Understanding Air France 447 (16 page)

When the flap handle is out of the UP position (i.e., flaps out), positioning the thrust levers to TOGA commands full power and also commands the go-around mode in the auto-flight system. The go-around commands a pitch up from the flight directors and autopilot (if on). If the flap handle is up, the flight director/autopilot mode does not change - only full power is commanded. At 35,000 feet, selecting TOGA provides only a small increase in power above the cruise setting, and no more than the climb setting. It does not result in a rapid acceleration or a noticeable pitch up.

About a minute after the autopilot disconnected, after a stall warning was received, the thrust levers were positioned to TOGA. Shortly thereafter with the stall warning sounding repeatedly, First Officer Bonin - the pilot flying, stated “I'm in TOGA, huh?”

In the Popular Mechanics article “What really happened aboard Air France 447” author Jeff Wise states:

“Bonin's statement here offers a crucial window onto his reasoning. TOGA is an acronym for Take Off, Go Around. When a plane is taking off or aborting a landing—"going around"—it must gain both speed and altitude as efficiently as possible. At this critical phase of flight, pilots are trained to increase engine speed to the TOGA level and raise the nose to a certain pitch angle.”

I disagree with his assessment. 20 seconds earlier Bonin had also commented “we’re in climb.” I believe both statements refer only to the position of the thrust levers, not attempting to perform a go-around maneuver.

The stall warning announced “STALL” five times before Bonin positioned the thrust levers to TOGA, and continued to sound afterwards. It is apparent that he expected the application of TOGA thrust to accelerate the airplane out of the stall situation on its own, like it can at low altitude. He appeared to be completely puzzled why this did not solve the problem. He had forgotten that a stall is primarily an angle of attack problem, not a power problem.

Commentary on Design Flaws

Few machines from the simplest screwdriver to the most sophisticated jet airliner could not use a little tweaking here and there.

More than a few have claimed that the airplane suffered from “design flaws,” but they were often unable to articulate exactly what those “flaws” were, though they generally revolved around the design philosophy of the fly-by-wire system.

It is my contention that simply designing a system differently than the commenter prefers is not by itself a design flaw.

Additionally, a system that shuts itself off when it is designed to shut itself off, due to a lack of data or failure of another part, does not necessarily constitute a “failure.” We see this in the AF447 case when the flight directors are removed from view. The autopilot, flight directors, and autothrust did not “fail.” They suffered from a loss of data required to operate. When that data became available again, the flight directors were displayed again, as per design.

Chapter 7: Stalling and Falling

After the autopilot disconnected at 02:10:05, the remainder of the flight can be divided into four phases characterized by pilot actions and trends of pitch attitude, vertical speed, altitude, and angle of attack. These phases are derived from my own analysis, as follows:

• Phase 1: A period of 20 seconds from 02:10:07-02:10:27, starting two seconds after the autopilot disconnected where large lateral and almost exclusively, nose-up pitch inputs were made. Pitch attitude increased up to 12°, vertical speed rose up to 6,900 ft/min, altitude increased from 35,000 ft to 36,200 ft, and angle of attack, while higher than normal, was only momentarily high enough to meet the stall warning threshold - but not actually stalling.
  
• Phase 2: A period of 23 seconds from 02:10:27-02:10:50. Roll oscillations continued, but the pitch inputs were mostly nose down, the pitch attitude decreased from 12° to 6°, vertical speed reduced to 1,100 ft/min, and altitude continued to rise through 37,500 ft. The bank angle came under control for the last 10 seconds, angle of attack remained below the stall warning threshold, and the stall warning remained off.
  
• Phase 3: A period of 24 seconds from 02:10:50-02:11:14. In this phase, altitude was fairly constant at the cost of decaying airspeed, a rapidly increasing angle of attack, and critically decaying controllability. Pitch attitude increased and approached 18°, vertical speed ranged from near zero to 750 ft/min up then back to zero, and altitude peaked at 37,924. Roll began to destabilize again and large lateral inputs were made. The stall warning was on during this entire period.
  
• Phase 4: The remaining 3 minutes 14 seconds of the flight starting at 02:11:14. The descent from the peak altitude began. Mostly nose-up inputs were made, often with full back stick, the pitch attitude oscillated, and the airplane became deeply stalled as angles of attack quickly reached and remained above 30°, reaching as high as 60°. All the while the airplane banked both left and to over 40° to the right. Controllability was extremely compromised as the PF struggled to keep the airplane right-side up. He used full left and right stick inputs to counteract the extreme rolling motion of the airplane. Along with the rolling motion, the airplane yawed back and forth as it oscillated in pitch, roll, and yaw like a falling maple leaf. The yaw damper automatically counteracted each yaw motion with rudder commands within its limited authority. It was possibly the only thing keeping the airplane from entering a spin. Extreme vertical speeds of over 15,0000 ft/min were encountered as the airplane literally fell out of the sky. The stall warning sounded for the first 30 seconds of this phase and was intermittent thereafter.
  

Recovery Possibilities

Above all, this is a stall accident. Initial prevention of the stall was possible. This is proven by a number of other flights with the same malfunction that maintained control, often with little effort. All indications show that the pitch up that resulted in the loss of airspeed and excessive angles of attack were pilot induced. With each successive phase, prevention or recovery from the stall required more deliberate action.

