DOU 01/11/2024 - Diário Oficial da União - Brasil

TEXTO OFICIAL · ÍNTEGRA

Documento assinado digitalmente conforme MP nº 2.200-2 de 24/08/2001, que institui a Infraestrutura de Chaves Públicas Brasileira - ICP-Brasil. Este documento pode ser verificado no endereço eletrônico http://www.in.gov.br/autenticidade.html, pelo código 05152024110100245 245 Nº 212, sexta-feira, 1 de novembro de 2024 ISSN 1677-7042 Seção 1 (b) The results of the increases in paragraphs (a)(1), (a)(2), and (a)(3) of this section must be included in the engine installation manual. EVE.3374 - Continued rotation. If the design allows any of the engine main rotating systems to continue to rotate after the engine is shut down while in-flight, this continued rotation must not result in hazardous engine effects, as specified in EVE.3375(g)(2). EVE.3375 - Safety Analysis (a)(1) The applicant must analyze the engine, including the control system, to assess the likely consequences of all failures that can reasonably be expected to occur. This analysis will take into account, if applicable: (i) Aircraft-level devices and procedures assumed to be associated with a typical installation. Such assumptions must be stated in the analysis. (ii) Consequential secondary failures and latent failures. (iii) Multiple failures referred to in paragraph (d) of this section or that result in the hazardous engine effects defined in paragraph (g)(2) of this section. (2) The applicant must summarize those failures that could result in major engine effects or hazardous engine effects, as defined in paragraph (g) of this section, and estimate the probability of occurrence of those effects. Any engine part the failure of which could reasonably result in a hazardous engine effect must be clearly identified in this summary. (b) The applicant must comply with paragraphs (a)(1) and (a)(2) of this section using the failure definitions in paragraph (g) of this section and ICA in EVE.1529. (c) The primary failure of certain single elements cannot be sensibly estimated in numerical terms. If the failure of such elements is likely to result in hazardous engine effects, then compliance may be shown by reliance on the prescribed integrity requirements such as EVE.3315, EVE.3327, EVE.3370, or combinations thereof, as applicable. These instances must be stated in the safety analysis. (d) If reliance is placed on a safety system to prevent a failure from progressing to hazardous engine effects, the possibility of a safety system failure in combination with a basic engine failure must be included in the analysis. Such a safety system may include safety devices, instrumentation, early warning devices, maintenance checks, and other similar equipment or procedures. If items of a safety system are outside the control of the engine manufacturer, the assumptions of the safety analysis with respect to the reliability of these parts must be clearly stated in the analysis and identified in the installation instructions under EVE.3305. (e) If the safety analysis depends on one or more of the following items, those items must be identified in the analysis and appropriately substantiated. (1) Maintenance actions being carried out at stated intervals. This includes the verification of the serviceability of items that could fail in a latent manner. When necessary to prevent hazardous engine effects, these maintenance actions and intervals must be published in the ICA required under EVE.1529. Additionally, if errors in maintenance of the engine, including the control system, could lead to hazardous engine effects, the appropriate procedures must be included in the relevant engine manuals. (2) Verification of the satisfactory functioning of safety or other devices at pre- flight or other stated periods. The details of this satisfactory functioning must be published in the appropriate manual. (3) The provisions of specific instrumentation not otherwise required. (4) Flight crew actions to be specified in the operating instructions established under EVE.3305. (f) The applicant must comply with paragraphs (d) and (e) of this section using the failure definitions in paragraph (g) of this section. (g) Unless otherwise approved by ANAC and stated in the safety analysis, the following failure definitions apply to the engine: (1) A minor engine effect does not prohibit the engine from meeting its type- design requirements and the intended functions in a manner consistent with (g)(1)(i), (g)(1)(ii), and (g)(1)(iii) of this section, and the engine complies with the operability requirements such as EVE.3373 and EVE.3389, as appropriate, or does not result in LO P C . (i) Enables selected values of relevant control parameters to be maintained and the engine kept within the approved operating limits over changing atmospheric conditions in the approved flight envelope; (ii) Allows modulation of engine power or thrust with adequate sensitivity over the declared range of engine operating conditions; and (iii) Does not create unacceptable power or thrust oscillation." (2) The following effects will be regarded as hazardous engine effects: (i) Non-containment of high-energy debris; (ii) Reserved. (iii) Significant thrust in the opposite direction to that commanded by the pilot; (iv) Uncontrolled fire; (v) Failure of the engine mount system leading to inadvertent engine