Flight Control Fundamentals

The A330 is a fly-by-wire aircraft. Between the pilot's hand and the control surface there is no cable, rod, or pulley — only sensors, wires, and computers. The sidestick carries an intention; five flight control computers turn that intention into a surface command according to the active control law; hydraulic servocontrols supply the force. This article builds the whole-system map before any single piece is enlarged: what "electrically-controlled, hydraulically-actuated" really means, the computer set (3 PRIM + 2 SEC + 2 SFCC + 2 FCDC + 1 BCM), how the surfaces are driven and cross-fed by the three hydraulic systems, the master logic that decides which computer commands, the four-step ladder of control laws, and the protection philosophy that lets the crew pull to the limit without breaking the aircraft.

Two warnings up front, because they re-frame everything that follows:

[!warning]- The A330 rudder is rudder-by-wire, not a cable-and-pulley rudder. Clear the classic mental model.

On the Electronic Flight Control System (EFCS) of this aircraft, all surfaces — including the rudder — are electrically signalled. Pedal movement is read by position sensors and sent to the flight control computers, which drive the rudder's three hydraulic servocontrols. There is no mechanical cable run from the pedals to the rudder in normal operation. The only mechanical channel anywhere in the flight controls is the manual pitch-trim wheel to the stabiliser. If you carry the older "the rudder is the one mechanical surface" model into this chapter, every degradation case will read wrong.

The rest of the chapter then takes the implementation piece by piece — computers, controls, surfaces, laws, protections, high-lift, and failures.

1. Fly-by-wire — what it actually means here

The design intent is stated by FCOM in one sentence, and the order of the three words matters. Per FCOM DSC-27-10-10:

The fly-by-wire system was designed and certified to render the new generation of aircraft even more safe, cost effective, and pleasant to fly.

Safe comes first. Every redundancy, every law, every protection in ATA-27 is ultimately answering "how does this make the aircraft safer" — read the whole chapter against that test.

The mechanism is compressed into one passage, which is the single most important paragraph in the chapter. Per FCOM DSC-27-10-10:

The flight control surfaces are all: Electrically-controlled, and Hydraulically-actuated. The stabilizer can also be mechanically-controlled. Pilots use the sidesticks to fly the aircraft in pitch and roll (and in yaw, indirectly, through turn coordination). Computers interpret pilot input and move the flight control surfaces, as necessary, to follow their orders.

Three things hide in that paragraph:

• "surfaces are all electrically-controlled" — including the rudder. You push the pedals, pedal position sensors feed the computers, the computers drive the rudder servos. No cable (detail in Rudder and Yaw).
• "The stabilizer can ALSO be mechanically-controlled" — that single also names the only mechanical channel on the whole aircraft: the manual pitch-trim wheel turning the Trimmable Horizontal Stabiliser (THS). When electrical control is gone, the wheel still moves the THS through a mechanical run, giving a last-ditch pitch capability (see Mechanical Back-up and BCM).
• "in yaw, indirectly, through turn coordination" — this is why the pilot does not normally use the pedals in flight. In normal law a roll demand on the sidestick is automatically coordinated in yaw by the computers; the pedals are for ground steering, engine-failure trim, and crosswind, not for routine turning.

2. Control versus actuation — the line the whole chapter runs along

FCOM repeats one pair of words deliberately: surfaces are electrically-controlled and hydraulically-actuated. Hold the two apart:

These two layers fail independently, and that independence is the key to reading every A330 flight-control abnormal:

• Lose computers or sensors and the control side degrades — the law steps down and the handling qualities change, but the surfaces still have hydraulic muscle.
• Lose a hydraulic system and the actuation side thins out — specific servos drop, but the surviving surfaces are still commanded by the same law.

The same control input produces a different aircraft response in different laws, because in fly-by-wire the feel is shaped by the computers, not fed back from surface aerodynamics. That is exactly why law degradation matters operationally, and it is the spine of the law articles (Normal Law onward).

3. The architecture at a glance

3.1 The computer set

FCOM lists the main flight-control computers and closes with the architecture's headline safety claim. Per FCOM DSC-27-10-10:

Five flight control computers process pilot and autopilot inputs according to normal, alternate or direct flight control laws.

and, after listing them:

One computer of any type is capable of controlling the aircraft and of assuring safe flight and landing.

