That's the problem with redundent systems. If you don't have any indication (or fail to notice it) that one of the redundant items fails, you don't know until they both fail. Learned this when I ran a large statewide educational network system. Even our dual ignitions we test them from...