(i) Thefueljettisoning system mustbedesigned sothat any reasonablyprobable single malfunction in the system will not result in a hazardous condition due to unsym-metricaljettisoning of, orinability tojettisonfuel.