Comment by XorNot

You actually need 3 - which is how it's done for space (I believe SpaceX uses this as a solution to avoiding radiation hardened costs).

2 will tell you if they diverge, but you lose both if they do. 3 let's you retain 2 in operation if one does diverge.