{"id":1540,"date":"2025-07-16T12:11:32","date_gmt":"2025-07-16T12:11:32","guid":{"rendered":"https:\/\/remote-support.space\/wordpress\/?p=1540"},"modified":"2025-07-16T12:11:36","modified_gmt":"2025-07-16T12:11:36","slug":"air-india-crash","status":"publish","type":"post","link":"https:\/\/remote-support.space\/wordpress\/2025\/07\/16\/air-india-crash\/","title":{"rendered":"Air India Crash"},"content":{"rendered":"\n<p><br>Another one bites the dust. <br><br>These days the programming should also be considered. <br>Especially when the computers do not inform what kind of drastic action they are going to pull off. <br><br>Example : 737-Max-8 Trim to nose down based on bad sensor data. Two new airplanes bite the dust or water.<br><br>787  ANA 2013 engine fuel cutoff based on bad sensor data. Luckily the plane was on the ground and in taxi mode. <br><br>This makes at least three cases where bad error data was available from ONE sensor and based on that the computers took decisions to override the human operators. <br><br>What I am recommending is that they should instead do what they normally do like give audio warnings like <br>Pull up, terrain, bank angle&#8230; <br>In the PIA case the audio warning of gear not down was probably not made due to being dumped out of the queue because of other warnings like overspeed and stuff. Not excusable. Just add a queue so ALL warnings are made at least once. <br><br>The current kind of programming does not seem user friendly. Hidden code which is not in the manual and there is no warning as to what the computer is going to pull off. <br><br>Also the Qantas flight where it got bad data and suddenly pitch down causing many passengers to hit the ceiling and experience negative G forces for many seconds. <\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Here\u2019s a concise breakdown of the Qantas Flight 72 upset, in which erroneous onboard data led to uncommanded nose-down movements and negative-g in the cabin:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Flight and aircraft details<\/strong><br>\u2013 <strong>Date &amp; route:<\/strong> 7 October 2008, Singapore (Changi) \u2192 Perth (via Learmonth diversion)<br>\u2013 <strong>Type:<\/strong> Airbus A330-303, registration VH-QPA<br>\u2013 <strong>Occupants:<\/strong> 315 (303 passengers, 12 crew) (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Qantas_Flight_72?utm_source=chatgpt.com\">Wikipedia<\/a>)<\/li>\n\n\n\n<li><strong>Root cause: bad data from the ADIRU<\/strong><br>\u2013 One of the three Air Data Inertial Reference Units (ADIRUs) began outputting corrupted angle-of-attack values.<br>\u2013 This bad AOA data fed into the flight control primary computers (FCPCs), triggering an automatic \u201chigh-AOA protection\u201d nose-down command (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Qantas_Flight_72?utm_source=chatgpt.com\">Wikipedia<\/a>).<\/li>\n\n\n\n<li><strong>Sequence of the two uncommanded pitch-downs<\/strong><br>\u2013 <strong>First event (12:42:27 AWST):<\/strong>\n<ul class=\"wp-block-list\">\n<li>Sudden pitch-down to 8.4\u00b0 nose-down, vertical acceleration dropped to \u20130.8 g.<\/li>\n\n\n\n<li>Aircraft lost about 650 ft before crew recovered to FL 370.<br>\u2013 <strong>Second event (12:45:08 AWST):<\/strong><\/li>\n\n\n\n<li>A smaller nose-down to 3.5\u00b0, producing +0.2 g (near-weightlessness).<\/li>\n\n\n\n<li>Aircraft lost about 400 ft before being re-leveled (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Qantas_Flight_72?utm_source=chatgpt.com\">Wikipedia<\/a>, <a href=\"https:\/\/www.atsb.gov.au\/media\/2009\/release\/2009_16?utm_source=chatgpt.com\">ATSB<\/a>).<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Negative-g effects in the cabin<\/strong><br>\u2013 During the first plunge, unrestrained and even some restrained passengers and crew were lifted toward\u2014and struck\u2014the cabin ceiling, amid flying luggage and equipment.<br>\u2013 The near-one full negative-g event lasted several seconds, causing weightlessness from the cabin frame of reference (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Qantas_Flight_72?utm_source=chatgpt.com\">Wikipedia<\/a>).<\/li>\n\n\n\n<li><strong>Injuries and diversion<\/strong><br>\u2013 <strong>Injuries:<\/strong> 119 people injured (11 serious, 108 minor), including fractures and lacerations.<br>\u2013 <strong>Diversion &amp; landing:<\/strong> Declared mayday and diverted to Learmonth Airport, where injured were evacuated by RFDS and CareFlight (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Qantas_Flight_72?utm_source=chatgpt.com\">Wikipedia<\/a>).<\/li>\n<\/ol>\n\n\n\n<p><strong>Aftermath:<\/strong><br>\u2013 The ATSB identified both the ADIRU fault and a software design limitation in the A330 FCPC.