It reminds me of code that catches all exceptions instead of fixing the problem so those exceptions can never happen.
It reminds me of code that catches all exceptions instead of fixing the problem so those exceptions can never happen.
Still, no system is ever 100% reliable. The typical safeguard for engine failure in light aicraft is to glide to a safe landing. Starting with basic training, you'll do so repeatedly (starting from the vicinity of a landing strip, of course) and should be able to bring a plane down safely. Some (very) light planes even include a parachute system that'll bring down the plane in a manner safe for its occupants.
Speaking as a private pilot with little experience, this systems seems promising to me in two respects: In the case of a failed engine, it'll take you another 20 km or so. This can make the difference between a survivable landing in a field somewhere and a completely safe landing on the closest airstrip. Additionally, you get 40 hp or so of available power in situations where you need it, like taking off or going around after a botched landing. This could allow for shorter runways and help speed your initial climb, which is generally considered one of the most dangerous phases of flight: At that point you are both flying slow and low, and both speed and altitude are important safety aids. After a cursory first look, this system appears to be a considerable improvement in safety while avoiding much of the complexities a true twin engine system would entail.
Right. It's a sort of asymmetric thrust, coaxial twin. Very unusual, and clever too.
An electrical motor which can provide backup assistance without causing further single points of failure is a nice add-on if they can make it work (I'd be sceptical about trusting this thing without extensive testing.)
Every plane you fly in commercially has at least 2 extremely reliable engines, and each one is certified to be able to handle flying the entire plane safely for an extended period of time to make it back to an airport in case of failure. The certification is called ETOPS [1], if a plane has 90 minute ETOPS certification it cannot fly more than a 90 minute flight from an airport. This appears to be a low-cost method of having a couple of minutes of safe controlled flight in case of a failure, that difference can make the difference between life and death for a GA plane.
This reddit thread has some good responses as to why Honda (who probably produces more engines in a month than Lycoming has in decades) doesn't make GA engines:
https://www.reddit.com/r/aviation/comments/1lxlco/why_doesnt...
Even in cases where you have everything formally defined, you could still have some axiom not holding, or a transient hardware issue - a random bit flipping in memory for instance.
Putting simply, everything fails eventually, the question is not "if" but "when".
See multi-version dissimilar software: https://en.wikipedia.org/wiki/N-version_programming
Furthermore most modern planes are designed to be able to fly with one engine inoperative, even those which have only two engines.