Fault tolerance / the single-fault rule

Fault tolerance is the single fault rule in the 2019 edition of CAN/ULC-S524: where any type of fire alarm circuit serves more than one fire alarm zone required by the National Building Code, a single fault, meaning one open circuit, one short circuit or one ground fault, must not prevent normal operation of input or output field devices in more than one of those zones. UL places it at Section 18.1 and states that it applies to all circuits leaving the control unit. The 2019 edition set the boundary by Building Code required zones, replacing the 2,000 square metre area figure used in the previous edition. It is a containment requirement, and it is separate from supervision, which only reports the fault.

What the rule actually requires

Take one circuit that runs past several parts of a building. Put one fault on it. The question the rule asks is not whether the panel notices, it is how much of the building stops working. The answer permitted is one zone, and only one.

That is a design constraint before it is a wiring constraint. Zone boundaries are set by the Building Code, so the Code decides where the limits fall and the installation standard decides what happens at them. A circuit is allowed to cross a zone boundary, but only if it has been given a way to contain a fault at that boundary.

The rule names three faults and treats them alike: an open circuit fault, a short circuit fault and a ground fault. Any one of them, on its own, is the test. Two simultaneous faults are outside it.

What changed in 2019

The previous edition drew the containment boundary with an area figure, 2,000 square metres. The 2019 edition replaced that with a reference to the fire alarm zones the National Building Code requires. UL's May 2023 presentation to the Building Officials Association of British Columbia sets out both the old figure and the new wording.

The practical difference is that the question changed from "how big is this area" to "is this a zone the building code requires". Two designers pacing out square metres could reach different answers. The zone boundaries are already on the drawings.

How you satisfy it

Two ways, and most jobs use both in different places.

Circuit class. One arrangement gives the circuit a return path back to the control unit so a single break does not lose everything past it. The other does not. We are not going further than that here, and the reason is the point: the formal Class A and Class B definitions and the exact tolerance each class delivers live inside CAN/ULC-S524, which is copyrighted and paywalled. We do not reproduce it, and the NFPA 72 class definitions are not interchangeable with the Canadian ones.

Isolators. Where a circuit has to cross zone boundaries, an isolator opens the faulted segment and lets the rest keep operating. The 2019 edition recognises six types. In residential buildings the same logic produces the suite fault isolator, which contains a fault inside one dwelling unit.

What it does not mean

It is not fault immunity. A fault still happens, still removes protection from a zone, and still has to be found and fixed.

It is also not supervision. Supervision is a reporting mechanism: it makes the fault visible at the panel as a trouble. Fault tolerance is a containment mechanism: it limits what the fault takes with it. A system can be fully supervised and still fail the single fault rule, because the panel would tell you clearly that four zones just went dark. Both are required, and they are satisfied by different things.

Nor is it a substitute for zoning judgment. If a circuit is drawn to cross five required zones and the isolators are missing from the drawings, the compliance failure was made at design stage.

What to check on site

Which fire alarm zones the Building Code requires for this building, because that is where the boundaries are
Which circuits cross those boundaries, on the riser and in the ceiling rather than on the floor plan
What contains a fault at each crossing, and whether it is on the drawings or somebody's assumption
Whether the isolator locations were recorded, because the next technician has to find them

Verification under CAN/ULC-S537 is where the answer gets tested, by imposing real faults and watching what survives.

Fire Alarm Academy provides educational content only. It does not confer any certification, licence or credential, and it is not affiliated with, endorsed by, or accredited by the Canadian Fire Alarm Association, the Electrical Contractors Association of Ontario, ULC Standards, UL Standards and Engagement, CSA Group, the Electrical Safety Authority, any authority having jurisdiction, or any manufacturer. Always work from the edition of any standard adopted by your authority having jurisdiction.