Most systems on the spacecraft are fully redundant. This
means that, in the event of a device failure, there is
a backup system to compensate. A software fault protection
system is used to protect the spacecraft from reasonable,
credible faults but also has resiliency built into it
so any faults not anticipated can be accommodated without
placing the spacecraft in a safe state. |
