An e-mail from Dr. Wirthlin describing the issue to be resolved:
"I had always assumed that the feedback voters will fix any errors each clock cycle. However, it is possible that it will take many clock cycles. Assume you have a ring of 100 flip flops (i.e. 100 flip flops in a circle). If the upset occurs in the flip flop after the voter, it will take 100 clock cycles before the error is fixed. The voters are fixing the error in the meantime but it is possible to get another upset before it is fixed thus breaking TMR. One "feature" that we may want to consider is more frequent voting in feedback so that the recovery time is sooner."