(a) Is designed to operate, under non –fault and fault conditions, in such a way that it does not induce safety critical risks; a0c0