6.3 Autoflight, Autothrottle & Automation Management

Autoflight, Autothrottle & Automation Management

Core Airline Transport Principle: Advanced autoflight and autothrottle systems reduce flight deck workload, optimize fuel efficiency, and enable Category III precision autoland operations. However, improper mode awareness, unmonitored mode reversions, and over-reliance on automation represent leading contributors to loss of control in flight (LOC-I) and controlled flight into terrain (CFIT). Airline transport pilots must maintain absolute FMA discipline and preserve manual flying proficiency.

---

1. Autoflight System Architecture & Redundancy

The Autopilot Flight Director System (AFDS) coordinates multi-axis aircraft guidance by linking the Flight Management Computer (FMC), Mode Control Panel (MCP) or Flight Control Unit (FCU), Air Data Inertial Reference Units (ADIRUs), and electro-hydraulic flight control servos.

+-----------------------------------------------------------------------------+
|                        AFDS SYSTEM ARCHITECTURE                             |
|                                                                             |
|   +---------------------------------------------------------------------+   |
|   |             MODE CONTROL PANEL (MCP) / FLIGHT CONTROL UNIT (FCU)     |   |
|   |             [Tactical Pilot Selections: HDG, VS, FLCH, ALT, SPD]    |   |
|   +----------------------------------+----------------------------------+   |
|                                      |                                       |
|                                      v                                       |
|   +---------------------------------------------------------------------+   |
|   |                 FLIGHT GUIDANCE COMPUTERS (FGC / FCC)                |   |
|   |                 - Compares actual state vs target trajectory        |   |
|   |                 - Computes inner-loop surface commands              |   |
|   +-----------+----------------------+----------------------+-----------+   |
|               |                      |                      |               |
|               v                      v                      v               |
|       [Flight Director]     [Autopilot Servos]     [Autothrottle Servos]    |
|       (PFD Command Bars)    (Elevator, Aileron,    (Engine Thrust Levers)   |
|                             Rudder Actuators)                               |
+-----------------------------------------------------------------------------+

Fail-Passive vs. Fail-Operational Autoland Systems

• Fail-Passive System (CAT II / CAT IIIa): In the event of a single component failure, there is no significant out-of-trim condition or deviation of flight path, but the autopilot disconnects automatically. The pilot must take immediate manual control and execute a missed approach if below alert height.
• Fail-Operational System (CAT IIIb / CAT IIIc): Incorporates triple-redundant architecture (triple FGCs, triple hydraulic actuators, independent electrical buses). If a single channel fails below Alert Height (typically 100–200 ft AGL), the remaining operative channels continue the automatic flare, touchdown, and rollout without pilot intervention. The FMA annunciates LAND 3 (Boeing) or DUAL / CAT III DUAL (Airbus).

---

2. Autothrottle / Autothrust (A/T or A/THR) Operating Modes

The autothrottle system modulates engine power via two fundamental philosophies depending on airframe design:

1. Backdriving Thrust Levers (Boeing, Embraer): Mechanical servo motors physically move the throttle levers in the cockpit, providing immediate tactile and visual feedback of engine thrust state.
2. Stationary Thrust Detents (Airbus): Thrust levers are placed into fixed detents (TO/GA, FLX/MCT, CL, IDLE). The autothrust computer electronically modulates engine fuel flow across the operating range without physical lever movement, displaying thrust commands exclusively on the Primary Flight Display (PFD) and Engine Warning Display (E/WD).

