DOU 01/11/2024 - Diário Oficial da União - Brasil

                            Documento assinado digitalmente conforme MP nº 2.200-2 de 24/08/2001,
que institui a Infraestrutura de Chaves Públicas Brasileira - ICP-Brasil.
Este documento pode ser verificado no endereço eletrônico
http://www.in.gov.br/autenticidade.html, pelo código 05152024110100245
245
Nº 212, sexta-feira, 1 de novembro de 2024
ISSN 1677-7042
Seção 1
(b) The results of the increases in paragraphs (a)(1), (a)(2), and (a)(3) of this
section must be included in the engine installation manual.
EVE.3374 - Continued rotation.
If the design allows any of the engine main rotating systems to continue to
rotate after the engine is shut down while in-flight, this continued rotation must not result
in hazardous engine effects, as specified in EVE.3375(g)(2).
EVE.3375 - Safety Analysis
(a)(1) The applicant must analyze the engine, including the control system, to
assess the likely consequences of all failures that can reasonably be expected to occur. This
analysis will take into account, if applicable:
(i) Aircraft-level devices and procedures assumed to be associated with a typical
installation. Such assumptions must be stated in the analysis.
(ii) Consequential secondary failures and latent failures.
(iii) Multiple failures referred to in paragraph (d) of this section or that result in
the hazardous engine effects defined in paragraph (g)(2) of this section.
(2) The applicant must summarize those failures that could result in major
engine effects or hazardous engine effects, as defined in paragraph (g) of this section, and
estimate the probability of occurrence of those effects. Any engine part the failure of
which could reasonably result in a hazardous engine effect must be clearly identified in this
summary.
(b) The applicant must comply with paragraphs (a)(1) and (a)(2) of this section
using the failure definitions in paragraph (g) of this section and ICA in EVE.1529.
(c) The primary failure of certain single elements cannot be sensibly estimated
in numerical terms. If the failure of such elements is likely to result in hazardous engine
effects, then compliance may be shown by reliance on the prescribed integrity
requirements such as EVE.3315, EVE.3327, EVE.3370, or combinations thereof, as
applicable. These instances must be stated in the safety analysis.
(d) If reliance is placed on a safety system to prevent a failure from progressing
to hazardous engine effects, the possibility of a safety system failure in combination with
a basic engine failure must be included in the analysis. Such a safety system may include
safety devices, instrumentation, early warning devices, maintenance checks, and other
similar equipment or procedures. If items of a safety system are outside the control of the
engine manufacturer, the assumptions of the safety analysis with respect to the reliability
of these parts must be clearly stated in the analysis and identified in the installation
instructions under EVE.3305.
(e) If the safety analysis depends on one or more of the following items, those
items must be identified in the analysis and appropriately substantiated.
(1) Maintenance actions being carried out at stated intervals. This includes the
verification of the serviceability of items that could fail in a latent manner. When necessary
to prevent hazardous engine effects, these maintenance actions and intervals must be
published in the ICA required under EVE.1529. Additionally, if errors in maintenance of the
engine, including the control system, could lead to hazardous engine effects, the
appropriate procedures must be included in the relevant engine manuals.
(2) Verification of the satisfactory functioning of safety or other devices at pre-
flight or other stated periods. The details of this satisfactory functioning must be published
in the appropriate manual.
(3) The provisions of specific instrumentation not otherwise required.
(4) Flight crew actions to be specified in the operating instructions established
under EVE.3305.
(f) The applicant must comply with paragraphs (d) and (e) of this section using
the failure definitions in paragraph (g) of this section.
(g) Unless otherwise approved by ANAC and stated in the safety analysis, the
following failure definitions apply to the engine:
(1) A minor engine effect does not prohibit the engine from meeting its type-
design requirements and the intended functions in a manner consistent with (g)(1)(i),
(g)(1)(ii), and (g)(1)(iii) of this section, and the engine complies with the operability
requirements such as EVE.3373 and EVE.3389, as appropriate, or does not result in
LO P C .
(i) Enables selected values of relevant control parameters to be maintained and
the engine kept within the approved operating limits over changing atmospheric conditions
in the approved flight envelope;
(ii) Allows modulation of engine power or thrust with adequate sensitivity over
the declared range of engine operating conditions; and
(iii) Does not create unacceptable power or thrust oscillation."
(2) The following effects will be regarded as hazardous engine effects:
(i) Non-containment of high-energy debris;
(ii) Reserved.
