in STK-REQ-003 cannot be substantiated.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkRationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-RELATION-TYPE-REF>trace-link-type</SPEC-RELATION-TYPE-REF></TYPE>
      </SPEC-RELATION>
      <SPEC-RELATION IDENTIFIER="rel-2" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <SOURCE><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-002</SPEC-OBJECT-REF></SOURCE>
        <TARGET><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-004</SPEC-OBJECT-REF></TARGET>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="derives">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkType</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Safe evacuation need derives the PA/GA alarm and intelligibility requirement">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkDescription</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Personnel cannot evacuate if they do not receive timely, intelligible notification. PA/GA activation within 2 seconds of ESD is the first link in the evacuation chain — the alarm triggers muster, muster leads to headcount, headcount leads to evacuation decision. STI &gt;= 0.5 ensures commands are understood, not just heard.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkRationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-RELATION-TYPE-REF>trace-link-type</SPEC-RELATION-TYPE-REF></TYPE>
      </SPEC-RELATION>
      <SPEC-RELATION IDENTIFIER="rel-3" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <SOURCE><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-001</SPEC-OBJECT-REF></SOURCE>
        <TARGET><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-006</SPEC-OBJECT-REF></TARGET>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="derives">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkType</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Hazard response need derives the firewater delivery requirement">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkDescription</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Fire suppression is the second line of defence after ESD isolation. If isolation fails or is incomplete, fire protection must contain and suppress the fire to prevent escalation. The delivery rate and endurance directly determine whether a contained fire remains contained.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkRationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-RELATION-TYPE-REF>trace-link-type</SPEC-RELATION-TYPE-REF></TYPE>
      </SPEC-RELATION>
      <SPEC-RELATION IDENTIFIER="rel-4" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <SOURCE><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-001</SPEC-OBJECT-REF></SOURCE>
        <TARGET><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-002</SPEC-OBJECT-REF></TARGET>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="derives">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkType</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Hazard response need derives the ESD Level 1 actuation time requirement">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkDescription</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The 1-second actuation budget is the ESD subsystem's share of the escalation prevention timeline. After F&amp;G confirms the hazard, the ESD must isolate hydrocarbon sources fast enough to prevent ignition — this is the core mechanism by which STK-REQ-001's response requirement is met.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkRationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-RELATION-TYPE-REF>trace-link-type</SPEC-RELATION-TYPE-REF></TYPE>
      </SPEC-RELATION>
      <SPEC-RELATION IDENTIFIER="rel-5" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <SOURCE><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-001</SPEC-OBJECT-REF></SOURCE>
        <TARGET><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-001</SPEC-OBJECT-REF></TARGET>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="derives">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkType</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Hazard detection stakeholder need derives the F&amp;G detection confirmation time requirement">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkDescription</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="The 10-second confirmation window is the detection subsystem's allocation of the overall escalation prevention timeline required by STK-REQ-001. Without timely gas detection, the ESD system cannot respond before the release becomes a major accident.">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-linkRationale</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <TYPE><SPEC-RELATION-TYPE-REF>trace-link-type</SPEC-RELATION-TYPE-REF></TYPE>
      </SPEC-RELATION>
      </SPEC-RELATIONS>
      <SPECIFICATIONS>
      <SPECIFICATION IDENTIFIER="spec-architecture-decisions" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <TYPE><SPECIFICATION-TYPE-REF>spec-type</SPECIFICATION-TYPE-REF></TYPE>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Architecture Decisions">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-docName</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <CHILDREN>
          <SPEC-HIERARCHY IDENTIFIER="hier-sec-section-1773915773992">
            <CHILDREN>

            </CHILDREN>
          </SPEC-HIERARCHY>
        </CHILDREN>
      </SPECIFICATION>
      <SPECIFICATION IDENTIFIER="spec-interface-requirements" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <TYPE><SPECIFICATION-TYPE-REF>spec-type</SPECIFICATION-TYPE-REF></TYPE>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Interface Requirements">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-docName</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <CHILDREN>
          <SPEC-HIERARCHY IDENTIFIER="hier-sec-section-1773915773753">
            <CHILDREN>

            </CHILDREN>
          </SPEC-HIERARCHY>
        </CHILDREN>
      </SPECIFICATION>
      <SPECIFICATION IDENTIFIER="spec-stakeholder-requirements" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <TYPE><SPECIFICATION-TYPE-REF>spec-type</SPECIFICATION-TYPE-REF></TYPE>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Stakeholder Requirements">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-docName</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <CHILDREN>
          <SPEC-HIERARCHY IDENTIFIER="hier-sec-section-1773915773465">
            <CHILDREN>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:STK-REQ-001">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-001</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:STK-REQ-002">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-002</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:STK-REQ-003">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-003</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:STK-REQ-004">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-004</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:STK-REQ-005">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:STK-REQ-005</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
            </CHILDREN>
          </SPEC-HIERARCHY>
        </CHILDREN>
      </SPECIFICATION>
      <SPECIFICATION IDENTIFIER="spec-subsystem-requirements" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <TYPE><SPECIFICATION-TYPE-REF>spec-type</SPECIFICATION-TYPE-REF></TYPE>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Subsystem Requirements">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-docName</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <CHILDREN>
          <SPEC-HIERARCHY IDENTIFIER="hier-sec-section-1773915773869">
            <CHILDREN>

