Be interesting if there is a rad hard watchdog. Maybe you could end up having standard off the self parts and then use a reliable watchdog to intervene as needed.
Especially if such watchdog has the ability to switch to a secondary or third backup...
edit: Shoutout to wildzzz for pointing out ISL706ARH Active Rad-Hard, 5.0V/3.3V µ-Processor Supervisory Circuits