logoalt Hacker News

aaronmdjonestoday at 12:31 AM1 replyview on HN

The addition of MCAS to the 737 MAX received type approval by the FAA in response to Boeing's documentation, not in response to anything Boeing approved or issued. No aircraft manufacturer has ever been allowed to issue a type certificate.

The self-certification process (airworthiness certificates) is the manufacturer (rather than the regulator's inspectors) stating "this one specific aircraft with serial number _______ has been built according to the design covered by its type certificate". Nothing more.

In other words, an airworthiness certificate only specifies that a specific aircraft is airworthy /because/ it is built according to an airworthy design. Whether the design is safe or not has always only been up to the regulator to decide. In this case, the regulator dropped the ball and approved an unsafe design. If Boeing was not allowed to self-certify their own aircraft, the FAA would still have issued airworthiness certificates for them, including the two aircraft that would have gone on to kill hundreds of people, because they were built according to the design the FAA approved.


Replies

estearumtoday at 12:53 AM

No, an early, low-risk version of MCAS was proposed and given type approval by FAA. Then the MCAS design was changed iteratively and continuously without prompting another type approval process. Thenceforth, Boeing's ODA self-certification process was the only statutorily required step that could have caught that the post-type approval changes actually increased the risk significantly.

You should read the OIG report. It actually discusses all of this. It is absolutely possible an FAA cert would've missed the MCAS issue as well, but as OIG points out, one variable was significant commercial pressure on Boeing's ODA to approve the (iterated-since-type-approved)-MCAS. Presumably FAA staff would be less susceptible to this type of commercial pressure.

show 2 replies