Comment by 7952

At some point I think we need to accept more control from automation. The model where ultimate authority reverts to a single input is a cop out. That could be pilot input, sensor input or even direction from ATC. They will all provide false data on occasions. When that data contradicts 99% of the other data then the safest option is to ignore it. And that doesn't just mean with compromised humans but with normal human weakness. Fully understanding the aircraft, its state, its systems and the minds of its crew is impossible.

In this case I wonder if the fuel cut off switches could be replaced by buttons for particular situations. Have an engine fire button or a shut down whilst on the ground button. Let the pilot provide input on state and let the automation decide what to do with that. Obviously this is not a solution to suicidal or murderous behaviour. But it could be a solution to all the low probability edge cases.