| Contacts | XIC / XIO; NO / NC contact | The rung condition reads a Boolean tag; the symbol does not change the physical wiring. | Toggle the source bit and verify both true and false paths. |
| Outputs | OTE / coil; SET-RESET; OTL / OTU | A non-retentive coil follows the solved rung; latch instructions retain state until an explicit reset. | Prove de-energization on Stop, interlock and restart. |
| Timers | TON, TOF, TP, RTO | Elapsed state advances with scan time while enabling conditions and reset rules differ. | Test just below, at and just above the preset, then interrupt and restart. |
| Counters | CTU, CTD, CTUD, RES | Counts normally change on a qualifying edge, not on every scan that the input remains true. | Hold the input true, pulse it repeatedly and verify reset and rollover assumptions. |
| Edges | ONS, OSR, R_TRIG, F_TRIG | The output is true for one execution when the remembered previous state changes. | Prove one pulse per transition and verify first-scan behavior. |
| Compare and limit | EQU, NEQ, GRT, LES, LIM; EQ, GT, LT | The rung result depends on type, sign, scaling and boundary inclusion. | Test both boundaries, one value outside each side and invalid or stale data. |
| Data and math | MOV, COP, ADD, SUB, MUL, DIV, SCALE | Values change immediately for later rungs in the same task; type conversion can truncate or overflow. | Check data types, zero division, range limits and downstream rung order. |
| Sequence and state | CASE, sequencer, step bits, state machine | Only permitted transitions should advance the process; recovery must return to a defined state. | Test every transition, aborted step, power-up state and manual recovery path. |