Originally Posted by
arf23
The commonalities between jeju and Air India are astounding, engine shutdown when totally not appropriate.
I would suggest cockpits be added with a 2nd shutdown switch. That if an engine shutdown is commanded by the crew, and the computer disagrees its necessary, that the crew need to push a 2nd, more guarded and inaccessible, switch to command the shutdown.
You've chosen two examples where we don't have final reports, so we don't really know what happened.
Your proposal would not prevent malicious shutdown.
It would not prevent wrong engine shutdown when the crew is convinced they have the correct engine, and thus operate the second switch without further thought.
It may help when the shutdown was commanded as an action slip, but many pilots think that never happened anyway—it's certainly very rare.
But you would run the danger of creating situations where it becomes impossible to shut down an engine due to a computer malfunction; or a situation where the crew thinks they have shut down the engine when it is still running because the system is still waiting for a confirmation they didn't think it would ask for.
As an example, if weight-on-wheels fails, the system might require confirmation when shutting the engines down at the stand when it normally is not required.