been having a think about poosable failure modes and come up with a couple of options to make the burner idiot proof,or as near as i can anyway.
failure mode one:
someone turns it up too high and the oil fills the pot faster than it is burning. i think one of these will sort that possibility out. cuts off the oil supply by diverting it back to the tank. no oil, fire goes out.
http://www.ebay.co.uk/itm/KBB-Teddington-2-metre-90-degree-fire-valve-C90-2M-/141115539608?pt=UK_Home_Garden_Hearing_Cooling_Air&hash=item20db244098failure mode 2.
something goes wrong on the timer board and the pump continues to pump oil into the burner. thermostat cuts power to the pump. no oil, fire goes out.
http://www.ebay.co.uk/itm/TH11-LINCAT-FRYER-HIGH-LIMIT-THERMOSTAT-SPARE-PART-/140421388453?pt=UK_BOI_Restaurant_RL&hash=item20b1c458a5not sure which one should trigger first? i think the oil feed, as the oil tank will be below the pump so no chance of oil flowing to the burner if the pump stops. if the electronics fail the pump could carry on pumping and overfilling the burner.
don't think either of them are adjustable so will have to experiment on best position to place the capillaries.
of course this means the fire goes out and will have to be relit, but variable valves are expensive and hard to find. the original idea was to let the burner die down and then fire up again once it has cooled down. if someone turns it up too high and it trips they will have get cold waiting for it to cool down before relighting it. that will teach them not to turn it up to high next time

.