[conservatism_IS_compassion]

As critical as the MCAS system has turned out to be, 2 sensors are not enough. There should be a minimum of ^{more than} 3 AoA sensors to allow 2 good sensors to outvote the bad sensor ^(s).

I would also consider integrating all relevant sensors via an AI scheme to make sense of true ground speed, pitch attitude - anything a pilot would want to consider when evaluating a sensor conflict in order to make sense of the situation. And even with that, you would want pilots to routinely get in manual hands-on flying experience on an systematic basis - and a clear understanding in the cockpit of how to take manual control instantly.

[MortMan]

I do not trust AI in aviation. Because one cannot know how the AI is making its decisions, one cannot predict where the AI’s rules will cause their own mischief.