Obc failsafe

This is a *WIP* PR to track progress in bringing up failsafe behavior according to the OBC rules (and also improving general failsafe behavior)

includes #1205
This loads a parameter each time, which is probably not what we want efficiency-wise - please double-buffer the parameter value in the parameter update call.