A few things to consider. The controller monitoring was taken out of service. Did they follow an impairment plan as per NFPA 25? See below
15.5* Preplanned Impairment Programs.
15.5.1 All preplanned impairments shall be authorized by the impairment coordinator.
15.5.2 Before authorization is given, the impairment coordinator shall be responsible for verifying that the following procedures have been implemented:
(1) The extent and expected duration of the impairment have been determined.
(2) The areas or buildings involved have been inspected and the increased risks determined.
(3) Recommendations have been submitted to management or the property owner or designated representative.
(4) Where a required fire protection system is out of service for more than 10 hours in a 24-hour period, the impairment coordinator shall arrange for one of the following: (a) Evacuation of the building or portion of the building
affected by the system out of service
(b)*An approved fire watch
(c)*Establishment of a temporary water supply (d)*Establishment and implementation of an approved program to eliminate potential ignition sources and limit the amount of fuel available to the fire
(5) The fire department has been notified.
(6) The insurance carrier, the alarm company, property
owner or designated representative, and other authorities having jurisdiction have been notified.
7. The supervisors in the areas to be affected have been notified.
8. A tag impairment system has been implemented. (See Sec- tion 15.3.)
9. All necessary tools and materials have been assembled on the impairment site.
If they followed NFPA 25 someone should have been checking the pump since the monitoring was impaired. Had the controller been monitored it would have signaled a high water temperature alarm. If someone checked the pump they could have shut the pump down because of the running condition and the pump would not failed. Had this been a fire was the pump manned, did they know how to open the by pass cooling line? See link below for what I am referring to. The bottom line is open at all times and the top is closed. If the pump started to overheat the top line could be opened to prevent overheating.
When was the last time the strainer before the pressure reducing regulator was cleaned? Given the water source was a pond, was this the only strainer on the line, if so poor design.
So yes the pump should have run longer than 2.5 hours BUT if you do not follow impairment procedures or maintain the equipment it will fail.