Several fail-safe functions can stop motor operation. For example, a sensor quickly detects any malfunction and prevents any motion that would accentuate rather than reduce sway. Any servo system failure brings motor-power cut-off, whereupon the system acts as a passive rather than an active damper. Abnormal damper displacement brings motor power cut-off and brake application.