AFAIK it is used in failsafe systems: you have two systems who deliver the same output, but are developed independently.