Posts about: "Engine Shutdown" [Posts: 105 Pages: 6]

violator
2025-06-13T18:58:00
permalink
Post: 11900812
Originally Posted by tdracer
OK, another hour spent going through all the posts since I was on last night...
I won't quote the relevant posts as they go back ~15 pages, but a few more comments:

TAT errors affecting N1 power set: The FADEC logic (BTW, this is pretty much common on all Boeing FADEC) will use aircraft TAT if it agrees with the dedicated engine inlet temp probe - but if they differ it will use the engine probe . The GE inlet temp probe is relatively simple and unheated, so (unlike a heated probe) a blocked or contaminated probe will still read accurately - just with greater 'lag' to actual temperature changes.

TCMA - first off, I have to admit that this does look rather like an improper TCMA activation, but that is very, very unlikely. For those who don't know, TCMA is a system to shutdown a runaway engine that's not responding to the thrust lever - basic logic is an engine at high power with the thrust lever at/near idle, and the engine not decelerating. However, TCMA is only active on the ground (unfamiliar with the 787/GEnx TCMA air/ground logic - on the 747-8 we used 5 sources of air/ground - three Radio Altimeters and two Weight on Wheels - at least one of each had to indicate ground to enable TCMA). TCMA will shutdown the engine via the N2 overspeed protection - nearly instantaneous. For this to be TCMA, it would require at least two major failures - improper air ground indication or logic, and improper TCMA activation logic (completely separate software paths in the FADEC). Like I said, very, very unlikely.

Fuel contamination/filter blockage: The fuel filters have a bypass - if the delta P across the filter becomes excessive, the filter bypasses and provides the contaminated fuel to the engine. Now this contaminated fuel could easy foul up the fuel metering unit causing a flameout, but to happen to two engines at virtually the same time would be tremendous unlikely.

Auto Thrust thrust lever retard - the TO lockup in the logic makes this very unlikely (it won't unlock below (IIRC) 400 ft., and even that requires a separate pilot action such as a mode select change or thrust lever movement). And if it did somehow happen, all the pilot needs to do is push the levers back up.

Engine parameters on the FDR: I don't know what exactly is on the 787 FDR with regards to engine parameters, but rest assured that there is plenty of engine data that gets recorded - most at one/second. Getting the FDR readout from a modern FDR is almost an embarrassment of riches. Assuming the data is intact, we'll soon have a very good idea of what the engines were doing
The speed at which there was a complete loss of thrust and electrical power degrading to the point of flickering lights and RAT deployment suggests to me an actual engine shutdown rather than anything linked to auto thrust or fuel contamination. There are not many things which can cause an engine to shut down: LP valves, FADEC incl TCMA, crew action\x85
Turkey Brain
2025-06-13T21:57:00
permalink
Post: 11900954
At this stage, at least two scenarios seem highly plausible:

1. Technical issue

Airliners rely on air/ground logic , which is fundamental to how systems operate.

There have been numerous crashes and serious incidents linked to this logic functioning incorrectly.

Some engineering tests require the air/ground switch to be set in a particular mode. If it's inadvertently left in engineering mode—or if the system misinterprets the mode—this can cause significant problems.
  • On the ground , if the aircraft is incorrectly in air mode , some systems may be unavailable—such as wheel brakes, reverse thrust, or ground spoilers.
  • In the air , if the aircraft is mistakenly in ground mode , flaps might auto-retract, and various layers of system protection may be disabled.
In the case of the ANA 787, it appears the engine shutdown occurred during the landing roll, possibly when the TCMA system activated.

2. Pilot misselection of fuel control switches to cutoff

This is still a very real possibility. If it occurred, the pilot responsible may not have done it consciously—his mindset could have been in a different mode.

There’s precedent: an A320 pilot once inadvertently shut down both engines over Paris. Fortunately, the crew managed to restart them. Afterward, the pilot reportedly couldn’t explain his actions.

If something similar happened here, then when the pilots realized the engines had stopped producing thrust, pushing the levers forward would have had no effect. It’s easy to overlook that the fuel switches are in the wrong position—they're far from the normal scan pattern. And with the ground rushing up, the view outside would’ve been far more commanding.

