Medical device management using safety supervisor

A system comprising:

• first hardware, the first hardware controlling a fluid delivery pump, the first hardware controlling the fluid delivery pump to control a flow of fluid outputted from the fluid delivery pump to a recipient;
• second hardware partitioned from and operating independently of the first hardware, the second hardware in communication with the first hardware;
• third hardware, the third hardware partitioned from and operating independently of the first hardware and the second hardware, the third hardware operable to communicate control settings to both the first hardware and the second hardware, the first hardware operable to control the fluid delivery pump to deliver the fluid to the recipient as indicated by the control settings;
• the second hardware further operable to monitor feedback from the first hardware to verify delivery of the fluid in a manner as specified by the control settings received from the third hardware;
• wherein the feedback from the first hardware indicates an estimated volume of the fluid outputted from the fluid delivery pump to the recipient, the second hardware producing a control output to prevent further flow of the fluid to the recipient in response to detecting that the estimated volume of the fluid deviates with respect to the control settings as indicated by the third hardware;
• and
• wherein the second hardware produces the control output to control a state of a respective valve associated with the fluid delivery pump to terminate the flow of fluid from the fluid delivery pump to the recipient.