(iii) Significant thrust in the opposite direction to that commanded by the
pilot;
(iv) Uncontrolled fire;
(v) Failure of the engine mount system leading to inadvertent engine
separation;
(vi) Release of the propeller by the engine, if applicable;
(vii) Complete inability to shut the engine down;
(viii) Electrocution of the crew, passengers, operators, maintainers, or others;
and
(ix) Reserved.
(h) The intended aircraft application must be taken into account when
performing the safety analysis.
(i) The results of the safety analysis and the assumptions about the aircraft
application used in the safety analysis must be documented in the engine installation
manual.
EVE.3377 - Ingestion
(a) Rain, ice and hail ingestion must not result in an abnormal operation such
as shutdown, power loss, erratic operation, or power oscillations throughout the engine
operating range.
(b) Ingestion from other likely sources (birds, induction system ice, hailstones,
foreign objects- ice slabs) must not result in hazardous engine effects, as defined in
EVE.3375(g)(2), or unacceptable power loss.
(c) If the design of the engine relies on features, attachments, or systems that
the installer may supply, for the prevention of unacceptable power loss or hazardous
engine effects as defined in EVE.3375(g)(2) following potential ingestion, then the features,
attachments, or systems must be documented in the engine installation manual.
EVE.3384 - Engine overtorque test.
When approval is sought for a transient maximum engine overtorque, the
applicant must demonstrate by test, validated analysis, or a combination thereof, that the
engine can continue operation after operating at the maximum engine overtorque
condition without maintenance action. Upon conclusion of overtorque tests conducted to
show compliance with this subpart, or any other tests that are conducted in combination
with the overtorque test, each engine part or individual groups of components must meet
the requirements of EVE.3393.
EVE.3385 - Calibration Test
Each engine must be subjected to calibration tests to establish its power
characteristics and the conditions both before and after the endurance and durability
demonstrations specified in EVE.3387 and EVE.3390.
EVE.3387 - Endurance Demonstration
(a) The applicant must subject the engine to an endurance demonstration,
acceptable to ANAC, to demonstrate the engine's limit capabilities.
(b) The endurance demonstration must include increases and decreases of the
engine's power settings, energy regeneration, and dwellings at the power settings or
energy regeneration for durations that produce the extreme physical conditions the engine
experiences at rated performance levels, operational limits, and at any other conditions or
power settings that are required to verify the limit capabilities of the engine.
EVE.3388 - Temperature Limit.
The engine design must demonstrate its capability to endure operation at its
temperature limits plus an acceptable margin. The applicant must quantify and justify to
ANAC the margin. The demonstration must be repeated for all declared duty cycles and
ratings, and operating environments, that would impact temperature limits.
EVE.3389 - Operation demonstration
The engine design must demonstrate safe operating characteristics, including
but not limited to power cycling, starting, acceleration, and overspeeding throughout its
declared flight envelope and operating range. The declared engine operational
characteristics must account for installation loads and effects.
EVE.3390 - Durability Demonstration
The engine must be subjected to a durability demonstration to show that each
part of the engine has been designed and constructed to minimize any unsafe condition of
the system between overhaul periods or between engine replacement intervals if the
overhaul is not defined. This test must simulate the conditions in which the engine is
expected to operate in service, including typical start-stop cycles to establish when the
initial maintenance is required.
EVE.3391 - System and component tests.
The applicant must show that systems and components not adequately
substantiated as part of the endurance demonstration or other demonstrations will
perform their intended functions in all declared environmental and operating conditions.
EVE.3392 - Rotor locking demonstration
If shaft rotation is prevented by locking the rotor(s), the engine must
demonstrate:
(a) Reliable rotor locking performance;
(b) Reliable unlocking performance; and
(c) That no hazardous engine effects, as specified in EVE.3375(d)(2), will
occur.
EVE.3393 - Teardown inspection
The applicant must comply with either paragraph (a) or (b) of this section as
follows:
(a) Teardown evaluation.
(1) After the endurance and durability demonstrations have been completed,
the engine must be completely disassembled. Each engine component and lubricant must
be eligible for continued operation in accordance with the information submitted for
showing compliance with EVE.1529.
(2) Each engine component having an adjustment setting and a functioning
characteristic that can be established independent of installation on or in the engine must
retain each setting and functioning characteristic within the established and recorded limits
at the beginning of the endurance and durability demonstrations.
(b) Non-Teardown evaluation.
