Xtykutl

A New York Times article from today about the Lion Air Flight 610 crash claims that in order to control the airplane the pilot

could have braced his feet on the dashboard and yanked the yoke, or control wheel, back with all his strength.

Thanks to T.J. Crowder's comment I realize there is not only the autopilot but also a (new?) stall avoidance system installed on this new line of B737s.

Is it true that either one can be overridden by a simple application of sufficient force to the yoke? If so:

• What is the respective underlying mechanism for the systems?


• What force would be necessary, respectively?


• Are both systems designed such that they can be overridden simply by applying an unusually strong force, or would that be just a violent and "unofficial" way to control the yoke despite the systems' best efforts?¹
  

I understand that the main flight controls of this recent incarnation of the Boeing 737, the MAX 8, are still hydraulic. Does that play a role in the "override by sheer force" possibility?

I'm not sure of the full story here, but if you pull the controls of a 737 while the autopilot is engaged the autopilot will trip and the pilots can fly the plane manually. This requires about 25 lbs of force.

There is also a button on the yoke where you can disengage the AP. So if the AP was controlling the plane and going into a violent descent the pilots should have been able to cancel it by pulling the yoke or pushing the button on the yoke or the mode control panel below the windshield.

And no, the controls being hydraulic doesn't play a role in the "override by sheer force" possibility.

Edit:

The autopilot servos are limited to 25 lb of force for single channel operation. Separate force sensors measure pilot column input and the autopilot will disconnect if the force applied by the pilot(s) exceeds 21 lbs.

Source

With typical hydraulic controls, the mechanical control cable circuit just operates control valves on the hydraulic actuators. The control valves normally only have fairly light centering springs that take only a few pounds of force to overcome. With no other devices in the control circuit, you could move the control column with your pinky finger.

Control feedback forces come from pitch feel devices in the control circuit that use internal spring packs (bungees) and/or roller cam devices to provide a variable resistive force. But the feel units won't drive the circuit, only provide resistance. Two devices can drive the elevator circuit in theory; the autopilot servo and the stick pusher (which is like an autopilot servo that only operates one way).

Autopilot and stick pusher servos have two clutches, a meshing teeth on/off clutch, and a friction slip override clutch. If the A/P servo runs away for some reason, and you can't trigger a disconnect electrically, it is possible to overpower the slip clutch in the servo, but it is like the stick is in not-quite-solidified concrete the whole time you are trying to move it. But you can move it.

The stick pusher servo is similar, but the stick pusher is designed to drive full nose down and release almost immediately.

In any case, if you had an elevator hard over like that and the electrical disconnects (there are usually several difference switches that can perform the disconnect function), the next action would be to operate the mechanical pitch disconnect to separate the left and right elevator circuits. You end up with one free elevator, which will give some control, at least enough to neutralize the overall input.

One possibility is the shock and surprise of the event, whatever it was, overwhelmed the crew and they didn't follow through on all the memory items for that kind of emergency. At this point, who knows.

Also remember that media stories on these kinds of incidents are almost always wildly inaccurate. Anyone who has worked in any kind of technical specialty and reads media reports related to their specialty knows that they are wrong most of the time.

Out of trim is no way to fly

The issue with B737-8 as detailed in the Emergency Airworthiness Directive from Nov. 7, 2018 is not that the plane is applying a nose-down elevator input through the autopilot servos — this would be trivial for the pilots to overcome, even if the servos failed to declutch when the pilots pulled the yoke. The problem is that the aircraft may be applying a repetitive, nose-down pitch trim input to the stabilizer trim system (essentially, an autotrim command), and to quote our very own Capt. Casey Webster, "an out of trim transport category airplane can be a beast to fly".

In other words, an out-of-trim situation in a transport category aircraft can lead to quite high control forces, hence the reference you saw about the pilot bracing their feet on the instrument panel and pulling with all their might to overcome the grossly nose-down stabilizer trim. (Of course, you'd want the other pilot to cut out the trim motors while holding onto the trim wheel with a free hand to keep the trim situation from getting worse.)