by dcmike
alewifebp wrote:The pedant in me must nitpick this. There actually was no failure with the ATO (automatic train operator) system; in fact it performed exactly as it was designed.
Another thing about PTC, is that like any system, nothing is foolproof. Take the WMATA accident a few years ago, where the fully automatic train operation failed and resulted in a collision.
The system that should have prevented the collision was ATP (automatic train protection). There really was no single point of failure that caused the accident. It was a combination of a WMATA manager blatantly disregarding Alstom's instruction not to mix their equipment with vintage GRS hardware, WMATA ignoring the warning signs of a bobbing track circuit, the track circuit transmitter power being turned up beyond normal operating levels, a low seniority operator fearing discipline for running through the trouble spot in manual mode, and a comprised insulator that allowed AF oscillations to be transmitted through an equipment rack.
Not to disagree with your point that no system is perfect, but the WMATA accident is a bad example as it took a whole lot of human factors to cause that wreck.