Thanks again for the illustration. From that, I assume from that pitch
and roll are shown yellow and blue gear train and that primary computer
pots are red, green and blue, while secondaries are red and blue only.
If this is correct, there is in fact no redundancy at hardware level in
terms of (ideal?) multiple pots per axis, per computer. For this configuration,
redundancy can only be done in software, between computers, using
messaging. I guess it makes sense. It reduces the overall number of
pots, still provides the required redundancy, but potentially introduces
a far more complex set of failure modes...
In fact there is another (identical) set of xdcrs for the roll channel.
De redundacy is: 2 potmeters for
each Flight Computer (2x roll & 2x pitch)
If 1 input rod becomes disconnected, both potmeterclusters are driven by the other crank & geartrain by means of the shearpin.
If 1 input rod/geartrain is jammend, the shearpin will break and allows free operation of the other set of potmeters.