AF447-significant-events1 AF 447 SIGNIFICANT EVENTS

AF447-significant-events2 « The crews can inherit latent conditions created by people far removed in time and space from the event. »

AF447-significant-events3 ICAO

4AF447-significant-events

5 October 1993: A330 certification with Rosemount Pitot probe AF447-significant-events

6 Décember 1995 : TFU Airbus reports Rosemount probe defects due to inadequate certification and starts Goodrich probe development. Extracts : AF447-significant-events

7 “STRONG CUMULO-NIMBUS (Cb) CONTAINING A HIGH DENSITY OF ICE CRYSTALS CAN BEEN COUNTERED, PARTICULARLY IN THE INTERTROPICAL CONVERGENCE ZONE (ITCZ). IN SUCH AN ICY AND TURBULENT ATMOSPHERE, THE A/C AIR DATA PARAMETERS (PRESSURE DEPENDANT) MAY BE SEVERELY DEGRADED, EVEN THOUGH THE PROBE HEATERS WORK PROPERLY. IT HAS APPEARED THAT THE CHARACTERISTICS OF SUCH AN ENVIRONMENT COULD EXCEED THE WEATHER SPECIFICATIONS FOR WHICH THE PITOT PROBES ARE CURRENTLY CERTIFIED. THE WEATHER SPECIFICATIONS (ICING/LIQUID WATER CONTENT/GUTLET SIZE) TO WHICH THE PITOT PROBES SHALL RESIST HAVE THEREFORE BEEN UPDATED WITH MORE STRINGENT REQUIREMENTS ON THE BASE OF THE FIELD EXPERIENCE AND RECENT EXTENSIVE FLIGHT TESTS. AIRBUS HAS LAUNCHED THE DEVELOPMENT OF THE FOLLOWIN MODIFICIATIONS: 1.DEVELOPMENT OF A NEW PITOT PROBE ABLE TO MATCH THE NEW REQUIREMENTS. ALL FLIGHT TESTS AND WIND TUNNEL TESTS ARE NOW COMPLETED AND SUCCESSFULL : THE CERTIFICATION OF A NEW PITOT PROBE HAS BEEN OBTAINED EARLY IN NOVEMBER 1996 (NEW PITOT PROBE : P/N 851HL MOD 44836).” AF447-significant-events

8 « Keep in mind that the specification references are TSO C16 and AS 393

9AF447-significant-events November 1996 : Rosemount probe replaced by Goodrich probe (Airbus mandatory)

10 November 1998 : Rosemount probe replaced also by Sextant (Thalès) AA probe… AF447-significant-events

11 August 2001 : French DGAC says these 2 replacements are mandatory with AD (B) : AF447-significant-events

12AF447-significant-events “ On november , FAA said : “The DGAC advises that operators have reported several cases of loss or fluctuation of indicated airspeed when flying through heavy precipitation or freezing weather conditions. The probable cause has been attributed to the presence of ice crystals and/or water exceeding the weather limits for which the pitot probes are currently certified. Loss or fluctuation of indicated airspeed, if not corrected, could result in inadvertent excursions outside the normal flight envelope.” « This Directive requires the installation of Pitot probes meeting more stringent qualification requirements, but... »

AF447-significant-events13 « …the specification references stay TSO C16 and AS 393 ! How was the Thales AA probe certified by french DGAC, taking into account Rosemount experiment ? !»

14 Jully 2002 : OIT SE /02/VHR. Airbus reports Thales AA defects. Extracts : AF447-significant-events

15 “ THE AIM OF THIS OIT IS TO INFORM THE OPERATORS THAT SEVERAL SINGLE AISLE OPERATORS HAVE REPORTED AIRSPEED DISCREPANCY ON AIRCRAFT FITTED WITH THALES PITOT PROBES PN C16195AA.” INVESTIGATIONS CARRIED OUT SHOW THAT BURRS CAN REMAIN IN THE PITOT PROBE AFTER DRILLING OF THE DRAIN HOLES. AS A CONSEQUENCE THE BURRS COULD ASSIST THE ACCUMULATION OF EXTERNAL POLLUTION AND CONSEQUENTLY COULD BLOCK THE DRAIN HOLES.” THE CONSEQUENCE IS AN INCORRECT TOTAL PRESSURE MEASUREMENT LEADING TO AN INCORRECT AIRSPEED COMPUTATION. ” AF447-significant-events

16 January 2005 : Thalès develops « ADELINE » research project. Extracts : AF447-significant-events

17 The objective of ADELINE is to develop new architectures and technologies of air data systems for implementation in new aircraft on the horizon of Actual air data equipment is composed of a large number of individual probes and pressure sensors. This equipment delivers vital parameters for the safety of the aircraft’s flight such as air speed, angle of attack and altitude. The loss of these data can cause aircraft crashes especially in case of probe icing. AF447-significant-events

18 August 2006 : Airbus SIL Flushing interval is reduced from 2C to C check AF447-significant-events

19

AF447-significant-events20 « 21 months between 2 C checks ! Why did Airbus not reduce this interval any more ? »

21 Septembre 2007 : EASA reports Pitot probe certification ETSO C16 is obsolete. AF447-significant-events

22AF447-significant-events

23

24AF447-significant-events

25AF447-significant-events AS !

