Certification process for the 737 MAX silent gradual pusher system
A reader was kind enough to send me “Flawed analysis, failed oversight: How Boeing and FAA certified the suspect 737 MAX flight control system” (Seattle Times), which gives some more detail on how the world’s first “silent gradual pusher” system was unleashed on airline passengers and crew. (See https://philip.greenspun.com/blog/2018/11/11/boeing-737-crash-is-first-mass-killing-by-software/ for my description of how the conventional stick pusher works; it requires two sensors to agree before it will activate and the pushing is readily apparent to the pilots; disabling the pusher in a simple turboprop aircraft is as simple as pushing a button on the yoke).
The Seattle Times article describes the delegation process by which an employee of Boeing can actually do a lot of the work that members of the public imagine FAA employees would be doing. Boeing is an “Organization Designation Authorization” holder (“ODA”). A Boeing employee puts on an FAA hat periodically and checks work done by fellow Boeing employees.
Putting government workers in the critical path for engineering improvements slows things down so much that safety ends up being compromised. And having people pay designated or delegated authorities cuts the cost to taxpayers. But I wonder if it is time to say that certification scrutiny should be done by an independent private engineering team, not by engineers employed by the manufacturer.
Full post, including comments