Memorise that last line. One computer — any single PRIM or any single SEC — can fly and land the aircraft. Five exist for redundancy, not because five are needed to fly. The redundancy keeps the aircraft in the most-protected law almost all of the time.

But "five" counts only the three-axis main controllers. The maintenance source adds a third computer type that the pilot-facing FCOM list omits. Per AMM 27-00-00:

The surfaces are controlled by three types of computers, depending on their functions: - the Flight Control Primary Computers (FCPCs) (3 per A/C), - the Flight Control Secondary Computers (FCSCs) (2 per A/C), - the Slat and Flap Control Computers (SFCCs) (2 per A/C). The FCPCs and FCSCs enable control of the aircraft in the roll, yaw and pitch axes. The SFCCs are used to control the flaps and slats.

So the "five" are the 3 PRIM + 2 SEC that handle roll, yaw and pitch; the 2 SFCC are a separate high-lift subsystem; and on top of those sit 2 FCDC (data concentrators that command nothing) and 1 BCM (a back-up yaw module). The full set:

[!warning]- FCPC and PRIM are the same box, and so are FCSC and SEC — don't count them twice.

FCPC is the hardware nameplate; PRIM is the ECAM / operational name. When ECAM annunciates F/CTL PRIM 1 FAULT, it is talking about FCPC 1. Likewise FCSC = SEC. The "three types of computers" in the AMM (FCPC, FCSC, SFCC) is the same population as the FCOM's "5 flight control computers + 2 SFCC", just named from the hardware side.

3.2 Signal flow — sidestick to surface

The conceptual path, from intention to force:

   PILOT                         CONTROL (electrical)                ACTUATION
                                                                    (hydraulic)
  ┌────────┐   position    ┌──────────────────────────┐   surface  ┌──────────┐
  │Sidestick│──signals────►│  3 PRIM (FCPC) master P1  │──orders───►│ Servo-   │──► surface
  │ Pedals  │              │  + P2 P3                  │            │ controls │   moves
  │ Trim wh.│              │  2 SEC (FCSC) S1 S2       │            │ (G/B/Y   │
  └────────┘               └─────────────┬────────────┘            │  power)  │
       ▲                                 │  data only               └──────────┘
       │ FMGEC (autopilot)               ▼
       │ orders ──────────►      ┌──────────────┐
                                 │  2 FCDC      │──► EIS (ECAM/PFD) + CMC (maintenance)
   ┌────────┐ slat/flap          └──────────────┘
   │ 2 SFCC │──► slats / flaps          ┌──────┐ ┌──────┐
   └────────┘ (hydraulic motors)        │ BCM  │ │ BPS  │ ◄─ self-generated power
                                        └──┬───┘ └──────┘    from B or Y hydraulic
   ADIRS ──► AoA / speed / attitude        │
   (the "senses" for laws & protection)    └─► back-up rudder (yaw) if all FCC lost

Read four things off it:

1. PRIM and SEC command the surfaces; FCDC only watches. The data concentrators take no part in moving anything — they feed the screens (EIS) and the maintenance system (CMC). Losing both FCDCs costs you indications, not control.
2. The autopilot enters through the same door. Autopilot demands arrive from the FMGECs and are processed by the same flight control computers — there is no separate autopilot actuation path.
3. High-lift is a parallel system. The 2 SFCC drive slats and flaps through hydraulic motors, independent of the PRIM/SEC chain.
4. The BCM stands behind everything for yaw, with its own power source (BPS) — covered in §6.

4. The surfaces and how they are driven

Every surface is electrically-controlled and hydraulically-actuated, fed by more than one of the three hydraulic systems (Green / Blue / Yellow) so that the loss of any single hydraulic system still leaves every axis with a working surface. The THS alone carries an additional mechanical channel.

A few points the overview must pin down (each deepened in a later article):

• THS — the only mechanical channel. Per AMM 27-00-00, the THS is actuated by a screwjack driven by two hydraulic motors, and those motors are controlled in manual control mode either electrically from three electric motors controlled by the FCPCs, or mechanically from the trim control wheel (and from the FMGECs under autopilot). That mechanical path is the survival route when all electrical control is lost (THS).
• Rudder — three parallel servos, electrically signalled. Per FCOM DSC-27-10-20, the rudder is actuated by 3 independent hydraulic servo controls operating in parallel; per AMM 27-00-00 the rudder is hydraulically actuated by three electrohydraulic servocontrols. The pedals are mechanically interconnected left-to-right, but per FCOM DSC-27-10-10 Two pairs of rigidly interconnected pedals ensure electrical control of the rudder — the interconnect is between the two pilots' pedals, not a cable to the rudder (Rudder and Yaw).
• Spoilers — six per wing in the maintenance source. AMM 27-00-00 enumerates Six spoilers (1 thru 6) on each wing with the hydraulic split above. (FCOM DSC-27-10-20 describes spoilers in the roll-control context as five; the exact count and per-panel function allocation is resolved in Spoilers and Ground Spoilers.)

