Again - you're not going to have this happen without user error on the part of the CCR diver either. There just isn't a scenario where five sensors and two independent PO2 monitoring devices fail simultaneously and you're left guessing at what's in your loop.
I dive with 3 O2 Sensors in the rebreather head from a sensor manufacturer connected to a single controller, and 3 O2 sensors from a different manufacturer in the inhale counterlung connected to a different pPO2 monitor, all sensors from different production batches and no sensor older than 12 months from date of manufacture.
Diversity and totally independent electronics increases redundancy and reduces risk.
Nonetheless:
1. Both electronics use common ground between the 3 sensors. A failure of the common ground system will kill all 3 sensors at once in one of the two systems.
2. 3 O2 Sensors in each system are in the same location. Common environment could cause all 3 O2 Sensors to fail simultaneously.
My system and your system offer more redundancy than the typical rebreather system (using only 2 or only 3 O2 Sensors), but I had event 1. above happen two times (due to poor quality cable from the manufacturer).
I suspect though a. you do not change O2 Sensors every 12 months from date of manufacture, b. you do not use different sensors from different manufacturers, c. your O2 sensors are all located in the same place in the rebreather - this means if you bail-out on a single O2 sensor failure you will be doing so a few times in a typical year.
If you do not bail-out on a single O2 sensor failure, then I suspect your system iintegrity is not as good as you think.
---------- Post added July 9th, 2013 at 03:39 PM ----------
But that's my option and I can plan to take advantage of the diluent in varying ways. I can simply plan a nitrox mix that gives me a very workable PO2 to escape a cave using SCR mode. I can add a LP hose to my bailout gas, plug into the loop, and then use SCR mode to gas extend. By planning a Dil gas which is hotter in certain environments I could stay on the loop in a variety of circumstances. In fact, with a hotter diluent, I can run my CCR with the on-board bottles, regulators, solenoid, both handsets, and the heads up display failed. As long as the loop doesnt' flood, and the scrubber is working and I have a plumbable off-board gas, I'm still in business.
Whether I would stay on the loop is another discussion, but all this single failure and you die right there talk is nonsense. Everyone knows in aviation, diving, and medicine it's an error chain that causes the accident. I'm growing weary with every condition on a rebreather is fatal. It's just not true.
I use N32 for diluent and carry a lot of bail-out gas. I could use SCR mode to exit the cave from max. point of penetration, but quite frankly I hardly see the need ever to do it because I carry a LOT of bail-out gas in the first place.
So, I see your point, share your view, could adopt your strategy if needed... but that will only work if I am conscious.
If there is a failure mode which renders me unconscious, I have none of those nice options.
My opinion is that given the dynamic of the fatalities, the dead knew they had a problem, but were unable to take corrective actions, and realistically that is the way I am going to go, if...
Bad gas is disabling.