🧑🚀 How NASA Built Artemis II’s Fault-Tolerant Computer – Communications of the ACM
｢ Orion carries a completely independent Backup Flight Software (BFS) system. This is a prime example of dissimilar redundancy. It is implemented on different hardware, runs a different operating system, and utilizes independently developed, simplified flight software ｣
https://cacm.acm.org/news/how-nasa-built-artemis-iis-fault-tolerant-computer/
“A faulty computer will fail silent, rather than transmit the ‘wrong answer,’” Uitenbroek explained. This approach simplifies the complex task of the triplex “voting” mechanism that compares results. Instead of comparing three answers to find a majority, the system uses a priority-ordered source selection algorithm among healthy channels that haven’t failed-silent. It picks the output from the first available FCM in the priority list”
jbz
Stephen Bannasch (316 ppm)