• In phase 1, simply correcting the pitch attitude back to level flight would have been enough to restore normal flight. Sufficient airspeed remained in order to maintain altitude. Recovery would have required releasing aft stick input and pushing forward to pitch the nose down to the normal cruise pitch attitude. Due to the fly-by-wire flight control laws, the airplane would not pitch down on its own if the sidestick were to simply be released. The pitch attitude and extreme climb would remain unless positive corrective action was taken.
  

• The right and left rolling motion increased the difficulty of recovery. What may have been initially set off by the outside environment, was prolonged by excessive pilot inputs and the nearly double-the-normal roll rates available due to Alternate 2 control law. Roll attitudes never exceeded 11°, yet full or near-full sidestick deflection to each side was used several times to counter rolling motions.
  

  The struggle to regain control over the roll may have contributed to the inattention given to pitch, which resulted in a vertical speed of 6,900 feet per minute at the end of phase 1.
  

• In phase 2, sidestick inputs oscillated in both pitch and roll, with some correlation between pulling back with left stick input and pushing forward with right stick input. On average, more nose down inputs were made by the pilot flying and as a result, both the pitch attitude and vertical speed reduced. As the rolling motion came under control, pitch oscillations also stabilized at a pitch attitude of about 6° nose up. But that attitude was insufficient to complete the recovery and the airplane continued to climb and lose energy, though it remained below the stall angle of attack. Recovery would have required continued nose down inputs to lower the nose more and a return to the previous cruise altitude or below in order to regain airspeed needed to maintain level flight.
  

• In phase 3 the airspeed had become dangerously low and the pitch attitude and angle of attack increased while the altitude changed little. The stall warning sounded continuously and the airplane reached the stall angle of attack. At this point a recovery would have required a more aggressive pitch down maneuver, first to recover from the stall and then a fairly steep descent of perhaps 5,000 feet to regain airspeed. The pull up to level off would then need to be gentle to prevent a secondary stall during the level-off maneuver.
  

• Once the airplane entered phase 4 it is unknown if a recovery was possible. The BEA’s final report on the accident says that by the time the captain returned to the cockpit (30 seconds into phase 4) that it was, "already too late, given the airplane’s conditions at that time, to recover control of it.” Airbus test pilots that I spoke to had only reached a 14° angle of attack at altitude, and would not speculate on the recovery possibilities beyond that. For most of phase 4, the angle of attack for AF447 was between 30° and 60°.
  

The effectiveness of the flight controls was severely compromised by the poor airflow around them. The ailerons, at the trailing edge of the fully stalled surface, had no effect on correcting the bank, even at prolonged full deflection.

John Foster, an engineer at the Vehicle Dynamics Branch at NASA Langley Research Center, says that transport category airplanes with this configuration (non T-tail), typically exhibit good nose down pitch response from
any
AOA. Indeed, the pitch controls were quite effective in 
creating
the very high angle of attack situation. The flight recordings indicate that there was some flight control responsiveness in pitch when forward stick input was applied, even at very high angles of attack. Unfortunately, those commands were not held long enough. More nose-down control inputs and steeper nose down attitudes would have been needed in order to have any chance of recovery.

An additional factor in a required pitch-down maneuver would be the ability to pitch down enough with the stabilizer trim in the full nose-up position, as it was for AF447 from about 15 seconds into phase 4. In one of my own attempts to duplicate the situation in an A330 flight simulator, after the stall was fully developed, sufficient nose down pitch down could not be maintained by forward sidestick displacement alone. The nose did pitch down initially, but as airspeed increased, the full nose-up trim setting overpowered the nose-down elevator and the nose pitched back up. Even reducing the thrust to idle and increasing the bank angle had minimal effect. I can tell you, it was not a good feeling to be pushing full forward on the sidestick and have the nose pitching up regardless. Only manually reducing the trim setting enabled me to reestablish enough pitch control to recover from the stalled condition. This recovery consumed over 10,000 feed of altitude. 

I am the first to admit that this attempt was well beyond the simulator's defined operating envelope and validated flight data. However, I don't find it to be unreasonable. It highlights the extra efforts that may have been required to perform a recovery once into phase 4. I had the added benefits of being in a non-stressful situation, knowing that the trim was full nose up, and watching the flight control display page when I thought of manually moving the stab trim. Of course, the crew of AF447 enjoyed none of those benefits.

Stall Warning

One item often cited in the opinion columns is the inconsistent operation of the stall warning.

The stall warning is a synthetic voice that says, “STALL, STALL, STALL”. It is in English even though the crew spoke French. The voice is accompanied by a cricket sound and a red master warning light in front of each pilot. Unlike the stick-shaker stall warning found in many other transport aircraft, the Airbus stall warning does not affect the sidestick’s input or feel. It is notable that the warning is auditory only, except for the illumination of general purpose master warning light. Pilots subject to auditory exclusion due to a highly stressful situation, may tune it out.

It is true that the stall warning did not always operate when the airplane was above the stall warning angle of attack. However, other than to select full (TOGA) power when the stall warning sounded at the beginning of phase 4, I find no indication that the crew acknowledged or acted to the stall warning in any other way when it was working. Most notable was the lack of any nose-down input in response to it. In fact, First Officer Robert, the most experienced A330 pilot among the crew, is heard saying, “what’s that?” one second after the stall warning sounded for the first time, and later after another stall warning. We cannot be sure that he was referring to the stall warning, but the two first officers never mentioned the stall in their efforts to understand what was happening to the airplane. After the captain returned to the cockpit the stall warning was silent most of the time, possibly hindering his analysis of the problem, even though the airplane remained well above the stall angle of attack.