Pack Controller — Engineering Details

PFCV gave the valve's electric + pneumatic control but only half the story — who sends the electric signal? ACM gave the machine's physics but not what controls it. Both point to one box: the pack controller (FIN 531HH / 532HH). This deep-dive opens it up: where it is, how its two internal lanes vote and switch, what sensors it reads, what actuators it commands, its three-mode control law, the pneumatic fallback chain when both lanes fail, and its ARINC interfaces.

1. Location

The pack controllers 531HH (532HH) are the computers for the pack control and indicating system. They do the calculations necessary for operation of the air conditioning packs 521HH (522HH). They are installed in the rack 800VU of the avionics compartment. — AMM 21-53-00 §3.J / §6.G

The controller is not in the belly fairing with the pack — it is in the avionics compartment, rack 800VU, below the cockpit. Four consequences: physical isolation (a belly-fairing fire / heat / leak does not directly affect the controller); it follows the avionics electrical topology, not the pack's own power; maintenance reaches it from the avionics access below the cockpit, without opening the belly fairing; and it sits near the other ATA 21 computers (zone controller, CPC) in the same rack.

2. The pack control & indicating system — full topology

                    [Zone controller 630HK]
                         ▲       │ ARINC 429 data bus
                         │       ▼ demand signals
              ┌──────────┴───────┴──────────────────────┐
              │  PACK CONTROLLER 531HH / 532HH           │
              │  (avionics bay rack 800VU, dual lane)    │
              │                                          │
              │  READS sensors:                          │
              │    — compressor inlet temp     521HH5    │
              │    — compressor outlet temp    521HH6    │
              │    — heat-exchanger temp       521HH7    │
              │    — pack temp (WX outlet)     521HH8    │
              │    — bleed temp                539HH     │
              │    — pack discharge temp       541HH     │
              │    — pack inlet pressure       537HH     │
              │    — compressor overheat (pneu) 521HH22  │
              │    — pneumatic temp (pneu)     521HH23   │
              │                                          │
              │  COMMANDS:                               │
              │    → PFCV 511HB                          │
              │    → temperature control valve 521HH3    │
              │    → anti-ice valve 521HH1 (solenoid)    │
              │    → ram-air inlet flap 533HH            │
              │    → ram-air outlet flap 535HH           │
              │    → PACK 1 pb 2HB1 (FAULT/OFF light)     │
              │                                          │
              │  SENDS:                                  │
              │    → SDAC (ECAM warning, direct discrete)│
              │    → CMS (fault data, via zone ctrl)     │
              │                                          │
              │  RECEIVES:                               │
              │    ← ground-speed relays 19GG / 20GG     │
              │    ← LGCIU 5GA2                          │
              │    ← PACK pb / PACK FLOW selector        │
              │    ← EIVMU (engine start signal)         │
              │    ← FIRE pb / DITCHING pb               │
              └──────────────────────────────────────────┘

Source: AMM 21-53-00 §3 + §5.

[!warning]- Counter-intuitive: the controller-to-ECAM path is not a single channel

The controller does not send ECAM display data directly — it goes via the zone controller ("the signals necessary for ECAM indications are transmitted via the zone controller"). But fault warnings go by a direct discrete signal to the SDAC — bypassing the zone controller's own possible failure. Two paths: routine indication via the zone controller, emergency warning via the SDAC discrete. The design principle: important signals always have multiple paths. If the zone controller fails, routine data is lost but the emergency warning still gets through.

3. Internal lane architecture

They each have two digital-microprocessor control systems. The control systems are the same and operate in one of two modes: operational mode or hot standby mode. These control systems are Lane 1 and Lane 2. The lanes can operate independently without reduced performance. In normal operation, one lane is operational and the other lane is in the hot standby mode. If there is a failure in the operational lane, the other lane becomes operational. If there is a failure in the two lanes, the lane which operates more correctly becomes operational. At the end of each flight (if there is no failure), the lanes change over. — AMM 21-53-00 §6.G

