The design consideration in which failure of a component does not increase the hazard. In the failure mode, the system is rendered inoperative or nonhazardous.