I think you still run the risk of common-mode failure. It might be more robust to pick a different model altogether to do either the VM or the spec.