SpaceX uses multiple redundant flight computers in a fault-tolerant design in its Falcon 9 rocket. Each Merlin engine is controlled by three voting computers, with two physical processors per computer that constantly check each other's operation. Linux is not inherently fault-tolerant (no operating system is, as it is a function of the whole system including the hardware), but the flight computer software makes it so for its purpose. For flexibility, commercial off-the-shelf parts and system-wide "radiation-tolerant" design are used instead of radiation hardened parts. , SpaceX has conducted over 76 launches of the Falcon 9 since 2010, out of which all but one have successfully delivered their primary payloads to the intended orbit, and has used it to transport astronauts to the International Space Station. The Dragon 2 crew capsule also uses Linux.