   ┌────────[Pack controller 531HH (PACK 1)]────────┐
   │  ┌────[Lane 1]────┐    ┌────[Lane 2]────┐      │
   │  │ digital μP      │    │ digital μP      │      │
   │  │ ┌─operational─┐ │    │ ┌─hot standby─┐ │      │
   │  │ │ drives valves│ │    │ │ tracks sensors│ │     │
   │  │ │ reads sensors│ │    │ │ syncs algo   │ │      │
   │  │ │ outputs cmds │ │    │ │ no output    │ │      │
   │  │ └─────────────┘ │    │ └─────────────┘ │      │
   │  └─────────────────┘    └─────────────────┘      │
   │     lane changeover at end of each flight        │
   │     (if no failure); roles swap                  │
   └───────────────────────────────────────────────────┘

[!note]- "Channel" (FCOM) and "lane" (AMM) are the same — but the switch timing is precise in the AMM

The FCOM simplifies: "Each Controller has a Channel 1 and a Channel 2. One in control, one standby. The active channel changes at each landing." The AMM is precise: "at the end of each flight (if there is no failure), the lanes change over". The differences: it is not the instant of touchdown but "end of flight" (an internal flight-phase judgement, after landing, AND only with no failure — both must hold); if the current flight logged a lane failure, it does not swap (the failed lane does not take over); if both lanes are half-failed, the one operating more correctly continues. Operational meaning: an aircraft long out of service (post-maintenance first flight, long parking) flies its first sector with both lanes in the state of their last swap years ago — a single-lane fault found by BITE may lag several sectors before surfacing. A pre-departure BITE is more reliable than "fly the next sector and see".

[!warning]- "The lane operating more correctly takes over" is a fallback the pilot should understand

The AMM states plainly: with both lanes failed, the one operating more correctly becomes operational. This is not "both lanes failed → pack out of control" — the controller picks the better of the half-failed pair and continues. The selection compares the two lanes' sensor-reading consistency, control-response consistency, and internal timing, choosing the healthier. The crew sees: the pack still works under a dual half-failure but BITE flags it; after landing maintenance finds the surviving lane accumulated fault codes during operation and replaces the LRU. A true full dual-lane failure falls back to the pneumatic temperature sensor + anti-ice valve (§8/§14).

4. Nine functions

Per AMM 21-53-00 §3.J, the controller: ① exchanges signals with the zone controller (630HK) over the ARINC 429 bus; ② drives the PACK pb (2HB1/2HB2) FAULT/OFF lights on panel 225VU; ③ commands the temperature control valves (521HH3/522HH3); ④ commands the ram-air inlet flap actuators (533HH/534HH); ⑤ commands the ram-air outlet flap actuators (535HH/536HH); ⑥ runs the Built-In Test Equipment (BITE) tests; ⑦ monitors the pack-duct temperatures and acts correctly on an overheat. (Plus PFCV flow control and the indications routed through the zone controller.)

5. Temperature sensors — dual PT-100 + dual thermistor

The temperature sensors are made of two PT-100-elements in a tubular body. One PT-100 (thermistor) is for temperature control in lane 1 and one for temperature control in lane 2. The temperature sensors 521HH8 (522HH8) and 541HH (542HH) have two thermistors elements in a tubular body. One thermistor is for temperature control in lane 1 and one for temperature control in lane 2. — AMM 21-53-00 §6.C

[!note]- Pack temp sensor (521HH8) ≠ pack discharge sensor (541HH)

521HH8 is at the water-extractor outlet (clean cold section, before the temperature-control-valve heat) → the controller's demand-computation reference. 541HH is at the pack outlet, after the bypass heat → the ECAM display + fault monitoring. So the ECAM "pack outlet temperature" is 541HH; the control loop's reference is 521HH8. They differ by a few degrees normally (the bypass heat); a larger divergence helps diagnose a stuck temperature control valve or a blocked heat exchanger.

[!note]- Each sensor has dual elements — physical redundancy

It is not "two sensors at different points" — it is two elements (PT-100 or thermistor) inside one sensor body, one per lane. One element failing → that lane loses this input → may fault → switches to the other lane (using the other element). Both elements failing → both lanes lose the input → a true sensor-failure fault. The PT-100 (platinum resistance) is used for the hot sections (around the compressor); the thermistor (semiconductor) for the cold sections (water-extractor outlet, pack outlet) — each material matched to its temperature range.

6. Pack-inlet pressure sensor 537HH

The pack-inlet pressure sensors 537HH (538HH) have a pressure transducer and an amplifier. They change the pressure to an electrical signal and send it to the pack controllers ... They are connected to the flow control valves 511HB (512HB). — AMM 21-53-00 §6.J

Two roles: tell the controller the actual pressure into the pack (enough → start the pack; not enough, e.g. a bleed failure → command PFCV closed / PACK FAULT); and provide a feed-forward input to the PFCV control law (the PFCV responds to a pressure change before waiting for the temperature feedback).

