Redundancy’s up to 95 percent of the design, but we’re still hunting down the last bit of component jitter—tolerances in the backup sensors still need tightening. I’ve added dual power rails and a watchdog that kicks in if either fails. Once those tolerances hit the spec, we’ll have a true fail‑safe. I’m not going to gloss over it, so this isn’t a finished system yet, but the architecture is solid and the risk window is shrinking rapidly.