separation; (vi) Release of the propeller by the engine, if applicable; (vii) Complete inability to shut the engine down; (viii) Electrocution of the crew, passengers, operators, maintainers, or others; and (ix) Reserved. (h) The intended aircraft application must be taken into account when performing the safety analysis. (i) The results of the safety analysis and the assumptions about the aircraft application used in the safety analysis must be documented in the engine installation manual. EVE.3377 - Ingestion (a) Rain, ice and hail ingestion must not result in an abnormal operation such as shutdown, power loss, erratic operation, or power oscillations throughout the engine operating range. (b) Ingestion from other likely sources (birds, induction system ice, hailstones, foreign objects- ice slabs) must not result in hazardous engine effects, as defined in EVE.3375(g)(2), or unacceptable power loss. (c) If the design of the engine relies on features, attachments, or systems that the installer may supply, for the prevention of unacceptable power loss or hazardous engine effects as defined in EVE.3375(g)(2) following potential ingestion, then the features, attachments, or systems must be documented in the engine installation manual. EVE.3384 - Engine overtorque test. When approval is sought for a transient maximum engine overtorque, the applicant must demonstrate by test, validated analysis, or a combination thereof, that the engine can continue operation after operating at the maximum engine overtorque condition without maintenance action. Upon conclusion of overtorque tests conducted to show compliance with this subpart, or any other tests that are conducted in combination with the overtorque test, each engine part or individual groups of components must meet the requirements of EVE.3393. EVE.3385 - Calibration Test Each engine must be subjected to calibration tests to establish its power characteristics and the conditions both before and after the endurance and durability demonstrations specified in EVE.3387 and EVE.3390. EVE.3387 - Endurance Demonstration (a) The applicant must subject the engine to an endurance demonstration, acceptable to ANAC, to demonstrate the engine's limit capabilities. (b) The endurance demonstration must include increases and decreases of the engine's power settings, energy regeneration, and dwellings at the power settings or energy regeneration for durations that produce the extreme physical conditions the engine experiences at rated performance levels, operational limits, and at any other conditions or power settings that are required to verify the limit capabilities of the engine. EVE.3388 - Temperature Limit. The engine design must demonstrate its capability to endure operation at its temperature limits plus an acceptable margin. The applicant must quantify and justify to ANAC the margin. The demonstration must be repeated for all declared duty cycles and ratings, and operating environments, that would impact temperature limits. EVE.3389 - Operation demonstration The engine design must demonstrate safe operating characteristics, including but not limited to power cycling, starting, acceleration, and overspeeding throughout its declared flight envelope and operating range. The declared engine operational characteristics must account for installation loads and effects. EVE.3390 - Durability Demonstration The engine must be subjected to a durability demonstration to show that each part of the engine has been designed and constructed to minimize any unsafe condition of the system between overhaul periods or between engine replacement intervals if the overhaul is not defined. This test must simulate the conditions in which the engine is expected to operate in service, including typical start-stop cycles to establish when the initial maintenance is required. EVE.3391 - System and component tests. The applicant must show that systems and components not adequately substantiated as part of the endurance demonstration or other demonstrations will perform their intended functions in all declared environmental and operating conditions. EVE.3392 - Rotor locking demonstration If shaft rotation is prevented by locking the rotor(s), the engine must demonstrate: (a) Reliable rotor locking performance; (b) Reliable unlocking performance; and (c) That no hazardous engine effects, as specified in EVE.3375(d)(2), will occur. EVE.3393 - Teardown inspection The applicant must comply with either paragraph (a) or (b) of this section as follows: (a) Teardown evaluation. (1) After the endurance and durability demonstrations have been completed, the engine must be completely disassembled. Each engine component and lubricant must be eligible for continued operation in accordance with the information submitted for showing compliance with EVE.1529. (2) Each engine component having an adjustment setting and a functioning characteristic that can be established independent of installation on or in the engine must retain each setting and functioning characteristic within the established and recorded limits at the beginning of the endurance and durability demonstrations. (b) Non-Teardown evaluation. If a teardown cannot be performed for all engine components in a non- destructive manner, then the inspection or replacement intervals for these components and lubricants must be established