Speaking personally, when I shut down engines at the end of a flight, I consciously force myself to operate each fuel switch independently and with full attention. I avoid building muscle memory that might lead to switching off both engines in a fast, well-practiced habit.

If this is a technical issue, I assume we’ll know soon enough.

3 users liked this post.

fdr
2025-06-13T22:13:00
permalink
Post: 11900962
Originally Posted by Turkey Brain
At this stage, at least two scenarios seem highly plausible:

1. Technical issue

Airliners rely on air/ground logic , which is fundamental to how systems operate.

There have been numerous crashes and serious incidents linked to this logic functioning incorrectly.

Some engineering tests require the air/ground switch to be set in a particular mode. If it's inadvertently left in engineering mode—or if the system misinterprets the mode—this can cause significant problems.
  • On the ground , if the aircraft is incorrectly in air mode , some systems may be unavailable—such as wheel brakes, reverse thrust, or ground spoilers.
  • In the air , if the aircraft is mistakenly in ground mode , flaps might auto-retract, and various layers of system protection may be disabled.
In the case of the ANA 787, it appears the engine shutdown occurred during the landing roll, possibly when the TCMA system activated.

2. Pilot misselection of fuel control switches to cutoff

This is still a very real possibility. If it occurred, the pilot responsible may not have done it consciously—his mindset could have been in a different mode.

There’s precedent: an A320 pilot once inadvertently shut down both engines over Paris. Fortunately, the crew managed to restart them. Afterward, the pilot reportedly couldn’t explain his actions.

If something similar happened here, then when the pilots realized the engines had stopped producing thrust, pushing the levers forward would have had no effect. It’s easy to overlook that the fuel switches are in the wrong position—they're far from the normal scan pattern. And with the ground rushing up, the view outside would’ve been far more commanding.

Speaking personally, when I shut down engines at the end of a flight, I consciously force myself to operate each fuel switch independently and with full attention. I avoid building muscle memory that might lead to switching off both engines in a fast, well-practiced habit.

If this is a technical issue, I assume we’ll know soon enough.
On item 1, the TCMA issue should have been fixed, it does fit the sort of issue that occurred here. TDRACER can talk to that, and has done in 2019 and again in post 792. As to flap auto retraction, the B787 like all Boeings has a gated flap lever, and the flaps are only able to move independent of the lever by flap load relief. That would not have caused a loss of thrust, and in this case it is evident that the event is a thrust loss not a CL loss.

On item 2, the video shows no asymmetry at any time, so there is only a symmetric failure of the engines possible. Back on a B747 classic, you could chop all 4 engines at the same time with one hand, on a B737, also, not so much on a B777 or B787. I would doubt that anyone used two hands to cut the fuel at screen height. Note, there was a B744 that lost one engine in cruise when a clip board fell off the coaming. Didn't happen twice, and it only happened to one engine.


Originally Posted by neila83
Yes indeed, the moment they pulled the gear lever, as we see the gear begin the retraction process, and then suddenly stop. Almost as if they suddenly lost power.

We can see the landing gear retraction process begin. We see the bogies tilted in the second video. We can hear the RAT. We can see the RAT. We can see the flaps extended in the video and at the crash site. There isn't actually a single piece of evidence the flaps were raised, it's just a conclusion people jumped too before evidence began to emerge.

The crazy thing is, when the report comes out and there is no mention of flaps none of the people who have been pushing the flap theory will self reflect or learn anything. They'll think those of us who didn't buy into it were just lucky, rather than it being down to use of fairly simple critical thinking.
​​​​​
Neila83 is correct, the gear tilt pre retraction is rear wheels low, and at the commencement of the selection of the retraction cycle (generally), the first thing that happens is the inboard MLG doors start to open below the wheel well and then the bogie is driven to front wheels low. (There is also an option that the inboard gear doors start to open early as a result of WOW sensing to improve the SSL climb limit). [my bad, for the B788 Capt Bloggs informs us the gear door sequence is after the tilt, not before, the B789 has the before tilt, the option for the door open at rotate is separate]

The inboard doors do not appear to have opened in this case, yet, the gear is forward wheels down. This appears to be out of sequence. TD may have better knowledge on the options that exist with the B788, but this is not looking good at this time.

