Autoland, trim and protection have conditions

Why is autoland capability more than two autopilots?

Follow the chain of guidance, control, height sensing and required operational conditions.

A complete landing system

An automatic landing function needs valid guidance, suitable control channels, the required thrust functions, height information and the aircraft’s other specified systems. ILS receivers, radio altimeters and flight-control computers can be common dependencies. Multiple autopilots do not remove a shared faulty input. The FMA’s landing capability reflects monitored system conditions; crew selections alone do not establish the available capability.

A fail-passive automatic landing system is designed so that a failure does not produce a significant out-of-trim condition or deviation, but completion of the landing is not assured automatically. A fail-operational system can retain the required landing capability after a specified failure within its certified conditions. A hybrid concept combines a primary fail-passive system with an independent guidance path supporting manual completion. These terms describe defined failure capability, not permission to continue every approach after a fault.

Thresholds and authorisation remain specific

Alert height, where applicable, is associated with the system’s fail-operational logic and specified failure actions. It is not simply another name for decision height. The approved procedure defines the response above and below relevant thresholds, including warnings that still require action. There is no universal rule that a failure below alert height can always be ignored.

Monitor the expected approach, flare and rollout annunciations together with raw data and the actual flight path. A missing transition or inappropriate response is a condition to assess through the approved procedure. Technical capability, crew qualification, aerodrome facilities, weather, serviceability and operational approval must all fit the planned operation. The model removes one dependency and shows a synthetic capability change; it does not issue approach minima or a continue/go-around command.

Does a protection remove the need to understand the limit?

Understand what the function senses, commands and may lose.

Trim and damping address different tasks

Trim reduces sustained control force or establishes a control-system reference for the chosen condition. Automatic pitch trim can support an autopilot on a conventional aircraft or form part of a fly-by-wire control law during manual flight. Its availability and behaviour depend on phase and system state. A green take-off trim range is an allowable configuration cue, not the correct setting for every loading condition.

A yaw damper senses and damps unwanted yaw motion such as Dutch roll using filtered signals. It is not simply a heading-hold rudder channel and does not replace every coordination task. Filtering helps avoid inappropriate rudder commands from motion that should not be chased. A Mach-trim function addresses a type-specific change in pitch characteristics with speed and can be independent of the autopilot.

Protection depends on valid inputs and law

A flight-envelope function may use AoA, airspeed, configuration and other inputs to provide warning, limit a command or intervene. Mechanical stall warning, a stick pusher and a fly-by-wire command limit act in different ways. The presence of one function does not imply the complete set of protections available on another aircraft or in another control law.

A sensor that remains wrong but plausible can make a protection act inappropriately; a detected failure can remove a function or change the law. Understand the annunciated state and use the approved procedure rather than assuming the aircraft will prevent every exceedance. Runaway trim or substantial out-of-trim force requires prompt type-specific action. The preceding capability chain makes each dependency explicit and shows why a lost input affects the function it supports rather than every unrelated system.

Can you explain and apply the mechanism?

Four original questions. Work from the stated facts, then compare your reasoning with the explanation.