Railway signaling systems - the onboard kind - require separate software including operative system, and possibly also differentiated hardware. They do not ru

Railway signaling systems - the onboard kind - require separate software including operative system, and possibly also differentiated hardware. They do not run in lock step but if one of the machines detects a different output from it's peer than it's own, it just triggers an emergency brake.