There is enough in the way of anomalies here to end up with regulatory action, and airlines themselves should/will be starting to pore over their systems and decide if they are comfortable with the airworthiness of the aircraft at this moment. A latent single point of failure is not a comfortable place to be. Inhibiting TCMA might be a good interim option, that system could have been negated by having the ATR ARM switches....(Both)... ARM deferred to the before takeoff checks. The EAFR recovery should result in action within the next 24-48 hours. Boeing needs to be getting their tiger teams warmed up, they can ill afford to have a latent system fault discovered that is not immediately responded to, and the general corporate response of "blame the pilots" is not likely to win any future orders.

I think we are about to have some really busy days for the OEM.


Originally Posted by Right Way Up
I think you need to temper your tone This is a discussion about possibilities and quite honestly nothing would surprise me. There is no "winning" result here. Just hopefully answers which will help safety in the future.
Not sure that Neila83 is that far off the mark at all.

Last edited by fdr; 14th Jun 2025 at 01:21 . Reason: corrected for B788 by Capt Bloggs!

8 users liked this post.

TURIN
2025-06-13T23:49:00
permalink
Post: 11901007
Originally Posted by Magplug
Speaking as a B787 Captain..... There is so much rubbish and stupid suggestion being written here.

This aircraft was airborne for a grand total of 22 seconds, half of which was climbing to no more than 150' aal.

- No Flaps? Due to the setup of the ECL it is physically impossible to go down the runway without some sort of take-off flap set. The T/o config warning would have been singing it's head off. Despite assertions to the contrary I have seen no video clear enough to detect a lack of flaps.

- RAT out? Almost impossible, I have seen no quality footage that definitively witnesses the RAT being out. Those who think they car hear a RAT type noise might be listening to a motorcycle passing or similar. It takes a triple hydraulic failure or a double engine failure to trigger RAT deploment. They happily went through V1 without a hint of rejected take off so as they rotated the aircraft was serviceable. These are big engines, they take a long time to wind down when you shut them down. I have never tried it however engine failure detection takes 30s or for the aircraft to react and they were not even airborne that long.
- Flaps up instead of gear? The B787 flaps are slow both in and out. Given that the 'Positive rate' call is not made the second the wheels leave the ground, a mis-selection of flaps up would not cause any loss of lift for at least 20 seconds, by which time they had already crashed. I believe the gear remained down not because of mis-selection but because of a major distraction on rotate.

Discounting the impossible, two hypotheses remain:

1. Invalid derate set through incorrect cross-checking. Trundling down the runway takes very little power to reach Vr. It is only when you rotate that you create more drag and discover that you do not have sufficient thrust vs. drag to sustain a climb. Or....
2. Put 200' as the altitude target in the FCU. Immediate ALT capture and all the power comes off. PF is still hand flying trying to increase pitch but is already way behind the aircraft.

It could be after this that Boeing are forced to review the B787 practice of exploring the very edges of the performance envelope.
I have to agree with everything here except your assertion about engine shutdown.
Even though these are big engines with plenty of inertia, when you select engine shut off they spool down very quickly if on load. IE, The generators, two per engine and hydraulic pumps, etc, being driven by the (relatively) small mass of the N2 rotor will drag the speed down very quickly, the gennies will trip offine in seconds, the pumps will quickly reduce flow and pressure.
As for what went wrong.
If the engines have stopped working there has to be a common failure mode, fuel is one but as has been said, no other aircraft has had a problem, as far as we know. FOD? It would have to be something major to shut down two GeNX engines and there would be debris all over the runway, we would know by now.
I have no idea if the RAT has deployed, I can't see it in the video and the noise could be something else.
We shall see.
There is compelling evidence that flaps are set correctly and not retracted inadvertently.
I await further evidence.
Edit to add. LAE 40 years, type rated on 737 to 787 with lots of others in between.

5 users liked this post.

BrogulT
2025-06-14T00:49:00
permalink
Post: 11901040
Originally Posted by HumbleDeer
Default setup is left tank left engine, right tank right engine. Each engine also has two redundant pumps feeding it, meaning it can operate fully and normally on one operational engine fuel pump.

