Providing the pump can maintain pressure AND FLOW they are practical and safe. But "those that have made them" tell me that it is a difficult balance to achieve... and maintain. "Fast Hydo" boats tend to have a direct displacement engine driven "coolant" (boiler feed) pump, and fuel pump, so feed flow/volume is directly a function of engine speed/steam-demand. Engine stops water stops. Usually when the fuel tank is emptied! - So no melt down.
I understand (but have never been there!) that a control factor needs to be max pressure, at max fire and feed. If the pressure rises above the pump's ability, then the pump cannot feed "coolant" to the boiler, so it rapidly overheats to failure. So a Pressure relief Safety Valve needs to be incorporated. (In Toymakers refrigerant gas application the exhaust from the Safety Valve must be through a separate condenser to the "cold" liquid reservoir - Large enough to take full flow of gas from the Safety valve. But I am sure he will have this planned...).
The Monotube boiler application here is for a continuous use boiler, so should not be a problem (once feed/demand is balanced) so Toymaker has some interesting engineering here, controlling the pump flow versus fire. I guess some feedback loop between pressure and burner fuel supply? - Perhaps a directly coupled pressure driven fuel valve that shuts off the fuel if pressure is exceeded? Or a trip that shuts off fuel if the Safety Valve lifts? - But that is the "control system" that may be a different thread to this one about the boiler.
We will learn in due course.
K2
I have the greatest admiration and respect for those whom have built a montotube boiler and control it through mechanical means,...way too big a challenge for me to even consider.
However, controlling most any machine with a micro-controller (aka computer) and the needed sensors vastly simplifies things. My burner/boiler assembly will be fully controlled by an ECU (Engine Control Unit, aka a computer) and will have a pressure sensor on the input into the boiler, (aka, output from the feed pump) and a pressure sensor on the boilers steam output. If the water reserve tank were ever to run out of water, the first indication would be zero feed pump pressure, resulting in the boiler input sensor sending a low pressure signal to the ECU which would instantly shut off the burner, preventing any damage to the boiler tubes. The ECU examines all the various pressure and temperature sensors dozens of times per second, reacting far faster than the boiler is able to exceed pressure or temperature limits.
The ECU has full control over feed pump, fuel flow, and burner air flow; when the human operator requests more power, the ECU increases fuel and air flow and increases feed pump pressure while also watching steam output pressure and temperature. When less power is requested, the ECU reduces fuel, burner air flow and feed pump pressure, but not so fast that the input pressure becomes less than the output pressure.
I talk about the ECU extensively in this thread:
Ambitious ORC Turbine
I've posted several videos to YouTube showing the burner under ECU control;
ECU controlled burner
Night Burn under ECU control
K2, why do you believe I need to route the "steam" from the safety valve through a separate condenser? Assuming the normal condenser can handle the additional load, why not use the normal condenser?