Comment by sdeyerle

Also, according to the article there is only double redundancy. I thought critical systems like this always employed triple redundancy. It doesn't help too much if you detect a fault during launch and have to reboot both systems...