[!warning]- "Electrically-controlled" does not mean the surfaces move under electric power.

The wires carry the signal; the force is hydraulic on every surface. A complete loss of hydraulic power is not survivable by "going electric" on the main surfaces — there is no electric muscle behind the ailerons, elevators, rudder, or spoilers. The only force path that does not need a healthy main hydraulic loop is the THS, and even that is hydraulic-motor driven (the trim wheel commands the motors mechanically). This is why ATA-27 leans so heavily on the three-system hydraulic redundancy of ATA-29.

5. PRIM and SEC — roles and the master logic

5.1 What each type does

Per FCOM DSC-27-10-10, the three PRIM:

3 PRIM computers (Flight Control Primary Computer – FCPC), each of which is used for: Normal, alternate, and direct control laws; Speedbrake and ground spoiler control; Protection speed computation; Rudder travel limit.

and the two SEC:

2 SEC COMPUTERS (Flight Control Secondary Computer – FCSC) for: Direct control laws, including yaw damper function; Rudder trim, and rudder travel limit.

So a PRIM can run all three laws and owns the protections and the speedbrake/ground-spoiler logic; a SEC runs direct law only (plus yaw damping, rudder trim, and a share of the rudder travel limit). That asymmetry is exactly why the law ladder bottoms out the way it does (§7): when the PRIMs are gone, what survives is SEC-grade direct law.

5.2 The master logic

Five computers do not all command at once. Per FCOM DSC-27-10-10:

In normal operation, one PRIM computer is declared to be the master (P1). It processes the orders and sends them to the other computers (P1 / P2 / P3 / S1 / S2), which will then execute them on their related servo-control. If one computer is unable to execute the orders sent by the master, another computer executes the task of the affected computer (except for spoiler control). If the master computer (P1) cannot be the master, then P2 (or P3, if P2 is not available) becomes the master. Note: When the green hydraulic system is lost, P2 replaces P1 as the master computer. In case all PRIM computers are lost, each SEC is its own master and controls its associated servoloop in direct law. A single SEC can provide complete aircraft control in direct law.

Three points to take from this:

• Master means "issues the orders", not "moves every surface". P1 computes and distributes; each computer executes on its own servo loop. So losing the master is a change of baton, not a loss of control.
• The spoiler exception. Every other surface has a computer ready to take over a failed computer's task — except for spoiler control. That is why spoiler faults tend to present as "these particular panels are unavailable" rather than being silently covered.
• The hydraulics can reshuffle the computers. This is the chapter's first genuinely counter-intuitive coupling (next callout).

[!warning]- Green hydraulic loss moves the master from P1 to P2 — even though P1 has not failed.

"P1 fails → P2 takes over" is the ordinary computer-failure handover. But FCOM adds a separate rule: when the green hydraulic system is lost, P2 replaces P1 as the master computer. Here P1 is perfectly healthy — the master still moves, because P1's servo resources are tied more closely to Green, and handing the baton to P2 preserves a more complete actuation capability after Green is lost. It is a case of a hydraulic state driving a computer role, and it is a classic exam trap. Detail in EFCS Computer Architecture.

6. FCDC and BCM — the watcher and the last yaw resort

6.1 FCDC — data only

Per FCOM DSC-27-10-10:

The FCDCs acquire data from the PRIMs and SECs and send this data to the EIS and CMC.

The FCDCs touch no surface. They take data from the commanding computers and forward it to the displays (EIS) and the central maintenance computer (CMC). Both FCDCs failed = degraded indication and reporting, not degraded control — the aircraft still flies on PRIM/SEC. FCOM also flags a well-known nuisance message. Per FCOM DSC-27-10-10:

On ground, a spurious "RUD TRV LIM" could be displayed on INOP SYS ECAM status page, in case of one FCDC does not detect its ground condition. This message will disappear as soon as the rudder control is pressurized by hydraulic.

