Quote:
Originally Posted by Philip Argy
...
The aspect that I find alarming is why ADIRU-1 input and output is not compared with ADIRU-2 and ADIRU-3 and any inconsistency treated as the bais for concluding that something is wrong with one of them, or at least alerting the crew to that possibility. What's the point of having redundant systems if they don't take over when one is faulty or don't detect when one is faulty. The rigour with which these avionics are stress tested is inadequate - we've seen too many examples of faults that, however rare, still reflect a permutation of conditions not tested. To me that must remain unacceptable.
...
|
It is not easy to test a piece of equipment or software for every possible permutation. Even simple things can have millions of combinations.
The main thing is there are back-ups or procedures to follow when things go wrong. Sure some people got hurt by what appears to be a first for this type, but the plane and it's passengers still made it to the ground in one piece.