Deactivating MCAS on AOA disagree would have prevented both crashes. But yes, the program behaved to spec, so strictly speaking it is not a programmer error but

Deactivating MCAS on AOA disagree would have prevented both crashes. But yes, the program behaved to spec, so strictly speaking it is not a programmer error but a spec problem.