Y4.01
Fail-safe and fail-operational strategies
Cards in this group · 4
- Y4.01.1Fail-safe means a fault drives the system into a safe state chosen in advance, not wherever it lands
- Y4.01.2Fail-operational means the system keeps working at reduced capability instead of stopping outright
- Y4.01.3Whether to stop safely or keep running degraded depends on weighing shutdown cost against exposure
- Y4.01.4Each subsystem's own sound failure choice can still add up to an incoherent whole without coordination