Abstract
This paper presents control system synthesis to prevent undesirable transient responses after a device failure for safety against deviation from control range. It is based on multiobjective design for possible contexts and switchings by a failure to optimize the normal-case performance.