"Grid fin hydraulic pump stalled, so Falcon landed just out to sea. Appears to be undamaged & is transmitting data. Recovery ship dispatched." he said, adding later, "Pump is single string. Some landing systems are not redundant, as landing is considered ground safety critical, but not mission critical. Given this event, we will likely add a backup pump & lines."