I never believed in letting the DCS, or analog control systems for that matter, handle flame safeguard functions. We would typically use a dedicated Fireye system that interfaced with the boiler combustion control system. Once all the basic safety interlocks, pre-purge timers, main fuel valve...