Y4.02
Redundancy and voting
Cards in this group · 4
- Y4.02.1Measuring the same thing through several independent channels keeps one random fault from deciding the outcome
- Y4.02.2When redundant channels disagree, a predefined voting rule, not an ad hoc choice, decides which wins
- Y4.02.3The voter that reconciles redundant channels is itself one piece of hardware that can fail
- Y4.02.4When sensors disagree, the operator should see it, even while the voting logic quietly picks a value