Mike,
One way that jumps to mind...
Relay energised = pump on, float switch is NC while level is high enough, goes NO when level drops below set level
float switch can not handle much current, cut circuit board track to relay, cut track is bridged by float switch
Now no matter what command is sent, IF float is below set level - pump is protected & will not turn on..

But there must be other ways... like if GPIO014 is used connected to float...
Then I dont know 'yet' can GPIO014 's state be looked at internally in firmware before relay is actioned ?
I have many questions for different scenarios..