Perhaps just a dose integrator with an alarm limit? There's probably a total dose above which you could likely say "this is a mistake". A dose integrator would

Perhaps just a dose integrator with an alarm limit? There's probably a total dose above which you could likely say "this is a mistake". A dose integrator would be a detector + an integrator independent of the therapeutic delivery software. If it goes over limit, it shuts the system down.