...so we don't know why the alternate failed
but
we
do know why the primary failed....the pumps had been switched off in response to a contents drop.
Unless the contents had gone completely (unlikely) is there any reason why they couldn't switch the pumps back on and accept a further contents drop till the wheels were locked?
...or have I missed something??