Human Factors in a Night Shift Sign-Off
It is 02:30 on a night shift. An engineer has already worked 11 hours and is completing the final sign-off on a landing gear retraction test after a brake unit replacement. The test requires confirmation that the gear retracts and locks, the down-locks engage, and the warning horn sounds. The engineer ran the test once and saw the gear retract and the green lights illuminate, but the warning horn check was inconclusive because the hangar was noisy. A second engineer is available but is finishing another task. The aircraft is scheduled to depart at 06:00. The engineer considers signing off, noting 'horn check to be confirmed at next opportunity'.
1. Identify the human factors at play and the error traps in this situation.
Read the worked answer
Several classic HF issues are present:
- Fatigue: 11 hours into a night shift, at 02:30 - the circadian low. Fatigue reduces vigilance, increases omission errors and impairs judgement (the very judgement being used to decide whether to sign).
- Time pressure: a 06:00 departure creates a production pressure to accept an incomplete check.
- Noise/environment: the noisy hangar made the horn check inconclusive - an environmental factor that should trigger a repeat, not a deferral.
- Normalisation of deviance: 'horn check to be confirmed at next opportunity' is a classic drift - accepting an incomplete task as normal.
- Single-person verification: no independent check on a critical system.
The error trap is that the engineer is using their own fatigued judgement to decide whether their fatigued judgement can be trusted - a self-referential failure.
2. What should the engineer do, and what does the 'deferred horn check' represent from an airworthiness standpoint?
Read the worked answer
The engineer should not sign off. The correct action:
- Stop and hand over: ask the second engineer to witness the horn check, or complete it themselves after a break.
- Repeat the horn check in a quiet environment or with the noise source isolated, so the result is definitive.
- If the horn cannot be confirmed, the aircraft is not released - the gear warning is a required safety system.
Airworthiness standpoint: 'horn check to be confirmed at next opportunity' is not a deferrable defect. It is an incomplete functional check of a required system, and signing it off would be a false certification. It also breaches the principle that a certifying engineer must have personally verified the work. The entry would misrepresent the aircraft's condition in the maintenance records.
3. How should the organisation's procedures and culture be adjusted to prevent recurrence?
Read the worked answer
This is a systemic issue, not just an individual one:
- Fatigue risk management: define maximum shift hours and mandatory breaks; the 11-hour night shift at 02:30 should trigger a fatigue report and a handover.
- Independent inspection requirement: critical system functional checks (gear, warnings) should require two-person verification or a second signature.
- Task interruption policy: if a check cannot be completed conclusively, the procedure should explicitly require a repeat, not a deferral.
- Production pressure controls: departure scheduling should not drive sign-off; a clear 'stop work' authority must be real, not nominal.
- Just culture: the engineer should be able to report the near-miss without blame, so the organisation learns.
- Audit: quality assurance should sample tech log entries for deferred functional checks and challenge them.