Designing for redundancy