3 ms·
Depends.. yes, why was the flight plan not rejected individually or before (and where is at least the proper logging which allows to find the root cause and res
by throwbadubadu 3y ago
Depends.. yes, why was the flight plan not rejected individually or before (and where is at least the proper logging which allows to find the root cause and restart quicker)? But the system is likely more complex and distributed, and I can also see that defensively programmed safety critical systems can and should do that at a certain point where certain input or output is just unexpected and wrong. To recover in some way or silently go on with eventually unexpected (even if not undefined) behaviour then is no option.
- blitzar 3y agoA defensively programmed safety critical system should reject (loudly) the offending flight plan (and its permission to fly in the airspace) rather than shut itself off and leave all the planes flying (currently and in the foreseable future) to figure things out for themselves.
- throwbadubadu 3y agoSaid that and yes is always an easy and apparent statement to make as an armchair outsider.. read the full report? ;) (Hint again: Something certainly could have been done much better there in this system, but the limited component itself that all caused this maybe even just had no other option at that point. Been there once in those many component systems talking with each other across with too many interfaces, people, etc involved, part of them safety critical and also subject to endless requirements and certifications? Can recommend..)
- atcalan 3y agoOur flight plan validator still gives me nightmares.
- blitzar 3y agoAll the more reason that a single flight plan that fails path validation doesnt (by design) shut down the entire air space of a nation for 24-48 hours.