Damage-Tolerant Design
After two de Havilland Comets broke apart in 1954, killing 56 people, engineers stopped asking only whether a structure was strong enough. They began asking how long a crack already inside it could grow before the next inspection. Damage-tolerant design begins with an uncomfortable assumption: the new machine is already damaged.
How a crack becomes a maintenance schedule
A loaded crack concentrates stress at its tip. For a simple opening crack,
[ K = Y\sigma\sqrt{\pi a} ]
where (a) is crack length, (\sigma) is applied stress, and (Y) captures geometry. Unstable fracture becomes possible as (K) approaches the material’s fracture toughness, (K_{IC}).
Cyclic loading advances the crack before that point. Paris and Erdoğan’s 1963 relation describes the middle of this growth regime:
[ \frac{da}{dN}=C(\Delta K)^m ]
The constants (C) and (m) come from material tests. Integrating from the smallest reliably detectable flaw to the critical crack size gives a number of cycles. The inspection interval must be shorter.
Safe-life design tries to retire a component before cracks appear. Damage tolerance assumes one escaped manufacturing inspection, began under corrosion, or arrived with an impact. Multiple load paths, crack arresters, accessible joints, and nondestructive inspection then buy time rather than promise perfection.
The Comet correction
Comet G-ALYP disappeared near Elba on 10 January 1954; G-ALYY followed on 8 April. Investigators submerged another fuselage, G-ALYU, in a water tank and repeatedly pressurized it. Its cabin failed after 1,230 service cycles plus roughly 1,830 test cycles.
Recovered wreckage traced G-ALYP’s initiating fracture to the region around an Automatic Direction Finder opening. The failure involved fatigue, local stress concentration, rivet-hole details, and a test history that did not reproduce service damage faithfully. “Square windows” survives as the shorthand; the actual lesson is that geometry, manufacturing, load sequence, and inspection cannot be certified separately.
The regulatory shift took another 24 years. Amendment 25-45, published on 5 October 1978 and effective on 1 December, revised §25.571 to require damage-tolerance evaluation unless such an evaluation was shown to be impractical. In those exceptional cases, the rule required a safe-life evaluation instead.
What is contested
Paris’ law does not describe crack initiation, near-threshold growth, overload retardation, or the final acceleration toward fracture. Real predictions depend on load spectra, residual stress, corrosion, temperature, and the smallest flaw an inspection can reliably find.
The harder dispute is epistemic: what initial defect should the calculation assume? Choose one smaller than the inspection method can detect and the precision is fictional. Multiple-site cracking and composite delamination make that boundary harder still.
Why this crosses realms
Damage tolerance is not concept antifragility. A cracked wing does not improve through damage; it survives because the design preserves load paths and creates time to intervene. concept roman concrete self healing goes one step further by asking whether a material can close some cracks itself.
The same logic sharpens mission breakthrough starshot. A gram-scale probe cannot receive a repair crew after launch, so redundancy and graceful degradation must replace scheduled inspection. Damage tolerance changes character when the nearest technician is 4.24 light-years away.
An open question
If embedded sensors can hear a crack grow between inspections, does damage tolerance become continuous diagnosis, or merely produce more measurements whose failure thresholds remain contested?
Key Sources
- Ministry of Transport and Civil Aviation, Report of the Court of Inquiry into the Accidents to Comet G-ALYP and G-ALYY (1955) (FAA copy); the primary investigation.
- A. A. Griffith, “The Phenomena of Rupture and Flow in Solids” (1921), Philosophical Transactions of the Royal Society A (DOI); the energy basis of fracture mechanics.
- P. C. Paris and F. Erdoğan, “A Critical Analysis of Crack Propagation Laws” (1963), Journal of Basic Engineering (DOI); the canonical fatigue-crack-growth relation.
- FAA, “Fatigue Regulatory Review Program Amendments,” Amendment 25-45 (1978), 43 FR 46238 (Federal Register); the rule that introduced the damage-tolerance requirement.
- FAA, 14 CFR §25.571 (current regulation); the damage-tolerance and fatigue-evaluation requirements in force as of September 2026.
Further Reading
- concept citicorp tower fix — a structural defect discovered while repair was still possible.
- concept first principles — why recalculating from physical constraints can expose a clean-looking assumption.
- Henry Petroski, To Engineer Is Human (1985) — failure as a source of design knowledge.
- FAA, Damage Tolerance and Fatigue Evaluation of Structure, AC 25.571-1D (2011) — how crack growth becomes an inspection programme.
Abhishek's take
The part I keep is not “design for failure.” It is “design enough time between detectable error and irreversible loss.” That interval turns uncertainty into a maintenance decision.
Tags: #damage-tolerance #fracture-mechanics #fatigue #aircraft-safety #structural-engineering