SESK: Stuff Everyone Should Know · sesk.info/eng-redundancy-common-cause
Why can two redundant components still fail together?
A common cause can defeat both channels.
- Redundancy guarantees perfection
- Both may share one vulnerability ✔
- Backups always fail one at a time
Why: Redundancy helps only when backup paths are sufficiently independent. Shared power, location, software, environment, or contamination can create a common-cause failure that disables every copy.
Huh, didn't know that: NASA safety rules require that redundancy in safety-critical functions be verified under operational conditions.
The backup brought a backup, then checked they did not share one plug.
Like this card?
References
Answer: Both may share one vulnerability. Redundancy helps only when backup paths are sufficiently independent. Shared power, location, software, environment, or contamination can create a common-cause failure that disables every copy.
- NASA Procedural Requirements 8715.3, Chapter 1 nodis3.gsfc.nasa.gov/displayCA.cfm?Internal_ID=N_PR_8715_0003_&page_name=Chapter1
Use of redundancy shall include a verifiable requirement that common cause failures (e.g., contamination, close proximity) do not invalidate the failure tolerance
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
That's stuff everyone should know.