Good-oh.
It's just I kept thinking, Flixborough, Bhopal, Buncefield.....
...Chernobyl
Seriously though it depends on what safety criteria there are by any authoritarian bodies regarding what level of fail-safe there is.
Some systems have early warning and fail-safe on secondary warning or give you a certain amount to time before shut-down. Others may need to cut-out straight away.
Most safety applications require a reset after a fault condition anyhow.