Piloted simulator evaluation of a model-independent fault-tolerant flight control system