behavior change: manual direction switch when running should lead to stop, not direction reversal.
Safer states for the error condition, error recovery attempt
additional condition on error recovery
watchdog timer