3 ms·
Probably could be done but it would require significant reengineering because it introduces new failure modes. Best approach is what everybody else does: Assume
by dreamcompiler 8y ago
Probably could be done but it would require significant reengineering because it introduces new failure modes. Best approach is what everybody else does: Assume the AoA sensor can fail and design the software accordingly. Boeing didn't do that and the results were fatal.
- noir_lord 8y agoUse an odd number > 1 and sound an alert if they can't reach a quorum. Triple redundancy is pretty common in safety critical systems.