Human Factors Analysis and Classification System (HFACS) Application in Aviation Mishap Investigations

Foundations of Mishap Investigation and the HFACS Framework

• Purpose of the HFACS Framework:

  • Looks systematically beyond proximate human error to evaluate latent organizational, supervisory, and environmental factors contributing to mishaps.

  • Operates on the premise that individuals rarely initiate a task with the intention of causing harm, overlooking inspections, or inducing a catastrophic mishap.

• The Human Element in Mishap Investigations:

  • Automated investigative algorithms have proven inadequate because human behavior, emotional nuances, stress reactions, and motivations are best evaluated and predicted by human investigators.

  • The Human Factors Analysis and Classification System (HFACS) provides comprehensive analytical models, yet it cannot explain every variable in every catastrophic event; unexplained anomalies can occur.

• Investigative Mindset and Managing Bias:

  • Investigators must not judge witness truthfulness; perception varies legitimately based on physical location (e.g., flight deck crew versus cabin flight attendants versus passengers).

  • Witness recall mutates over time; immediate perceptions differ markedly from accounts gathered weeks later.

  • Media and initial accounts frequently misidentify causal factors (e.g., attributing a crash to an apparent engine fire, which was actually caused by control failure, which in turn resulted from an underlying automation system crash).

  • Investigators must avoid fixating on a single causal factor early in the inquiry (such as within Day 1 to Day 7); isolating root causes often requires $30$ to $60\text{ days}$ of rigorous data collection.

• Evidence Collection Methodology:

  • Physical evidence: Salvaging and consolidating aircraft wreckage into a secure reconstruction facility to assess structural damage patterns and mechanical failures.

  • Digital and recorded telemetry: Flight Data Recorders (FDR), Cockpit Voice Recorders (CVR), automated internal computer logs, and hardware components.

  • Witness testimony: Gathering data from personnel directly involved, indirect bystanders, video recordings, and ground support personnel.

  • Maintenance history reviews: Interviewing and evaluating personnel who performed maintenance on equipment across $7\text{-day}$, $30\text{-day}$, $60\text{-day}$, and $90\text{-day}$ thresholds prior to the event.

  • Ethical interview protocols: Refraining from interviewing injured personnel immediately following trauma or while under the influence of medications; allowing individuals to stabilize physically and emotionally before formal statements are taken.

  • Subject Matter Expert (SME) integration: Utilizing pilots, aerospace physiologists, maintenance specialists, research psychologists, behavioral analysts, systems engineers, and aircraft designers to evaluate multi-domain evidence.

Structure of the Human Factors Analysis and Classification System (HFACS)

• Tier 1: Unsafe Acts of Operators:

  • Errors:

  • Decision Errors: Conscious choices executing an inappropriate plan, often driven by flawed real-time risk assessments.

  • Skill-Based Errors: Breakdowns in automated, highly practiced motor actions or procedures, including errors of execution, lack of flight proficiency, or tasks executed out of sequence.

  • Perceptual Errors: Misinterpretations of sensory inputs caused by spatial disorientation, lack of visual contrast, or runway illusions (e.g., wide runways create the illusion of low altitude, inducing a premature flare; narrow runways create the illusion of high altitude, leading to fast, overpowered approaches and hard landings).

  • Violations:

  • Routine Violations: Habitual, systemic deviations from standard operating procedures (SOPs), flight checklists, or regulations that are tacitly condoned.

  • Exceptional Violations: Isolated, non-habitual departures from authorized procedures, regulations, or operational limits.

• Tier 2: Preconditions for Unsafe Acts:

  • Environmental Factors:

  • Physical Environment: Cockpit microclimate and external atmospheric conditions. Inoperative heating systems at flight levels such as $40{,}000\text{ ft}$ induce shivering, loss of motor control, and degraded handling capacity.

  • Technological Environment: Cockpit design, display interfaces, the ten levels of automation, and four automation classes (including programmed, integrated, and flexible automation). Erroneous alerts, spurious warning tones, and poor ergonomic interfaces induce task saturation.

  • Condition of Operators:

  • Adverse Mental State: Chronic or acute fatigue, cognitive burnout, complacency, lost situational awareness, and task fixation.

  • Adverse Physiological State: Hypoxia, spatial disorientation, acceleration effects, decompression sickness, and physical dehydration.