<br>\u2013 EASA issued an emergency airworthiness directive in January 2009 for A330\/A340 aircraft with the affected ADIRUs to prevent recurrence.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Based on the search results, the 2013 ANA (All Nippon Airways) incident involving <strong>FADEC-induced fuel shutoff<\/strong> occurred under the following circumstances:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u2699\ufe0f 1. <strong>Incident Overview<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Date:<\/strong> January 16, 2013<\/li>\n\n\n\n<li><strong>Aircraft:<\/strong> Boeing 787-8 Dreamliner (Registration: JA804A) with Rolls-Royce Trent 1000 engines .<\/li>\n\n\n\n<li><strong>Location:<\/strong> Takamatsu Airport, Japan, during taxiing operations .<\/li>\n\n\n\n<li><strong>Event:<\/strong> Both engines simultaneously shut down without crew input. The FADEC system commanded fuel cutoff erroneously while the fuel control switches remained in the &#8220;ON&#8221; position .<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\ud83d\udd0d 2. <strong>Technical Cause<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Root Failure:<\/strong> Faulty <strong>Thrust Lever Angle (TLA) sensors<\/strong> sent erroneous data to the FADEC. The system misinterpreted this as a command to shut off fuel flow, triggering an automated dual-engine shutdown .<\/li>\n\n\n\n<li><strong>FADEC Behavior:<\/strong> The FADEC lacked manual override capabilities. With no pilot intervention possible, the engines failed despite operational fuel switches .<\/li>\n\n\n\n<li><strong>Investigation:<\/strong> Japan Transport Safety Board (JTSB) confirmed no crew error or physical switch movement. The failure was attributed to <strong>FADEC software logic vulnerabilities<\/strong> in processing sensor data .<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u26a0\ufe0f 3. <strong>Safety Implications<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Systemic Risk:<\/strong> This incident exposed a critical flaw in Boeing 787 FADEC design, where a single sensor fault could cascade into dual-engine failure .<\/li>\n\n\n\n<li><strong>Redundancy Failure:<\/strong> Although FADEC systems typically have redundant digital channels, the simultaneous sensor fault bypassed this safeguard .<\/li>\n\n\n\n<li><strong>Regulatory Context:<\/strong> The FAA had previously issued advisories (e.g., SAIB NM-18-33) about fuel control switch defects, but compliance was not mandatory .<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\ud83d\udee0\ufe0f 4. <strong>Aftermath &amp; Actions<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Software Updates:<\/strong> Boeing revised FADEC software to improve sensor fault tolerance and prevent similar misinterpretations .<\/li>\n\n\n\n<li><strong>Maintenance Protocols:<\/strong> Airlines implemented enhanced sensor inspections and FADEC diagnostic procedures, aligning with FAA airworthiness directives for fuel shutoff systems .<\/li>\n\n\n\n<li><strong>Industry Impact:<\/strong> The incident became a key case study in advocating for <strong>mandatory FADEC redundancy improvements<\/strong> and stricter oversight of sensor reliability .<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\ud83d\udc8e <strong>Conclusion<\/strong><\/h3>\n\n\n\n<p>The 2013 ANA incident underscores how sensor malfunctions could trigger unintended FADEC actions, leading to catastrophic engine shutdowns. It highlighted the need for robust fault-detection logic in digital engine controls and influenced subsequent aviation safety regulations .<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to restart if the FADEC cuts off. <\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><br><br><br>When an engine\u2019s FADEC has driven the fuel flow to \u201ccutoff\u201d (for example, during a flame-out or as part of an automatic shutdown), you restart it essentially the same way you conduct any FADEC-controlled start\u2014FADEC takes care of the fuel scheduling, ignition, and protection. The exact switches and levers vary by airframe\/engine type, but the generic procedure is:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Verify conditions for restart<\/strong>\n<ul class=\"wp-block-list\">\n<li>Check that no fire or other emergency condition exists.<\/li>\n\n\n\n<li>Ensure electrical power (battery or external) is on so FADEC is powered.<\/li>\n\n\n\n<li>Make sure you\u2019re within the envelope for a windmill or starter-assisted restart (altitude, airspeed, N2 or N3 windmill speed).