            </CHILDREN>
          </SPEC-HIERARCHY>
        </CHILDREN>
      </SPECIFICATION>
      <SPECIFICATION IDENTIFIER="spec-system-requirements" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <TYPE><SPECIFICATION-TYPE-REF>spec-type</SPECIFICATION-TYPE-REF></TYPE>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="System Requirements">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-docName</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <CHILDREN>
          <SPEC-HIERARCHY IDENTIFIER="hier-sec-section-1773915773643">
            <CHILDREN>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:SYS-REQ-001">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-001</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:SYS-REQ-002">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-002</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:SYS-REQ-003">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-003</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:SYS-REQ-004">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-004</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:SYS-REQ-005">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-005</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
              <SPEC-HIERARCHY IDENTIFIER="hier-uht-bot:se-offshore-oil-safety:SYS-REQ-006">
                <OBJECT><SPEC-OBJECT-REF>uht-bot:se-offshore-oil-safety:SYS-REQ-006</SPEC-OBJECT-REF></OBJECT>
              </SPEC-HIERARCHY>
            </CHILDREN>
          </SPEC-HIERARCHY>
        </CHILDREN>
      </SPECIFICATION>
      <SPECIFICATION IDENTIFIER="spec-verification-requirements" LAST-CHANGE="2026-04-24T20:27:52.589Z">
        <TYPE><SPECIFICATION-TYPE-REF>spec-type</SPECIFICATION-TYPE-REF></TYPE>
        <VALUES>
          <ATTRIBUTE-VALUE-STRING THE-VALUE="Verification Requirements">
            <DEFINITION><ATTRIBUTE-DEFINITION-STRING-REF>attr-docName</ATTRIBUTE-DEFINITION-STRING-REF></DEFINITION>
          </ATTRIBUTE-VALUE-STRING>
        </VALUES>
        <CHILDREN>
          <SPEC-HIERARCHY IDENTIFIER="hier-sec-section-1773915774118">
            <CHILDREN>

            </CHILDREN>
          </SPEC-HIERARCHY>
        </CHILDREN>
      </SPECIFICATION>
      </SPECIFICATIONS>
      <SPEC-RELATION-GROUPS>
      <RELATION-GROUP IDENTIFIER="rg-linkset-1773915774379">
        <SOURCE-SPECIFICATION><SPECIFICATION-REF>spec-subsystem-requirements</SPECIFICATION-REF></SOURCE-SPECIFICATION>
        <TARGET-SPECIFICATION><SPECIFICATION-REF>spec-verification-requirements</SPECIFICATION-REF></TARGET-SPECIFICATION>
        <TYPE><RELATION-GROUP-TYPE-REF>linkset-type</RELATION-GROUP-TYPE-REF></TYPE>
      </RELATION-GROUP>
      <RELATION-GROUP IDENTIFIER="rg-linkset-1773915774343">
        <SOURCE-SPECIFICATION><SPECIFICATION-REF>spec-interface-requirements</SPECIFICATION-REF></SOURCE-SPECIFICATION>
        <TARGET-SPECIFICATION><SPECIFICATION-REF>spec-verification-requirements</SPECIFICATION-REF></TARGET-SPECIFICATION>
        <TYPE><RELATION-GROUP-TYPE-REF>linkset-type</RELATION-GROUP-TYPE-REF></TYPE>
      </RELATION-GROUP>
      <RELATION-GROUP IDENTIFIER="rg-linkset-1773915774279">
        <SOURCE-SPECIFICATION><SPECIFICATION-REF>spec-system-requirements</SPECIFICATION-REF></SOURCE-SPECIFICATION>
        <TARGET-SPECIFICATION><SPECIFICATION-REF>spec-verification-requirements</SPECIFICATION-REF></TARGET-SPECIFICATION>
        <TYPE><RELATION-GROUP-TYPE-REF>linkset-type</RELATION-GROUP-TYPE-REF></TYPE>
      </RELATION-GROUP>
      <RELATION-GROUP IDENTIFIER="rg-linkset-1773915774236">
        <SOURCE-SPECIFICATION><SPECIFICATION-REF>spec-system-requirements</SPECIFICATION-REF></SOURCE-SPECIFICATION>
        <TARGET-SPECIFICATION><SPECIFICATION-REF>spec-subsystem-requirements</SPECIFICATION-REF></TARGET-SPECIFICATION>
        <TYPE><RELATION-GROUP-TYPE-REF>linkset-type</RELATION-GROUP-TYPE-REF></TYPE>
      </RELATION-GROUP>
      <RELATION-GROUP IDENTIFIER="rg-linkset-1773915774194">
        <SOURCE-SPECIFICATION><SPECIFICATION-REF>spec-system-requirements</SPECIFICATION-REF></SOURCE-SPECIFICATION>
        <TARGET-SPECIFICATION><SPECIFICATION-REF>spec-interface-requirements</SPECIFICATION-REF></TARGET-SPECIFICATION>
        <TYPE><RELATION-GROUP-TYPE-REF>linkset-type</RELATION-GROUP-TYPE-REF></TYPE>
      </RELATION-GROUP>
      <RELATION-GROUP IDENTIFIER="rg-linkset-1773915774153">
        <SOURCE-SPECIFICATION><SPECIFICATION-REF>spec-stakeholder-requirements</SPECIFICATION-REF></SOURCE-SPECIFICATION>
        <TARGET-SPECIFICATION><SPECIFICATION-REF>spec-system-requirements</SPECIFICATION-REF></TARGET-SPECIFICATION>
        <TYPE><RELATION-GROUP-TYPE-REF>linkset-type</RELATION-GROUP-TYPE-REF></TYPE>
      </RELATION-GROUP>
      </SPEC-RELATION-GROUPS>
    </REQ-IF-CONTENT>
  </CORE-CONTENT>
</REQ-IF>