Risk Assessment for Hexamine Nitration into RDX

ABSTRACT: Explosives are widely used in extraction of ores, melts and fuels and in the safe and economical demolition of structures. These applications demonstrate the value of explosives to society and the reason why they are manufactured worldwide despite the hazard of their preparation. Hence, this paper focuses on the manufactory of the military explosive Hexogen (also known as RDX). The characteristics of the process are described by the analysis of a specify manufactory plant. The chosen analysis tool is the Hazard and Operability Study – HazOp. Historically, this methodology has been applied at chemical industries and is used in industrial process operability analysis. This study analyses seven critical nodes in the RDX manufacturing process, identifies several deviations, and causes and consequences. From these results, improvements in the units are suggested and actual conditions discussed. It is important to remark that this work is an initial approach to analysis of the manufacturing process of RDX using the HazOp methodology.


INTRODUCTION
Explosives are energetic materials that have been used since the basic foundations of modern civilization in minerals, ores, metals and fuel exploitation.Due to their importance, explosives are manufactured worldwide.Every operation involving explosive usage offers risks.Hexogen (also known as RDX) is a high explosive, largely used in the oil industry (Galante et al., 2013).Hence, the risk of explosion is always present in production processes (Khan and Abbasi, 1999), which may lead to large accidents, such as the one in Bhopal (Bisarya and Puri, 2005;Chouhan, 2005;Eckerman, 2005;Gehlawat, 2005).An "explosive" is defined as solid or liquid substances that can combust quickly in an exothermic reaction (Meyer et al., 2007).Instability is a major characteristic of explosives, which undergo reaction triggered by flame, friction or heat.A quick release of gases at high-pressure gases, with a great energy emission, characterizes the explosion.
Due to these characteristics, the manufacture, testing, sale, storage, and transportation of explosives require special consideration, which can be addressed by performing risk analyses, shuck as HazOp or Hazard Preliminary analyses.According to Taylor (2007), design issues can be addressed during any stage of a chemical unit, even one already operating.From that perspective, this work assesses the existing risks at a nitration process in the manufacture of RDX, emphasizing the perspective presented by Steen and Aven (2011), who discusse engineering risks.From the works of Aven (2012) and Held (2012), one realizes that a risk analysis of a RDX manufacturing unit is feasible through HazOp methodology.Furthermore, Held (2012) reported and discussed detonation of a small amount of explosive in the piping just after batch nitration of HMX.In this accident, one operator was injured with shrapnel and then hospitalized.Damage to the plant was minor.Held (2012) reported that the investigation of this accident showed that the sensitivity of intermediate products was underestimated and that a HazOp (Boonthum et al., 2014;Dunjó et al., 2010;Rausand and Hoyland, 2011;Rausand and Utne, 2009) should be used to assess risk prior to the start-up of the unit.
Hence, the main goal of this paper is to analyze and diagnose risks in a chemical unit used to manufacture RDX.Graf and Schmidt-Traub (2000), among others, proposed the use of HazOp for addressing safe operation of chemical plants, which in this particular case is a unit to nitrate Hexamine into RDX.Therefore, the HazOp was chosen as the most suitable method for this paper.

