A control system, method and article allows a monitoring module to monitor
operation of a main controller in an electric drive, by providing
questions and evaluating the accuracy and/or timeliness of responses from
the main controller. Upon detection of an excessive number of incorrect
or late responses, the monitoring module can shutdown operation, and may
provide an alternative communications path, thereby preventing corrupt
data from reaching a vehicle network, while providing communications for
diagnostic and recovery such as by provision of new software or firmware
instructions. The main controller may monitor the operation of the
monitoring module, taking appropriate action if a fault is detected.
Disabling a supply of power to a traction motor may be based on current
operating conditions, such as speed.