Thanks all for the warm words.
I think the only way to avoid such disaster is to use other battery technology.
I think I can say that I did much to prevent call damage or stress:
During loading I charged both series connected cell groups independently with continuous balancing. Furthermore I limited charging end voltage to 4,1V per cell for increased cell lifetime.
During discharge I permanently monitored both cell groups for voltages lower than 3V and for too much in-balance.
I had five temperature sensors that monitored temperatures a different location within the lamp with the software reducing current when temperatures rising above 50°C.
And finally the cells where well protected against mechanical damages.
I think I will go for Li-Phosphat or Li-Titanat for my next high power build.
The only way to be sure to save money, the effort and certainly humans, pets and house.
Only thing I could think of what could be added for further electrical security would be an independent cell monitoring circuitry that is able to disconnect charging circuitry for the case that is faulty in that way that it overcharges a cell.
I'm glad that my wife was in house when the cell started blowing and reacted quick and right with putting the lamp on the balcony.
Some luck that the self destruct took some seconds with a beam of smoke coming out of the charging jacket along with a medium load fizzling at the beginning and ending with a smoke grenade blast in the end on the balcony.
But at the moment we are in the middle of building our house and so it will take some months until I will have free time for building a dignified successor (certainly in four-digit power rang then :devil