Certification covers a specific configuration and may be invalidated by modifications or environmental change
Aliases: certified configuration · change impact assessment · recertification
What it is
Configuration-bounded safety certification means a conformity conclusion applies to the evaluated hardware, software, tool, payload, installation, safeguard, operating parameters, and environment. Changing an end effector, model, shelf layout, or floor friction can alter evidence supporting the original risk assessment.
Why it happens
Safety is a cross-component causal chain: sensors determine detection, control versions determine response, payload and floor determine braking, and layout determines trapping and escape. A local change propagates through that chain. Even a separately certified component can create different stop distance, failure response, or hazards when integrated. Change control therefore assesses safety effect, not merely compatibility.
Studying it
A controlled baseline and safety-requirement trace support differential hazard analysis for every change. Regression testing compares sensing coverage, safety-function response, stop distance, contact consequence, and nuisance trips before and after, including interface and version mismatch. Negative results and untested combinations must remain visible.
Where it stops holding
Not every patch demands complete recertification. The required reassessment depends on jurisdiction, certification scheme, and whether the change affects a safety function or condition of use, as judged by authorized competent people. Even like-for-like maintenance can alter performance through calibration, wear, or failed parameter restoration.
Applying it
- Put firmware, models, parameters, tools, payloads, sensors, layout, and environment into a controlled, field-verifiable baseline.
- Screen every deviation for affected hazards, evidence, and third-party reassessment before production release.
- Repeat adverse-condition tests for safety-relevant changes and audit the site for unrecorded modifications, temporary obstacles, and parameter drift.
Related
- Same group: X5.07.1 Different applications fall under different safety standards · X5.07.3 Standards lag behind emerging human-robot collaboration scenarios · X5.07.4 Certification is a deployment floor, not a guarantee of actual safety
- Adjacent: X3.04 Failure and help-seeking · X5.05 Responding when a person enters the workspace
- Search terms:
configuration control·change impact assessment·recertification