Each reversing system must be designed so that -
(a) No unsafe condition will result during normal operation of the system; and
(b) The airplane is capable of continued safe flight and landing after any single failure, likely combination of failures, or malfunction of the reversing system.