Thanks all - really appreciate the info (and effort of those involved). It is now wired up as in the diagram above, and appears to be functioning correctly. I guess (since I have a modern stat in there now) it is now extra-double protected against boiling, with two thermal cut-outs as well as the main stat (one in the stat plus the old one). No harm in that I suppose, so I shall leave it as it is.
