Any energy project of this size is supposed to have a clear crisis plan, so that a single failure does not lead to an entire station being shut down for a year.