• Triple redundant sensors
• Triple redundant ARINC 429 communications
• Triple redundant power
• Triple redundant command and monitor configuration
• DAL A – level safety requirements allowing single
controller to be used
• Internal CANbus communications architecture between triple
redundant command monitor cards
• Smooth operation without detectable motor ripple
• Master controller channel is changed on power up, promoting
even wear
• Failsafes for the motor, RVDT sensors and damper in case of
jam conditions
• Grip counter balanced as failsafe for motor controller
• Quick disconnect grip
• Strength requirements – capable of supporting the weight of
a pilot standing on the unit