A device for controlling battery operation includes a battery cell, a thermal cutoff, and a battery management system. The thermal cutoff is coupled in series between the battery cell and a system load of the device. The thermal cutoff has at least three terminals. A first terminal of the thermal cutoff is electrically-coupled to the battery cell and a second terminal of the thermal cutoff is electrically-coupled to the system load. The thermal cutoff includes a permanent failure mechanism having an open state and closed state wherein the closed state allows electrical communication between the first terminal and the second terminal. The battery management system is electrically-coupled to a third terminal of the thermal cutoff. The permanent failure mechanism permanently switches to the open state in response to an electrical signal from the battery management system.