Fault-tolerant-control