Spindle on/off under CNC software control - safety worries!

[JAZZCNC]

So how is this addressed in practice? (I'm sure it's not just me that it alarms!) ...the thought of a simple relay to control the spindle on/off doesn't seem that robust....I'm figuring there needs to be some form of time delay (sustained condition for X seconds) before the spindle can be allowed to start?

Doesn't work like that Hank. Works in 2 ways.?

If doing a tool changes in Job then the M6 tool change macro code stops the G-code and the spindle via switching the relevant output state controlling the spindle relay. It then waits until you press cycle start again often pausing for a second or two so the spindle spins upto speed before continuing on thru the g-code. It's not a time based operation at all.

OR. . . You can manually stop/start the spindle often Via a screen button or thru MDI using M3/M5 G-codes which does the same has screen button and switchs the relay with it's output signal.

If you really don't trust the relay or system then just do like M-C says and put an in-line isolator switch. Doesn't need to be on power lines it can be a simple on/off switch breaking the signal to relay so the NO relay can't be switch state.!

In practice it's not a problem and I've never had a false start or relay switch state.

[HankMcSpank]

I guess ultimately then, it's how much do you trust the relay (or more so, the relay contacts) that controls the spindle startup! (I'd figured there'd be a little more 'conditional' scenarios involved before a spindle could be allowed to start)

The problem with an isolating switch, is forgetting to switch it back to the 'enable' position & then walking off (or forgeting to isolate it in the first place!)....but far better that then having my hands turned to mincemeat by a spindle relay contact closing while my hands are still on the spindle!

[JAZZCNC]

I guess ultimately then, it's how much do you trust the relay (or more so, the relay contacts) that controls the spindle startup! (I'd figured there'd be a little more 'conditional' scenarios involved before a spindle could be allowed to start)

Not really the relay contacts because it's a NO relay and when signal drops power to relay coils the contacts break naturally ( Unless faulty in which case it won't stop anyway.!)
It's the control software or more accurate the signal state you can't trust and in extreme case's it's possible it could switch state thru noise interference.!!

You could build into the Macro some conditional checking like checking the state of a input. This could be done by using double throw relay which sets a spare input used has a NOT-READY-NO-GO
This is one of the reasons for using a M6 tool change macro. It's in this macro where you'd put code for things like auto tool changers etc and also for doing safety checks like this if needed.! (could even turn kettle on for you for quick brew between changes. . Lol)

[HankMcSpank]

Not really the relay contacts because it's a NO relay and when signal drops power to relay coils the contacts break naturally ( Unless faulty in which case it won't stop anyway.!)
It's the control software or more accurate the signal state you can't trust and in extreme case's it's possible it could switch state thru noise interference.!!

Exactly, I realise the relay contacts in play will be NO ...but it's the software/circuit that drives the coil I worry about...this is why I figured some condition dependent time delay would be brought into play here on the relay circuit ...therefore if a transient occured (in software or the control board), the spindle wouldn't kick into life straight away ...ultimately, I kinda seek a beep-beep-beep (like bin truck reversing sound), a couple of seconds before the spindle starts ...that way if I hear beep-age, I know to get my hands off the spindle sharpish!

[JAZZCNC]

.ultimately, I kinda seek a beep-beep-beep (like bin truck reversing sound), a couple of seconds before the spindle starts ...that way if I hear beep-age, I know to get my hands off the spindle sharpish!

Sure it's not that difficult to implement if your that concerned but to be honest IME not really needed and something along the vain of my last suggestion would be easy to do and pretty much fail safe.