Furthermore, the engines cannot run from the center tank. There's no such thing. The center tank transfers to the outer tanks, when necessary or when running low or to resolve imbalances, either automatically or manually initated by the pilot for whatever reason. The engine fuel pumps only ever draw from their respective tank.
It is as thus impossible for the center tank being empty to cause engine shutdown unless the main tanks were also empty, in which case we would: be in a lot of trouble, shouldn't be taking off, and wouldn't have a massive orange fireball.
This is contrary to what is published here and elsewhere.

https://kb.skyhightex.com/knowledge-...7-fuel-system/

Can you state the source of your information? I have no way of independently verifying what I've provided. According to that, however, the two center tank pumps are higher pressure than the L/R tank pumps and will override them if both are activated. So the center tank fuel is used first, then the L/R tank pumps. If no pumps are operating, the engines can suction fuel from their respective L or R tanks provided there's enough atmospheric pressure. The end result is still that an empty center tank cannot cause an engine shutdown absent some other malfunction.

3 users liked this post.

Sailvi767
2025-06-14T00:55:00
permalink
Post: 11901047
Originally Posted by HumbleDeer
Default setup is left tank left engine, right tank right engine. Each engine also has two redundant pumps feeding it, meaning it can operate fully and normally on one operational engine fuel pump.

Furthermore, the engines cannot run from the center tank. There's no such thing. The center tank transfers to the outer tanks, when necessary or when running low or to resolve imbalances, either automatically or manually initated by the pilot for whatever reason. The engine fuel pumps only ever draw from their respective tank.
It is as thus impossible for the center tank being empty to cause engine shutdown unless the main tanks were also empty, in which case we would: be in a lot of trouble, shouldn't be taking off, and wouldn't have a massive orange fireball.
Virtually everything in this post is wrong. The 787 fuel system is almost the same as the 767. The default setup is all fuel pumps on. Each wing tank sends fuel to the left or right respective manifold. The center (main) tank pumps send fuel to both manifolds and operate at a higher pressure than the wing tanks and will feed the manifolds for each side from its left or right pump before the wing tanks. If there is fuel in the center tank it is always burned first and directly supplies the manifolds to the engines. Once the center tank is empty the wing tanks then begin supplying fuel to their respective manifolds. If any pumps are inadvertently left off you will get a EICAS message and a light in the pump switch.

11 users liked this post.

Blake777
2025-06-14T01:16:00
permalink
Post: 11901055
Originally Posted by jolihokistix
Trying repeatedly to follow the whole thread plus updates but loading on the iPhone constantly jumps backwards and forwards making it a struggle to cover everything.

Two points which may or may not have relevance. One is just before the final crash, a dark-looking cover(?) flies up into the air. Could this be the first contact with sound that the surviving passenger alleges he heard?

Secondly the cost of aviation fuel seems to be comparatively more expensive in India than either Japan (leg before) or the UK (following leg). Would this effect refuelling procedures within India, supposing a company directive to save when possible?

(Frequent long-haul passenger.)
Good grief! They uploaded less fuel to save money??? That made the plane immediately sink to oblivion…because what? They ran out of fuel? You think airports all over India restrict fuel and endanger countless aircraft daily? It is the Captain’s prerogative to sign off on fuel upload.

But let’s run with it. Less fuel = lighter load. So…how does that make lift off/climb a more difficult procedure??? It shouid have been easier. How does that result in rapid loss of lift? Did they finish their tablespoon of fuel?

Or - if you are hinting at fuel contamination by being “watered down” somehow…why were no other aircraft affected? You might wish to consider Cathay Pacific flight 780, which suffered a serious fuel contamination incident. The problem was not initialiy detectable, but some engine underperformance was noted in one engine fairly early into the flght. The problems compounded during the flght from Surabaya to Hong Kong, culminating in complete engine shutdown. Fortunately, due to the experience and skill of Captain and Copilot, they just - only just - managed to land safely in Hong Kong. Point is - a crash scenario did not unfold in seconds.

Last edited by Blake777; 14th Jun 2025 at 01:48 .
compressor stall
2025-06-14T04:00:00
permalink
Post: 11901123
Originally Posted by bcpr
Ex petroleum lab technician and tank farm sampler here. We would occasionally get fuel samples from crashed aircraft to test for contamination. One test was for water and sediment/microorganism sludge.

