When I google estops, the rules change around the world, but I did find a definition of 3 categories of estops, none of which required removal of all power from the machine.
Category 0 is an uncontrolled stop by immediately removing power to the machine actuators.
Category 1 is a controlled stop with power to the machine actuators available to achieve the stop then remove power when the stop is achieved.
Category 2 is a controlled stop with power left available to the machine actuators.
So to me it seems we only have to worry about stopping the machine actuators and in this machine they are the stepper motors running off a 48 volt power supply and there is no mains power outside of the control cabinet.
Don't forget that latch0 in this case is your classical estop as it cuts power to the actuator mains power supply. This is clearly a category 0 estop.This is where your classical estop switches should all live. But in my view, you need to add the mains switching as well so if you want additional estop switches, you need to route mains power out of the control box which in my view is not desirable from a safety perspective.
The estop pendant relay has some constraints that prevent it from being included in that chain and while you could add in a relay to drop mains power, this also adds in an additional failure point and my advice said remote switching was non-compliant.
Disabling the stepper drivers also immediately removes power from the actuators (eg the stepper motors) so there is no controlled stop (unless you are telling me an estop in LCNC means a controlled stop but I don't see that in the docs anywhere). So I think the pendant also qualifies as a Category 0 estop. It could be improved by adding a relay to drop mains power and maybe I will add that.
I know Tommy had some other advice about what to do on a torch breakaway sensor but to me, I thought it made sense to treat this as an estop condition as it is possible that a torch with a dangerous plasma jet is waving around the place so estop will drop the spindle on signal that turns the torch on. From what I can see, the torch breakaway is also a category 0 event even if its not technically an estop button and I think this config treats it as such.
I think by wiring in the driver disable signals, I've created a safer machine as previously without it the steppers were enabled on Linuxcnc start up and this is no longer the case.
So in summary, I think the only improvement I could make is to add a 240 volt relay so the pendant could also drop mains power. When I started I never envisaged the machine would have a wireless remote with an estop switch on it and was uncomfortable running mains power out of the cabinet to those extra estop switches so we decided we would only have one estop button.
So I think after working through this, I should add the extra relay to drop mains power to the actuators.
Sorry about the long winded reply. This thread went in a totally different direction and never really added any clarity on how to use multiple estop latches which was my original question that I solved per my previous post. However I have learnt a lot so I thank everybody for their input and the significant differences of opinion as they always force you to make your own decisions (and maybe add another difference of opinion).
