Robust sequencer systems for ejection assembly

An ejection seat, comprising:

• a parachute mortar;
• a harness release thruster;
• and
• an ejection seat sequencer system located on the ejection seat and configured to control a timing for firing the parachute mortar and the harness release thruster, the ejection seat sequencer system comprising:
• a first A-side controller configured to determine a first initial ejection sequence and a first verified ejection sequence and to output a series of first driver sequence commands, wherein a timing of when each of the first driver sequence command is output is based on the first verified ejection sequence;
• a second A-side controller configured to determine a second initial ejection sequence and a second verified ejection sequence and to output a series of second driver sequence commands, wherein a timing of when each of the second driver sequence commands is output is based on the second verified ejection sequence;
• a first B-side controller configured to determine a third initial ejection sequence and a third verified ejection sequence and to output a series of third driver sequence commands, wherein a timing of when each of the third driver sequence command is output is based on the third verified ejection sequence;
• a second B-side controller configured to determine a fourth initial ejection sequence and a fourth verified ejection sequence and to output a series of fourth driver sequence commands, wherein a timing of when each of the fourth driver sequence command is output is based on the fourth verified ejection sequence;
• a first electronic explosive device driver module configured to receive the series of first driver sequence commands from the first A-side controller and the series of second driver sequence commands from the second A-side controller;
• and
• a second electronic explosive device driver module configured to receive the series of third driver sequence commands from the first B-side controller and the series of fourth driver sequence commands from the second B-side controller, wherein:
• the first A-side controller is configured to determine the first verified ejection sequence based on a comparison of the first initial ejection sequence to the second initial ejection sequence and the third initial ejection sequence,
• the second A-side controller is configured to determine the second verified ejection sequence based on a comparison of the second initial ejection sequence to the first initial ejection sequence and the fourth initial ejection sequence,
• the first B-side controller is configured to determine the third verified ejection sequence based on a comparison of the third initial ejection sequence to the first initial ejection sequence and the fourth initial ejection sequence, and
• the second B-side controller is configured to determine the fourth verified ejection sequence based on a comparison of the fourth initial ejection sequence to the third initial ejection sequence and the second initial ejection sequence.

A method of determining an ejection sequence, comprising:

• determining, by a first A-side controller, a first initial ejection sequence;
• determining by, a second A-side controller, a second initial ejection sequence;
• determining by, a first B-side controller, a third initial ejection sequence;
• determining by, a second B-side controller, a fourth initial ejection sequence;
• determining, by the first A-side controller, a first verified ejection sequence based on a comparison of the first initial ejection sequence, the second initial ejection sequence, and the third initial ejection sequence;
• determining, by the first A-side controller, a timing sequence for a series of first driver sequence commands based on the first verified ejection sequence;
• and
• outputting, by the first A-side controller, the series of first driver sequence commands to an electronic explosive device driver module.