This is a real good exercise in understanding the redundancy of a safety system.