In one embodiment, a method includes receiving data from one or more sensors associated with a vehicle; and receiving a message from a first processor. The message from the first processor includes a first control command for an actuator of the vehicle and a first certificate function. The method also includes receiving a message from the second processor. The message from the second processor includes a second control command for the actuator of the vehicle and a second certificate function. The method also includes computing a first certificate based on the first certificate function and the data; computing a second certificate based on the second certificate function and the data; determining a valid control signal based on an accuracy of the first second control command and second control command relative the first certificate and second certificate; and transmitting the valid control signal to the actuator of the vehicle.