This slide shows how the two converters share their resources. ADC1 and ADC2 are shown and the pin connections including ADC1 A0, ADC2 A0, and the six comparators. Also shown are the shared pin connections, such as ADC1A0 connected to A0 on ADC1, and to A1 on ADC2. The A1 input channel on ADC2 is not connected to a pin other than ADC1A0, so this one pin has two input channels, one on each converter. If the M3 was reading ADC1’s result and the C28x was reading ADC2’s results, they could compare the results to make sure that the data is correct. If the M3 read the results for both ADC1 and ADC2 it could verify that the values are still the same. However the safety strategy is structured, this provides the ability to have redundant ADC converters on critical signals and have four critical signals that are being converted by two different converters, giving a strong safety case. The shared channels are listed on the slide, ADC1 A0, B0, ADC2 A0 and B0, and how they are connected to the opposite ADC converters A1 and B1 input channels can be seen in the diagram. In addition to the redundancy the two ADCs provide, the DAC outputs as mentioned on an earlier slide, which could be used to exercise the ADCs are also available. In addition to the shared input pins, it is possible to do separate tests to verify the ADC.