<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Select FADEC to \u201cON\u201d (if you had switched it \u201cOFF\u201d)<\/strong>\n<ul class=\"wp-block-list\">\n<li>On most turboprops\/turboshafts you\u2019ll have a condition lever or FADEC switch\u2014ensure it\u2019s in the \u201cON\u201d (or \u201cCONT\u201d) position.<\/li>\n\n\n\n<li>On turbofans, the engine master switch or ignition switch must be in \u201cON\u201d so FADEC can control fuel.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Position the power lever to IDLE\/CUTOFF cycle<\/strong>\n<ul class=\"wp-block-list\">\n<li>If the lever is still at \u201cCUT-OFF,\u201d move it forward through \u201cIDLE\u201d and back to \u201cCUT-OFF,\u201d then forward again to \u201cIDLE.\u201d<\/li>\n\n\n\n<li>This cycling wakes up FADEC and primes its fuel-valve actuator.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Initiate the start<\/strong>\n<ul class=\"wp-block-list\">\n<li><strong>Press and hold<\/strong> the engine start (or ignition) switch.<\/li>\n\n\n\n<li>FADEC will:\n<ol class=\"wp-block-list\">\n<li>Open the fuel metering valve just enough to introduce fuel.<\/li>\n\n\n\n<li>Engage ignition.<\/li>\n\n\n\n<li>Monitor N2\/N3 speed and light off.<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Monitor the start sequence<\/strong>\n<ul class=\"wp-block-list\">\n<li>Watch N2 (or N3) accelerate.<\/li>\n\n\n\n<li>Observe EGT rise\u2014light-off should occur typically below 15% N2\/N3.<\/li>\n\n\n\n<li>When N2\/N3 reaches the scheduled idle speed (e.g. 55\u201360%), FADEC will cut out ignition and schedule fuel to idle.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Verify a stable idle<\/strong>\n<ul class=\"wp-block-list\">\n<li>Check that all parameters (torque\/TIT\/ITT, N1\/N2, oil pressure) are within green bands.<\/li>\n\n\n\n<li>If parameters don\u2019t stabilize, secure the engine (move condition lever to \u201cCUT-OFF\u201d) and troubleshoot per the QRH.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Example: Turbofan Windmill Restart (e.g., CFM56 on a narrowbody)<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Battery ON, APU ON (to supply bleed air), or cross-bleed\/engine bleed ON.<\/li>\n\n\n\n<li>Engine master switch\u2014select \u201cON.\u201d<\/li>\n\n\n\n<li>Thrust lever\u2014CUTOFF \u2192 IDLE \u2192 CUTOFF \u2192 IDLE.<\/li>\n\n\n\n<li>Press Engine Start switch; hold until N2 spools up.<\/li>\n\n\n\n<li>Monitor N2, EGT; at light-off, release Start switch.<\/li>\n\n\n\n<li>Verify idle.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Example: Turboprop Starter-Assisted Restart (e.g., PT6A)<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Condition lever\u2014\u201cFEATHER\u201d to \u201cSTART.\u201d<\/li>\n\n\n\n<li>Starter switch\u2014\u201cON\u201d (FADEC energizes starter and ignition).<\/li>\n\n\n\n<li>At 12% Ng, FADEC introduces fuel; light-off occurs.<\/li>\n\n\n\n<li>Ng accelerates to \u201cIDLE\u201d RPM.<\/li>\n\n\n\n<li>Starter cuts out automatically; verify stable idle.<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><strong>Key FADEC reminders:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>FADEC handles all fuel scheduling\u2014you never \u201cmanually\u201d introduce fuel.<\/li>\n\n\n\n<li>Cycling the power\/condition lever from cutoff through idle primes the fuel actuator.<\/li>\n\n\n\n<li>Always follow your QRH\/AFM-specified limits for N2 windmill speeds, EGT margins, and altitude\/airspeed envelopes.<\/li>\n<\/ul>\n<\/blockquote>\n\n\n\n<p>If you tell me your specific airframe or engine model I can give you the exact switch-and-lever sequence from the AFM\/QRH.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Another one bites the dust. These days the programming should also be considered. Especially when the computers do not inform what kind of drastic action they are going to pull off. Example : 737-Max-8 Trim to nose down based on bad sensor data. Two new airplanes bite the dust or water. 787 ANA 2013 engine [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-1540","post","type-post","status-publish","format-standard","hentry","category-aviation"],"_links":{"self":[{"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/posts\/1540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/comments?post=1540"}],"version-history":[{"count":1,"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/posts\/1540\/revisions"}],"predecessor-version":[{"id":1541,"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/posts\/1540\/revisions\/1541"}],"wp:attachment":[{"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/media?parent=1540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/categories?post=1540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/remote-support.space\/wordpress\/wp-json\/wp\/v2\/tags?post=1540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}