7. Pneumatic compressor-overheat sensor 521HH22 — 235 °C pneumatic close

A pneumatic compressor-overheat sensor 521HH22 (522HH22) at the compressor outlet is connected to the actuator of the flow control valve 511HB (512HB). If the temperature at the compressor outlet becomes higher than 235 deg.C (455.00 deg.F) the sensor opens and vents the pressurized air in the actuator. The pressure in the actuator decreases and the flow control valve closes. The pneumatic compressor-overheat sensors 521HH22 (522HH22) have an invar clapper in a stainless steel body. If the temperature changes, the metals expand or contract differently and the size of the orifice changes. This changes the pressure in the line to the applicable flow control valve. — AMM 21-53-00 §3.G / §6.F

[!warning]- The compressor outlet has three thresholds for three independent events

Temperature	Event	Source	Type
235 °C	pneumatic sensor 521HH22 vents → PFCV closes pneumatically	AMM 21-53-00 §3.G	hardware action
260 °C	ECAM BLEED compressor-outlet field turns amber	FCOM DSC-21-10-50	visual alert trip
180 °C	ECAM amber clears (not the PFCV reopen condition)	FCOM DSC-21-10-50	visual alert reset

235 °C closes the PFCV — the primary protection, 25 °C ahead of the display alert line, independent of the controller. 260 °C is the visual danger line the crew sees. 180 °C clears the amber (an 80 °C band). Typical sequence: temperature rises → ~235 °C → PFCV closes → bleed cut → temperature falls → usually never reaches 260 °C → the field may not go amber (the crew sees the PACK FAULT light + flow = 0). If it does reach 260 °C, the pneumatic protection failed or lagged (invar clapper jammed / line blocked) → a real emergency → act on the ECAM procedure (PACK pb OFF). After the temperature falls the pneumatic protection releases and the PFCV reopens provided the PACK pb is still ON — but the crew still judges per ECAM whether to switch the pack off; once they do, the pack does not self-restore — restoring it is a manual PACK ON when the overheat is out (auto-protection is not fault resolution). Recurring "PACK OVHT auto-recover" hunting → maintenance must check the clapper / invar / controller / pack ducting.

8. Pneumatic temperature sensor 521HH23 — pneumatic backup temperature control

The pneumatic temperature sensors 521HH23 (522HH23) are installed on the condensers ... They are connected to the anti-ice valves 521HH1 (522HH1). If there is a failure in a pack controller ..., the pneumatic temperature sensor transmits the pressure to the applicable anti-ice valve. They have an invar clapper in a light alloy body. If the temperature changes, the metals expand or contract differently and the size of the orifice changes. This changes the pressure in the line to the applicable anti-ice valve. The anti-ice valve opens or closes more. — AMM 21-53-00 §3.H / §6.F

[!warning]- With both lanes failed, the anti-ice valve takes over temperature control — a purely mechanical path

pack controller both lanes fully failed
     ↓ no solenoid power
anti-ice valve solenoid de-energised → opens
     ↓
pneumatic temperature sensor 521HH23 (on the condenser) directly,
pneumatically controls the anti-ice valve
     ↓ (invar clapper senses condenser temperature)
the anti-ice valve modulates the hot air mixed into the turbine outlet
     ↓
pack outlet temperature locks at 12 ± 3 °C (the 9–15 °C band)

The whole chain is zero electrical control — just invar bimetal expansion + a pneumatic valve. This is the physical realisation of the FCOM's "9–15 °C". Even with a fully dead controller the pack still delivers air at a controlled temperature. The residual risk: if the anti-ice valve itself or sensor 521HH23 also fails → total loss of temperature control → the PACK-failure procedure.

