Rockwell Automation T80016 Application Note Maintenance Override Programming - Manual (Page 11)

Trusted TM
AN-T80016 Maintenance Override Programming
Issue 1 June 08 AN-T80016 11
The safety signal is set active (False) when the real input is active (False) and
the maintenance override is not active. The safety signal is cleared (True) when
Reset is active (True) and either the input is not active or the Maintenance
Override is active.
*)
IF RST AND (DI OR Int_OS) THEN
TRIP := True ; (* Trip can be reset *)
END_IF;
IF
NOT DI AND NOT Int_OS THEN
TRIP := False ; (* Input tripped and not overridden *)
END_IF ;