Originally Posted by Dozy
Those limits weren't plucked out of the air though, they were defined by the test pilots (a group of the best and most experienced in Europe) who went up in the prototype A320 and found them. So the "master" of the protections is still a pilot - just not the pilot in the seat at the time
I still remember reading Pierre Baud beginning 1988 explaining that the system accepted both SS inputs to be added...
Dozy, you open the difficult problem of the specifications. Has the flight engineer to discuss them ? It is from his responsability to ask and ask and ask : "Do you really want that ? Do you realise that means also that ? aso".
An example was Ariane5 V501 crash : not only the rocket crashed due to an single wrong carry, but the engineer said later that after the both (wrong) failures of the two inertial systems the computation of the path had to be stopped ! It was the spec ! He obeid without discussion... (8 billions FF 1996).