Originally Posted by
jrl767
YOUR assumption, maybe ...
It is supported by the actual experience with the 737 Max where the in-house Boeing simulation never envisioned AoA sensor defect which leads to MCAS to continuously intervene.
They only realized that was a test scenario AFTER lots of fatalities.
This is despite the fact that AoA sensors are critical to MCAS and has a known failure rate which is much higher than the 1-in-10,000,000 that the classification for MCAS required.