In this accident, fuel contamination continues to be dismissed as a cause, because no other aircraft have reported issues. But there has been no discussion regarding the airport's fuel storage, transfer, or filtration systems. Water and sediment naturally settles at the bottom of fuel storage tanks. If this aircraft received fuel drawn from the bottom of a storage tank, in the absence of a proper filtration system, it\x92s possible that it was contaminated. The next aircraft may have received fuel from a different storage tank with good fuel.

Fuel contamination is certainly a valid theory. The main thing working against it is that it would seem from the aircraft's flight path is that both engines failed at exactly the same time and lost thrust simultaneously. The chances of this are non zero, but remote. I say that as there appears to be no yaw, or other controlling of the aircraft - either by pilot or automation - that would suggest an asymmetric thrust scenario, even for a few seconds.

Yes, Jetstar had the biocide issue but did not immediately hit both engines within seconds of each other.

It's my understanding that both engines draw fuel from independent sources during that time (which may be fed from a common source (eg central tank). But again, the odds of both failing at the exact same instant is low, but not zero.
1stspotter
2025-06-14T20:07:00
permalink
Post: 11901788
Originally Posted by nachtmusak
There are more data messages than that, which FR24 shared on the day of the accident and which have been posted a few times in this thread. I'm pretty sure there's also been a comparison of this + previous flights posted in this thread that shows that while the coverage at the airport itself is spotty, it's reasonable to expect further messages to have been received before impact.

Not sure how permanent the content at this URL is, but here's a link to FR24's update which has a CSV with all frames received https://www.flightradar24.com/blog/f...rom-ahmedabad/

Somebody on this forum did some analysis with FR24 data of this flight and other AI171 B787 flights.
See this article for an overview of all scenarios. It all looks very like to an commanded dual engine shutdown. Why nobody knows.
SpaceQuality
2025-06-14T20:42:00
permalink
Post: 11901816
Boeing TCMA Patent US6704630B2

Also a newcomer here, but an experienced private pilot, Software Engineer with a degree in Aerospace Computer Science and former Head of Quality for Satellites and Interplanetary Missions. We have already seen bad software solutions and the results thereof in the 737 MAX accidents, which makes me wonder, if the TCMA can reach a state, where unintended engine shutdown is possible.

There is one system implemented in the 787, that has the authority to shut down the engines, based on software subsystem decision. Interestingly - according to the description in the patent below - the same TCMA software package determines the shutdown decision, in both redundant subsystems.

Excerpt from the Patent:
"Malfunctions in aircraft power plant thrust control systems can result in uncontrollable high engine power levels that are potentially hazardous or catastrophic for aircraft operation. A particularly hazardous situation is when a thrust control system failure results in one of the aircraft's engines continuing to operate at a high power condition and not responding to a throttle command to reduce power during takeoff, approach or landing. Typically, when this failure mode occurs, the actual thrust either increases to a significantly higher than commanded thrust and/or remains at a high level when the thrust levers are set for low thrust....

In one preferred embodiment the present invention is directed to a system and method for detecting and correcting a thrust control malfunction in an aircraft engine. The system includes an electronic engine control (EEC) unit that includes a first processing subsystem and a second processing subsystem, and a thrust control malfunction accommodation (TCMA) circuit included in the first processing subsystem and the second processing subsystem. Additionally, the system includes a TCMA software package executed by the first processing subsystem and the second processing subsystem, thereby providing redundant execution of the TCMA software package.

The method of the present invention compares the engine's actual power level with a threshold contour defined by the TCMA software package. When the TCMA software package determines that a thrust control malfunction has occurred, based on the engine's power level exceeding the threshold contour, the engine is shut down by the TCMA circuit.
The present invention is still further directed to an electronic engine control (EEC) unit configured to detect and correct an aircraft engine thrust control malfunction using an active-active functionality. The EEC includes a first processing subsystem for unilaterally monitoring engine operation and shutting down the engine when a thrust control malfunction occurs, and a second processing subsystem for unilaterally monitoring engine operation and shutting down the engine when a thrust control malfunction occurs."

Just my 20 cents

12 users liked this post.

BugBear
2025-06-14T21:19:00
permalink
Post: 11901847
Which side of V1

Originally Posted by SpaceQuality
Also a newcomer here, but an experienced private pilot, Software Engineer with a degree in Aerospace Computer Science and former Head of Quality for Satellites and Interplanetary Missions. We have already seen bad software solutions and the results thereof in the 737 MAX accidents, which makes me wonder, if the TCMA can reach a state, where unintended engine shutdown is possible.

