Task
This task should allow FC2 to take charge in the event of a failure of both FC1 and the WD board
Acceptance
Code changes and a command capability to allow FC2 to recover the inCharge state to 1 in the event of a WD and FC1 failure. This should be rigorously tested with handovers and failed handovers in the lab. As it stands, the flight code currently should not allow FC2 to be in charge as a standalone computer, this should be remedied first via the commanding method.
Details
In standard operation, the watchdog board determines which flight computer is in charge and thus running the gondola. In the event of a WD board failure where the MPSSE chip cannot be contacted, the flight software defaults FC1 to incharge while checking for a connection every 5 seconds ad infinitum. If FC1 were to also die, FC2 cannot take charge and run the gondola, which must be alleviated.
where
We need to be able to inject another check, ideally with a command, that can tell FC2 to ignore the default and instead take charge, while waiting for the, presumably dead, mpsse chip to return.
Task
This task should allow FC2 to take charge in the event of a failure of both FC1 and the WD board
Acceptance
Code changes and a command capability to allow FC2 to recover the inCharge state to 1 in the event of a WD and FC1 failure. This should be rigorously tested with handovers and failed handovers in the lab. As it stands, the flight code currently should not allow FC2 to be in charge as a standalone computer, this should be remedied first via the commanding method.
Details
In standard operation, the watchdog board determines which flight computer is in charge and thus running the gondola. In the event of a WD board failure where the MPSSE chip cannot be contacted, the flight software defaults FC1 to incharge while checking for a connection every 5 seconds ad infinitum. If FC1 were to also die, FC2 cannot take charge and run the gondola, which must be alleviated.
where
We need to be able to inject another check, ideally with a command, that can tell FC2 to ignore the default and instead take charge, while waiting for the, presumably dead, mpsse chip to return.