bobcat4: >"Why is it possible to program a Boing 737NG to stall????"
Because it's possible to program a Boing 737NG to land.
The problem is to detect the [possible] non-landing context. The RA enhancement I suggested above is one of the ways, an analogous enhancement in the AT would be another (possibly a better one). Each would result in incorrect behaviour for a short period (as BOAC says, on landing AT RETARD comes before weight on wheels) but after that the program would end with an error message - AT disconnect and a significant alert.
Each would follow the software principle "I am not artificially intelligent, thus if I detect a state I have not been designed for, stop with an error message ."
BTW, I realise that this was never an autoland scenario, but one in which AP and AT would remain coupled to near landing.
Last edited by Gegenbeispiel; 6th Mar 2009 at 16:06.