A machinery protection scheme in which two independent sensor inputs are required before action, usually machine shutdown, is taken. Most often used with axial position measurements, where failure of a single sensor might lead to an unnecessary shutdown.