+-----------------------------------------------------------------------------+
|                     AUTOTHROTTLE / AUTOTHRUST MODES                         |
|                                                                             |
|   Mode                Functional Mechanism                                  |
|   -----------------------------------------------------------------------   |
|   N1 / EPR / THR      Commands fixed maximum certified thrust limit         |
|                       (Takeoff, Go-Around, or Max Climb Rating).            |
|                                                                             |
|   SPEED               Modulates engine thrust to maintain the target        |
|                       Calibrated Airspeed or Mach selected on MCP or FMC.   |
|                                                                             |
|   RETARD              Commands thrust levers to IDLE during the landing     |
|                       flare (automatically triggered at 25-50 ft RA).       |
|                                                                             |
|   HOLD / THR HLD      Servo clutches de-energize; levers remain at current  |
|                       position. Manual pilot trimming is permitted.         |
|                                                                             |
|   IDLE / THR IDLE     Commands minimum certified idle thrust during descent.|
+-----------------------------------------------------------------------------+

[!CAUTION] The Autothrottle HOLD / THR HLD Trap: During takeoff roll above 60–84 knots, the autothrottle transitions to THR HLD / HOLD to prevent erroneous throttle servo inputs from aborting the takeoff if an engine parameter fluctuates. However, if HOLD engages during descent or approach (such as after manual throttle intervention in FLCH), the autothrottle will NOT wake up to provide low-speed stall protection if the aircraft decelerates below target airspeed. The crew must manually advance thrust.

---

3. Autopilot Pitch & Lateral Modes Comparison

+-----------------------------------------------------------------------------+
|                        AUTOPILOT PITCH MODES ANALYSIS                       |
|                                                                             |
|   Mode           Thrust Behavior       Pitch Behavior          Stall Hazard |
|   -----------------------------------------------------------------------   |
|   FLCH / LVL CHG Full Climb / Idle     Pitch holds Airspeed    Low (Speed   |
|                  Thrust                (Energy Safe)           protected)   |
|                                                                             |
|   V/S            Modulates to hold     Pitch strictly holds    CRITICAL!    |
|   (Vert Speed)   selected airspeed     commanded FPM           (Can stall!) |
|                                                                             |
|   VNAV PATH      Idle in descent       Pitch holds geometric   Medium (Off- |
|                  (adds thrust if low)  3D path                 path drift)  |
|                                                                             |
|   VNAV SPD       Full Climb / Idle     Pitch holds FMC target  Low (Speed   |
|                  Thrust                airspeed                protected)   |
|                                                                             |
|   ALT HOLD       Modulates thrust      Pitch holds barometric  Low          |
|                  for target speed      reference altitude                   |
+-----------------------------------------------------------------------------+

The Vertical Speed (V/S) Climb Stall Hazard

Vertical Speed (V/S) is a rate-priority mode, not a speed-priority mode. When a pilot selects a high vertical climb rate (e.g., $+2,500\text{ FPM}$) at high altitudes (FL330+):

1. The autopilot moves the elevator to maintain precisely $+2,500\text{ FPM}$.
2. The autothrottle advances to maximum climb thrust.
3. Because engine thrust decays with altitude, available thrust becomes insufficient to sustain both the vertical rate and airspeed.
4. The autopilot continues pitching up to maintain $+2,500\text{ FPM}$, bleeding off kinetic energy until the aircraft enters an uncommanded aerodynamic stall / stick shaker activation.

---

4. Flight Mode Annunciator (FMA) Discipline & Mode Reversions

+-----------------------------------------------------------------------------+
|                  PRIMARY FLIGHT DISPLAY (PFD) FMA STRUCTURE                 |
|                                                                             |
|   +---------------------------------------------------------------------+   |
|   | [AUTOTHRUST]  |   [LATERAL ROLL]   |    [VERTICAL PITCH]   | [AP STAT]  |
|   |    FMC SPD    |        LNAV        |       VNAV PATH       |   CMD 1    |
|   |  (Engaged)    |     (Engaged)      |       (Engaged)       | (Engaged)  |
|   |               |   [LOC Armed]      |     [G/S Armed]       |            |
|   +---------------------------------------------------------------------+   |
|                                                                             |
|   * GREEN TEXT: Mode is actively ENGAGED and flying the aircraft.           |
|   * WHITE TEXT: Mode is ARMED and will engage when capture criteria met.   |
|   * BOX AROUND MODE: Mode has newly transitioned (flashes for 10 seconds).  |
+-----------------------------------------------------------------------------+

[!IMPORTANT] The Golden Rule of Autoflight Operations: "Always verify and verbalize mode changes from the Flight Mode Annunciator (FMA), NEVER from the MCP/FCU."
Pushing a button on the MCP/FCU is merely a request to the system. The FMA is the sole authoritative verification of what the flight guidance computers have actually armed or engaged.

