The Boeing Company

九天内的两次锂离子电池事件暴露了 Boeing 787 认证的安全主张与其安装电池行为之间的差距。第一次事件导致一架停在波士顿的 Japan Airlines 飞机起火；第二次事件迫使一架 All Nippon Airways 787 改航并疏散。调查发现单个电池内部短路可导致热失控蔓延，而起始缺陷可能被破坏或无法确认。该机队通过三层重新设计恢复运营，降低了起火风险、阻止了蔓延并隔离排除故障。这是一次有效的运营恢复，但也改变了问责问题：认证不能再依赖假设不蔓延，必须证明即使无法解释的电池故障也不会威胁飞机。

波音 737 MAX MCAS 是一个风险与问责案例，因为两次致命空难、全球停飞、公开调查、刑事和解记录、监管机构复飞行动以及持续的安全治理审查表明，安全关键自动化如何在实际控制上在制造商、监管者、航空公司、飞行员和乘客之间转移。公开记录之所以重要，是因为认证证据不仅仅是文书工作，而是证明设计假设、人因因素、培训、委托和修复决策保护了无法检查运载他们的自动化装置的人们。

Two lithium-ion battery events in nine days exposed a gap between the safety proposition certified for the Boeing 787 and the behavior of its installed batteries. The first produced fire in a parked Japan Airlines aircraft at Boston; the second forced an All Nippon Airways 787 to divert and evacuate at Takamatsu. Investigators later found that a single-cell internal short could escalate into cell-to-cell thermal runaway, while the initiating defect could remain destroyed or unresolved. The fleet returned through a three-layer redesign that reduced initiation risk, impeded propagation, and contained and vented a failure outside the aircraft. That was an effective operational recovery, but it

Boeing 737 MAX MCAS is a risk and accountability case because two fatal crashes, a global grounding, public investigations, criminal-resolution records, regulator return-to-service actions, and continuing safety-governance scrutiny showed how safety-critical automation can shift practical control among manufacturer, regulator, airline, pilot, and passenger. The public record matters because certification evidence is not merely paperwork; it is the proof that design assumptions, human factors, training, delegation, and repair decisions protect people who cannot inspect the automation carrying them.

The opening in the side of Alaska Airlines flight 1282 was the visible failure. The harder accountability question lay behind it: how a safety-critical configuration could be changed on a factory floor without a durable record, restored without the required inspection, accepted behind finished cabin walls, and delivered into passenger service.