When using programmed safety limits, the restricted space is defined at the expected stop positions, which take into account the distance travelled at the stop. If a programmed limit is exceeded a safety stop is initiated. Movement during recovery from violation of a programmed safety limit occurs under reduced speed control.