A design principle that critical structural, mechanical, electrical, or life‑safety systems include multiple independent elements, paths, or capacities so that the failure or loss of a single component does not produce immediate, uncontrollable system collapse or loss of essential function.

Principle

System reliability improves when alternative, independent load paths or functional elements exist; redundancy prevents single‑point failures from producing catastrophic system loss provided redundancy is not subject to common‑mode failure.

Demonstration

Illustrative scenario → Recognition → Action → Consequence: In a bridge design the engineer recognizes that a single central girder failure could cause collapse. Action: provide two parallel load‑carrying girders with independent bearings and separate inspection access. Consequence: if one girder develops a critical defect, the other carries increased load long enough for detection and remedial action, preventing immediate collapse.

Misapplication

Assuming redundancy is achieved by simple duplication without checking independence — e.g., parallel components that share the same support, exposure, or control such that a single event disables them both. The semantic error is conflating duplication with useful independence.

Consequence

Proper redundancy increases resilience and survivability of systems, reduces probability of catastrophic failure, and may permit phased repair; but it increases cost, complexity, inspection burden and can mask degradation if not monitored.

Reversal

Redundancy offers limited benefit when components share a common failure mode (environmental exposure, same control system, or maintenance regime); in some contexts intentionally reduced redundancy (single simplified system) may be preferred to reduce complexity and failure interactions.

Boundary

Within: life‑safety systems, primary structural load paths, critical power and control systems where loss leads to unacceptable hazard. Boundary case: non‑critical convenience systems (e.g., dual elevators) where redundancy is desirable but not essential. Outside: single‑use decorative elements where failure has only aesthetic impact.

Semantic Tension

Redundancy ↔ Efficiency/Complexity: adding independent elements increases resilience but conflicts with goals of cost minimization, simplicity and maintainability; the designer must balance these competing priorities.

Synthesis

Redundancy is not mere duplication; it is deliberately provided, independent capacity or paths that anticipate component failure modes and preserve essential function long enough for detection and repair.