if the coolant is lost from the secondary loop the feeding of the three steam generators would be entrusted to the four strands of the emergency feedwater system (one each and a reserve) with a total redundancy of 2×2·100%. in case of extreme failures, for example a station blackout, the cooling would be assured by the two strands of the special emergency feedwater system.