CASE OF STUDY
Explosives are substances of great importance in human development.Besides their traditional use by the military, RDX is used in civilian applications, such as tunnels, construction, and exploitation of natural resources such as mining and oil exploration.Explosives are chemical substances or mixtures of substances, which react rapidly by heating or attrition and generate large volumes of gas and heat.Explosives are classified by several standards (for example STANAG (NATO), MIL-STD (USA) and TM-9-1903 (USA)).Classifying explosives according to their detonation velocity is far common.RDX is classified as a high explosive (also known as "secondary explosive") due to its output of energy during detonation, when compared to a low explosive (with a detonation velocity in the same magnitude of the speed of sound) (Akhavan, 2011;Cooper, 1996;Galante et al., 2014;Meyer et al. , 2007;Urbanski, 1984).
Hexogen, RDX, T4 or cyclone are common names for 1,3,5-trinitroperhydro-1,3,5-triazine.Hexogen is an explosive used as main charge in military warheads, as well as in mining explosives (Galante et al., 2013;Galante and Haddad, 2009) or additive to propellants.It is soluble in acetone, insoluble in water, and partly soluble in ether and ethanol.According to Meyer et al. (2007), RDX may be the most important explosive in terms of brisance; besides that, its explosive power is high, as well as its detonation velocity (Mei et al., 2012).
Due to the inherent risk contact, it is necessary to observe RDX storage and transport conditions.This explosive is very sensitive to electrical sparks, shock, and heat and impact, among some other stimuli.Achuthan and Mullick (1983) studied and discussed risks including fire, explosion, and toxic hazards during manufacture of RDX.

PRODUCTION PROCESS
Bachmann and Sheehan (1949); Leach and Staples (1981); Lukasavage and Slagg (1993) and Meredith (1976) were the first to describe the synthesis of the high explosive hexogen (RDX).The Chemical production of RDX occurs mainly in nitration vessels.Hence, this is the core of any manufacturing facility.According to the analysis of manufacturing procedures (Akhavan, 2011;Cooper, 1996;IMBEL, 2006;Lukasavage and Slagg, 1993;Meredith, 1976;Urbanski, 1984), the typical capability of production in a semi-batch type unit (Fogler, 1999) is 50kg dry hexamine per hour/batch (IMBEL, 2006).The process transforms hexamine into RDX via nitration (using HNO 3 ) and paraformaldehyde (the paraformaldehyde is added to the vessel manually and before the production starts).
This case of study produces Hexogen (C 3 H 6 O 6 N 6 ) by nitrating hexamethylaminetriamine (C 6 H 12 N 4 ) using strong nitric acid.The later precipitation of the explosive occurs by adding cold water.The industrial manufacture of RDX used for this study parallels processes patented by Luksavage and Slagg (1993) and Meredith (1976).The flowchart under study (Fig. 1) basically consists of the mixture in nitration vessels, boilers, followed by filtration of the final product.Although this is not the most recent method for manufacturing RDX, it is still largely used worldwide, reason why it was chosen for this study.
In this process, the reaction temperature is kept between 12°C and 15°C during the addition of nitric acid, the reaction is allowed to go up to 18°C, temperature in which it is quenched.After finishing the nitration, the mixture is heated to 60°C for 60 minutes.After this period, the mixture is cooled and the RDX precipitate is filtered, washed and dried.Each stage (nitration, heating and cooling) is held in a different vessel.The equipment specified in Table 1, which also shows the available quantities, comprises the manufacturing facility.
All the vessels listed in Table 1 have a nominated volume of 300 liters and are made of stainless steel.Each and every vessel is equipped with a safety release valve, placed in the bottom end of the vessel.These safety valves operate under air pressure, which means that they will open if the pressure in an air pipeline drops, may it be by design (operator acting upon a switch) or by a power loss in the unit.These vales will automatically open if the reaction temperature within the nitration vessel moves above 18°C.All safety valves are connected to an emergency neutralization vessel, diluting the nitric acid will be diluted and the reaction quenched.et al. (2013) stated that the rock blasting, carried out on every day activities in thousands of locations around the world, is a primary activity in mining and civil excavation.They stated that in blasting and mining activities, risk management in explosive operations aims personal and health safety.However, there are other risks involved in the employing of explosives.They have suggested the use of HazOp as the main risk analysis technique for deviations.HazOp is a method for risk assessment that favors the decision making for corrective actions, where applicable.In general, it involves several professionals from different specialties, in order to evaluate different aspects of the studied object and favors process industries due to the easiness of applying control points (Khan and Abbasi, 1999).

