It only really needs a single timer, either a non-retriggerable pulse output which controls the load or a delay-on which disconnects the load after the time expires.
That does not allow for the 15 minute delay, but as it's only supposed to be a safety device it will do the job - if the control module never switches off due to a fault, the timer system / solenoid will never be retriggered anyway.
That does not allow for the 15 minute delay, but as it's only supposed to be a safety device it will do the job - if the control module never switches off due to a fault, the timer system / solenoid will never be retriggered anyway.