9. Anti-ice valve 521HH1 — a dual-function valve

The anti-ice valves 521HH1 (522HH1) are installed in the ducts to the turbines ... upstream of the primary heat exchangers. They have two functions. (1) Anti-Icing: The anti-ice valves are usually closed. An anti-ice valve opens if the delta-P sensors across condensers 521HH13 find an unusual difference in pressure. This can be a sign that there is ice in the condensers. Hot bleed air is supplied to the air cycle machines to melt the ice in the condensers. (2) Temperature Control: If there is a loss of pack controllers or temperature control valves, the anti-ice valves control the output temperature ... The pack outlet temperature (measured at pneumatic temperature sensors 521HH23) is constant at 12 deg.C (53.6 deg.F) plus or minus 3 deg.C. — AMM 21-53-00 §3.B

The anti-ice valve is an ice-protection part + backup temperature-control part in one — the same butterfly valve, different servo paths: the high/low-pressure ΔP servos watch the condenser ΔP for icing; on solenoid de-energisation it hands control to the pneumatic temperature sensor for 12 ± 3 °C control.

10. Temperature control valve 521HH3

The temperature control valves 521HH3 (522HH3) are installed in a bypass duct between the compressors and the turbines ... They add an adjustable quantity of hot air to the cooled air in the turbines. The pack controllers use the temperature control valves to help control the pack outlet temperature. The actuator has an electric motor, a reduction gearbox with mechanical endstops and a microswitch ... [old P/N] The valves have potentiometers ... [new P/N] To sense the position of the valve flap the pack controller counts the steps of the electrical stepper motor. — AMM 21-53-00 §3.C / §6.B

[!note]- Two position-feedback mechanisms — old potentiometer, new stepper-count

Old part numbers (957A0000-02 and earlier) use a potentiometer — valve position → resistance → analogue signal. New part numbers (957B0000-01 / 1394A0000-01 and later) use a stepper motor — the controller counts the steps it sends to infer the position. The new design needs no separate feedback wire (position = step count, computed in software), has no potentiometer wear, and is more precise. Its risk: lost steps → the software thinks the valve is at X when it is at Y → temperature drifts. It re-zeros each power-up using the fully-closed microswitch. Pilot meaning: rare, but if the ECAM shows pack-outlet temperature wandering with no other sensor anomaly → a possible step offset → maintenance runs a BITE.

11. Ram-air flap actuators — 136 mm stroke + closed on takeoff/landing

The air-inlet flap actuators 533HH (534HH) and the air-outlet flap actuators 535HH (536HH) have: An electric motor, A reduction gearbox, A torque limiting clutch, An actuator, A brake, Two potentiometers, Two limit switches ... The stroke of the actuator is 136 +0.3 mm or -0.3 mm. During takeoff and landing, the ram air inlets are fully closed. Thus, sand and dust from the nose wheel cannot enter into the system. The ram air outlets are fully open. — AMM 21-53-00 §6.H / §3.A

[!warning]- Counter-intuitive: pack cooling is "falsely low" during the takeoff/landing roll — inlets closed against sand and dust

The phenomenon: the cabin is cool at pushback, then warms during the takeoff acceleration. Physical cause: the ram-air inlets are fully closed — no external cooling air through the heat exchangers → pack cooling drops sharply → only the ACM's own cycle (turbine + compressor + the fan driving residual air) remains. This is not a fault — it is deliberate, dust protection over temporary cooling loss (nose-wheel sand/dust). After liftoff + gear up the inlets reopen → cooling recovers → cabin cools. The same brief warming happens on the landing roll (inlets close once the wheels are on). For maintenance: even with the closed-inlet design, periodic heat-exchanger cleaning is needed at high-dust airfields (it cuts ~90 %, not 100 %).

12. The control law — three modes

For minimum heat-exchanger effect (full heating mode), the ram air inlets and outlets are almost closed, the temperature control valves are fully open. For maximum heat-exchanger effect (full cooling mode), the ram air inlets and outlets are fully open, the temperature control valves are fully closed. — AMM 21-53-00 §3.A

                 FULL COOLING            FULL HEATING
                 (cabin too hot)         (cabin too cold)
   ram-air inlet flap:   full open       almost closed
   ram-air outlet flap:  full open       almost closed
   temperature ctrl vlv: full closed     full open
   anti-ice valve:       per condenser   per condenser icing

   → much ram air through HX   → little ram air through HX
   → strong cooling of bleed   → weak cooling of bleed
   → cold turbine outlet       → not-so-cold turbine outlet
   → no bypass heat mixed       → much bypass heat mixed
   → outlet near turbine (10–15 °C) → outlet near bleed inlet (40–50 °C)

The third mode (takeoff/landing): ram-air inlets fully closed (dust), outlets fully open, temperature control valve commanded for the current demand (a hot-day takeoff trends toward full cooling). With ram flow short, the ACM fan forces residual air through the heat exchangers to keep what cooling it can.

