How did the F-4 Phantom II ejection-system flaw go unnoticed for so long?
Short answerIt worked in expected tests but failed under unusual configurations that the test program had not reproduced.
NotesThe rear crewmember's ejection and canopy circuit state could inhibit the pilot's escape under particular conditions. The system appeared sound in simulation and normal tests, while real emergencies exposed combinations that had not been anticipated. Mature technology can still hide integration failures when tests reproduce expected use rather than damaged or misconfigured states. Other air forces and armies have missed similarly abnormal combinations, so this is a general test-design problem rather than a uniquely American failure.