Jeff,
I totally agree. I always think safety first. I have been in the industrial side for over 30 years, most of that in maintenance before I went to engineering. Nothing can be made "idiot proof", because as soon as you think it is an idiot will come along and prove you wrong...but you can make it as idiot-resistant as possible!
In our application we have a silo that feeds through a blower system. This one blower system feeds one line that runs through 3 zones. The way it is set up with the diverter valves limit switches, zone 1 diverter valve must show closed before it allows transport to zone 2, and both zone 1 and 2 must show closed before it allows transfer to zone 3. If any of the limit switches hang, the system alarms and will not allow the blower to come on. Like I said, it is a very simple system with just the silo airlock, the blower system (which runs on a count-down timer for a minute after closing valves to clean the system), and 3 weigh hoppers in series. Right now there aren't enough e-stops to suit me...and that will also be rectified during this as well.