For airplanes equipped with systems that affect structural performance, either directly or as a result of a failure or malfunction, the influence of these systems and their failure conditions must be taken into account when showing compliance with the requirements of subparts C and D of this part. These criteria are only applicable to structure whose failure could prevent continued safe flight and landing.

(a) General. The applicant must use the following criteria in determining the influence of a system and its failure conditions on the airplane structure.

(b) System fully operative. With the system fully operative, the following criteria apply:

(1) The applicant must derive limit loads for the limit conditions specified in subpart C of this part, taking into account the behavior of the system up to the limit loads. System nonlinearities must be taken into account.

(2) The applicant must show that the airplane meets the strength requirements of subparts C and D of this part, using the appropriate factor of safety to derive ultimate loads from the limit loads defined in paragraph (b)(1) of this section. The effect of nonlinearities must be investigated sufficiently beyond limit conditions to ensure the behavior of the system presents no detrimental effects compared to the behavior below limit conditions. However, conditions beyond limit conditions need not be considered when it can be shown that the airplane has design features that will not allow it to exceed those limit conditions.

(3) [Reserved]

(c) System in the failure condition. For any system failure condition not shown to be extremely improbable or that results from a single failure, the following criteria apply:

(1) At the time of occurrence. The applicant must establish a realistic scenario, starting from 1g level flight conditions, and including pilot corrective actions, to determine the loads occurring at the time of failure and immediately after failure.

(i) For static strength substantiation, the airplane must be able to withstand the ultimate loads determined by multiplying the loads in paragraph (c)(1) of this section by a factor of safety that is related to the probability of occurrence of the failure. The factor of safety (F.S.) is defined in Figure 1.

(ii) For residual strength substantiation, the airplane must be able to withstand two thirds of the ultimate loads defined in paragraph (c)(1)(i) of this section. For pressurized cabins, these loads must be combined with the normal operating differential pressure.

(iii) [Reserved]

(iv) Failures of the system that result in forced structural vibrations (oscillatory failures) must not produce loads that could result in detrimental deformation of primary structure.

(2) For the continuation of the flight. For the airplane, in the system failed state and considering any appropriate reconfiguration and flight limitations, the following apply:

(i) The loads derived from the following conditions at speeds up to VC/MC, or the speed limitation prescribed for the remainder of the flight must be determined:

(A) the limit symmetrical maneuvering conditions specified in §§ 25.331 and 25.345,

(B) the limit gust and turbulence conditions specified in §§ 25.341 and 25.345,

(C) the limit rolling conditions specified in § 25.349 and the limit unsymmetrical conditions specified in §§ 25.367 and 25.427(b) and (c),

(D) the limit yaw maneuvering conditions specified in § 25.351,

(E) the limit ground loading conditions specified in §§ 25.473 and 25.491, and

(F) any other subpart C of this part load condition for which a system is specifically installed or tailored to reduce the loads of that condition.

(ii) For static strength substantiation, each part of the structure must be able to withstand the loads in paragraph (c)(2)(i) of this section multiplied by a factor of safety that depends on the probability of being in this failure condition. The factor of safety is defined in Figure 2.

(iii) For residual strength substantiation, the airplane must be able to withstand two thirds of the ultimate loads defined in paragraph (c)(2)(ii) of this section. For pressurized cabins, these loads must be combined with the normal operating differential pressure.

(iv) If the loads induced by the failure condition have a significant effect on fatigue or damage tolerance then their effects must be taken into account.

(v)-(vi) [Reserved]

(3) [Reserved]

(d) Failure indications. For system failure detection and indication, the following apply:

(1) The system must be checked for failure conditions evaluated under paragraph (c) of this section that degrade the structural capability below the level required by subparts C (excluding § 25.302) and D of this part or that reduce the reliability of the remaining system. As far as practicable, these failures must be indicated to the flightcrew before flight.

(2) The existence of any failure condition evaluated under paragraph (c) of this section that results in a factor of safety between the airplane strength and the loads of subpart C of this part below 1.25 must be indicated to the flightcrew.

(e) Dispatch with known failure conditions. If the airplane is to be dispatched in a known system failure condition that affects structural performance or affects the reliability of the remaining system to maintain structural performance, then the Master Minimum Equipment List must ensure the provisions of § 25.302 are met for the dispatched condition and for any subsequent failures. Flight limitations and operational limitations may be taken into account in establishing Qj as the combined probability of being in the dispatched failure condition and the subsequent failure condition for the safety margins in Figure 2. No reduction in these safety margins is allowed if the subsequent system failure rate is greater than 10−3 per flight hour.