Dependent-failures in spacecraft: root causes, coupling factors, defenses, and design implications · Study