based on the endurance and durability demonstrations and documented in the ICA in accordance with EVE.1529. EVE.3394 - Containment The engine must be designed and constructed to protect against likely hazards from rotating components as follows: (a) The design of the case surrounding rotating components must provide for the containment of the rotating components in the event of failure, unless the applicant shows that the margin to rotor burst precludes the possibility of a rotor burst; (b) If the margin to burst shows the case must have containment features in the event of failure, the case must provide for the containment of the failed rotating components. The applicant must define by test, validated analysis, or a combination thereof, and document in the engine installation manual, the energy level, trajectory, and size of fragments released from damage caused by the main rotor failure, and that pass forward or aft of the surrounding case. EVE.3399 - General conduct of tests. (a) Maintenance of the engine may be made during the tests in accordance with the service and maintenance instructions submitted in compliance with EVE.1529. (b) The applicant must subject the engine or its parts to maintenance and additional tests that ANAC finds necessary if: (1) The frequency of the service is excessive; (2) The number of stops due to engine malfunction is excessive; (3) Major repairs are needed; or (4) Replacement of a part is found necessary during the tests or due to the teardown inspection findings. (c) Upon completion of all demonstrations and testing specified in these airworthiness criteria, the engine and its components must be: (1) Within serviceable limits; (2) Safe for continued operation; and (3) Capable of operating at declared ratings while remaining within limits. EVE.33100 - Engine electrical systems. (a) Applicability. Any system or device that provides, uses, conditions, or distributes electrical power, and is part of the engine type design, must provide for the continued airworthiness of the engine and maintain electric engine ratings. (b) Electrical systems. The electrical system must ensure the safe generation and transmission of power, electrical load shedding, and the engine does not experience any unacceptable operating characteristics or exceed its operating limits. (c) Electrical-power distribution. (1) The engine electrical-power distribution system must be designed to provide the safe transfer of electrical energy throughout the electrical power plant. The system must be designed to provide electrical power so that the loss, malfunction, or interruption of the electrical power source will not result in a hazardous engine effect, as defined in EVE.3375(g)(2). (2) The system must be designed and maintained to withstand normal and abnormal conditions during all ground and flight operations (3) The system must provide mechanical or automatic means to mitigate a faulted electrical-energy generation or storage device from leading to hazardous engine effects, as defined in EVE.3375(g)(2), or detrimental effects in the intended aircraft application. (d) Protection systems. The engine electrical system must be designed such that the loss, malfunction, interruption of the electrical power source, or power conditions that exceed design limits will not result in hazardous engine effects, as defined in EVE.3375(g)(2)). (e) Electrical Power Characteristics. The applicant must identify and declare, in the engine installation manual, the characteristics of any electrical power supplied from- (1) The aircraft to the engine electrical system, for starting and operating the engine, including transient and steady-state voltage limits, or (2) The engine to the aircraft via energy regeneration, and any other characteristics necessary for safe operation of the engine. (f) Environmental limits. Environmental limits that cannot be adequately substantiated by endurance demonstration, validated analysis, or a combination thereof must be demonstrated by the system and component tests in EVE.3391. (g) Electrical-system failures. The engine electrical system must: (1) Have a maximum rate of Loss of Power Control (LOPC) that is suitable for the intended aircraft application; (2) When in the full-up configuration, be single fault tolerant, as determined by ANAC, for electrical, electrically detectable, and electronic failures involving LOPC events; (3) Not have any single failure that results in hazardous engine effects; and (4) Not have any likely failure or malfunction that leads to local events in the intended aircraft application. (h) System-safety assessment. The applicant must perform a system-safety assessment. This assessment must identify faults or failures that affect normal operation, together with the predicted frequency of occurrence of these faults or failures. The intended aircraft application must be taken into account to assure the assessment of the engine system safety is valid. EVE.1529 Instructions for Continued Airworthiness The applicant must prepare Instructions for Continued Airworthiness (ICA), in accordance with Appendices A and A1 that are acceptable to ANAC. ICA for the aircraft and engines may be shown in a single aircraft ICA manual if the engine approval is sought through the aircraft certification program. Alternatively, the applicant may provide