Introduce FMU initialised status flag, only run failsafe trap if initialized once