Fail-Safe Control Design