fail-safe mechanisms