Electric vertical takeoff aircraft introduce novel Distributed Electric Propulsion (DEP) architectures that break traditional single-engine failure assumptions. This paper clarifies how ARP4754A bridges system-level safety to component DAL allocation.
Because an octocopter can tolerate the loss of one or two motors without loss of control, individual inverter controllers can be qualified to DAL B, provided the overarching flight envelope protection supervisor is certified to DAL A.
Navigating EASA's stringent Category Enhanced mandate (10^-9 catastrophic safety target for commercial passenger operations) requires rigorous ARP4754A functional hazard assessment across all flight phases.