Pulse width limiter Circuit
If the program halts or freezes with the pin set to high for more than 10 seconds, then the equipment will catch fire.


It would be prudent to add a thermal cutoff fuse/switch. Not only, in case your software fails, but in case your switching element (mechanical or solid-state) fails shorted.