Re: Not failover
Two sensors are technically not a SPOF, it's dual modular redundancy. It provides for error detection, but not correction (which triple modular redundancy provides).
I get what you're trying to say, it can't operate in isolation, and seemingly failed to alert for error detection (as safety is apparently an optional extra with Boeing these days...)