Remember the pattern: a cold-and-dark ground state can show a spurious RUD TRV LIM, which clears once the rudder control is hydraulically pressurised. Detail in FCDC.

6.2 BCM — yaw when everything else is gone

Per FCOM DSC-27-10-10:

The BCM computer provides yaw damping, and direct rudder command with pedals, via an independent unit, in case of: Total electrical failure, or Loss of rudder control due to a Flight Control Computer (PRIM and SEC) failure. It includes: Its own electrical generator, referred to as the Backup Power Supply (BPS), which is supplied by the B or Y hydraulic system; Its own sensors (gyrometers and pedals deflection); Control of the B and Y hydraulic actuators. When activated, as in yaw alternate law, there is no turn coordination.

The BCM is the last electrical path for yaw. When all flight control computers are lost, or the aircraft loses all electrical power, the BCM generates its own power (the BPS, driven by the Blue or Yellow hydraulic system), uses its own gyrometers and pedal-deflection sensors, and gives the pilot direct pedal-to-rudder control through the B and Y rudder actuators. There is no turn coordination in this mode — yaw is whatever you put in with the pedals.

Note the division of "last resorts" across the axes:

Detail in Mechanical Back-up and BCM and Electrical Back-up BCM/BPS.

7. The control laws — a ladder that always catches you

Tie §§1–6 together and the EFCS has a health spectrum: the more that fails, the further the law steps down, the fewer the protections, and the closer the handling gets to a bare aircraft.

 Normal Law ──┬─ full protections ────────────────► normal flying
  (healthy)   │
              ▼  loss of key sensors / computers / hydraulic combinations
 Alternate Law (ALT1 / ALT2) ── reduced protections ─► still well-behaved
              ▼  further failures
 Direct Law ── stick-to-surface, no protection, "USE MAN PITCH TRIM" ─► like a bare aircraft
              ▼  all flight control computers lost / total electrical loss
 Mechanical Back-Up ── pitch = THS trim wheel · yaw = BCM ─► survival fallback

Two anchors for the bottom of the ladder:

• In Direct Law, autotrim is gone, so the crew trims pitch manually with the wheel. Per FCOM, when only the mechanical back-up remains the PFD shows the cue in red. Per FCOM DSC-27-20-20-50: the mechanical back-up is available, by using the manual pitch trim (THS). "MAN PITCH TRIM ONLY" is displayed in red on the PFDs.
• The architecture is built so deep that the mechanical back-up is, in practice, almost never reached. Per FCOM DSC-27-20-20-50:

It must be noted that it is very unlikely that the backup will be used, due to the fly-by-wire architecture. For example, in case of electrical emergency configuration, or an all-engine flameout, alternate law remains available.

[!warning]- "Mechanical back-up" is not an everyday fallback — even all-engines-out stays in Alternate Law.

The redundancy is deep enough that an electrical emergency configuration or an all-engine flameout still leaves Alternate Law available. You will very probably never reach a true mechanical back-up in a flying career on type. It exists to cover the "extremely improbable" last fraction of a percent — you must know it is there and how it works, but do not picture it as a routine degradation. The full trigger logic for each step is in Law Degradation and Reconfiguration.

8. The protection philosophy — authority without overstress

Normal Law's headline value is that it keeps the aircraft inside the safe envelope no matter what the pilot commands — but only in two axes. Per FCOM DSC-27-10-10:

However, when in normal law, regardless of the pilot's input, the computers will prevent excessive maneuvers and exceedance of the safe envelope in pitch and roll axis. However, as on conventional aircraft, the rudder has no such protection.

Two stakes go in here:

1. Protection acts in pitch and roll only. You can pull or roll to the stops and Normal Law holds you inside the angle-of-attack, bank, and load-factor limits (see AoA Protection, High-Speed Protection, Pitch Attitude and Load Factor, Lateral Law and Bank Angle).
2. The rudder is the exception — "as on conventional aircraft", it has no such protection. This is why training insists on no large, rapid, or reversing pedal inputs: nothing in the system will stop you, and over-use of the rudder can overstress the fin (QRH Jam and Loss of Control).

