You would probably need to do some testing before heading to production, but the easiest insurance would probably be to wrap every query in a timeout and just c

You would probably need to do some testing before heading to production, but the easiest insurance would probably be to wrap every query in a timeout and just cancel the query after a max timeout. Most net systems work this anyway and it gives you insurance around a slow query saturating your business logic.