Hard to understand how it could have been in limits if the brake was unable to stop the rotation. How was that certified? Shutting down outside limits with another technical problem is an ever present dilemma, with no guarantees how it will go. But, in limits? You would reasonably expect to be able to stop the rotor!