My previous article discussing limits on electronic engine controls<\/a> elicited a number of very interesting responses that went into several different directions.\u00a0 I thought I might share some of these with you as well as some additional thoughts.\u00a0 Unless specifically authorized, I will not be including the names or affiliations of any of the commentators.<\/p>\n The general concept I proposed was to eliminate the artificial limitations we have imposed on pilot ability to operate their aircraft.\u00a0 In that article, I highlighted the engines, which are limited to rated thrust in most circumstances.\u00a0 This is not just true for jet engines, and I have received several reports from pilots with stories of reciprocating engines being limited, as well as turboprops.\u00a0 Limiting inadvertent exceedances is a very good idea as it protected engine life. The concept of allowing for a way to exceed those limits in a controlled way in a dire emergency is what is being proposed.\u00a0 Most all pilots like the concept, although I must say the following from Graham Hamilton (HKG) was probably the best response!<\/p>\n Yes, spot on! as a man who once went very close to \u2018cooking the engine\u2019 in avoiding a baboon on take-off in Tanzania, there is definitely a point where your knuckles need to go through the panel and pour as much fuel on the fire as you can \u2013 this might shorten or even ultimately destroy an engine but it might be saving the aircraft in doing so.\u00a0<\/em><\/p>\n \u2026anecdotally \u2018Engines can be replaced, that\u2019s what insurance is for \u2013 no amount of insurance can replace a human being.<\/em><\/p>\n One comment concerned the issue of pushing up the power with an engine inoperative and perhaps running into limits of controllability.\u00a0 There are two thoughts for this.\u00a0 First, in future designs (actually already done on some current production aircraft) the engine control could be integrated with the flight control system to limit the thrust as required to maintain control.\u00a0 For most aircraft it would fall to a training issue.\u00a0 One pilot suggested a three-tiered approach, where thrust would first just slightly exceed normal values, but if there really was no other option, then there would be a way to increase thrust even more.\u00a0 A system as simple as a breakable safety wire could be employed here.\u00a0 Historically there have been such mechanisms for military aircraft, and many corporate aircraft have a setup similar to the MD-11, allowing for some measured increase depending on circumstances.<\/p>\n It is my opinion that software should still limit it at a point where immediate failure is a virtual certainty.\u00a0 Software can be utilized to vary this as required as engines age as well.\u00a0 Several pilots commented on envelope limiting.\u00a0 This is a bit more complex and potentially devolves into the \u201climiting\u201d vs. \u201cprotection\u201d debate. \u00a0That said, my approach would be similar.\u00a0 We know the airplane should be good for 150% of the g-values, so we might design the flight control system to allow the nominal values to be exceeded up to the ultimate load limits when intentionally desired by the pilot (the algorithm could even include factors to reduce the ultimate load due to age of the aircraft and similar factors)?\u00a0 The same for pitch or roll.\u00a0 This is far different than the aerodynamic limits for, for example, stall, where the software can do a better job of putting us right on that thin performance line and holding us there. \u00a0\u00a0Real physical limitations are a good use for software protections as opposed to regulatory ones.\u00a0 So, in some respects the \u201chard limits\u201d are better, but perhaps not in others.\u00a0 If it were up to me, I would borrow a bit from both philosophies.\u00a0 We still do need a way to give the pilot quick control if the system is incorrectly sensing an exceedance, however.\u00a0 The pilots need to be part of the \u201cvoting\u201d, specifically both pilots should be, together.\u00a0 The reader is reminded that the second pilot is not onboard to be a \u201cbackup\u201d for the other pilot, but rather due to the multiplying effect of a shared mental model.\u00a0 Two people working together is not just twice as good, but many times better.<\/p>\n Exceeding normal limits, whether due to potentially bad data or a perceived need to \u201csave the airplane\u201d, should be a very deliberate action.\u00a0 A dual pilot action.\u00a0 The pilot flying should have to confirm with the other pilot, who then activates the ability to exceed a value.