  • Physical and Mental Limitations: Undiagnosed physical injuries affecting flight under load, inadequate physical conditioning, and baseline personality traits (e.g., extreme risk tolerance versus excessive passivity).

  • Personnel Factors:

  • Crew Resource Management (CRM): Communication, coordination, active listening, and crew assertiveness.

  • Personal Readiness / Fitness for Duty: Compliance with duty-rest intervals, managing personal hydration, self-assessing ear-clearing capability, and general medical readiness.

• Tier 3: Unsafe Supervision:

  • Inadequate Supervision: Absence of operational leadership, missing shift supervisors, and failure to provide oversight during critical operational phases.

  • Planned Inappropriate Operations: Assembling mismatched crew compositions (e.g., assigning three trainee flight attendants to a single experienced crew member, or substituting a navigator for a required flight attendant), resulting in operational degradation.

  • Failure to Correct Known Problems: Administrative normalization of deviance by failing to report, document, or retrain personnel demonstrating substandard habits.

  • Supervisory Violations: Direct disregard for regulations, guidance, and authorized operational boundaries by leadership figures.

• Tier 4: Organizational Influences:

  • Resource Management: Decisions governing funding, facilities, training pipelines, logistics, and parts availability.

  • Organizational Climate: Corporate culture prioritizing cost-cutting, flight volume, and profit over procedural safety compliance.

  • Operational Processes: Formal policies, technical manuals, flight doctrine, checklists, and standardized operating instructions provided to operational units.

Case Study: American Airlines Flight 1420 (FAA / NTSB Analysis)

• Mishap Sequence and Impact Parameters:

  • Event Date and Time: June 1, 1999, at $23:50:44\text{ Central Daylight Savings Time}$; touchdown at $23:50:20$.

  • Aircraft and Operation: McDonnell Douglas DC-9-82 (MD-80), registration tail number $N21588$, operating under $14\text{ CFR Part 121}$ on an Instrument Flight Rules (IFR) flight plan.

  • Personnel on Board: $2$ flight crew members, $4$ flight attendants, and $139$ passengers.

  • Sequence of Events: Flight 1420 overran the end of Runway 4R at Little Rock National Airport (LIT) in Little Rock, Arkansas. It struck multiple tubes of the Instrument Landing System (ILS) localizer array situated $411\text{ ft}$ beyond the runway, breached a chain-link fence, traversed a rock embankment down to a floodplain $15\text{ ft}$ below runway elevation, and collided with the structural stanchions of the Runway 22L approach lighting system.

  • Damage and Casualties: Aircraft destroyed by severe impact loads and an extensive post-crash fire. The captain and $10$ passengers were killed ($11$ fatalities total). The first officer, all $4$ flight attendants, and $105$ passengers sustained serious or minor injuries; $24$ passengers were uninjured.

  • Fuselage Breakup Dynamics: The fuselage fractured into four distinct segments: two forward sections, a center/rear section, and the tailcone. The rear and empennage segments rotated $165^\top$ clockwise relative to the Runway 4R centerline; the forward and center sections rotated $70^\top$ clockwise; the aft cabin was completely consumed by fire.

• Flight Schedule and Operational Timeline:

  • Final leg of Day 1 of a scheduled 3-day flight sequence originating at Chicago O'Hare International Airport (ORD).

  • Crew reporting times at Chicago: Captain checked in at $10:38$; First Officer checked in at $10:18$.

  • Leg 1 (Flight 1226, Chicago to Salt Lake City): Departed $11:43$, arrived $14:58$. Captain was flying pilot.

  • Leg 2 (Flight 2080, Salt Lake City to Dallas/Fort Worth): Departed $16:47$, arrived $20:10$ ($30\text{ minutes}$ late due to airborne holds for thunderstorms). First Officer was flying pilot.

  • Leg 3 (Flight 1420, DFW to Little Rock): Inbound aircraft delayed by severe weather. After $21:00$, the First Officer notified gate agents that Flight 1420 had to be airborne by $23:16$ to prevent exceeding company duty time limits. The First Officer suggested cancelling the flight or securing another aircraft. Replacement aircraft $N21588$ was assigned, departing at $22:40$ ($2\text{ hours and } 12\text{ minutes}$ late). Captain was the flying pilot; First Officer was the non-flying pilot.

  • At $22:54$, flight dispatch sent an ACARS message warning of Little Rock thunderstorms and suggesting they expedite the arrival to beat the storm; the crew acknowledged.

