I have nothing against adding the MCAS system to make flying the new 737 Max more like flying the 737NG. What I object to is not informing pilots about it and not requiring simulator training. I’m agnostic about it requiring a whole new type rating. Had there been sensor redundancy and pilot preparation ahead of certification and flying for airlines I don’t think there would have been problems. Anyway I was discussing this with my brother who is a computer programmer and has a masters in artificial intelligence. He and I were thinking just 2 sensors is not enough. If one sensor malfunctions, how do the avionics or the pilots determine which sensor to believe? I think heads will roll at the FAA.
There are two FCC’s and two MCAS. Two sensors, one feeding each system.
Activation of the MCAS is essentially the same response as runaway trim which is covered in the manual and training.
Somewhere along the line emphasis on trim has been lost?
If the sensors don't agree, give an alert to the pilot, and turn off MCAS.