Seccatore
One of the first publications related to the methodology became available in 1974 and was called "Operability studies and hazard analysis" (Dunjó et al., 2010;Kletz, 2009).This paper provided a guide for applying the methodology created by the Chemical Industries Association in the UK in 1977.Dunjó et al. (2010) analyzed the increase in publications in subsequent years, especially between 1996 and 2000, in which more than 40 papers on the theme were published.Initially, HazOp (Dunjó et al., 2010;Rossing et al., 2010) was developed to analyze chemical process systems (Pérez-Marin and Rodríguez-Toral, 2013;Schüller et al., 1997), but over time, its application was extended to other types of systems and complex operations of various kinds, including computer programs (Rausand and Hoyland, 2011).Galante and Haddad (2009) proposed a variation for use in the explosives industry.Furthermore, there are several approaches of this methodology, which could be used isolated or in parallel to other techniques (Boonthum et al., 2014;Van den Bosch and Weterings, 2005;CCPS, 1989;Defence, 2012;Haddad et al., 2012;Kennedy and Kirwan, 1998;Sahar et al., 2010;Schuller et al., 1997;Shimada et al., 2012).
A HazOp report may review all possible deviations, as well as their causes and consequences and proposes mitigation and active or passive protection (Labovský et al., 2007).According to Schüller et al. (1997), the soundness of the methodology is a function of the extent of the known interactions evaluated and the detail level of the analysis, and the depth of study of the identified consequences.A limitation of HazOp is that this approach is inherently qualitative (a "diagnostic tool") (Crawley et al., 2000).Moreover, there is the difficulty to estimate the time required for a complete HazOp study (Dunjó et al., 2010;Freeman and Mcnamara, 1992;Khan and Abbasi, 1997) as well as a lack of risk acceptability criteria and international standards, as discussed by Rouhiainen & Gunnerhed (2002) and Labovský et al. (2007).
The application of HazOp is based on the formulation of questions in a structured and systematic approach, through the appropriate use of guide words applied to critical points within the process being studied.From the guidewords and process parameters, deviations can be identified and further analyzed.Table 2 shows a series of standard guide words for basic application of HazOp, as presented by Rausand and Hoyland (2011).
As previously stated, each guideword is applied to a process parameter to determine a deviation.Every deviation is studied.Table 3 provides possible relationships between guidewords and the consequent deviations.

RESULTS
This work is a reference for conducting further analysis in the unit by addressing a greater number of nodes.The nodes evaluated here were chosen because they are considered critical in the production sequence, following the criterion of a node before each "key" component.The component keys identified were two reaction tanks, the transfer of process fluids, product purification, cooling and output of the final product.
Therefore, for this study of HazOp, the process flowchart was divided into seven nodes, where each node was study according to the parameters presented in Table 4.The selected nodes are listed as follows:  • Array of vessels for waste and clean water for dilute HNO 3 (Table 5); • Connection between nitration vessels (Table 6); • Connection between the nitration vessel and the boiler (Table 7); • Connection between boilers (Table 8); • Connection between boiler and heat exchanger (Table 9); • Connection between the heat exchanger and the vacuum filter (Table 10); and • Connection between the vacuum filter and the RDX recovery pan (Table 11).
These seven nodes were chosen in order to allow the study to focus on the most hazardous equipment within processes.It is reported in the literature (Akhavan, 2011;Cooper, 1996;IMBEL, 2013;Lukasavage and Slagg, 1993;Meyer et al., 2007;Urbanski, 1984) that the most critical operations are the nitration, followed by those dealing with heating and gaseous extraction.The study also incorporated some preparation vessels and filtering unities, due to the acid present in those equipment.
Hence, there are seven nodes selected for evaluation.The chosen parameters were: flow, pressure, temperature, and reaction.The viscosity parameter was not considered significant to the process, and therefore not used.Table 4 summarizes the parameters used for each node.The guidewords used were: none, more and less.It is important to highlight that "REVERSE" and "OTHER THAN" are not considered, since the production under study is not a flow process; instead it is organized in batches.