13. ARINC 429 + the other interfaces

There is an ARINC data bus connection between each pack controller ... and the zone temperature controller 630HK ... The zone temperature controller sends temperature and flow demand signals to each pack controller. The signals necessary for ECAM indications are transmitted via the zone temperature controller. The pack controllers send warning messages to the SDACs ... and failure data to the CMS ... through the zone temperature controller. If a pack overheat or failure of a pack controller occurs, a direct discrete signal to the SDAC causes a related warning to show this on the ECAM. — AMM 21-53-00 §5.A

The data flow is not a single channel: routine indication via ARINC 429 → zone controller → ECAM; emergency warning via a direct discrete signal → SDAC → ECAM. If the zone controller fails, routine data is lost but the emergency warning still gets through. The controller also interfaces with the ground-speed relays 19GG/20GG (is the aircraft on the ground? → close the ram inlets against dust) and the LGCIU 5GA2 (gear down/up → takeoff/landing state). And the water injectors 5531HB/5532HB spray the extracted condensate as mist into the ram-air inlet — the water evaporates, cooling the ram air, raising heat-exchanger efficiency (waste water as a free cooling resource, especially on a hot ground).

14. Lane single / dual failure

CHANNEL 1 OR 2 FAILURE. A Channel 1 or 2 failure has no effect on pack regulation. CHANNELS 1 AND 2 FAILURE. The corresponding anti-ice valve regulates the pack outlet temperature between approximately 9 °C and 15 °C ... The ECAM signals ... are lost. The flow control valve pneumatically regulates the pack flow to approximately 120 % of the NORM flow. — FCOM DSC-21-10-40

[!warning]- A single-lane failure has NO ECAM warning — not knowable to the crew

The FCOM says a single-channel failure has "no effect". So a long-standing single-lane state can exist quietly across several sectors; the crew sees no sign (outlet temperature normal, flow normal, no ECAM). Only a BITE or a dual half-failure surfaces it. Practical advice: no ECAM in flight does not mean a healthy controller; a pre-departure BITE is the dispatch assurance; recurring pack-temperature/flow wander without an ECAM may hint at unstable control after a single-lane loss → write it up.

15. Overheat monitoring — the full picture

   sensing              threshold        event                    recovery
   ──────────           ─────────        ────────────────         ──────────
 ① compressor outlet    235 °C trip      PFCV closes pneumatically temp falls → PFCV reopens
    521HH22 (pneumatic)  (AMM)            (no controller)           (no ECAM reset needed)
 ② compressor outlet    260 °C amber     ECAM BLEED field amber    temp < 180 °C → green
    ECAM display (FCOM)  180 °C clears    (visual alert)
 ③ compressor outlet    controller        controller overheat      controller internal
    521HH6 (electric)    internal limit   logic, ECAM/BITE          auto-reset
 ④ pack outlet 521HH8/   95/60 °C (ECAM   pack-outlet amber         controller internal
    discharge 541HH      pack-outlet)     (FCOM DSC-21-10-50)

[!warning]- Three independent monitors on the compressor outlet — pneumatic + electric + ECAM display

Pneumatic (521HH22, 235 °C) closes the PFCV directly — independent of controller health — the primary protection. Electric (521HH6, dual PT-100) feeds the controller's overheat logic — depends on controller health. The ECAM display (field colour, 260/180 °C) is the crew's visual alert — independent of both physical monitors. Three independent chains on the hottest section (compressor outlet): any one working gives the crew or the hardware the right response; all three must fail to actually burn. Reading ECAM: flow suddenly = 0 + PACK FAULT light → the 235 °C pneumatic chain tripped (PFCV closed; the field may not be amber, temperature may not have reached 260 °C); compressor-outlet field amber → it truly reached 260 °C (pneumatic protection failed/lagged) → real emergency → PACK pb OFF; PACK FAULT light + flow still present → the electric chain.

16. BITE

The controller runs Built-In Test Equipment (BITE): on every power-up (power-on self-test), intermittently in flight (lane health monitoring), and on demand via the MCDU. BITE checks lane 1 vs lane 2 consistency, sensor range, actuator response, solenoid state, and bus continuity. A single-lane fault → switch to the other lane + log in the CMS (central maintenance system); a dual-lane problem → ECAM + CMS. Maintenance reads the results via the MCDU → ATA 45 CMS → ATA 21 → the controller submenu → the fault codes. (Per AMM 21-53-00 §3.J.)