  • Alternate recovery airports available on the flight plan: Nashville International Airport (BNA) and Dallas/Fort Worth International Airport (DFW).

• Flight Crew Profiles:

  • Captain: Age $48$. Hired by American Airlines in July 1979 ($20\text{ years}$ with airline). Held an Airline Transport Pilot (ATP) certificate and FAA First Class Medical certificate dated February 9, 1999, without restrictions. Type rated on Boeing 727 and MD-80; qualified as MD-80 captain on July 31, 1991. Served as a Lieutenant Colonel in the U.S. Air Force Reserve; aviation career began in 1972. Total flight time: $10{,}234\text{ hours}$, with $7{,}384\text{ hours}$ as Pilot-in-Command (PIC) and $5{,}518\text{ hours}$ as PIC in the MD-80. Recurrent proficiency check completed July 19, 1998; line check completed July 26, 1998. Flight hours: $54\text{ hours}$ (last 90 days), $46\text{ hours}$ (last 60 days), $14\text{ hours}$ (last 30 days), and $12\text{ hours}$ (last 7 days). Clear FAA record. Prior sleep: retired around $22:00$, awoke at $07:00\text{ to } 07:30$; non-smoker, no medications, negligible alcohol intake.

  • First Officer: Age $35$. Hired by American Airlines in 1999. Held an ATP certificate and FAA First Class Medical certificate dated November 12, 1998, without restrictions. Background as flight instructor. Total flight time: $4{,}292\text{ hours}$, with $182\text{ hours}$ in the MD-80. Recurrent proficiency check completed February 22, 1999; line check completed March 10, 1999. Flight hours: $176\text{ hours}$ (last 90 days), $112\text{ hours}$ (last 60 days), $65\text{ hours}$ (last 30 days), and $7.5\text{ hours}$ (last 7 days). Clear FAA record. Commuted from Los Angeles to Chicago base for three months; adjusted to Central Time. Prior sleep: retired between $20:00\text{ and } 22:00$, awoke at $07:30$; non-smoker, no medications.

  • Flight dynamic: First trip pairing together. Professional rapport affirmed by cabin crew. The First Officer felt comfortable working with the Captain despite the Captain's role as a Chief Pilot.

• Meteorological Conditions and Landing Environment:

  • Severe convective storm classified as Level 6.

  • Surface rainfall rate: $12\text{ inches per hour}$; hail diameter up to $2\text{ inches}$; lightning observed within $20\text{ miles}$ of Little Rock for $3\text{ hours}$ prior to arrival and within $15\text{ minutes}$ of touchdown.

  • Air Traffic Control (ATC) transmissions: At $23:39$, ATC warned the crew that weather was deteriorating and suggested expediting arrival or diverting. At $23:47$ ($3\text{ minutes}$ prior to landing), updated weather confirmed a Level 6 storm, $2\text{-inch}$ hail, and severe rain.

  • Runway Visual Range (RVR) at Little Rock was not routed directly to the Automated Surface Observing System (ASOS) console; reporting was optional.

  • American Airlines company flight manual stated that in positive indications of severe wind shear, rainfall exceeding $3\text{ inches per hour}$, or lightning within $20\text{ miles}$, crews should initiate a go-around or divert. This policy was framed in training as good practice rather than an enforceable mandate.

Flight 1420 Findings and HFACS Classification

• NTSB Technical Findings:

  • Both crew members were medically certified, rested, and qualified without preexisting physical limitations.

  • No airframe, structural, flight control, or powerplant abnormalities existed prior to impact.

  • The maximum landing crosswind component was exceeded; visual contact with the runway led the crew to persist in an unviable approach rather than executing a missed approach.

  • The second wind shear alert received during late final approach mandated an immediate go-around, which the crew failed to execute.

  • Reverted rubber hydroplaning was disproven by engineering analysis of tire patterns.

  • The automatic ground spoiler system was fully operational but failed to deploy because neither pilot armed the spoiler control handle prior to touchdown.

  • Aerodynamic Deceleration Failure: Normally, spoiler deployment transfers $80\%$ of aircraft gross weight onto the main landing gear. At touchdown ($20\text{ knots}$ relative roll speed), without spoilers, aerodynamic lift remained active: $90\%$ of aircraft weight remained on the wings, $7\%$ on the main gear, and $3\%$ on the nose gear. This negated mechanical braking friction and directional steering control.