NODE #1
The node #1 includes all tanks containing water for washing and HNO 3 , i.e., waste water vessel, vessel for HNO 3 @10% and vessel for HNO 3 @60%.These were analyzed for flow, pressure and temperature.Since the process at this node is the dilution of HNO 3 and no chemical reaction occurs, the parameter "reaction" was not considered.Table 5 is the result of the HazOp for this node.
Regarding the results for the parameter "flow", there is the need to install a valve that allows the flow to increase (in cases where there is no flow or low flow) or to stop (when flow is increased).From the analysis of the parameter "pressure", the final recommendation is to install a regulatory valve at the flow into the tanks, allowing consequently the increase or decrease in pressure.Accompanying this parameter is the suggestion to install a pressure gauge to monitor it.Furthermore, one can determine deviations in temperature via thermocouples installed in the tanks (monitored via a control panel).As a solution, it is possible to increase or decrease the flow, depending on the temperature.One solution to the problem is to correlate this assembly to the heat exchanger or the inflow of brine.

NODE #2
The second node (node #2) connects nitration vessels 2 and 3.For this node, the parameters flow, temperature and reaction were analyzed.Table 6 is the result of the HazOp for this node.
The pressure switch was not evaluated since its variation results from changing other parameters, making its analysis therefore redundant.Possible variations in the mass flow were analyzed using keywords "none" and "less".All of them are related to errors in hexamine dosing and possible flaws in this operation.In order to minimize the occurrence of this event, implementing automatic control in this equipment is suggested.Regarding the parameter "flow", there is also the possibility of potential physical damage to the pipes, occurring in the guidewords "none" and "less".In these cases, the implementation of a program of preventative maintenance or replacement of the pipelines, when necessary, is recommended.
In the case of increased flow ("more flow"), venting the equipment in order to prevent overpressure and the consequent risk of explosion is recommended.For this, it is necessary to empty the tank.Draining is possible through bottom discharge valves.Variation in flow is identifiable by checking discharge into the emergency vessel, which may interrupt the chemical reaction.This tank is connected to the output of all the reactors (nitration vessel and boilers).When the temperature increases above the set points (which are established from the safety limits of the reactions), the control system interrupts the supply of     Flow increased to the tank to discharge emergency Regarding the "temperature" parameter, its failures relate to issues within the feeder of hexamine, failure dosing HNO 3 @99% (failure in the tank for HNO 3 @99%), and failure in the heat exchanger.The precautionary measure is to decrease or increase the flow of coolant brine according to the temperature increase or decrease, respectively.A final consideration is that, due to the nature of the reaction, a thermal explosion is very unlikely to occur, since the increase of flow would increase the rate in which NOx is released, creating an overpressure before a thermal explosion.
Analyzing the parameter "reaction", is relevant because the nitration step is essential for RDX production.In relation to this parameter, one identifies the possibility of occurrence of the following deviations: none, less and more.For them, there is a possibility of failure in nitration vessel 3 and/or nitration vessel 2 and hexamine feeder HNO 3 @99% dosage failure.
The suggested remedial measure is to regulate the flow into the tank for discharge in emergency (depending on the nature of the deviation) via regulating valves already existing.

