Each reversing system must be designed so that—

1. (a) No unsafe condition will result during normal operation of the system; and
2. (b) The airplane is capable of continued safe flight and landing after any single failure, likely combination of failures, or malfunction of the reversing system.