  • Excessive Thrust Reverser Application: Pilots pulled reverse thrust in excess of $1.3\text{ Engine Pressure Ratio (EPR)}$. At levels beyond $1.3\text{ EPR}$, high-velocity exhaust gas flow blankets the vertical stabilizer and rudder, eliminating aerodynamic rudder authority on wet surfaces.

• HFACS Classification Matrix:

  • Unsafe Acts (Errors & Violations):

  • Decision Error: Overconfident real-time risk assessment driven by acute fatigue, get-home-itis, and approaching duty limits.

  • Skill-Based Error: Omission of landing checklist procedures, including failure to arm ground spoilers.

  • Exceptional Violations: Flying an approach into weather that exceeded aircraft crosswind and company environmental limits; ignoring severe wind shear alerts; exceeding $1.3\text{ EPR}$ on reverse thrust on a contaminated runway.

  • Preconditions for Unsafe Acts:

  • Adverse Mental State: Chronic fatigue at the close of an extended $14\text{-hour}$ duty day; acute time pressure to avoid "turning into pumpkins" (exceeding legal duty limits); fixation on landing in Little Rock to facilitate return to Chicago.

  • Lost Situational Awareness: Underestimating convective cell intensity and ignoring deteriorating weather trends.

  • Substandard CRM / Operator Practices: Failure of leadership by the Captain in not calling a go-around; failure of the First Officer to challenge the Captain or demand clarifying weather data from ATC.

  • Unsafe Supervision:

  • Failure to Provide Clear Guidance: American Airlines provided severe weather advisories as informative guidance rather than mandatory, enforceable flight standards.

  • Inadequate Operational Oversight: Failure of dispatch to cancel the flight outright when duty time limitations forced compressed operational timelines.

  • Organizational Influences:

  • Inadequate Safety Action: NTSB recommendations regarding ground spoiler arming logic and automatic braking installations had been issued following earlier mishaps; American Airlines was given until November 2000 to comply, leaving the fleet unprotected in June 1999.

National Transportation Safety Board (NTSB) Recommendations for Flight 1420

• Checklist and Operating Manual Revisions:

  • Mandatory Spoiler Arming Procedure: Amend the MD-80 landing checklist to require positive verbal verification and physical activation of the ground spoiler deployment handle prior to touchdown.

  • Engine Pressure Ratio (EPR) Limitation: Incorporate an explicit Caution in the MD-80 Flight Operating Manual establishing that reverse thrust must not exceed $1.3\text{ EPR}$ on wet or slippery runways, except when directional control is intentionally sacrificed for emergency deceleration, because higher power settings eliminate rudder and vertical stabilizer effectiveness.

• Emergency Response and Airfield Infrastructure:

  • Comprehensive Emergency Response Plan: Mandate documented airport response plans with designated physical access corridors to river floodplains and off-runway terrains. Emergency personnel took an extended period to navigate the embankment to the wreckage, forcing surviving passengers to perform self-rescue and resulting in fire-induced casualties.

  • Frangible Airfield Structures: Transition all rigid approach lighting supports, localizer masts, and surrounding perimeter barriers from rigid steel to frangible designs that yield upon impact to minimize airframe rupture.

• Meteorological and Fleet Modernization Mandates:

  • Continuous CWSU Staffing: Require Center Weather Service Units (CWSU) to maintain continuous operational staffing during severe weather events to prevent ATC information bottlenecks.

  • Aeronautical Information Manual (AIM) Inclusion of LLWAS: Standardize and publish Low-Level Windshear Alert System (LLWAS) procedures in the AIM and provide mandatory training for flight crews on interpreting radar reflectivity gradients.

  • Fleet-Wide Autobrake Modernization: Mandate installation of automatic brake systems across the American Airlines MD-80 fleet to provide maximum stopping capability independently of human pilot pedal application on contaminated runways.

Case Study: USAF C-17 Demonstration Practice Mishap (DoD Analysis)

• Sortie Profile and Mission Objective:

  • Date and Context: July 28, 2010; preparation for the Arctic Thunder 2010 Air Show scheduled three days later at Elmendorf Air Force Base, Alaska.

  • Mission Profile: Scheduled as a $1.5\text{-hour}$ daytime practice sortie. Conducted via an engine-running crew change (ERCC), wherein the inbound aircraft landed, kept its engines running on the runway, swapped crews, and departed immediately without shutdown.