NODE #3
The third node (node #3) is located between the hexamine feeder and boiler 1.An analysis was made for flow, temperature and reaction.Table 7 is the result of the HazOp for this node.
Among the operations occurring in node #3, there is hexamine addition into the mixture and heating in a vessel to 70°C (after nitration, which is carried out at 18°C).This process completes the conversion of hexamine into RDX.Nitrogen oxide gases are formed as by-products.These are released to another vessel to prevent encapsulation within the crystals of RDX in the form of acids.Following nitration, which occurs at 18°C, the boiler heats the mixture to 70°C.Boiling safely completes the conversion of hexamine into RDX.Boiling also releases the nitrogen oxide gases.
The flow in this node can increase due to failures in tank RDX or HNO 3 @99% Feed.Decrease of flow is related to obstruction or crushing of the supply line.The reaction parameter may be increased or decreased depending on the increase or decrease of flow equipment.As a solution to the differences observed in this node, it is suggested to carry out regular maintenance to prevent the clogging of pipelines and of feeder for hexamine, which is replaced when necessary.Another measure is that it is necessary to interrupt the operation in case of overflow.
Deviations in temperature are directly related to flow.Identification of these deviations can occur by inspection and by instruments (thermal sensors).The main consequence of temperature deviations is decrease of yield and interruption of the manufacturing process.Over-temperature increases pressure in vessels and reaction rate.Control valves and exhaust valves are required.The control valves operate integrated to sensors that measure temperature in the reactor and provide this information to a controller, which operates the valves to match set points.This safety system, if well stabilized, prevents any deviation in temperature.
Furthermore, as part of redundancy due to the explosive nature of the mix, as the temperature rises in this node, the control system enters a "state of alert".When the temperature rises to 12°C the Programmable Logic Controller (PLC) alerts the operator by a light in the panel, allowing the operator to monitor the situation closer.Continued increase in temperature to 15° C triggers a siren, thereby increasing the alertness level.At 18°C, a bottom valve opens and discharges the contents.Dilution by water lowers the temperature, dilutes the acid thereby interrupting the reaction, and eliminates the risk of explosion.Reaction time may differ slightly due to variation in feeding hexamine and hence to temperature change in equipment (boilers).There is also a risk of losing the batch in an accidental fire.

NODE #4
The forth node (node #4) extends between the two boilers.Analyzed parameters are "flow", "pressure", and "temperature".Table 8 is the result of the HazOp for this node.
The reaction parameter was not considered here because there are no chemical processes before or after this node.The parameter "flow" may increase by issues in the vessel for HNO 3 @99% or due to failure in the first boiler.Regarding interruption or flow reduction, there is the possibility of obstruction in the piping.To solve this problem it is suggested to implement maintenance programs and piping repair and replacement, as necessary.Deviations for flow can be identified by the presence of material in the emergency dump vessel.In this situation, the risks involved and response mechanism are analogous to those in node #2.
Pressure changes according to the flow from boiler 1 regarding the keywords "none, " "less", and "more".These keywords lead to variation in the flow of cold water (feed water).To address this situation, one can establish a maintenance program for the boilers and install a pressure gauge for the control parameter.The temperature (node #4) may increase or decrease, depending upon the decrease or increase in the pressure in boiler 1 or variations in the flow of wastewater, respectively.Temperature effects can be controlled with the implementation of instruments and a command and control system.

NODE #5
The fifth node (node # 5) is positioned between the second boiler and the second heat exchanger.Analysis of this node considers "flow", "pressure" and "temperature".Table 9 is the result of the HazOp for this node.
Like node #4, there is no need to address the reaction parameter.No reaction occurs at this node.The parameter "flow" may be increased by faults in the tank for HNO 3 @60% or because of failure in boiler 1. Flow interruption or reduction is due to obstruction in the piping, as well as the causes listed Pressure at node #5 varies due to gas leakage.This is a case of pressure reduction, which may be caused by an increase in the generation of nitrogen oxide gases, as well as a decrease in the capability of releasing pressure.Thus, there must be a pressure gauge at this point, and a pressure relief valve and enabling the discharge of nitrogen oxide gases.
The increase or decrease in temperature at this point (node #5) is related to decreased pressure or reduced inflow of cold water in the heat exchanger, as well as an increase in the pressure and inflow of cold water in the heat exchanger, respectively.These variations relates to the variation in the return flow of cooling water feed, as well as the flow of coolant water.The consequences of temperature increase at this point (node #5) do not generate events with potential major accidents or explosions, but can produce burns in the case of leakage.Inspection routines or changing the system for the return flow of chilled water and cold water feed will control temperature deviations.

