Reminds me of what we humorously learn from The System Bible[0]: "When a fail-safe system fails, it fails by failing to fail safely." The book mentions 3-miles

Reminds me of what we humorously learn from The System Bible[0]: "When a fail-safe system fails, it fails by failing to fail safely." The book mentions 3-miles island, where a problem in a secondary system (an added safety system) spread and caused the system as a whole to fail. This is a tongue-in-cheek way of illustrating a serious issue when designing systems, though I wonder if the interpretation of what happened at 3-miles island is a bit of a stretch? (And I may misremember the book.) "The accident to unit 2 happened at 4 am on 28 March 1979 when the reactor was operating at 97% power. It involved a relatively minor malfunction in the secondary cooling circuit which caused the temperature in the primary coolant to rise..."[1] [0]: https://www.amazon.com/Systems-Bible-Beginners-Guide-Large/dp/0961825170 https://www.amazon.com/Systems-Bible-Beginners-Guide-Large/d... [1]: https://world-nuclear.org/information-library/safety-and-security/safety-of-plants/three-mile-island-accident.aspx https://world-nuclear.org/information-library/safety-and-sec...