Unintended Mode Reversions & Automation Surprise

An Automation Surprise occurs when the autoflight system behaves in a manner unexpected by the flight crew. Common scenarios include:

• Intermediate Altitude Capture: During a high-rate VNAV or FLCH descent, if the aircraft reaches an intermediate altitude dialed into the MCP window, the vertical mode instantly reverts to ALT ACQ $\to$ ALT HOLD. The autothrottle switches from THR IDLE to SPEED, powering up the engines unexpectedly.
• Glideslope Capture without Localizer: In many transport aircraft, pushing the APP button can allow glideslope capture prior to localizer intercept, causing the aircraft to descend while turned away from the final approach course.
• Airbus $\alpha$-Floor ($\alpha$-Prot) Activation: On Airbus fly-by-wire aircraft, if angle of attack reaches the critical alpha-floor threshold, the autothrust automatically commands full emergency takeoff/go-around thrust (TOGA LK), locking maximum thrust even if autothrust was previously disengaged. The pilot must manually push the instinctive disconnect buttons on the thrust levers twice to restore normal manual throttle control.

---

5. Automation Management Policy & De-escalation Protocol

Under FAA Safety Alert for Operators (SAFO) 13002 and 17007, airlines must maintain strict automation policies that balance automated workload reduction with active manual flying proficiency.

+-----------------------------------------------------------------------------+
|                        AUTOMATION LEVELS HIERARCHY                          |
|                                                                             |
|   [LEVEL 3] FULL STRATEGIC AUTOMATION                                       |
|             - Autopilot ON, Autothrottle ON, LNAV & VNAV engaged.           |
|             - Standard for long-range cruise and standard STAR/SID profiles.|
|                                                                             |
|   [LEVEL 2] TACTICAL AUTOMATION                                             |
|             - Autopilot ON, Autothrottle ON, Selected Modes (HDG SEL, FLCH).|
|             - Used for ATC radar vectoring, step descents, speed adjustments|
|                                                                             |
|   [LEVEL 1] FLIGHT DIRECTOR GUIDANCE WITH MANUAL CONTROL                    |
|             - Autopilot OFF, Autothrottle OFF/ON, Hand-flying Flight Dir.   |
|             - Used on takeoff, visual approaches, maintaining proficiency.  |
|                                                                             |
|   [LEVEL 0] RAW DATA MANUAL FLIGHT                                          |
|             - Autopilot OFF, Autothrottle OFF, Flight Directors OFF.        |
|             - Pure stick-and-rudder flying using basic pitch/power settings.|
+-----------------------------------------------------------------------------+

The De-escalation Protocol: "When in Doubt, Take It Out"

If the aircraft does not follow the expected lateral or vertical flight path, or if mode confusion arises during a critical phase of flight (terminal approach/departure):

1. Do not attempt to reprogram the FMC/MCDU below 10,000 feet during high workload.
2. De-escalate to Level 2 (Tactical): Engage HDG SEL and FLCH / V/S to point the aircraft and manage energy directly.
3. If confusion persists, De-escalate to Level 0 (Manual):
   Execute the universal disconnect callout: "Click-Click / Click-Click"
   • First disconnect: Press the AP Disconnect switch on the control yoke twice (clearing the aural disconnect clacker).
   • Second disconnect: Press the Autothrottle Disconnect switch on the thrust levers twice.
   • Establish direct manual pitch, roll, and thrust control: Fly the Airplane First.