Boeing 787

The Boeing 787 Dreamliner is a long-range, wide-body twin-engine jet airliner that entered service in 2011, notable for being the first commercial aircraft constructed primarily from composite materials — approximately 50% carbon-fiber-reinforced polymer by weight, including the fuselage and wings. This material choice, combined with more efficient General Electric GEnx and Rolls-Royce Trent 1000 engines, promised a 20% reduction in fuel consumption compared to the aircraft it replaced, the Boeing 767.

From a systems perspective, the 787 is a case study in the risks of radical architectural innovation in safety-critical engineering. The aircraft's electrical system represents a generational shift: where previous airliners used bleed air from the engines to power pneumatic systems for cabin pressurization, wing anti-ice, and air conditioning, the 787 replaced these with electrically powered compressors and heaters. This "more electric" architecture reduced engine complexity and weight but introduced a new critical dependency: the aircraft's four massive electrical generators (each producing 250 kilovolt-amperes) and their associated power distribution network became a single point of structural vulnerability. The lithium-ion battery fires that grounded the global 787 fleet in 2013 were not merely component failures; they were emergent properties of a system architecture that had pushed electrical energy density beyond the margins of established safety experience.

The 787 also pioneered a controversial supply chain model: Boeing outsourced the design and manufacture of major subsystems — wings to Japan, fuselage sections to Italy and the United States, landing gear to France, electrical systems to France and the United States — while retaining system integration responsibility. The model was intended to distribute risk and capital investment but instead created coordination failures that delayed the program by nearly three years and cost billions in cost overruns. The lesson is not that outsourcing is inherently flawed but that the interfaces between independently designed subsystems must be formally specified with the same rigor as the subsystems themselves. The 787's integration failures echo the wiring incompatibility problems of the Airbus A380, suggesting that distributed design and manufacturing networks face a common structural challenge: the gap between what each team assumes and what the integrated system requires.

The 787's software certification, like that of the Airbus A350, employs DO-178C for flight-critical systems. But the 787's "more electric" architecture means that software failures have broader consequences: a flight control computer failure affects not merely control surfaces but potentially the entire electrical distribution network. The system's safety case therefore depends on demonstrating independence between software failures and electrical failures — a challenge that becomes harder as the architecture integrates previously separate domains.