Multi-Site Geographic Redundancy Example.
Demonstrates realistic railway architecture with two geographic sites:
WEST (Online/Active):
- Channel A: CPU0 computes train commands
- Channel B: CPU1 verifies channel A (2oo2 voting)
- Channel C: Service channel (printf results, logging)
- Produces actual control commands
EAST (Standby):
- Mirrors WEST channels A, B for synchronization
- Maintains own 2oo2 voting state
- Ready to take over if WEST fails
- Can be switched manually for maintenance
Scenario: ERTMS Radio Block Centre with dual sites
- West RBC (Madrid): Primary processing
- East RBC (Barcelona): Backup, can failover
- Heartbeat every 50ms between sites
- On 3 missed heartbeats → automatic failover
Definition in file main.c.