Voting (1oo2, 2oo3)
How many of several devices must agree before a trip acts, written M-out-of-N. It trades dangerous failures (not tripping when you should) against spurious ones (tripping when you need not). 2oo3 keeps both low, which is why it is the usual answer at SIL 2 and 3.
