Hydro units of this vintage are generally controlled by a mechanical governor. In our plants the maximum wicket gate speed is ultimately limited by the hydraulic oil flow rate through the main spool valve. But if a hydraulic line between the servos and the governor were to fail then gate closure would be uncontrolled. Water hammer would over pressurize the penstock and the draft tube water column would separate. Our hydro units have surge tanks and pressure relief valves to avoid the former and vacuum breakers to avoid the latter.
The other possible cause of rapid wicket gate closure is if trash, such as a small log, gets past the trash rack. A long slender item could get caught in one of the turbine passages. As it rotates around with the turbine, the object could strike each wicket gate with enough force to break the shear pins. Depending on where the wicket gates are balanced (center of pressure relative to the axis of rotation) they could slam shut. To avoid this, we regularly inspect our trash racks.
Tom Moritz
Mechanical Engineer
US Bureau of Reclamation