  • Crew Complement: Four aircrew members consisting of three Alaska Air National Guard personnel and one active-duty Air Force officer:

  • Mishap Pilot (MP): Air National Guard.

  • Mishap Co-Pilot (MCP): Active Duty.

  • Mishap Safety Observer 1 (MSO1): Air National Guard.

  • Mishap Safety Observer 2 (MSO2): Air National Guard.

  • Initial pattern flight: Crew flew an uneventful $8\text{-minute}$ local evaluation pattern beneath an overcast cloud deck to determine weather suitability before landing to a full stop.

• Flight Dynamics and Crash Sequence:

  • Takeoff: At $14:21:45.45$, crew initiated a maximum-power static takeoff on Runway 06, delaying rotation by approximately $2\text{ seconds}$ to build airspeed.

  • Aggressive Climb: The pilot rotated the aircraft into an excessive pitch angle of $43^\top$, which caused the airspeed to drop significantly below the calculated minimum safe climb-out speed. The MSO acknowledged a master caution for "TAKE NOT INERT" shortly after liftoff.

  • Maneuver Sequence: The pilot leveled off at $859\text{ ft Above Ground Level (AGL)}$ and initiated a planned dynamic reversal maneuver. The pilot banked the aircraft $80^\top$ left from runway heading at a $60^\top$ bank angle using partial rudder, followed by a $7\text{-second}$ wings-level outbound leg with flaps moving to the up position.

  • High-G Yaw Input: While descending through $680\text{ ft AGL}$, the pilot applied full manual right rudder to roll into an aggressive $60^\top$ bank turn and held full manual right rudder. Counteracting this yaw required opposing left aileron input, placing the C-17 into a severe aerodynamic sideslip.

  • Stall Dynamics: The MCP retracted the leading-edge slats during the turn. A stall warning and stick shaker activated simultaneously, which the MCP acknowledged. Aircraft airspeed decayed while bank angle increased to $190\text{ knots}$ and $65^\top$ bank, where the wing physically stalled.

  • Loss of Control: Airspeed dropped below $175\text{ knots}$ and bank increased rapidly to $85^\top$. The pilot executed an abrupt rudder reversal as the slats completed retraction. MSO1 shouted a warning to watch bank angle; the MCP made erratic stick inputs while calling for and pushing throttles to maximum power.

  • Ground Impact: The aircraft reached an extreme bank of $85^\top$ before rolling partially back. At a $65^\top$ bank angle and $17^\top$ nose-low pitch, the aircraft impacted the ground at $14:22:42$ ($57\text{ seconds}$ total flight time from brake release). Airspeed five seconds prior to impact was $175\text{ knots}$. The aircraft was destroyed and all four crew members were killed.

  • The entire sequence was recorded on video by an ATC tower controller stationed on the external catwalk.

C-17 Findings, HFACS Causal Analysis, and DoD Recommendations

• Official Investigation Findings:

  • Finding 1 (Oversight Breakdown): The 3rd Operations Group (3 OG) failed to provide adequate oversight of the C-17 Aerial Demonstration program. Low unit interest led leadership to avoid enforcing standards out of concern that pilots would abandon the demonstration team.

  • Finding 2 (Airworthiness): Pre-flight engine-running crew changes and the initial test flight proved the aircraft, engines, and automated systems were fully functional.

  • Finding 3 (CRM Failure & Complacency): Crew failed to adhere to authorized demonstration profile parameters. The crew had practiced unauthorized flight maneuvers for five days prior to the event without leadership intervention.

  • Finding 4 (Aerodynamic Overcontrol): The pilot overcontrolled the aircraft during the low-altitude turn reversal, inducing an unrecoverable aerodynamic stall due to degraded flight discipline and airshow syndrome.

  • Finding 5 (Fatal Outcome): The aircraft impacted terrain in controlled flight into terrain (CFIT) post-stall, resulting in four fatalities and total hull loss.

• DoD HFACS Model Application:

  • Unsafe Acts: Extreme flight control inputs ($43^\top$ pitch, full manual rudder with crossed controls); exceptional violations of aerial demonstration profiles; complete breakdown of Crew Resource Management (crew yelled over one another on the interphone; MSO2 never spoke; checklist discipline abandoned).

  • Preconditions for Unsafe Acts: Airshow Syndrome (overconfidence, intense desire to outshine fighter and bomber demonstration teams like the Blue Angels, perceived inferiority of heavy cargo displays); task saturation; flawed mission planning.

