Life-Support Standby Switchover Reliability

A redundant life-support module — a CO₂ scrubber, an oxygen-generation cartridge, a water-recovery bed — only protects a crew if its automatic switchover actually works. This simulator stress-tests that switchover directly: pick a redundancy level (dual, triple or quad), choose hot or cold standby, and dial in a switch reliability and per-module MTBF. A live 3D rack runs a real stochastic mission — each module's lifetime is sampled from an exponential distribution and every switchover is a genuine coin flip against your chosen probability — while a running readout compares the outcome against the closed-form standby-redundancy reliability formula, so you can see exactly where adding more spares stops helping once the switch itself becomes the weak link.