IIRC, in fact wasn't the 'Spilsby' accident to which you refer the direct result of an overvolting RAT (not AAPP) being connected to the synch bus bar? Which almost immediately caused a fire because it couldn't, in those days, be taken off the synch bus bar? Didn't we then get a RAT field isolation switch which could effectively kill the RAT output in the event of a similar thing happening again?