Originally Posted by
Plato90s
It is supported by the actual experience with the 737 Max where the in-house Boeing simulation never envisioned AoA sensor defect which leads to MCAS to continuously intervene.
They only realized that was a test scenario AFTER lots of fatalities.
Given the number of flights that never saw an AoA sensor failure, real life testing isn't likely to have led them to identify it as a failure mode to put in the simulator. Paper analysis should have recognized the failure mode, with real life testing to verify the behavior of the aircraft with a simulated AoA sensor failure.