There is one system implemented in the 787, that has the authority to shut down the engines, based on software subsystem decision. Interestingly - according to the description in the patent below - the same TCMA software package determines the shutdown decision, in both redundant subsystems.

Excerpt from the Patent:
"Malfunctions in aircraft power plant thrust control systems can result in uncontrollable high engine power levels that are potentially hazardous or catastrophic for aircraft operation. A particularly hazardous situation is when a thrust control system failure results in one of the aircraft's engines continuing to operate at a high power condition and not responding to a throttle command to reduce power during takeoff, approach or landing. Typically, when this failure mode occurs, the actual thrust either increases to a significantly higher than commanded thrust and/or remains at a high level when the thrust levers are set for low thrust....

In one preferred embodiment the present invention is directed to a system and method for detecting and correcting a thrust control malfunction in an aircraft engine. The system includes an electronic engine control (EEC) unit that includes a first processing subsystem and a second processing subsystem, and a thrust control malfunction accommodation (TCMA) circuit included in the first processing subsystem and the second processing subsystem. Additionally, the system includes a TCMA software package executed by the first processing subsystem and the second processing subsystem, thereby providing redundant execution of the TCMA software package.

The method of the present invention compares the engine's actual power level with a threshold contour defined by the TCMA software package. When the TCMA software package determines that a thrust control malfunction has occurred, based on the engine's power level exceeding the threshold contour, the engine is shut down by the TCMA circuit.
The present invention is still further directed to an electronic engine control (EEC) unit configured to detect and correct an aircraft engine thrust control malfunction using an active-active functionality. The EEC includes a first processing subsystem for unilaterally monitoring engine operation and shutting down the engine when a thrust control malfunction occurs, and a second processing subsystem for unilaterally monitoring engine operation and shutting down the engine when a thrust control malfunction occurs."

Just my 20 cents
Which side of V1 does TCMA lurk? If a pilot closes the throttles to abort, does the system allow it? After all, "too low thrust" is outside the contour....




1 user liked this post.

cncpc
2025-06-14T23:03:00
permalink
Post: 11901937
Originally Posted by A320 Glider
Just to confirm.
The 787 is an aircraft which likes to, performance wise, use all of the available runway for takeoff. Sometimes you can be sat in the 787 and as you are rolling down the runway, you start wondering if Rotate has been called or not. It loves taking up all of the runway.

Nevertheless, there are some interesting speculations over on X. One guy even claimed the Captain was in the lavatory during the accident...

Many people have noted what appears to be the RAT deployed in the video footage suggesting dual engine failure. Possible wrong engine shutdown? But who diagnoses and actions an engine failure and shutdown below 400ft?
The Mayday specified loss of control and engine failure.
wokawoka
2025-06-15T00:38:00
permalink
Post: 11901997
Sector Crewing

777 Driver for a legacy here.

This is a 10 hr ish sector. Would there not be a 3rd crew on this? There definitely is in my outfit for that length.

I was of the belief of flap mis-selection as I have seen in the past. However, with video fly past noise, the sound spectral analysis, I am happy to be convinced that the RAT was out.

There are only a few scenarios where this happens - electrical malfunction would not cause the engine to shutdown. However the engines shutting down would cause the electric malfucntion depowering the BUS' which activates the RAT. This is a billion to one chance. Can't see it happening.


Last edited by Saab Dastard; 15th Jun 2025 at 20:41 . Reason: Removal of unwarranted speculation

4 users liked this post.

BugBear
2025-06-15T00:50:00
permalink
Post: 11902002
Originally Posted by wokawoka
777 Driver for a legacy here.

This is a 10 hr ish sector. Would there not be a 3rd crew on this? There definitely is in my outfit for that length.

I was of the belief of flap mis-selection as I have seen in the past. However, with video fly past noise, the sound spectral analysis, I am happy to be convinced that the RAT was out.

There are only a few scenarios where this happens - electrical malfunction would not cause the engine to shutdown. However the engines shutting down would cause the electric malfucntion depowering the BUS' which activates the RAT. This is a billion to one chance. Can't see it happening.
The question, unasked ....

