A ups, pump, motorised valve will not fail safe.
Even with tripple redundacy like used in fly by wire aeroplanes they will not fail safe.
You just reduce the probability of failure
Open vented gravity fed with the correct size pipe if the ball valve does not stick up on
The header tank then failure should go to plan.
Even this web site with UPS and cyclic redundancy keeps
Failing
Alan,
I didn't suggest this design is fail safe, in fact I clearly stated that it wasn't fail safe. What I asked was if anyone had used this type of method because it's a recognised method in other industries in some safety critical applications. Every system has a probability of failure, even 'fail safe' systems can fail dangerously, e.g. in the gravity system the heat sink radiator may be blocked by sediment or corrosion products, the valves may have been inadvertently closed, the radiator may be incorrectly sized, etc.
I compare the UPS usage to using a PRV in a pressurised system. Both have a probability of failure on demand, but they are recognised to provide acceptable levels of reliability for their application; all I'm wondering is has anyone gone down this route?
As an aside, how many people actually maintain / test their PRV in the pressurised systems? Personally I wouldn't like to rely on them after 5 or 10 years installation with no service. At least the UPS provides some level of diagnostics to confirm it's functionnig, provided it's checked.
Dhaslam,
Agreed that the thermal store will act as a heat dump, but I'm looking at another layer of protection for the system to be sure.