§35.15. Safety analysis. — Inbound Citations

The integrity of each propeller critical part identified by the safety analysis required by § 35.15 must be established by:

(a) No single failure or malfunction in the propeller system will result in unintended travel of the propeller blades to a position below the in-flight low-pitch position. The extent of any intended travel below the in-flight low-pitch position must be documented by the applicant in the appropriate manuals. Failure of structural elements need not be considered if the occurrence of such a failure is shown to be extremely remote under § 35.15.

(b) The propeller control system must be designed and constructed so that, in addition to compliance with § 35.15:

(1) No single failure or malfunction of electrical or electronic components in the control system results in a hazardous propeller effect.

(2) Failures or malfunctions directly affecting the propeller control system in a typical airplane, such as structural failures of attachments to the control, fire, or overheat, do not lead to a hazardous propeller effect.

(3) The loss of normal propeller pitch control does not cause a hazardous propeller effect under the intended operating conditions.

(4) The failure or corruption of data or signals shared across propellers does not cause a hazardous propeller effect.

(4) Components which are affected by fatigue loads and which are shown under § 35.15 to have a fatigue failure mode leading to hazardous propeller effects.