Fail Passive System
"A single failure, should not: (1) Cause significant displacement of the aircraft from its approach path or altitude loss below the nominal glidepath. (2) Upon system disconnection, involve any out-of-trim condition not easily controlled by the pilot. (3) Cause any action of the flight control system that is not readily apparent to the pilot, either by control movement or advisory display."