paull
There are two Angle sensors on each Thrust Lever.
Thanks TP, I guess we can go with those odds, no-one likes a single point of failure. So my scenario requires:
Simultaneous false indicator on two sensors or
(Pilot does not select Idle) AND (cannot when alerted to it).
or something entirely different!
I guess that puts me back into the level of probability that we have chosen to accept.
Back in the corner now