From what I have made up from the sparse information available is that the problem is probably the redundancy path in the Zilog CPU if the 286 is faulted.
So I would assume it is task scheduling and synchronization in the the secondary ("even less powerfull") CPU. I'd be curious when this was tested the last time before the FAA inspection.
