The Maneuvering Characteristics Augmentation System (MCAS) is a feature on Boeing 737 MAX aircraft intended to prevent stalls in flaps-retracted, low-speed, nose-up flight.[1] The MCAS uses airspeed and other sensor data to compute when a dangerous condition has developed and then trims the aircraft nose down.
Stall warning horns were invented in the 1930s.[2] In the 1960s, a stick shaker was first installed to notify the pilot more forcefully than the horn, of an impending stall.[3] With the introduction of fly-by-wire systems in airliners, it became possible to alter the feel of the control in the pilot's hands depending on flight regime, or even to override the pilot's commands when the flight computers sense a dangerous condition, including an incipient stall.[4]
Airbus led the industry in adoption of systems that would not permit a pilot to put an airliner in a dangerous regime.[5] Airbus introduced flight control laws with the A320 in 1988.[6][7] In 1995, Boeing introduced a similar system in the 777 that could be overridden by the pilot.[8]
Boeing 737 MAX aircraft have engines installed higher and further forward than previous 737 models. This caused an upward pitching moment. In order to pass Part 25 certification requirements, Boeing installed the MCAS, which automatically applies nose-down trim when the aircraft is in steep turns or in low-speed, flaps-retracted flight. When the angle-of-attack exceeds a limit that depends on airspeed and altitude, the system activates without notice to the pilot. The system is deactivated when a pilot trims the aircraft using a switch on the yoke. The system is sensitive to failure of angle-of-attack sensors mounted outside the aircraft.[9]The FAA and Boeing made the AOA Disagree alert an optional feature for the 737 MAX, deciding it was not critical for safe operation.[10]
Two aircraft equipped with MCAS have crashed: Lion Air Flight 610[11][12] and five months later Ethiopian Airlines Flight 302.[1] Preliminary investigative results of Lion Air Flight 610 suggested MCAS may have received erroneous angle of attack data and caused loss-of-control.[13] A fault in the MCAS flight control system is now seen as a potential cause of both accidents.[14]
The entire 737 MAX fleet was grounded worldwide pending the results of the crash investigations.[15]
Boeing cited an Indonesian finding that the Lion Air crash was a maintenance failure.[16]
Boeing introduced a software upgrade that notifies pilots of a failure of an angle-of-attack sensor, a crucial component of the MCAS system.[17][18] It will be deployed to aircraft operators "in the coming weeks," the company said on March 11, 2019.[17]
On March 11, one day after the Ethiopian crash, the Department of Justice convened a grand jury, subpoenaing at least one member of Boeing staff to answer questions about the development of the 737 Max 8.[19]
On March 19, Secretary of Transportation Elaine Chao called for an audit of the aircraft's certification process, specific to determin whether Boeing had undue influence on the certification process ("regulatory capture").[20]
[A]n "envelope protection" software scheme will be watching over the pilots every second.