Ideally, the reactor is designed in such a way that a catastrophic failure is not possible.

Something along the lines of the salt plug in a molten salt reactor, that melts when cooling fails and dumps the liquid into a boron bath, halting fission.