Does TCMA understand WoW prior to taxi!? Taxiing, accelerating? Rotation, Braking, Stowed? Does the software? Does the subset? Who designed it's Contours?
galaxy flyer
2025-06-15T00:53:00
permalink
Post: 11902007
Originally Posted by cncpc
Gear pins?
I very much doubt they pin the main gear on turn. Nose, yes.

I will add loss of all generators and all engines failed can look at first and second glance awfully similar and confusing. At least from the times I’ve seen it in the sim in several types.

1 user liked this post.

Back office Penguin
2025-06-15T01:43:00
permalink
Post: 11902040
MELs?

Originally Posted by Mr Optimistic
From tdracer
However, TCMA is only active on the ground (unfamiliar with the 787/GEnx TCMA air/ground logic - on the 747-8 we used 5 sources of air/ground - three Radio Altimeters and two Weight on Wheels - at least one of each had to indicate ground to enable TCMA). TCMA will shutdown the engine via the N2 overspeed protection - nearly instantaneous. For this to be TCMA, it would require at least two major failures - improper air ground indication or logic, and improper TCMA activation logic (completely separate software paths in the FADEC). Like I said, very, very unlikely.
I assume the dual engine shutdown due to engine overspeed. Could the case occur with increased thrust manually in the end of takeoff phase?
Xeptu
2025-06-15T01:53:00
permalink
Post: 11902043
Originally Posted by SpaceQuality
Also a newcomer here, but an experienced private pilot, Software Engineer with a degree in Aerospace Computer Science and former Head of Quality for Satellites and Interplanetary Missions. We have already seen bad software solutions and the results thereof in the 737 MAX accidents, which makes me wonder, if the TCMA can reach a state, where unintended engine shutdown is possible.

There is one system implemented in the 787, that has the authority to shut down the engines, based on software subsystem decision. Interestingly - according to the description in the patent below - the same TCMA software package determines the shutdown decision, in both redundant subsystems.

Excerpt from the Patent:
"Malfunctions in aircraft power plant thrust control systems can result in uncontrollable high engine power levels that are potentially hazardous or catastrophic for aircraft operation. A particularly hazardous situation is when a thrust control system failure results in one of the aircraft's engines continuing to operate at a high power condition and not responding to a throttle command to reduce power during takeoff, approach or landing. Typically, when this failure mode occurs, the actual thrust either increases to a significantly higher than commanded thrust and/or remains at a high level when the thrust levers are set for low thrust....

In one preferred embodiment the present invention is directed to a system and method for detecting and correcting a thrust control malfunction in an aircraft engine. The system includes an electronic engine control (EEC) unit that includes a first processing subsystem and a second processing subsystem, and a thrust control malfunction accommodation (TCMA) circuit included in the first processing subsystem and the second processing subsystem. Additionally, the system includes a TCMA software package executed by the first processing subsystem and the second processing subsystem, thereby providing redundant execution of the TCMA software package.

The method of the present invention compares the engine's actual power level with a threshold contour defined by the TCMA software package. When the TCMA software package determines that a thrust control malfunction has occurred, based on the engine's power level exceeding the threshold contour, the engine is shut down by the TCMA circuit.
The present invention is still further directed to an electronic engine control (EEC) unit configured to detect and correct an aircraft engine thrust control malfunction using an active-active functionality. The EEC includes a first processing subsystem for unilaterally monitoring engine operation and shutting down the engine when a thrust control malfunction occurs, and a second processing subsystem for unilaterally monitoring engine operation and shutting down the engine when a thrust control malfunction occurs."

Just my 20 cents
It's been troubling a few of us for some time. To translate all that for the layperson, a momentary electrical event triggered at V1 (still on the ground) and restored after rotation before gear up is selected.(in flight)

2 users liked this post.

Icarus2001
2025-06-15T06:31:00
permalink
Post: 11902144
I guess it all depends on what you mean!

If the fuel supplies were cut off, causing the engines to stop, is that engine failure ? I'd say not, nothing wrong with the engines until they impacted the buildings etc.

No evidence of RAT deployment - but you're specifically restricting "the evidence" to a blurry amateur video. That alone is not great evidence, but why does that video exist at all? When they lift the relevant section of fuselage, RAT deployment or not is going to be fairly apparent. And Circumstantial evidence is still evidence, no?

