i think ur suggestion to use dOut / dError would put instability into the system
think that dError is 0 for some time
then the valve output , which controls the system would go to infinity

Dear Mehmet:
thank you very much for your reply. It is very easy to avoid this by dError/dOut * Error
I will appreciate your further comments.

thank you very much