Executive Summary
Boeing 737 MAX
What Failed
Two crashes, 346 deaths, less than five months apart. A single-sensor flight control system (MCAS) concentrated failure risk into one point. Certification was delegated to the manufacturer. Internal engineering concerns could not reach decision-makers through the governance architecture. After the first crash, the same information-filtering structure that enabled the design flaw prevented correction before the second.
Structural Frequency Assessment
Critical
FAA delegated all 91 MAX certification plans to Boeing; self-certification created structural gap between allowed authority and oversight effectiveness
Critical
Engineering concerns filtered before reaching decision-makers; internal metrics showed stability while structural conditions deteriorated
Critical
24 FAA engineers supporting 1,500 ODA personnel; 57 whistleblower disclosures; no simulator training requirement for MAX transition
Moderate
Single angle-of-attack sensor architecture with no independent cross-check; concentration risk locked into airframe design
Key Evidence
346 deaths
189 on Lion Air Flight 610 (Oct 2018) + 157 on Ethiopian Airlines Flight 302 (Mar 2019)
Less than five months
Between the two crashes, information justifying intervention existed but could not reach decision-makers through the governance architecture
All 91 certification plans
Delegated to Boeing by November 2016—the entity being certified controlled the certification process
1997 merger inflection
McDonnell Douglas acquisition shifted engineering culture from “best airplane we can build” to “best airplane we can afford to build”
Federal Data Validation
Composite: 0.258 (Elevated, 2013) → 0.470 (Moderate, 2017—certification year) → 0.613 (High, 2018) → 0.761 (Severe, 2019). Post-reform dip to 0.549 (2020–2023), then 0.795 (Severe, 2024—Alaska Airlines door plug incident).
Structural Mechanism
The dominant cascade pattern is Permission → Absence → Thinness. Certification delegation (Permission erosion) enabled the loss of oversight functions (Absence), which allowed concentration risk to be locked into the airframe design (Thinness). The 2024 Alaska Airlines door plug incident proved the pattern recurred in manufacturing—the same structural architecture produced the same structural outcome.