fault tolerant control system