Balancing mission success probability and risk of system loss by allocating redundancy in systems operating with a rescue option. (March 2020)