Quoting sulzerjan (Reply 5): But as humans are humans they should change the design anyway, even though there is nothing wrong with it.
|
I understand your meaning, and I'm glad you agree with the conclusion that the design should be changed. However, as you point out, human factors are important. In the more abstract sense, I think you can make an argument that something is wrong with a design if the interaction between humans and that design results in multiple failures via the same exact mechanism.
What's more, if inspection protocols are not uniformly in agreement that a physical check, rather than a visual check, of the doors is necessary, then the design is insufficient if it would satisfy the visual check while in fact being open.
Still, your point is well taken; when properly latched, it's secure.
I used to work in the amusement ride industry, where this sort of differentiation between visual and physical verifications of devices (restraints, access panels, etc.) is also quite important. An apparently secured restraint that is not physically verified as secure could result in serious injury or fatality.
As an additional industrial crossover (of which I find many in reflecting upon aviation), I note that one commenter on AVH says something like, "Even my dishwasher won't start unless it's locked." Indeed, a very good point that also applies to amusement rides. Many, especially newer, attractions simply won't start without proximity sensors triggered, unless the ride is in some sort of maintenance mode. This is a very simple and crude electro-mechanical safety feature that has probably saved more lives than we'll ever realise. Why is such a feature not common on a turbofan engine? Absent a maintenance bypass mode, the engine should not start without the sensor triggered.