An instrument, a control, or other equipment that acts, or initiates action, to cause the furnace to revert to a safe condition in the event of equipment failure or other hazardous event.