25.1709—System safety: EWIS.
Each EWIS must be designed and installed so that:
(a)
Each catastrophic failure condition—
(1)
Is extremely improbable; and
(2)
Does not result from a single failure.
(b)
Each hazardous failure condition is extremely remote.