>MCU processor units operate redundantly, receiving and processing identical sensor data to perform the flight-control functions necessary to keep the vehicle flying in the air. At any given time, one of the MCU is active with the other waiting to be hot-swapped in case of a fault.
>Each subsystem has a current monitor to detect possible latch-up current and can be power cycled to clear a SEL. In addition, current limiting is added to prevent a destructive SEL event and most devices are switched off when not in use to minimize their exposure to SEL. For the critical FPGA which is always on for the duration of the mission, the radiation tolerant ProASIC3 is chosen with the military temperature grade (-55 C to 125 C) and -1 speed grade to mitigate the degradation in the propagation delay caused by the total dose radiation.