Section VII
Systems
VII-22-7
Malfunction Protection
The flight control system uses a multi-layered response to failures
which may occurs within the system and data from external sensors.
Malfunction protection and response are provided by a dual channel
main processor (Level II verified) and I/O processor (Level I verified)
architecture. The main processor provides protection against flight
guidance data failures and single channel attitude control failures. The
I/O processor provides additional limiters and monitors including
protection from possible generic software design errors in the main
processor program.
10 Sep 2006