L3-CDH-FUSE-VOTE
CRITICAL
COMMAND CONTROL
Level 3 · software
Sensor Voting Logic
Triple-Redundant Sensor Voting and Selection System
Voting logic selecting valid sensor readings from redundant sensor groups
Purpose
Voting logic selecting valid sensor readings from redundant sensor groups
Context
Child of L2-CDH-FUSE
Principles
- ▸2-of-3 majority voting detects and masks single-sensor failures
- ▸Weighted voting adjusts confidence based on sensor age and calibration status
- ▸Median selection robust against both high and low outlier failures
- ▸Graceful degradation to dual-redundant or single-sensor with reduced confidence
Typical implementations
- ▸TMR sensor voting in nuclear reactor protection systems
- ▸ISS Caution and Warning sensor voting logic
- ▸Airbus fly-by-wire triple-redundant sensor voting
Lunar considerations
- ▸Sensor degradation from radiation means voting thresholds must adapt over time
- ▸Sensor replacement by robots changes the redundancy group - voting must reconfigure
- ▸Failed sensor must be positively identified to prevent good sensor from being rejected
Specifications
Functional
| primary function | Voting logic selecting valid sensor readings from redundant sensor groups |
Interfaces
Provides
- Validated sensor readings for state estimation
Requires
- Redundant sensor measurements from distributed nodes
Cite this entry
Lunar Ark Codex. "Sensor Voting Logic" (L3-CDH-FUSE-VOTE). Retrieved 10 September 2026, from https://lunarark.com/entry/L3-CDH-FUSE-VOTE
Licensed CC-BY-SA 4.0. You may reuse and adapt this entry with attribution, under the same licence.