1. A vehicle, comprising: a high assurance bridge; a plurality of data processors coupled in parallel to the high assurance bridge; and an input/output processor coupled to the bridge, the input/output processor adapted to be coupled to a sensor and an effector; wherein sensor data passes to the bridge through the input/output processor for processing by the plurality of data processors, which generate redundant effector data for comparison by the bridge to detect errors and transmission to the effector.