single-failure criterion