NODE #6
The sixth node (node #6) is located between the heat exchanger and vacuum filters.To study this node, the recommended parameters are "flow" and "temperature", since there is no

Risk of Explosive initiation
Correction of deviations to flow requires installation of a flow control valve between equipment, periodic maintenance and a flow meter in the piping.Maintenance is a critical aspect for this node as well as the previous nodes.Further analysis of deviation in temperature at node #6 indicates that it relates to changes in the flow of cold water.Installing equipment for monitoring as well as for cooling or heating the product to be filtered can control these deviations.chemical reaction near this node.It remains at atmospheric pressure.Table 10 is the result of the HazOp for this node.Flow (at node #6) can increase due to a failure in the heat exchanger, a failure in the tank to HNO 3 @60%.Due to the absence of reaction, any flow issue relates to a failure in the tank and/or an obstruction in the flow driving.The consequence of these deviations is the changing of the load on the vacuum filter (increase, decrease or lack of flow).

Decreased feed flow cold water
There is no risk of explosion, just leak fluid heated, which creates potential for burns

NODE #7
The seventh node (node # 7) is located between the vacuum filters and the output of RDX.Flow is the only relevant parameter here since there is no chemical reaction and the flux between filters connection and product exit occurs in atmospheric pressure.Table 11 is the result of the HazOp for this node.
The parameter, "flow", indicates the failure of production in previous equipment, which is critical in this node.In order to identify the causes of deviation in the flow, one uses the keywords "none," "less", and "more".As a general rule, all deviation in flow relates to failure in vacuum filters (clogged or damaged) or obstruction of piping.Deviations for this node (node #7) are observable through loss of product quality and operational variation of the exhaust system.A possible mitigation is to ensure maintenance of this equipment.

DISCUSSION
Addressing the HazOp results from a management perspective, operation of the control system around the same variables and set points is critically important.This starting point provides the means to observe and address all possible (and sometimes expected) deviations.This integrated unit could be a PLC panel that monitors and controls all parameters relevant to the operation (temperature, pressure and flow rates).
Deviations in temperature are controllable through valves and/or temperature control equipment.In the RDX manufacturing unit, these valves should be installed along the pipeline to ensure safety.
A possible suggestion for improvement of in-service units is to modernize the existing control panel to ensure the most During the study, some safety bypasses were plotted, but neglected for HazOp purposes.Usually a bypass is located in stretches of critical piping and valves between departure and arrival of fluids.These safety devices ensure operational continuity of flow since they provide an alternate path for process fluids.They are, therefore, vital to solving the identified deviations in the parameter, "flow".This statement allows one to conclude that design engineers addressed the same issues discussed in this paper.
Data loggers found in most RDX units offer redundant storage of measurements in addition to storage devices present in the control panel.
In the storage vessels, one solution to the problem of deviations in the flow is an emergency discharge system.In the first node, for example, in case of failure there is the alternative of pumping fluid into the HNO 3 vessel.This will stop the process and reaction bulk would flow into the tank that contains HNO 3 @60%.
Furthermore, from the analysis of the design of an RDX manufacturing unit, one should conclude that some equipment provides redundancy, most likely for predicting the occurrence of failures as discussed in this paper.Action taken as a result of this analysis ensures, in some cases, the continuity of the process and in others, safe termination.
Since many of the control measures suggested in response to the possible consequences listed in this study are already present in most RDX plants, there is the logical assumption that a HazOp-type study has occurred prior to project implementation.However, absence of documentation of such studies in the open literature increases the relevance of this paper.
RDX manufacturing plants usually contain pneumatically controlled and powered equipment.This requires a source of compressed air.The compressed air system was not addressed as part of this work.
Installation of electronic sensing and control devices in RDX plants should increase accuracy and precision of operational parameters.However, these devices will not guarantee greater reliability in the safety system.Bottom valves, due to pneumatic operation and control, must remain in the CLOSED position during operation and fail in the OPEN position.This increases safety, since any loss of energy (or another deviation) will cause the valve to open, thereby discharging the reacting material into the dump vessel.
Most RDX units contain PLCs to monitor and control operating parameters.These communication systems allow the transmission of broadband data through the electrical grid.Thus would be allowed to monitor the unit for any computer, provided they are properly authorized, through Internet, favoring the monitoring of security conditions.Another advantage of the system is that its implementation requires no physical alterations on site, once the grid is already in place.

