Safe and redundant design