If a teardown cannot be performed for all engine components in a non-
destructive manner, then the inspection or replacement intervals for these components
and lubricants must be established based on the endurance and durability demonstrations
and documented in the ICA in accordance with EVE.1529.
EVE.3394 - Containment
The engine must be designed and constructed to protect against likely hazards
from rotating components as follows:
(a) The design of the case surrounding rotating components must provide for
the containment of the rotating components in the event of failure, unless the applicant
shows that the margin to rotor burst precludes the possibility of a rotor burst;
(b) If the margin to burst shows the case must have containment features in
the event of failure, the case must provide for the containment of the failed rotating
components. The applicant must define by test, validated analysis, or a combination
thereof, and document in the engine installation manual, the energy level, trajectory, and
size of fragments released from damage caused by the main rotor failure, and that pass
forward or aft of the surrounding case.
EVE.3399 - General conduct of tests.
(a) Maintenance of the engine may be made during the tests in accordance
with the service and maintenance instructions submitted in compliance with EVE.1529.
(b) The applicant must subject the engine or its parts to maintenance and
additional tests that ANAC finds necessary if:
(1) The frequency of the service is excessive;
(2) The number of stops due to engine malfunction is excessive;
(3) Major repairs are needed; or
(4) Replacement of a part is found necessary during the tests or due to the
teardown inspection findings.
(c) Upon completion of all demonstrations and testing specified in these
airworthiness criteria, the engine and its components must be:
(1) Within serviceable limits;
(2) Safe for continued operation; and
(3) Capable of operating at declared ratings while remaining within limits.
EVE.33100 - Engine electrical systems.
(a) Applicability. Any system or device that provides, uses, conditions, or
distributes electrical power, and is part of the engine type design, must provide for the
continued airworthiness of the engine and maintain electric engine ratings.
(b) Electrical systems. The electrical system must ensure the safe generation
and transmission of power, electrical load shedding, and the engine does not experience
any unacceptable operating characteristics or exceed its operating limits.
(c) Electrical-power distribution.
(1) The engine electrical-power distribution system must be designed to provide
the safe transfer of electrical energy throughout the electrical power plant. The system
must be designed to provide electrical power so that the loss, malfunction, or interruption
of the electrical power source will not result in a hazardous engine effect, as defined in
EVE.3375(g)(2).
(2) The system must be designed and maintained to withstand normal and
abnormal conditions during all ground and flight operations
(3) The system must provide mechanical or automatic means to mitigate a
faulted electrical-energy generation or storage device from leading to hazardous engine
effects, as defined in EVE.3375(g)(2), or detrimental effects in the intended aircraft
application.
(d) Protection systems. The engine electrical system must be designed such that
the loss, malfunction, interruption of the electrical power source, or power conditions that
exceed design
limits will
not result
in hazardous
engine effects,
as defined in
EVE.3375(g)(2)).
(e) Electrical Power Characteristics. The applicant must identify and declare, in
the engine installation manual, the characteristics of any electrical power supplied from-
(1) The aircraft to the engine electrical system, for starting and operating the
engine, including transient and steady-state voltage limits, or
(2) The engine to the aircraft via energy regeneration, and any other
characteristics necessary for safe operation of the engine.
(f) Environmental limits. Environmental limits that cannot be adequately
substantiated by endurance demonstration, validated analysis, or a combination thereof
must be demonstrated by the system and component tests in EVE.3391.
(g) Electrical-system failures. The engine electrical system must:
(1) Have a maximum rate of Loss of Power Control (LOPC) that is suitable for
the intended aircraft application;
(2) When in the full-up configuration, be single fault tolerant, as determined by
ANAC, for electrical, electrically detectable, and electronic failures involving LOPC events;
(3) Not have any single failure that results in hazardous engine effects; and
(4) Not have any likely failure or malfunction that leads to local events in the
intended aircraft application.
(h) System-safety assessment. The applicant must perform a system-safety
assessment. This assessment must identify faults or failures that affect normal operation,
together with the predicted frequency of occurrence of these faults or failures. The
intended aircraft application must be taken into account to assure the assessment of the
engine system safety is valid.
EVE.1529 Instructions for Continued Airworthiness
The applicant must prepare Instructions for Continued Airworthiness (ICA), in
accordance with Appendices A and A1 that are acceptable to ANAC. ICA for the aircraft and
engines may be shown in a single aircraft ICA manual if the engine approval is sought
through the aircraft certification program. Alternatively, the applicant may provide

                            

Fechar