No evidence of electrical failure? Do you know that from the downloaded Flight Data?
A thrust reduction is not an engine failure. Engine shutdown due to an action of crew (or inaction) is not a failure.

There is no evidence of an electrical failure. What evidence? A surviving passenger thought he saw flickering lights? Give me a break.

The word evidence in English has a very specific meaning.

Look for the simplest explanation here and then ask why the worldwide B787 fleet is still flying with no urgent inspection requirements from Boeing or GE. Think about that "evidence".

6 users liked this post.

Someone Somewhere
2025-06-15T06:42:00
permalink
Post: 11902154
Originally Posted by Icarus2001
A thrust reduction is not an engine failure. Engine shutdown due to an action of crew (or inaction) is not a failure.

There is no evidence of an electrical failure. What evidence? A surviving passenger thought he saw flickering lights? Give me a break.

The word evidence in English has a very specific meaning.

Look for the simplest explanation here and then ask why the worldwide B787 fleet is still flying with no urgent inspection requirements from Boeing or GE. Think about that "evidence".
Uncommanded thrust reduction sure sounds like engine failure to me. Neither US1549 nor Ryanair 4102 suffered flameout until the former attempted to switch the engines off and back on. I don't think anyone is going to say those weren't engine failures.

If the aircraft had flaps deployed (the crash site photos look like it), flight controls working (no indications they weren't), and the thrust levers pushed full forwards, there is very very little that will cause it to sink other than lack of thrust.

2 users liked this post.

Someone Somewhere
2025-06-15T08:08:00
permalink
Post: 11902212
Originally Posted by Icarus2001
Originally Posted by Icarus2001
A thrust reduction is not an engine failure. Engine shutdown due to an action of crew (or inaction) is not a failure.

There is no evidence of an electrical failure. What evidence? A surviving passenger thought he saw flickering lights? Give me a break.

The word evidence in English has a very specific meaning.

Look for the simplest explanation here and then ask why the worldwide B787 fleet is still flying with no urgent inspection requirements from Boeing or GE. Think about that "evidence".
Uncommanded thrust reduction sure sounds like engine failure to me. Neither US1549 nor Ryanair 4102 suffered flameout until the former attempted to switch the engines off and back on. I don't think anyone is going to say those weren't engine failures.

If the aircraft had flaps deployed (the crash site photos look like it), flight controls working (no indications they weren't), and the thrust levers pushed full forwards, there is very very little that will cause it to sink other than lack of thrust.
Brilliant, now what is your point? Are you suggesting a double engine failure, a roll back to idle thrust or an incorrectly set AAI causing VNAV level off and a thrust reduction. You can only choose one.

For the team pointing to the RAT out as a failure indicator, it could have been deployed by the crew after the initial reduction in climb performance. I am not convinced it is deployed but it really does not make a convincing argument for any type of failure.

For the children on holiday, yes I fly transport category jets, current on two types.
​​​​​​​
In reply to you, I am solely stating that it's a thrust-side problem. I think I somewhat misinterpreted your post as it looks like you might have been saying that anyway.

In general, I think it's looking like dual engine failure/shutdown cutting electrics. I agree that why it occurred is very unclear. Outside chance of total electrical failure causing dual engine failure rather than the other way around, but that would perhaps be even more concerning a design failure.

Similar to Jeju, we also have what is looking increasingly like a loss of ADS-B data at the moment things went wrong, not just a loss of coverage.

That gives:
  • Sound of RAT
  • Visible RAT
  • (edit: APU door open implies APU autostart)
  • Loss of ADS-B out
  • Near-total loss of thrust.
The alternate theories seem to be a) flaps (basically discounted), b) suction feed failed after total electrical failure, or c):
  • A/T rolled engines back
  • Crew interpreted this as dual engine failure
  • Crew didn't push throttles forward
  • Crew did switch each engine off & on again and maybe deployed RAT manually as well.

Originally Posted by Icarus2001
Assuming GE receive data from these engines in flight, a massive failure would prompt a swift communication from GE. Or a massive electrical issue could put Boeing on edge and also prompt urgent inspections on their aircraft.
I think it has been suggested that the upload only happens every 30 minutes or so.

Last edited by Someone Somewhere; 15th Jun 2025 at 08:21 .