  • Unsafe Supervision: Failure of the 3 OG and squadron leadership to identify or halt unauthorized, aggressive maneuvers widely observed across the unit; lack of supervision over demonstration profiles; overdue training flight currencies tolerated across the wing.

  • Organizational Influences: Air Force-level failure to publish standardized doctrine, currency guidelines, or mandatory training syllabi for large-aircraft aerial demonstration teams.

• Mandated Safety Actions and DoD Recommendations:

  • AFI 11-246 Volume 6 Warning: Insert an official Warning in Air Force Instruction 11-246, Volume 6, Chapter 3 (and technical manual TO 1C-17A-1) stating: "Excessive use of rudder during turns increases drag and decreases stall margin. If a positive correction is not made back to coordinated flight, the continued side slip may cause an abrupt departure from controlled flight."

  • Elevate Technical Order Note to Warning: Modify the existing Note on page 6-3 of TO 1C-17A-1 to a formal Caution/Warning reading: "For other than windshear recovery, the aircraft should not be operated below stick shaker stall warning onset."

  • Bank Angle Constraints: Formally mandate strict maximum bank angles for all demonstration maneuvers within AFI 11-246, removing operational ambiguity.

  • Immediate Program Suspension: Suspend all local C-17 aerial demonstration practices at Elmendorf AFB until organizational compliance is established.

  • Department of Defense Demonstration Program Governance: Establish a centralized, formal demonstration team training, qualification, and evaluation curriculum governed across the entire DoD, applying consistent oversight to all airframes (including C-17, A-10, F-15, F-16, F-22, and F-35).

Methodological Best Practices in Mishap Investigation

• Sequence of Investigative Priorities:

  • Prioritize hard physical telemetry, digital flight control data, and non-volatile memory chips before relying on human witness recollections.

  • Recognize that human perception varies based on location within an aircraft and changes over the course of an inquiry.

  • Avoid premature causal conclusions on Day 1, Day 3, or Day 7; systematic technical evaluation often requires $30\text{ to } 60\text{ days}$.

  • Maintain an ethical interview process: respect medical treatment requirements and consider psychological shock and prescription medication use among survivors.

  • When organizational failures or technological gaps are identified, investigators must write preventative recommendations regardless of whether those factors were primary causal triggers of the immediate hull loss.

Supplementary Investigative Methodology and Data Collection Dynamics

• Organizational Vulnerabilities Assessed by HFACS:

  • Hazardous operating conditions within the working environment.

  • Systemic training shortfalls and instructional gaps.

  • Supervisory and command leadership breakdowns.

  • Resource allocation and logistical support failures.

  • Materiel design flaws and ergonomic interface deficiencies.

  • Inadequacies, contradictions, or ambiguities in formal written policies and checklists.

• Counterfactual Reasoning in Accident Inquiries:

  • Comprehensive safety investigations mandate analyzing appropriate counterfactual conditions to identify what realistic operational alternatives would have interrupted the mishap sequence.

• Characteristics and Time Allocation of Witness Interviews:

  • Witness accounts represent the sole investigative data source directly susceptible to the influence and interviewing technique of the investigator collecting the information.

  • Safety investigators consistently allocate more operational time to conducting interviews and evaluating interviewee recollections than to any other single investigative task.

Specialized Case Documentation and Extended Evidence: American Airlines Flight 1420

• Official Report and Docket Identification:

  • National Technical Information Service (NTIS) Accession Number: PB2001-910402.

  • National Transportation Safety Board (NTSB) Report Identification: NTSB/AAR-01/02.

  • NTSB Master Mishap Docket: DCA99MA060.

• Supplemental Flight Crew Qualifications and Background:

  • Captain Flight Background: Qualified military and transport experience included service as a Boeing 727 flight engineer, alongside operational flight time in the Lockheed T-33 Shooting Star and Martin EB-57 Canberra; held military certifications as a Command Flight Examiner and Instructor Pilot.

  • First Officer Flight Background: Hired in January 1999; originally earned private pilot certificate in 1983; completed primary naval flight training with the U.S. Navy in 1988; accumulated prior corporate and civilian flight hours operating the Cessna 210 (C-210), Learjet 35, and Beechcraft King Air E-90; previously served in commercial executive roles as Director of Operations and Chief Pilot.

• Terminal Windshear Timestamps and Meteorological Tracking:

  • Initial low-level windshear alert broadcast: $23:39:44\text{ Central Daylight Time}$.

