[carlmr]

Also the assumption that the fail-safe _works_. Any of these fail-safes are much more complex than a classical fail-safe.