\u00a0 Yes, there might be some corner case where a pilot is incapacitated (or happens to not be available at that moment), but the risk of loss of control in general is certainly higher and, while it should be analyzed, it is my belief that leaving the ability to exceed normal values to a single person would add more risk than it reduces.\u00a0 While procedurally this is something that could be (and is often) done in any event through pilot announcements of intentions and pilot monitoring confirmation, there are too many cases where airplanes exceeded limits unintentionally while both pilots were attending to something else.\u00a0 A designed-in limiting feature is clearly supported by the data.\u00a0 Just having heavier control forces to exceed a value does not seem to be enough when it comes to pitch and roll.\u00a0 We still see unintentional excursions beyond those values.\u00a0 Adrenalin, perhaps?\u00a0 There may be many reasons, but that is not the point \u2013 the fact remains that it is happening.<\/p>\n This brings me to the final aspect out of the comments, the arena of the use of automation and the concepts of automation dependency.\u00a0 It is my experience that we do not have a problem with pilots having the skills.\u00a0 Focusing on that will likely not change the accident rates.\u00a0 As I said in my previous article, it is my belief that pilot skill is no more of a factor now in accidents than it has ever been. Rather, we have a different problem, or perhaps, set of problems.\u00a0 One is that we have a situation of \u201ctoo many cooks\u201d, but it is worse than that, as one pilot said, it is not just \u201ctoo many cooks\u201d, but that the pilot is often not even aware that there are <\/em>other cooks!<\/p>\n There is more.\u00a0 In ASIAS data we see events that are not related to the pilot\u2019s skill or background.\u00a0 Experienced pilots who have a strong military tactical and civilian background still find themselves in situations that conventional wisdom would say \u201conly happens to inexperienced or weak aviators\u201d.\u00a0 No, there is something else going on here and one that has, so far, defied conventional wisdom.\u00a0 Part of it is related to automation surprise, and the automation doing something different than what was expect.\u00a0 However, in many incidents, the automation is doing exactly what it is designed to do. \u00a0It appears that the pilots became distracted in the task of trying to get the automation to do what the pilot wanted <\/em>the system to do.<\/p>\n This problem will need a new approach, one that has not been identified.\u00a0 The conventional wisdom is falling short.\u00a0 I cannot now locate it the citation, but the situation reminds me of reading what Dr. Richard Feynman described in explaining why he believed most Nobel prizes were awarded to people who had done the seminal work and discoveries in their 20s.\u00a0 AS I recall, Feynman believed that they had not become \u201cset in their ways\u201d, so to speak.\u00a0 They did not just accept things as true, but were willing to challenge assumptions.\u00a0 We need that now.\u00a0 Perhaps we should turn to those researchers in their 20s who have not become set in their ways of thinking?<\/p>\n Finally, as reported in the Wall Street Journal and other publications concerning the Lion Air accident and MCAS, there is quite a bit of difference between training manuals and guidance between different operators and between different countries, \u201cAt least one European 737 MAX operator said it was briefed on the MCAS system before delivery of the plane. In regulatory documents, Brazilian authorities identified MCAS as a system that differs on the 737 MAX from earlier versions.\u201d[i]<\/a>\u00a0\u00a0 It is interesting that the Brazilian authorities took a different stance.\u00a0 While I have no way of knowing how that came about, it occurs to me that, in general, it would be beneficial for each country to take a more critical view of aircraft design features.\u00a0 There are too many states that defer to FAA and EASA and just, essentially, rubber stamp their findings.\u00a0 As good as FAA and EASA are, the diversity of perspectives by having higher scrutiny from agencies around the world, each bringing their own cultural perspective to the problem, might just capture things that would otherwise be missed.\u00a0 Now that I have gotten all the OEMs mad at me, I should add that the benefit of this would be reduced liability.\u00a0 A bit more pain on the front end but the pay-off is potentially huge.<\/p>\n Preventing is the vaccine \u2013 reaction is the anti-biotic.\u00a0 We need both.\u00a0 This applies to all aspects of this problem.<\/p>\n \u00a0<\/p>\n
![\"\"](\"https:\/\/1.gravatar.com\/avatar\/71222e839936336880e5ead5cc76aa2fcca467386a8082d8acec7a434b719bca?s=60&d=identicon&r=G\")
\t\t\t\t\t\t<\/div>\n