17. Three-state comparison (controller's view)

Self-test

[!note]- Q1. Where is the pack controller, and why not next to the pack?

In the avionics compartment, rack 800VU (below the cockpit). Not in the belly fairing with the pack — for physical isolation (belly-fairing fire/heat/leak), to follow the avionics electrical topology, and for maintenance access from the cockpit floor without opening the belly fairing.

[!note]- Q2. Are "channel" and "lane" the same, and when do the lanes switch?

Yes — FCOM "channel", AMM "lane", same concept. Switch timing: at the end of each flight if there is no failure (roles swap); on an operational-lane failure (immediate switch to standby); with both half-failed, the one operating more correctly continues; and if the flight logged a lane failure, no swap (the failed lane does not take over). The FCOM "each landing" is the simplified version; the AMM "end of flight, no failure" is precise.

[!note]- Q3. With both lanes fully failed, how does the pack keep working and what is the outlet locked to?

The pack still works via the anti-ice valve taking over + the PFCV reverting to pneumatic. Chain: both lanes failed → solenoid de-energised → the anti-ice valve hands control to the pneumatic temperature sensor 521HH23 (an invar-clapper bimetal pneumatic element on the condenser) → pack outlet locks at 12 ± 3 °C (9–15 °C); pack flow locks at 120 % NORM. The whole chain is zero electrical control, zero software.

[!note]- Q4. What are the anti-ice valve's primary and backup functions?

Primary: condenser anti-icing — normally closed; the condenser ΔP sensors detect an anomaly (icing sign) → open → hot air melts the ice. Backup: on a controller or temperature-control-valve loss it takes over temperature control — the pneumatic temperature sensor 521HH23 drives it to lock the pack outlet at 12 ± 3 °C. The same butterfly valve, two servo paths: the high/low-pressure ΔP servos for icing + the solenoid de-energising to let the pneumatic sensor take over.

[!note]- Q5. How many compressor-outlet thresholds are there, and which is pneumatic / electric / ECAM display?

Three independent thresholds for three independent events: 235 °C = PFCV pneumatic close (AMM 21-53-00 §3.G — the invar-clapper sensor 521HH22 vents the PFCV actuator; controller-independent); 260 °C = ECAM compressor-outlet field amber (FCOM DSC-21-10-50, visual alert); 180 °C = amber clears. The electric chain is sensor 521HH6 (dual PT-100) feeding the controller's software overheat logic (independent of the three above). Distinguish: flow suddenly 0 + PACK FAULT light + field not amber → the 235 °C pneumatic chain; field amber → truly 260 °C, emergency; PACK FAULT light + flow present → electric chain.

Key takeaways

Common misconceptions

Scope — what this deep-dive covers and defers

References

A330 specifics per FCOM DSC-21-10-40 (pack-controller and zone-controller channel single/dual-failure behaviour, the 9–15 °C anti-ice lock and 120 % NORM flow, the active-channel landing swap, and the ground ACM-failure note) and the controller engineering per AMM 21-53-00 §3/§5/§6 (location in rack 800VU, the dual-lane digital-microprocessor architecture and changeover logic, the temperature sensors with dual PT-100 / thermistor elements, the pack-inlet pressure sensor, the 235 °C pneumatic compressor-overheat sensor with its invar clapper, the pneumatic temperature sensor backup chain, the dual-function anti-ice valve, the temperature control valve with its two feedback designs, the 136 mm ram-air flap actuators closed on takeoff/landing, the three-mode control law, the ARINC 429 / SDAC dual paths, the ground-speed-relay / LGCIU interfaces, the water injectors, and BITE) — the English AMM being the fact source where the Chinese FCOM carries no AMM content. The compressor-outlet 260/180 °C ECAM thresholds are per FCOM DSC-21-10-50. The BITE coverage, the single-lane "not knowable" implication, the stepper-offset symptom, the "better lane" practical signs, and the dual-function valve design rationale are integrative syntheses. All engineering detail is from the A330 knowledge base; no cross-type comparison is made.

Independent study material, not an Airbus publication and not endorsed by the manufacturer. Always defer to the current operator FCOM, FCTM, and QRH for operational use.