What is “Fail-operational system”?
An auto-land system that in the event of a failiure below the alert height during the approach, flare and landing phase, the landing can still be done by the remaining part of the automatic system
What’s a “Fail-passive system”?
With a failiure, there’s no significant out of trim or deviation from the flight path or altitude but the landing cannot be completed automatically