  • Second low-level windshear alert broadcast: $23:47:53\text{ Central Daylight Time}$.

  • Surface impact and runway overrun timestamp: $23:50:44\text{ Central Daylight Time}$.

  • Formal American Airlines flight operations policy text: "When positive indications of severe windshear exists, initiate a go-around and hold until conditions improve."

  • Rapid movement and intensification of the convective storm system occurred directly across Little Rock National Airport between $11:45\text{ p.m.}$ and $11:51\text{ p.m.}$

• Detailed Accident Findings and Aerodynamic Weight Distribution:

  • The flight crew reasonably believed during early descent into the terminal arrival area that they could arrive and land prior to the thunderstorm impacting the field.

  • The local air traffic controller delivered appropriate, pertinent, and timely meteorological reports regarding approaching storm cells and deteriorating field conditions.

  • Following failure of the automatic ground spoiler actuator to deploy upon touchdown, the Captain failed to execute a manual extension of the spoiler handle.

  • At an approach rollout speed of $V_{\text{REF}} + 20\,\text{knots}$ without ground spoiler extension, aerodynamic wing lift maintains $90\%$ of aircraft gross weight on the wings, leaving only $7\%$ supported by the main gear and $3\%$ supported by the nose gear, eliminating effective mechanical wheel braking.

Structural Architecture of the Department of Defense (DoD) HFACS Model

• Organizational Influences (Tier 4):

  • Resource/Acquisition Management: Funding allocation, fleet purchasing, equipment acquisition, and parts logistics.

  • Organizational Climate: Workplace culture, operational tempo, chain-of-command atmosphere, and safety priority.

  • Organizational Process: Formal technical orders, instructions, rules of engagement, and operational checklists.

• Supervision (Tier 3):

  • Inadequate Supervision: Failure of leadership to supply doctrine, training currencies, or operational guidance.

  • Planned Inappropriate Operations: Approving scheduling mismatches, extreme risk profiles, or unauthorized profiles.

  • Failure to Correct Known Problem: Overlooking documented substandard airmanship or chronic deviations.

  • Supervisory Violations: Command-level breach of flight regulations or flight limitations.

• Preconditions for Unsafe Acts (Tier 2):

  • Environmental Factors: Physical Environment (weather, lighting, G-forces) and Technological Environment (avionics, cockpit ergonomics, display logic).

  • Condition of Individuals: Cognitive Factors (task fixation, attention distribution), Psycho-Behavioral Factors (motivation, get-home-itis), Adverse Physiological States (fatigue, hypoxia), Physical/Mental Limitations, and Perceptual Factors (sensory illusions, vestibular error).

  • Personnel Factors: Coordination/Communication/Self-Imposed Stress and Mission Planning Factors.

• Unsafe Acts of Operators (Tier 1):

  • Errors: Judgment and Decision-Making Errors, Skill-Based Errors, and Perception Errors.

  • Violations: Routine Violations and Exceptional Violations.

Technical Flight Dynamics and Causal Architecture: USAF C-17 Elmendorf Mishap

• Mishap Database Tracking and Computer Parameters:

  • Air Force Safety Automated System Incident Tracking Number: AFSAS# 692650.

  • Takeoff and Landing Data (TOLD): Flight deck automated computation generating safe rotation, liftoff, and climb-out speeds; the initial extreme climb pitch of $43^\circ$ resulted in climb airspeed falling substantially beneath computed TOLD minimum safe climb speed.

• Maneuver Nomenclature and Command Findings:

  • Tactical Flight Profile Maneuver: The maneuver intended by the flight crew was an aerobatic $80/260$ turn reversal executed at low altitude.

  • Official Causal Finding 1: The Commander of the 3rd Operations Group ($3\text{ OG/CC}$) failed to maintain and ensure appropriate operational oversight of the C-17 aerial demonstration program.

  • Official Causal Finding 3: Following the second departure, the Mishap Pilot (MP), Mishap Co-Pilot (MCP), and Mishap Safety Observer (MSO) failed to maintain compliance with authorized aerial demonstration boundaries.

  • Official Causal Finding 4: The Mishap Pilot overcontrolled the aircraft during the $80/260$ turn reversal, employing full uncoordinated rudder and opposite aileron to induce cross-controlled sideslip, rapid airspeed decay, stick-shaker stall onset, and unrecoverable ground collision.