[mlsu]

On the flip side, what behavior would you prefer? The pump to not always deliver the amount you confirm?

I mean, this is clearly a bug, but under normal operation it would be much much worse if the system silently overrode a user dose. People's insulin sensitivity varies a lot. A 350lb person may regularly dose 10 units for a single meal, whereas that dose would kill a small child. If you are 350lbs, and your BG is 400, in DKA, and you're dosing 15 or 20u as a correction, you do not want an automatic early termination of the dose.

You can always cancel a bolus in progress. The override/cancel bolus is likely the highest priority task in the entire system. In the worst case, you can physically disconnect.

[schiffern]

> On the flip side, what behavior would you prefer?

Personally I want a (mandated) hardware Emergency Stop button, like any other machine with potential to malfunction dangerously.

A button needs protection from accidental activation, but fortunately that's a solved problem.

> You can always cancel a bolus in progress.

I sincerely hope that's true, but the documentation makes the intended behavior very unclear.