Redundancy model