@jp RRF already uses the followings safety timers:
The hardware watchdog timer in the MCU will reset it if the tick interrupt fails to be executed. This is meant to handle catastrophic firmware crashes, or spin loops that wait for hardware to be ready never finding the hardware ready. A software timer that resets the system if the Main task (the lowest priority task in the system, other than the Idle task) doesn't get executed for 20 seconds A software timer that resets the system if the task that manages heater temperatures doesn't get executed for a period of time. This is set to 20 seconds in RRF 3.4.x but is being reduced to 5 seconds in 3.5.Are you looking for something else?