Pardon my asking, I'm not sure what you mean by this. The Nerd (in standard Revo config) is a backup device and doesn't connect to the solenoid. Thus there's no voting logic which is only applicable to a controller?
Another (subtle) point about using a splitter is the Nerd will display three cells/PPO2 readings. The stock config shows two cells. IMHO, as a result of having two readings only on the Nerd, it 'forces' me to periodically validate the three cells/PPO2 readings on the Petrel controller. If there's three readings on the Nerd, there's less impetus to compare with the Petrel.
This, plus full monitoring redundancy, was the reason I rejected the idea of using a splitter (also the 'third' cell position can be used for the mini AI pressure values).
"Extreme" diving aside, the general principle of one major failure applies. Should the controller fail during a dive, that's an abort condition as you've effectively lost your monitoring should you need to bail out (it's not easy to read the Nerd when on bailout -- need to unclip the Nerd from the loop and hold it in front of your eye to read it). One reason why some people dive with a third computer on their wrist, as a backup to the Petrel to run a bailout.
I think that is not correct. Even though it's a monitor, not a controller, it still calculates your deco obligation based on what it understands you to be breathing. If one of the O2 sensors is reading 3.0 and the other 2 are reading 1.3, it's going to vote out the one that says 3.0 and calculate your deco based on being at 1.3.
Also, if I have 3 cells shown on the NERD (monitor) and they are all good, then why do I need to look at the controller? What problem could be happening on the controller that won't soon be reflected in the ppO2 readings I'm seeing on the NERD?
Don't get me wrong. I'm not advocating a 3-cell NERD and never looking at your controller. I'm just asking the question: If my NERD is monitoring 3 cells, what do you envision that could ever go wrong on the controller that I wouldn't know about (possibly with a short delay - the same delay I might experience in between times that I was looking at the controller anyway) by watching the NERD? The thing that prompts me to actually look at my controller is to check what the rMS is telling me. Confirming the ppO2 readings is secondary.
Lastly, I'm not clear on what point you were trying to make in your last paragraph. If the one major failure principle applies, then you would not be planning for your controller to fail AND something happens to your loop that requires you to bail. You mention the one failure principle and then immediately go on to "if my controller fails and I also over breathe my loop or have breakthrough or flood my loop or tear a loop hose" or something like that. I would call that 2 major failures. So, like I said, I'm not really sure where you were trying to go with that whole paragraph.
On a serious technical dive, I would dive with controller, NERD2, and Teric, with the Teric being along primarily for the extremely unlikely case that I flood my unit and the flood somehow lets the water in there short circuit wires that are connected to my controller and take it out. I feel like it is EXTREMELY unlikely that a flood in the unit could kill the controller. I think the rEvo design is simply better than that. But, it's water and electricity, so.... Slapping a Teric on my wrist to use, so I don't have to do as your described with looking at my NERD after bailing, doesn't seem too onerous (or risky).