Each reversing system must be designed so that—

(a) No unsafe condition will result during normal operation of the system; and

(b) The airplane is capable of continued safe flight and landing after any single failure, likely combination of failures, or malfunction of the reversing system.