> Traditionally the fly-by-wire systems have at least 3 AoA sensors, which each "vote" on the output value.
That way, if you have one faulty sensor, it gets outvoted.
That would make sense, but unfortunately it's not the way they're actually implemented. Several incidents with Airbus aircraft were due to one AoA sensor's faulty input being allowed to trigger uncommanded pitch down events, instead of the one faulty sensor being outvoted by the other two.
That way, if you have one faulty sensor, it gets outvoted.
That would make sense, but unfortunately it's not the way they're actually implemented. Several incidents with Airbus aircraft were due to one AoA sensor's faulty input being allowed to trigger uncommanded pitch down events, instead of the one faulty sensor being outvoted by the other two.
I agree having only two sensors is even worse.