# Process Control, Instrumentation & SIL Automation for Stössel Class 4 & 5 Critical Chemical Reactions

In fine chemical and pharmaceutical Active Pharmaceutical Ingredient (API) plants, chemical syntheses categorized under Stössel Criticality Class 4 and Class 5 represent the most hazardous operational regime for batch and semi-batch stirred reactors.

Because secondary exothermic decompositions can be triggered before or during normal heat transfer limitations, passive cooling and standard operator intervention are mathematically and physically insufficient. Managing these reactions safely requires a rigorous multi-layered defense combining reaction calorimetry (RC1e / ARC), fault-tolerant 2oo3 field instrumentation, Basic Process Control System (BPCS) online soft-sensors, and SIL-2 / SIL-3 Safety Instrumented Systems (SIS) with fast-acting automated mitigation.

Stössel Class 4 and 5 Control Systems & Automation

# 1. Fundamentals: The Stössel Criticality Hierarchy

Developed by Dr. Francis Stoessel, this fundamental process safety framework ranks reaction runaway severity by comparing four characteristic temperatures:

$T_p$ (Process Operating Temperature): The target setpoint maintained during normal synthesis (e.g., $35^\circ\text{C}$ ).
$MTSR$ (Maximum Temperature of the Synthesis Reaction): The maximum temperature the reaction mixture can reach adiabatically if all cooling is lost and accumulated unreacted reagent reacts completely:

\text{MTSR} = T_p + X_{accum} \cdot \Delta T_{ad}

where $X_{accum}$ is the unreacted fraction ( $0.0 \le X_{accum} \le 1.0$ ) and $\Delta T_{ad} = \frac{-\Delta H_{rxn} \cdot m_{feed}}{m_{batch} \cdot C_p}$ is the adiabatic temperature rise.
3. $T_D$ (Decomposition Onset Temperature): The temperature at which secondary thermal decomposition becomes self-sustaining under adiabatic conditions (typically defined from Accelerating Rate Calorimetry, ARC, as the point where the Time-to-Maximum-Rate $\text{TMR}_{ad} = 24\text{ hours}$ ).
4. $T_{max}$ (Maximum Technical Temperature): The atmospheric boiling point of the reaction mixture ( $T_{bp}$ ), or the temperature corresponding to the setpoint of the emergency pressure relief device ( $T_{relief}$ ).

# Criticality Class Definitions & Thermal Explosion Physics

Criticality Class	Temperature Hierarchy	Thermal Hazard & Physics Mechanism	Risk Control Philosophy
Class 1	$MTSR < T_p < T_D < T_{max}$	Inherently Safe: Even with complete accumulation and total loss of cooling, the reaction cannot reach $T_D$ .	Standard BPCS temperature control.
Class 2	$T_p < MTSR < T_{max} < T_D$	Thermally Safe: Reaction reaches boiling ( $T_{max}$ ) before $T_D$ . Evaporative reflux cooling naturally arrests the runaway.	Standard condenser sizing & BPCS interlocks.
Class 3	$T_p < MTSR < T_D < T_{max}$	Moderate Hazard: Secondary decomposition ( $T_D$ ) is reachable if total accumulation occurs, but does not boil.	Strict dosing-controlled feed rates ( $X_{accum} < 10\%$ ).
Class 4	$T_p < T_D < MTSR < T_{max}$	HIGH HAZARD: $T_D$ is lower than $MTSR$ and below the boiling point. If cooling fails during accumulation, secondary decomposition begins BEFORE reaching the boiling point! Evaporative cooling CANNOT temper the runaway.	Mandatory SIL-2/3 automated trips + fast-acting chemical quenching.
Class 5	$T_p < T_D < T_{max} < MTSR$ or $T_p < MTSR < T_D < T_{max}$	EXTREME EXPLOSION HAZARD: Synthesis exotherm directly triggers catastrophic decomposition with high $dP/dt$ gas evolution.	Continuous flow micro-reactors or dual independent SIL-3 SIS safety interlocks.

