(1) Determining the highest temperature allowing a safe margin below the lowest expected autoignition temperature of the fuel in the fuel tanks.
(2) Demonstrating that no temperature at each place inside each fuel tank where fuel ignition is possible will exceed the temperature determined under paragraph (a)(1) of this section. This must be verified under all probable operating, failure, and malfunction conditions of each component whose operation, failure, or malfunction could increase the temperature inside the tank.
(3) Demonstrating that an ignition source could not result from each single failure, from each single failure in combination with each latent failure condition not shown to be extremely remote, and from all combinations of failures not shown to be extremely improbable. The effects of manufacturing variability, aging, wear, corrosion, and likely damage must be considered.
(b) Except as provided in paragraphs (b)(2) and (c) of this section, no fuel tank Fleet Average Flammability Exposure on an airplane may exceed three percent of the Flammability Exposure Evaluation Time (FEET) as defined in Appendix N of this part, or that of a fuel tank within the wing of the airplane model being evaluated, whichever is greater. If the wing is not a conventional unheated aluminum wing, the analysis must be based on an assumed Equivalent Conventional Unheated Aluminum Wing Tank.
(1) Fleet Average Flammability Exposure is determined in accordance with Appendix N of this part. The assessment must be done in accordance with the methods and procedures set forth in the Fuel Tank Flammability Assessment Method User's Manual, dated May 2008, document number DOT/FAA/AR–05/8 (incorporated by reference, see §25.5).
(2) Any fuel tank other than a main fuel tank on an airplane must meet the flammability exposure criteria of Appendix M to this part if any portion of the tank is located within the fuselage contour.
(3) As used in this paragraph,
(i) Equivalent Conventional Unheated Aluminum Wing Tank is an integral tank in an unheated semi-monocoque aluminum wing of a subsonic airplane that is equivalent in aerodynamic performance, structural capability, fuel tank capacity and tank configuration to the designed wing.
(ii) Fleet Average Flammability Exposure is defined in Appendix N to this part and means the percentage of time each fuel tank ullage is flammable for a fleet of an airplane type operating over the range of flight lengths.
(iii) Main Fuel Tank means a fuel tank that feeds fuel directly into one or more engines and holds required fuel reserves continually throughout each flight.
(c) Paragraph (b) of this section does not apply to a fuel tank if means are provided to mitigate the effects of an ignition of fuel vapors within that fuel tank such that no damage caused by an ignition will prevent continued safe flight and landing.
(d) Critical design configuration control limitations (CDCCL), inspections, or other procedures must be established, as necessary, to prevent development of ignition sources within the fuel tank system pursuant to paragraph (a) of this section, to prevent increasing the flammability exposure of the tanks above that permitted under paragraph (b) of this section, and to prevent degradation of the performance and reliability of any means provided according to paragraphs (a) or (c) of this section. These CDCCL, inspections, and procedures must be included in the Airworthiness Limitations section of the instructions for continued airworthiness required by §25.1529. Visible means of identifying critical features of the design must be placed in areas of the airplane where foreseeable maintenance actions, repairs, or alterations may compromise the critical design configuration control limitations (e.g., color-coding of wire to identify separation limitation). These visible means must also be identified as CDCCL.
[Doc. No. 1999–6411, 66 FR 23129, May 7, 2001, as amended at Doc. No. FAA–2005–22997, 73 FR 42494, July 21, 2008]