CONCLUSION
This paper assessed the risks of operation of an RDX manufacturing unit using HazOp methodology.This paper focused on the core issues of such a manufacturing unit, since the nodes were applied only at seven points, considered critical to the overall operation.Upon conclusion of this particular HazOp, each node provided key information that should be  12.Furthermore, the results show that the guidewords used for selected nodes (flow, pressure, temperature and reaction) and their deviations made possible a complete diagnostic of the RDX nitration unit intrinsic risks.This approach also made possible the analysis of types of detection, consequences of failure, and steps to be taken for each deviation identified.
This study also indicates that a risk assessment had occurred on the unit examined in this study previously.This is evident mainly due to existence in the flowcharts of the required mitigation measurements (such as safety valves, bypasses and control instruments).Finally, it is important to mention that HazOp methodology does not quantify risk.For this reason, other tools for risk assessment should complement HazOp.

Water vessels
Installation of control valves to assure flow management.
Implementation of level and temperature instruments.
All instrumentation should be integrated.

Connection between nitration vessels Nitration vessel
Implementation of a system to dose hexamine automatically Installation of a venting system in the equipment to prevent overpressure and the consequent risk of explosion is recommended.
Use of an empty dump tank and a draining valve at bottom.Favor mechanical valves over electronic ones in this key position.

3
Connection between the nitration vessel and the boiler

Post-nitration boiler
This operation (boiling) will release the nitrogen oxide gases, requesting a venting/exhaustion system.
It is necessary a mechanism to interrupt the operation in case of overflow.
Deviations in temperature are directly related to flow.

Connection between boilers Boiler
Deviations for flow can be identified by the presence of material in the emergency dump vessel.In this situation the risks involved and response mechanism are analogous to those in node #2.
Installation of a pressure gauge for the control parameter.
Temperature effects should be controlled with the implementation of instruments and a command and control system.

Connection between boiler and heat exchanger
Heat exchanger Dosing accurately the hexamine is key to avoid deviations in flow and temperature.
This operation (boiling) will release the nitrogen oxide gases, requesting a venting/exhaustion system.

6
Connection between the heat exchanger and the vacuum filter Vacuum filter Installation of control valves and periodic maintenance, as well as a flow meter should be considered Installing equipment for monitoring as well as for cooling or heating the product to be filtered should be considered 7 Connection between the vacuum filter and the RDX recovery pan

Filtering system
Deviations for this node (node #7) are observable through loss of product quality and operational variation of the exhaust system.
A possible mitigation is to ensure maintenance of this equipment.

Table 4 .
Parameter used in each node.
air to the bottom valve, opening it (the valve fails in the open position).In case of safety valve opening, the vessel contents flow into the dump tank emergency.The tank normally is partly filled with water at room temperature.This water dilutes the acid and equalizes the temperature, thus stopping the reaction and preventing an explosion.

Table 2 .
List of guide words.

Table 3 .
Deviations and parameters.

Table 5 .
Node #1 -Array of vessels for waste and clean water to dilute HNO 3 .

Table 7 .
Node #3 -Connection between the nitration vessel and the boiler.

Table 10 .
Node #6 -Connection between the heat exchanger and the vacuum filter.

Table 11 .
Node #7 -Connection between the vacuum filter and the RDX recovery pan.

Table 12 .
Study contributions and final results.