AF447-significant-events26 « EASA says ETSO C16 is obsolete and need to be updated but they do nothing. Why ? »

27AF447-significant-events

28 « Obsolete… »

AF447-significant-events29 « Equipments must function properly in the full normal operating envelope of the aeroplane »

AF447-significant-events30

AF447-significant-events31

AF447-significant-events32 « Hazardous means a large reduction in safety margins, excessive workload for the crew, serious or fatal injuries »

33 September 2007 : Airbus recommends replacement of the Thales AA probe by the Thales BA probe, not mandatory. AF447-significant-events

34

AF447-significant-events35 « But one year later… »

36 September 2008 : Airbus reports « the Thalès BA is not intended to support severe icing conditions » … AF447-significant-events

37 (Air France Info PNT n°5 extract) « Air France and Airbus are discussing…»

AF447-significant-events38 « Air France does not replace AA probes by BA probes »

39 Air France reports 9 precursor serious incidents between june 2008 and march 2009 (AA probes). AF447-significant-events

40 « One crew had reported MAYDAY on the frequency » « NO investigation by french BEA » « NO safety information by french DGAC » « Air France is still discussing with Airbus… »

41 A few days before AF 447 accident, Air France starts replacement of Thales AA probes by Thales BA probes. AF447-significant-events

42 june 1st 2009 : AF 447 accident AF447-significant-events F-GZCP (Thales AA probes equipped)

AF447-significant-events43 « According to french BEA, the A330 was flying at FL 350 through the ITCZ (ice cristals). Airspeed discrepancy was reported by ACARS. » « According to EASA, inconsistent measured airspeed could be attributed to Thales AA Pitot probes faults in icing condition. » « Hum… from our point of view, you may read can be attributed… »

AF447-significant-events44 « The consequence should be an inadvertent excursion of the A330 outside the normal flight envelope »

AF447-significant-events45 «In 2002, the excursion outside the normal flight envelope was identified by french DGAC as a consequence of the loss or the fluctuation of indicated airspeed »

46 1G Turn * Turbulence 1,5g 225 kts275 kts. Speed in turbulence 260 kts. Maxi 1,7g ISA kts AF447-significant-events * avoiding weather As you can see, the flight envelope is very limited

AF447-significant-events47 « AF 447 crew had not been warned of any problem with the weather » (weather chart used by the crew)

AF447-significant-events48 AF447 flight plan TASIL « easy to avoid »

AF447-significant-events49 « He could have been warned by the CCO Air France 2 hours before reaching TASIL with that satellite view… »

AF447-significant-events50 (alternative routes)

51 August 2009 : The Thales AA probe disappears (EASA) AF447-significant-events

52

AF447-significant-events53

AF447-significant-events54 « Too late for AF 447… »

AF447-significant-events55 « …because an unsafe condition existed with these Thales AA Pitot probes ! »

AF447-significant-events56

AF447-significant-events57

AF447-significant-events58 « AF 447 crew was not warned of that unsafe condition»

59 August 2009 : EASA starts to modifie Pitot probes specifications. ETSO C16 modification : AF447-significant-events

60

AF447-significant-events61 « This is a safety priority, they say »

AF447-significant-events62

AF447-significant-events63

AF447-significant-events64 « The old AS393 disappears too »

AF447-significant-events65 « Too late for AF 447 ! »

AF447-significant-events66 « On october 2009, Airbus confirms that many modifications must be done to improve the Pitot probes reliability »

AF447-significant-events67

AF447-significant-events68 “The TSO C16 does not require the probes to be tested in ice crystal or mixed phase icing conditions despite probes being sensitive to such icing conditions.” “A probe designed and tested in liquid icing conditions only may require a significant redesign to meet the ice crystal and mixed phase requirements.” “Recent evidence indicates that the ice crystal and mixed phase conditions may not be adequate for pitot and pitot-static probes.”

AF447-significant-events69 « Airbus strongly recommends to EASA that a working group is established as soon as possible. »

AF447-significant-events70 « Too late for AF 447 ! »

AF447-significant-events71 « Remember ! In 2002, the french DGAC had advised that the probable cause of loss or fluctuation of indicated airspeed can be attributed to the presence of ice crystals »

AF447-significant-events72 « After the AF 447 crash, the french BEA starts to investigate the precursor serious incidents »

AF447-significant-events73 « Too late for AF 447 ! »

AF447-significant-events74 « After the AF 447 crash, Air France continues the AA probes replacement and announces several measures including : »

AF447-significant-events75 -a specific flight simulator training “IAS discrepancy” -the position of long-range aircraft monitoring -training materials about ice crystals - the flights preparation Again, too late for AF 447…

76 April 1998, serious incident near Frankfurt. Heavy rain, severe icing conditions… AF447-significant-events

77

AF447-significant-events78 « The BFU made that recommendation in 1999 »

AF447-significant-events79 « What did they do with that recommendation ??? »

AF447-significant-events80 « On August 8, 1996, the National Transportation Safety Board issued that recommendation : »

AF447-significant-events81

AF447-significant-events82 « What did they do with that recommendation ??? »

AF447-significant-events83

AF447-significant-events84 « States shall take the necessary measures to ensure that the safety recommendations are duly taken into consideration » »

AF447-significant-events85 « AF 447 crew had inherited latent conditions created by Airbus, DGAC, EASA, BEA and Air France. »

AF447-significant-events86 AF 447. REASON MODEL

AF447-significant-events87 « The AF 447 accident could have been avoided. » Captain Gérard Arnoux Captain Henri Marnet-Cornus (retired)