A fail-operational truck platooning architecture