Salute!
Good poop, Hi Tech. And I agree.
I just cannot believe that one faulty AOA sensor can make the aircraft trim nose down. There has to be more protection in the system design for this not to happen.
The voting logic described for the 777 is comforting to me, next time I fly in one of those beasts.
My FBW experience involved a quad computer design, but used only three processors until one failed. Great debate over "middle value" versus "average", but finally the decision was "most benign" value. So that was the data used for gains and total movement and AoA/gee protection. Only problem with that was failure detection, because a subtle failure could result a static data value, which is not a good deal for some maneuvers or changing speed/pitch/roll etc.
Gums sends...