Codacy | Site Reliability Software Engineer | Lisbon, Portugal | REMOTE | Full Time
* We are building a DevOps team to act across our development squads, to support: Cloud, Automation, Monitoring and Performance and Engineering Tools.
* We develop and run ourselves tools and components that can be used internally by development teams. We are ready to run what is already done by others, support it if it's open source or create it ourselves.
* We help other teams work as DevOps
Stack: Kubernetes, Scala, Go, ELK, Prometheus, Grafana, AWS (all the infrastructure is code)
Like everything else, they were maintaining certification. The original avionics worked that way. The same reason that the LCD screens display simulations of the original avionics hardware such as the artificial horizon.
I suspect combined reliability of a simple switch and two independent systems is likely higher than one composite system and pilots or software trying to estimate and select which combinations of computers & sensors are "good" in the middle of an emergency.
And on the surface this looks like a reasonable comment, but it is exactly why there is a whole branch of engineering dedicated to understanding how to build safer systems. Counter-intuitive results abound.
So many issues - a simple switch usually has poor diagnostics, at least in one mode of failure, so you dont know it has failed until it is too late. A continuous measurement device connected to a computer/s will have a vast array of available diagnostics, 'most probably leading to less "dangerous undetected failures" than a simple switch, or combination of.
And "independent systems", sounds easy, but in practice full independence is almost impossible to achieve, and messy unpredictable humans dominate the common cause failures that overlap these systems.
There is more, much more, but this is why it is hard to right readable articles about these things, so much devil is in the detail that is hard to explain in bite sized portions.
"A continuous measurement device connected to a computer/s will have a vast array of available diagnostics, 'most probably leading to less "dangerous undetected failures" than a simple switch, or combination of."
Isn't this exactly the approach that failed in the MCAS system? And if you had a switchable independent system, a copilot would have righted the plane and flown on.
But really I agree with your overall comment, it's very difficult to know why a given safety design decision was made unless you are well steeped in the system - there are almost always little corner tradeoffs. That's why I added the "I suspect" to the front of my comment.
This the approach that IEC61508 leads you down by the numbers, but it is also always better to cover off the unknowns with redundancy(multiple sensors) and diversity (different kinds of sensors) wherever practical.
However, more instruments mean more potential disagreements, so more complexity of possible outcomes/actions/diagnostics etc.
It becomes a balance for the best outcome and surprisingly when you go through all the factors there is still quite a bit of subjectiveness and sometimes the numbers for failure rates are so low that the calcs become extremely sensitive.
Additionally, there is always beta factor, which allows for common cause failures between instruments/systems. Often beta factors are the dominant factor numerically in a performance calculation, but are a) essentially traceable back to issues with humans (design, installation, maintenance) b) often vastly underestimated and represented as an average value, where in the worst cases are rare but very high - one tech installs both instruments incorrectly so they both read wrong but same
1. House rents are really expensive (as in London/Amsterdam expensive)
2. The wages are low (completely the opposite of London/Amsterdam)
3. It's really hot today
Contrasts with:
1. Amazing food (oh god, the food!!)
2. The city is pretty
3. Smart, nice and educated people
4. Really nice weather (motorcycle with amazing weather 90% of the year)
Healthcare and a good education accessible to "everyone" is also a nice thing.
