Duplicate inspection signed by an unauthorised person

Contain first, then determine.

Immediate actions: ground the aircraft and stop further flight; quarantine the maintenance records for the task, the shift handover sheet and the electronic sign-off audit trail; verify torque on the affected B-nut to the manual figure, apply the torque stripe, and carry out a pressure leak check plus a functional check of the spoiler system; then inspect the adjacent systems touched in the same bay for the same failure mode, because a hand-tight fitting usually signals a pattern rather than a one-off slip.

Airworthiness determination: a hydraulic line at a flight-control actuator that is not torqued can leak, lose system pressure, and in the worst case allow the connection to back off further. The relevant questions are whether the spoiler was functional and whether hydraulic loss affected other users of that system on the two sectors flown. The answer goes into the assessment: if the leak was slow and system pressure was maintained, the exposure was degradation rather than loss of control, but that is a conclusion reached after inspection, not an assumption to start from.

The aircraft is unairworthy until the connection is verified and the system is leak-checked and function-checked. The certificate of release for the original task was invalid: the required duplicate inspection was not performed by an authorised independent person, and the countersignature was applied without the check. That is not a documentation irregularity - it means the release was made without the evidence the exposition requires.

Yes, it is reportable.

The reasoning turns on the nature of the event, not just the outcome. Occurrence reporting schemes capture maintenance errors that could endanger an aircraft, whether or not damage resulted. A flight-control system connection released to service without the required independent inspection, on an aircraft that then flew two sectors, meets that threshold comfortably. The finding of a hand-tight pressure line is the physical evidence that the missed inspection was not a harmless administrative lapse.

What I would report: the defect found, the sectors flown before discovery, the maintenance error, the failure of the duplicate inspection process including the unauthorised signatory and the countersignature without inspection, the immediate corrective actions, and the containment of the wider shift's work. I would not speculate on blame in the report; I would state facts and sequence.

To whom: the Civil Aviation Department as the state of registry through the organisation's mandatory occurrence reporting process, and internally through the operator's and the maintenance organisation's safety management systems. The operator's continuing airworthiness management organisation must also be informed because it holds the airworthiness responsibility and will need to assess the aircraft's status and any crew report from the two sectors.

I would also check whether any other signature by the same trainee or countersignature by the same certifying engineer appears in the records for that shift, and report the scope once known rather than issuing a narrow report and then widening it later.

Causal picture. Three failures aligned. First, authorisation control: a trainee not on the duplicate inspection list was able to sign the box, which means the paper or electronic form did not enforce qualification. Second, independence: the certifying engineer was working another aircraft in another bay and countersigned without inspecting, which suggests countersignature is treated as a formality at the end of a shift. Third, fatigue and workload: a 01:20 completion on an overnight check, with a certifier covering more than one aircraft, is a recognised human-factors risk. The hand-tight B-nut and missing torque stripe indicate the task itself was interrupted or incomplete, likely at a handover point.

Corrective actions at system level.

• Make the electronic technical log refuse a duplicate inspection signature from anyone not currently authorised for that task and type, and require a time separation from the first signature.
• Require the second inspector to record a positive statement of what was physically checked, with torque values, rather than a tick box.
• Introduce a visible torque stripe standard and a tool and task close-out check at shift handover, with a defined handover protocol for open flight-control work.
• Staff the overnight check with a certifier not covering two aircraft, and review the shift pattern for tasks that require duplicate inspection late in the shift.
• Reinforce stop-the-job authority and run a just-culture briefing so that the trainee and the certifier can explain what happened without the organisation losing the information it needs.
• Audit all duplicate inspection records for the preceding three months as a verification step, and sample physical torque striping on flight-control connections across the fleet.

The individuals need competence and discipline conversations, but the organisation needs controls that make the error difficult, because the same conditions will recur.