This paper describes the deployment and optimization process of triple-module redundancy
(TMR) under high design constraints against single-event upset (SEU) and single-event
transient (SET). It includes modelling of single-event effect (SEE) pulses with TCAD mesh
model, TMR deployment strategies, and verification methods. The simulation result shows
that the prototype system with optimized TMR deployment has high reliability with respect
to design requirements. The system can run for more than 5 years without critical errors
with an equivalent error rate in the working environment is lower than 10$^{-9}$ .