# 2. Multi-Layer Automation & Control Strategy (LOPA)

For Stössel Class 4 & 5 reactions, standard industry practice enforces a Layer of Protection Analysis (LOPA) compliant with IEC 61511 / ISA-84:

+---------------------------------------------------------------------------------------+
|                       INDEPENDENT SAFETY DEFENSE LAYERS                               |
+---------------------------------------------------------------------------------------+
|  Layer 1: BPCS Automation      - Cascade Temperature Control Loop                     |
|                                - Coriolis Mass-Flow Ratio Control                     |
|                                - Online Reaction Calorimetry Soft-Sensor (MTSR(t))    |
+---------------------------------------------------------------------------------------+
|  Layer 2: SIL-2 / SIL-3 SIS    - 2oo3 Quad-Element Duplex RTDs Voting Logic           |
|                                - Automated Dosing Trip (Fail-Closed XV-101A/B < 1.5s) |
|                                - Emergency Cryogenic Sub-Zero Glycol Jacket Deluge    |
+---------------------------------------------------------------------------------------+
|  Layer 3: Active Mitigation    - Pressurized N2 Chemical Quench / Inhibitor Blast     |
+---------------------------------------------------------------------------------------+
|  Layer 4: Passive Mechanical   - DIERS Leung Omega Two-Phase Rupture Disk + PSV       |
+---------------------------------------------------------------------------------------+

# A. Field Instrumentation Engineering (2oo3 TMR Architecture)

Triple Modular Redundant (2oo3) Temperature Sensing:
- Install 3 independent, dual-element $\text{Pt-100}$ RTDs inside a high-conductivity Hastelloy C-22 or Tantalum-sleeved thermowell.
- Position sensors at three critical elevations: reactor bottom dish (minimum stirring volume), impeller discharge path, and upper liquid zone.
- The safety logic solver executes 2oo3 voting logic: any two agreeing sensors above safety thresholds initiate immediate automated trip actions, filtering out single-channel sensor drift or false trips.
Dual Coriolis Mass Flow Meters:
- Install dual Coriolis meters in series on the hazardous reagent dosing line to monitor instantaneous mass addition rate ( $\text{kg/h}$ ) and fluid density ( $\text{g/cm}^3$ ) with $\pm 0.10\%$ precision.
Continuous Agitator Integrity Sensing:
- Measure real-time motor current draw, variable frequency drive (VFD) output torque, and an optical/inductive shaft rotation sensor.
- If agitation stops for more than $1.0\text{ second}$ , dosing must trip instantly to avoid building an unmixed, stratified layer of concentrated reagent.

# B. Online Reaction Calorimetry Soft-Sensor (Real-Time MTSR Tracking)

Traditional temperature controllers only react after the bulk temperature increases. For Class 4/5 reactions, the DCS must run a real-time thermal dynamic heat balance algorithm updated every $500\text{ ms}$ :

q_{rxn}(t) = U \cdot A \cdot (T_{reactor}(t) - T_{jacket}(t)) + m_{batch}(t) \cdot C_p \cdot \frac{dT_{reactor}}{dt} + q_{loss}

The instantaneous unreacted accumulation fraction $X_{accum}(t)$ is tracked continuously:

X_{accum}(t) = 1 - \frac{\int_0^t q_{rxn}(\tau)\, d\tau}{\Delta H_{rxn,total}}

The DCS dynamically predicts the instantaneous potential runaway temperature:

MTSR(t) = T_{reactor}(t) + X_{accum}(t) \cdot \Delta T_{ad}

📌 Important

MTSR(t)

approaches within

15\text{ K}

T_D

, the BPCS automatically throttles the reagent dosing valve to prevent unreacted material accumulation.

# C. 4-Tier Automated SIS Interlock Action Matrix

Safety Tier	Trigger Condition	Automated SIS Action	Final Actuator & Speed
Tier 1: BPCS Throttling	$T_{reactor} > T_p + 3^\circ\text{C}$ or $X_{accum} > 12\%$	Throttles Coriolis dosing control valve by $50\%$ ; drives TCU to maximum chilled water cooling.	Electric / Pneumatic Control Valve ( $< 3.0\text{ s}$ )
Tier 2: Hard SIS Dosing Trip	2oo3 $T_{reactor} > T_p + 6^\circ\text{C}$ or Agitator trip or Cooling header $P < 2.5\text{ bar}$	SIL-2 Interlock 01: De-energizes dual fail-close automated isolation valves ( $\text{XV-101A/B}$ ) on dosing line.	Dual Spring-Return Automated Ball Valves ( $< 1.5\text{ s}$ )
Tier 3: Cryo-Glycol Jacket Deluge	$\frac{dT_{reactor}}{dt} > +1.5^\circ\text{C/min}$ with dosing stopped	SIL-3 Interlock 02: Fully opens $-20^\circ\text{C}$ sub-zero cryogenic chilled glycol deluge to reactor jacket.	Fail-Open Pneumatic Angle Valves ( $< 2.0\text{ s}$ )
Tier 4: Pressurized Chemical Quench	$T_{reactor} \ge T_D - 15^\circ\text{C}$ (e.g. $70^\circ\text{C}$ ) or $P > 2.8\text{ bar g}$	SIL-3 Interlock 03: Blasts $500\text{ L}$ of chemical kill/diluent fluid directly into reactor core under $8.0\text{ bar}$ $\text{N}_2$ pressure.	High-Speed Nitrogen Blast Valve ( $< 1.0\text{ s}$ )

