Redundant computing architecture

A redundant computing architecture comprising:

• a first control unit including:
• a first processing device configured to provide a first control signal in response to a sensory input, wherein the first control signal is operative to control an actuator;
• and
• a diagnostic device configured to provide a health status indicator in response to the operation of the first processing device, wherein the health status indicator is indicative of a fault within the first processing device;
• a second control unit including a second processing device configured to provide a second control signal in response to the sensory input, wherein the second control signal is operative to control the actuator;
• a switch configured to receive the health status indicator, the first control signal, and second control signal;
• wherein the switch is configured to provide the first control signal to the actuator if the health status indicator does not indicate a fault within the first control unit;
• and
• wherein the switch is configured to provide the second control signal to the actuator if the health status indicator does indicate a fault within the first control unit.

A method of controlling an actuator comprising:

• providing a first actuator control signal from a first control unit to a switch;
• providing a health status indicator to the switch, the health status indicator being indicative of a fault condition within the first control unit;
• providing a second actuator control signal from a second control unit to the switch;
• providing a master control signal from the switch to the actuator;
• wherein the master control signal equals the first actuator control signal if the health status indicator does not indicate a fault condition;
• and
• wherein the master control signal equals the second actuator control signal if the health status indicator does indicate a fault condition.