That’s on purpose, you don’t want an automation decide such a drastic move as shutting down an engine. That’s the pilot’s decision.
> absence of any physical kill switch to stop the engine
There is, you shut down the fuel flow with a valve. But that “kill switch” was damaged.
> An hour being generously available to go through ALL the checklists to clear the notifications
Again, pilot decision to do it if time is available. Isn’t it safer that way?
> pure randomness in debris flying the way it did
Well that’s the nature of the failure. It’s like complaining that which HDD fails in a datacenter is random.
> outcomes for all possible trajectories of debris,
Yes it’s not public data, but all positive trajectories are analyzed at the design stage, and structural and systems components are kept segregated accordingly.
I'm not an idiot (citation needed). I can see that a storm unplugging some imaginary tiny heartbeat cable, which in turn shuts down all the engines instantly, is not how planes should operate. What I don't understand is the approach to defend status quo, and pretend that “randomness is now conquered”.
It seems to me that fixing one complex problem creates 10 other complex problems. They can be rare, but it's ignorant to shift focus from them.
That’s on purpose, you don’t want an automation decide such a drastic move as shutting down an engine. That’s the pilot’s decision.
> absence of any physical kill switch to stop the engine
There is, you shut down the fuel flow with a valve. But that “kill switch” was damaged.
> An hour being generously available to go through ALL the checklists to clear the notifications
Again, pilot decision to do it if time is available. Isn’t it safer that way?
> pure randomness in debris flying the way it did
Well that’s the nature of the failure. It’s like complaining that which HDD fails in a datacenter is random.
> outcomes for all possible trajectories of debris,
Yes it’s not public data, but all positive trajectories are analyzed at the design stage, and structural and systems components are kept segregated accordingly.