| ??? 05/28/08 18:46 Read: times |
#155234 - always operating or failsafe Responding to: ???'s previous message |
always operating
very tough, quoting Oliver To eliminate coding errors, each of the 3 controllers should be coded up by a separate software team. There is no other way. failsafe can be something as simple as a thermal switch to turn the heater off if the temp passes absolute max. inbetween: .. relying on watchdog reset .. a simple thermal switch that will turn the heater on if temp below the minimum the solution can handle .. an alarm you need to either get 3 teams or lower your expectations. always operating even is failed even by NASA on occasion. no one but you(r customer) can determine what will be enough, by your posts nobody here can make that judgement. what will it be? Erik |



