Solenoid shall be failsafe at power failure (de-energized) with SIL certificateThe actuator shall be failsafe also when air lose whether spring-return or double action (shall be with storage air tank keep air not lose even no plant air to guarantee vent equipment can be open at least one time by this air tank, or by means of gravity loaded),