Q&A ยท 17:45-19:20

How a Phantom ejection interlock flaw escaped testing

A rare configuration-dependent failure passed simulations because testing covered expected conditions rather than every abnormal sequence.

Question

How did the F-4 Phantom II ejection-system flaw go unnoticed for so long?

Short answer

It worked in expected tests but failed under unusual configurations that the test program had not reproduced.

Notes

The rear crewmember's ejection and canopy circuit state could inhibit the pilot's escape under particular conditions. The system appeared sound in simulation and normal tests, while real emergencies exposed combinations that had not been anticipated. Mature technology can still hide integration failures when tests reproduce expected use rather than damaged or misconfigured states. Other air forces and armies have missed similarly abnormal combinations, so this is a general test-design problem rather than a uniquely American failure.