# 3. Industrial Case Study: 5.0 kL Exothermic Aromatic Nitration

# Problem & Process Chemistry

A commercial fine chemical manufacturing plant executes an aromatic nitration in a $5.0\text{ kL}$ Hastelloy C-22 Jacketed Reactor:

\text{Ar-H} + \text{HNO}_3 \xrightarrow[\text{H}_2\text{SO}_4]{35^\circ\text{C}} \text{Ar-NO}_2 + \text{H}_2\text{O} \quad (\Delta H_{rxn} = -185\text{ kJ/mol})

+-----------------------------------------------------------------------------------+
|                        CALORIMETRY & THERMAL RISK PROFILE                         |
+-----------------------------------------------------------------------------------+
|  * Process Operating Setpoint (T_p):         35.0 °C                              |
|  * Total Batch Mass:                         3,850 kg                             |
|  * Adiabatic Temperature Rise (Delta_T_ad):  92.0 K                               |
|  * Maximum Temperature of Synthesis (MTSR):  127.0 °C                             |
|  * Secondary Decomposition Onset (T_D):      85.0 °C   (ARC Onset: TMR_ad < 24h)  |
|  * Atmospheric Boiling Point (T_max / T_bp): 140.0 °C                             |
|                                                                                   |
|  STÖSSEL RANKING:                                                                 |
|  T_p (35°C)  <  T_D (85°C)  <  MTSR (127°C)  <  T_max (140°C)                      |
|  ===> STÖSSEL CLASS 4 CRITICAL REACTION (Catastrophic Runaway if cooling fails!)  |
+-----------------------------------------------------------------------------------+

# Sizing the Automated Safety Systems

Dosing Rate & Heat Removal Equilibrium:
- Total exotherm: $Q_{total} = \frac{3,850\text{ kg}}{180\text{ g/mol}} \times 185\text{ kJ/mol} = 3.95\text{ GJ}$ .
- Available cooling jacket area: $A = 12.5\text{ m}^2$ , $U = 380\text{ W/m}^2\text{K}$ .
- With $15^\circ\text{C}$ chilled water, max cooling capacity $q_{cool,max} = 12.5 \times 380 \times (35 - 15) = 95.0\text{ kW}$ .
- Target Dosing Duration:

\tau_{dose} \ge \frac{3.95 \times 10^6\text{ kJ}}{95.0\text{ kJ/s}} = 41,578\text{ s} \approx 4.5\text{ Hours}

Programmed dosing rate: $400\text{ kg/h}$ regulated by Coriolis mass flow controller.

Automated Pressurized Chemical Quench Tank Design:
- Sized at $500\text{ L}$ containing cold water / neutralizing base under a dedicated $8.0\text{ bar}$ Nitrogen blanket.
- Sized to instantly dilute the acid concentration and depress reaction kinetics by $> 98\%$ within $10\text{ seconds}$ .
Emergency Relief System (DIERS Two-Phase Sizing):
- Sized per the DIERS Homogeneous Equilibrium Model (HEM) Leung $\omega$ -Method for an exotherm rate of $\frac{dT}{dt} = 15^\circ\text{C/min}$ .
- Calculated required area $A_{req} = 2.04\text{ in}^2 \implies$ API 526 Letter 'L' Orifice ( $2.853\text{ in}^2$ ) with $4" \times 6"$ Flanges discharging to an enclosed scrubbed knockout drum.

# 4. Engineering Implementation & Safety Checklist

Dual Series Dosing Isolation: Install two fail-closed pneumatic ball valves in series with spring-return actuators and limit switch position feedback.
Anti-Siphon Protection: Reagent dip-pipes must incorporate an anti-siphon hole or spring-loaded vacuum break check valve to prevent gravity siphonage during pump trips.
Fast-Response Thermowell: Specify tantalum-sleeved or thin-wall Hastelloy dual RTD assemblies with thermal response time $\tau_{63} < 3.5\text{ seconds}$ .
Uninterruptible Power (UPS): Safety PLC logic solvers, Coriolis meters, and solenoid valves must be backed by a minimum 2-hour online static UPS battery system.
Stored Mechanical Energy: Emergency chemical quench dump systems must rely on stored Nitrogen gas pressure, guaranteeing operation even during total plant electrical and instrument air blackout.
Proof Testing & Partial Stroke Testing (PST): Schedule quarterly automated partial stroke testing of safety isolation valves to ensure zero mechanical sticking.

Process Control, Instrumentation & SIL Automation for Stössel Class 4 & 5 Critical Chemical Reactions

Peer-Reviewed & PE Verified