An aerospace assurance concept defining processes used to demonstrate safety, compliance, and readiness for flight or mission operations. It governs hazard identification, verification evidence, configuration control, and formal reviews that gate progression to operation. It does not guarantee success without robust design margins and rigorous completion of test and review actions. It materially affects operational safety and certification outcomes by structuring risk reduction and verification completeness. The concept is generally stable, though assurance practices and regulatory guidance evolve over time.

Principle

Provide multiple independent means to perform critical functions, monitor their agreement or health, and apply voting, arbitration, or switch‑over logic to tolerate component failures while avoiding unsafe interactions.

Demonstration

In a flight control computer architecture, three redundant processors run identical control code; a majority‑voting unit compares outputs, the disagreeing processor is flagged and removed from active control while the remaining two continue to command the actuators, maintaining safe flight.

Misapplication

Installing identical redundant components that share the same power rail, software image, and environmental exposure without cross‑monitoring — leading to common‑mode failures where all redundancies fail together.

Consequence

Effective redundancy management increases system availability and fault tolerance, enables graceful degradation rather than abrupt loss, and provides clear operational procedures for maintenance and fault handling.

Reversal

The inverse is unmanaged duplication: adding copies without diagnostic, isolation, or arbitration capabilities, which can mask faults or create ambiguous states that degrade safety.

Boundary

Covers hardware, software, and human‑in‑the‑loop redundancy strategies for critical functions; it does not guarantee infinite reliability, and it must be designed in conjunction with diagnostics, maintenance policies, and assurance evidence for certification.

Semantic Tension

Confused with mere redundancy (having extras). Redundancy management emphasizes active control, fault detection, and failover logic, not just presence of spare parts or duplicated items.

Synthesis

Redundancy management is the active orchestration of extra capacity and monitors so that when components fail, the system detects the fault, isolates it, and continues to meet safety and performance requirements with predictable behavior.