Skip to main content

Executive Summary

Boeing 737 MAX

Sector: Manufacturing / Commercial Aviation Failure: March 10, 2019

Two crashes, 346 deaths, less than five months apart. A single-sensor flight control system (MCAS) concentrated failure risk into one point. Certification was delegated to the manufacturer. Internal engineering concerns could not reach decision-makers through the governance architecture. After the first crash, the same information-filtering structure that enabled the design flaw prevented correction before the second.

Permission 0.85

Critical

FAA delegated all 91 MAX certification plans to Boeing; self-certification created structural gap between allowed authority and oversight effectiveness

Management 0.88

Critical

Engineering concerns filtered before reaching decision-makers; internal metrics showed stability while structural conditions deteriorated

Absence 0.78

Critical

24 FAA engineers supporting 1,500 ODA personnel; 57 whistleblower disclosures; no simulator training requirement for MAX transition

Thinness 0.46

Moderate

Single angle-of-attack sensor architecture with no independent cross-check; concentration risk locked into airframe design

346 deaths

189 on Lion Air Flight 610 (Oct 2018) + 157 on Ethiopian Airlines Flight 302 (Mar 2019)

Less than five months

Between the two crashes, information justifying intervention existed but could not reach decision-makers through the governance architecture

All 91 certification plans

Delegated to Boeing by November 2016—the entity being certified controlled the certification process

1997 merger inflection

McDonnell Douglas acquisition shifted engineering culture from “best airplane we can build” to “best airplane we can afford to build”

30 Federal Data Points
93% Legally Mandated
5 years Temporal Lead
100% Sensitivity Stability

Composite: 0.258 (Elevated, 2013) → 0.470 (Moderate, 2017—certification year) → 0.613 (High, 2018) → 0.761 (Severe, 2019). Post-reform dip to 0.549 (2020–2023), then 0.795 (Severe, 2024—Alaska Airlines door plug incident).

The dominant cascade pattern is Permission → Absence → Thinness. Certification delegation (Permission erosion) enabled the loss of oversight functions (Absence), which allowed concentration risk to be locked into the airframe design (Thinness). The 2024 Alaska Airlines door plug incident proved the pattern recurred in manufacturing—the same structural architecture produced the same structural outcome.