If the controller for any reasonf fails or terminates during execution the engine must return to a valid state.