Dead-zone review becomes a risk issue when the highest operating or alarm level approaches the radar's near-range limit. The key question is not whether a catalogue lists a short blocking distance, but whether the installed instrument retains reliable indication and adequate response time before product reaches the unsafe elevation. Nozzle reflections, buildup and configuration can reduce that margin. The assessment should combine elevations, maximum fill rate, material in transit, alarm delay and final shutdown time, then verify how invalid radar data is handled. Independent overfill protection must remain separate where required by the risk assessment.
Build an upper-level risk diagram
Place antenna reference, blocking limit, normal maximum, high alarm, high-high trip, overflow and roof on one elevation drawing. Include uncertainty and required operating margin.
For solids, consider the local filling cone beneath the inlet. For liquids, include surge, thermal expansion and continued inflow after the shutdown command.
Calculate available response time
Use the maximum credible fill rate and cross-sectional area to estimate level rise. Add transmitter damping, lost-echo delay, PLC scan, alarm processing, valve or conveyor stopping and material in transit.
Compare total response with the vertical margin between alarm and unsafe level. A setpoint is not protective if the process cannot stop before the remaining volume is consumed.
Confirm the installed near range
Verify exact antenna and firmware limits, nozzle bore and length, antenna projection, fixed structures, condensation and buildup. Treat the published blocking distance as a minimum design input.
Capture echo curves as high as safely practical and assess signal margin. Do not reduce blocking settings simply to make the display continue without manufacturer and field evidence.
Design invalid-data behaviour
Define fault current, quality status, held-value rules and timeout when the surface enters the unreliable region. The control system must show that the measurement is invalid.
A frozen high value may appear stable while the tank continues filling. Configure clear annunciation and the approved fail-safe action instead of allowing normal automatic filling to continue.
Keep protection independent
Where overfill consequence requires a separate high-high device, verify its technology, setpoint, proof-test interval and final shutdown path independently from the process radar.
Avoid common mounting, power, logic or maintenance failures that defeat both channels. Manage bypasses formally and restore them before filling resumes.
Record and maintain the margin
Store elevation calculations, fill-rate assumptions, echo evidence, timing tests and approvals. Test alarms and final elements at the accepted delay and process conditions.
Repeat the assessment after throughput increase, nozzle or antenna change, higher operating level, product change, firmware update or altered alarm logic.
Control proof-test evidence
For every independent high-high function, document the sensing point, setpoint tolerance, response delay, remaining freeboard, final shutdown device and proof-test method. Record the actual trip level or simulation boundary, restoration checks and any bypass duration. Compare the proof-test interval with process demand and site requirements rather than the process radar's maintenance schedule. This evidence shows that near-range loss of the continuous measurement does not remove the separate protective layer on which the risk decision depends.
Engineering checklist
- Draw all high-level elevations together.
- Calculate total detection and shutdown time.
- Verify the installed near-range margin.
- Make invalid measurements unmistakable.
- Proof-test independent overfill protection.
- Reassess after process or configuration change.
Frequently asked questions
Can the high alarm be set inside the dead zone?
No. The alarm needs verified detection margin or a suitable independent device.
Why include material in transit?
Conveyors and pipes may continue delivering product after the stop command.
Does a shorter configured blocking distance improve safety?
Only if physical signal performance is proven; changing a number cannot remove near-field limitations.
Need a project-specific review? Send process data, drawings, photographs and acceptance criteria through our contact page.
