| 
 In my old setup I had a double setup.  Basically, the first sensor is for control to start and stop the auto top off.  That one is fed through another auto top off which is just a secondary shut off.  Both systems have to be satisfied to feed water.  If the first one fails, the backup will de-energize the auto topoff pump.  
 I did this after flooding my tank and the salinity dropped to 1.010!
 |