The FCTM states the design intent in full — this is the pilot's "owner's manual" for protections. Per FCTM AOP-10-30-10:

The purpose of the flight control protections is to: Give full authority to the flight crew, in order to enable them to obtain the best aircraft performance with an instinctive, immediate action on the related control; Minimize the possibility of over-controlling, overstressing, or damaging the aircraft. ... Despite system protections, the PF must not deliberately exceed the normal flight envelope. In addition, these protections are not designed to be structural limit protections (e.g. opposite rudder pedal inputs). Rather, they are designed to assist the PF in emergency and stressful situations, where only instinctive and rapid reactions will be effective.

[!warning]- Protections are the confidence to pull all the way in an emergency — not a railing to lean on every day.

The single most common misreading of the A330 is "there are protections, so I can fly up against the envelope edge whenever I like." The FCTM says the opposite: protections are not designed to be structural limit protections, and the PF must not deliberately exceed the normal flight envelope. Their value is that in a windshear escape, a TCAS RA, or a last-second avoidance, you can apply full instinctive input and extract maximum performance without stalling or overstressing — the computer holds the edge for you. Day to day, you still fly inside the envelope yourself.

The behaviour that follows directly: the two sidesticks are independent and never fight you mechanically. Per FCOM DSC-27-10-10:

The two controllers are springloaded to neutral, and are not mechanically coupled. Each controller independently sends electrical signals to the flight control computers.

and:

No manual aileron trim switch is provided.

Both sticks self-centre on a spring and send independent electrical signals — moving one does not move or back-drive the other. That is the physical basis for the dual-input and sidestick-priority logic (Sidestick Priority Logic), and it is why the pilot cannot see the other stick move. And there is no roll (aileron) trim switch — Normal Law trims roll automatically (the autotrim that also explains why there is no "trim and the aircraft holds attitude" feel in roll), while pitch is trimmed by the THS autotrim/wheel and yaw by the rudder trim switch.

9. The system across a flight — and when it steps down

Six short scenes turn the static map into a moving picture:

1. Take-off and rotation — sidestick → sensors → P1 (master). The elevator follows ground-mode law during the roll, transitioning to flight-mode (load-factor demand) at rotation. Speedbrake and ground spoiler are PRIM-managed.
2. A turn in the climb — roll demand drives ailerons and spoilers (drawing on several hydraulic systems); the computers coordinate the rudder automatically so you do not touch the pedals; bank-angle protection sets the soft wall.
3. One PRIM trips (F/CTL PRIM 1 FAULT) — the master shifts to P2, the remaining computers cover the failed one's tasks (except spoilers), and the law is usually still Normal. You may see only an ECAM note; the feel is unchanged. It takes a cascade of failures to fall into Alternate/Direct (EFCS Computer Failures).
4. A windshear escape — full instinctive aft stick; Normal Law holds you between the protection angles so you cannot stall, extracting maximum performance (AoA Protection, Alpha Floor / TOGA Lock). This is §8's philosophy in the air.
5. All engines out — with the RAT supplying power and hydraulics and the computers alive, you are still in Alternate Law (the FCOM "alternate law remains available" case). But the handling slows: per AMM 27-00-00,

The RAT is automatically extended in some failure cases (e.g : loss of two engines); the pitch, roll and yaw green servocontrol speeds are then limited in order to reduce the hydraulic consumption.

In the RAT configuration the Green-driven surfaces respond more slowly — a deliberate trade of actuation speed for hydraulic endurance, because the RAT is a single, flow-limited emergency source. Reaching the true mechanical back-up requires the far more extreme case of losing the computers themselves.

This is the same five-question discipline as every systems chapter: Is the indication real? Which layer degraded — control or actuation? What is lost and what remains? What does ECAM ask? What is the degraded handling profile? — answered with type-specific detail in Controls and Indications and the failure articles.

Self-test

[!note]- Q1. Is the A330 rudder a cable-operated surface? How does it differ from the elevators and ailerons in terms of protection?

No. The rudder is rudder-by-wire: pedal position sensors feed the PRIM/SEC computers, which drive three hydraulic servocontrols operating in parallel — there is no mechanical cable from pedals to rudder. The left and right pedals are rigidly interconnected to each other, but that interconnect is between the pilots' pedals, not a run to the surface. The crucial difference is protection: Normal Law's envelope protection acts only in pitch and roll; per FCOM, "as on conventional aircraft, the rudder has no such protection." Nothing stops a large, rapid, or reversing pedal input, and such inputs can overstress the fin — which is why "gentle on the rudder" is drilled so hard.

