An infusion device with safeguards for protecting a patient from inappropriate infusion during a malfunction comprises a pump, an electronic controller for controlling the pump, and a mechanical stop facility for stopping the pump by mechanically blocking pump motion. The stop facility periodically requires resetting by the controller to continue infusion.
