The unscripted failure
92United 232's crew steered a DC-10 with engine thrust alone after total hydraulic loss in 1989; QF32's crew managed dozens of cascading system failures in 2010. No certification authority knows how to guarantee software against the failure nobody imagined — that reserve is the crew.