AFMS SAFETY BOUNDARY GUIDE Digital lockout/tagout = software state. Physical stop or pump inhibit = Tank Control + installed hardware. Optional lockable emergency stop = local safety layer for Tank Control sites.