[!note]- Q2. FCOM says any single computer can fly and land the aircraft. Why fit five, then?

Because the goal is not "able to fly" but "almost always flying in the most-protected law." FCOM states that one computer of any type can control the aircraft and assure safe flight and landing — a single PRIM or single SEC suffices. Fitting 3 PRIM + 2 SEC makes the loss of all five an extremely improbable event, which keeps the aircraft in full Normal Law for essentially the entire fleet life. The redundancy buys protection coverage, not basic controllability.

[!note]- Q3. Loss of the Green hydraulic system moves the master from P1 to P2. Is that the same as "P1 failed, so P2 took over"?

No — and this is the trap. The ordinary handover is "if P1 cannot be master, P2 (or P3) becomes master." But FCOM adds a separate rule: when the green hydraulic system is lost, P2 replaces P1 as the master computer, even though P1 is perfectly healthy. P1's servo resources are tied more closely to Green, so after Green is lost, making P2 the master preserves a more complete actuation capability. It is a hydraulic state driving a computer role — a coupling, not a computer failure.

[!note]- Q4. What is the only mechanical channel on the aircraft, and what is the "last resort" in each of pitch and yaw?

The only mechanical channel is the THS manual pitch-trim wheel ("the stabilizer can also be mechanically-controlled"). For pitch, the last resort is that mechanical wheel ("MAN PITCH TRIM ONLY"). For yaw, the last resort is the BCM, which generates its own power (BPS, from the Blue or Yellow hydraulic system) and gives direct pedal-to-rudder control with its own gyrometers and pedal sensors. Roll has no dedicated last resort because the aileron/spoiler hydraulic redundancy covers it before that point.

[!note]- Q5. Name the four laws in order. Why is the mechanical back-up described as "very unlikely" to be used?

Normal → Alternate (ALT1/ALT2) → Direct → Mechanical Back-Up. The back-up is "very unlikely" because the fly-by-wire redundancy is so deep that, per FCOM, even an electrical emergency configuration or an all-engine flameout still leaves Alternate Law available. Only an extreme stack — all flight control computers lost, or a total electrical failure — actually reaches the mechanical back-up (pitch via the trim wheel, yaw via the BCM).

[!note]- Q6. "Electrically-controlled" — does that mean the surfaces move on electric power, so a total hydraulic loss can be flown "on electric"?

No. "Electrically-controlled, hydraulically-actuated" means the wires carry the command and hydraulics supply the force. There is no electric muscle behind the main surfaces (ailerons, elevators, rudder, spoilers) — they are moved by hydraulic servocontrols. The only force path that does not depend on a healthy main hydraulic loop is the THS, and even that is driven by hydraulic motors (commanded mechanically by the trim wheel in the last resort). This is exactly why ATA-27 depends so completely on the three-system hydraulic redundancy of ATA-29.

Key takeaways

The pilot's window into all of this is narrow — the sidesticks, the pedals, the trim wheel, the ECAM F/CTL and STATUS pages. Everything above happens in the computers and the hydraulics; the rest of the chapter enlarges each block in turn.

References

Per FCOM DSC-27-10-10 (General — fly-by-wire basic principle; electrically-controlled/hydraulically-actuated; cockpit controls; 5 computers; PRIM/SEC functions; master logic; FCDC; BCM); FCOM DSC-27-10-20 (Architecture — yaw control, rudder three parallel servos); FCOM DSC-27-20-20-50 (Mechanical Back-Up — "MAN PITCH TRIM ONLY", back-up very unlikely, alternate law remains available). Per FCTM AOP-10-30-10 (Flight Control Protections — design philosophy). Per AMM 27-00-00 (three computer types incl. SFCC; surface actuation — elevators, ailerons, THS screwjack/two motors, six spoilers and hydraulic allocation, rudder three electrohydraulic servocontrols; RAT extension and green servocontrol speed limiting). Hydraulic-system dependency per ATA-29. Couplings flagged as reasoning (Green-loss master rationale; roll having no dedicated last resort) are integrative synthesis to be confirmed in the relevant architecture and surface articles, not verbatim manual statements.

Independent study material, not an Airbus publication and not endorsed by the manufacturer. Always defer to the current operator FCOM, FCTM, and QRH for operational use.