SERVANTSTACK // INCIDENT INTELLIGENCEFORENSIC IMAGE // VERIFIED FRAME

SS-IR-013 // INCIDENT REPORTReported

Boeing 737 MAX

MCAS System Kills 346 People in Two Crashes

Q: Which governance control was missing?

Execution gate and human override. A trained operator receives the evidence, owns the go/no-go decision, and retains an immediate override.

EXECUTIVE BRIEF

Boeing's 737 MAX included MCAS (Maneuvering Characteristics Augmentation System), an automated flight control system that repeatedly pushed the nose down based on a single faulty sensor reading .

AUTONOMOUS & AVIATION

FAILURE CHAINTRACE COMPLETE

01TRIGGERBoeing's 737 MAX included MCAS (Maneuvering Characteristics Augmentation System), an automated flight control system…
02MACHINE ACTIONMaterial contributor
03MISSING GATEExecution gate and human override
04IMPACTPhysical safety

01 // INCIDENT SUMMARY

The short version

Boeing's 737 MAX included MCAS (Maneuvering Characteristics Augmentation System), an automated flight control system that repeatedly pushed the nose down based on a single faulty sensor reading .

02 // KEY FACTS

Case telemetry

INCIDENT: SS-IR-013
DATE: October 29, 2018 & March 10, 2019
SYSTEM: Boeing 737 MAX
LOCATION / SCOPE: Indonesia & Ethiopia
EVIDENCE: Reported
AI ROLE: Material contributor
HARM: Physical safety
SOURCES: 2 cited records

03ENTRY POINT // WHAT HAPPENED

The event

Boeing's 737 MAX included MCAS (Maneuvering Characteristics Augmentation System), an automated flight control system that repeatedly pushed the nose down based on a single faulty sensor reading. Lion Air Flight 610 crashed into the Java Sea on October 29, 2018, killing 189 people. Five months later, Ethiopian Airlines Flight 302 crashed under nearly identical circumstances, killing 157 people. In both cases, pilots fought the automated system for minutes before losing control.

04CAUSAL TRACE // AI'S ACTUAL ROLE

What the machine did

MCAS relied on a single angle-of-attack sensor with no redundancy. When that sensor malfunctioned, MCAS activated repeatedly, pushing the nose down every 5 seconds with increasing force. Pilots were not told MCAS existed - it was omitted from flight manuals and training to avoid requiring expensive simulator certification. The system was designed to operate without pilot awareness, overriding manual control inputs.

Material contributorAutomation was a causal participant—not a decorative label for the system around it.

05BLAST RADIUS // CONSEQUENCES

Where the failure landed

346 people killed. The 737 MAX was grounded worldwide for 20 months. Boeing paid over $20 billion in settlements, fines, and costs. The company was criminally charged with conspiracy to defraud the FAA. Boeing's chief technical pilot was indicted for fraud. The FAA's delegation of safety certification to Boeing was exposed as regulatory capture.

06 // EVIDENCE STATUS

Reported

Documented in the cited public record. Follow the sources for the precise evidentiary posture.

SOURCE RECORD UPDATED 2026-07-09

07 // SOURCE LEDGER

2 cited records

01
Primary / officialFAA Boeing 737 MAX Reading Room
02
Primary / officialHouse Transportation Committee Investigation

08CONTROL FAILURE // MISSING GOVERNANCE

Execution gate and human override

The failure pattern in this case: Autonomous high-consequence action.

09INTERVENTION POINT // HUMAN IN THE MIDDLE

The moment the path could change

A trained operator receives the evidence, owns the go/no-go decision, and retains an immediate override.

AI PROPOSES→HUMAN OWNS THE DECISION→SYSTEM EXECUTES

10CONTROL DEPLOYMENT // AUTHORITYGATE

High-consequence gate · human override

AuthorityGate requires that any automated system capable of overriding human control must be fully disclosed to the humans it overrides. Pilots are the SMEs in the cockpit - hiding a flight control system from them is the antithesis of human oversight. The framework also mandates sensor redundancy for safety-critical automated decisions. No life-or-death system should depend on a single input.

RELEVANT KEYSTONE CONTROLHuman-in-the-Loop ValidationHow high-risk actions route to a named subject-matter expert who owns the go or no-go decision.

12 // THE ALTERNATIVE

Autonomy is a design choice.

See the operating model that keeps AI useful while preserving human authority at consequential moments.

Compare AgenticAI and AugmentedAI →