If the software fails this often, they really should have some sort of reversion mode with multiple watchdogs that runs on a tiny microcontroller and just keeps the temperature at 70 degrees.  If they can&#x27;t get that right, maybe just a hard switch that wires in a calibrated bimetalic strip to keep the wheels on until the software is fixed.