🧠

🧑‍✈️ Human Performance & Limitations

Why a well-trained, healthy pilot still makes mistakes, misreads an instrument, or feels something that is not actually there — and what to do about it. Every section gives you the underlying mechanism first, then the practical rule that follows from it.

16 sections 346 linked questions 🧮 Quick tools 📊 Diagrams Aircraft-independent

🧰 Quick tools & cheat sheet play with the numbers

Two small calculators for figures pilots actually use, and a one-screen reference for the models and classifications this subject keeps coming back to.

⚖️ Body Mass Index

Height (cm) Mass (kg)

🌍 Jet lag — rough recovery time

Time zones crossed Direction

📋 Cheat sheet — models worth knowing by name

Model / classification	What it says
🧀 Reason's Swiss Cheese model	An accident needs the holes in several independent layers of defence to line up at once
🎯 Threat and Error Management	Threat → crew error → undesired aircraft state → outcome
🧩 Slip / lapse / mistake / violation	Wrong execution / forgotten action / wrong plan / deliberate deviation
🪜 Skill–Rule–Knowledge (SRK)	Automatic → recognised-rule → first-principles reasoning, in rising order of effort and error-proneness
👁️ Situational awareness, 3 levels	Perceive the elements → comprehend what they mean → project what happens next
📈 Arousal–performance (inverted U)	Too little or too much arousal both hurt performance; the optimum is in the middle
🔥 General Adaptation Syndrome	Alarm → resistance (at a cost) → exhaustion if the stressor does not let up
⚠️ Five hazardous attitudes	Anti-authority, impulsivity, invulnerability, macho, resignation
🔁 Plan continuation bias	Sticking with a plan once committed to it, even as evidence against it builds up
🕳️ Autokinesis / black-hole / somatogravic	A fixed light seems to move / a dark approach seems high / acceleration feels like pitch-up

✈️ How to use this guide Each section below stands alone — jump straight to the one behind the question you got wrong, rather than reading start to finish.

🛡️ Safety Culture & Error Models 22 questions

The aircraft got more reliable; the human being did not change. This section is about the frameworks built to manage that gap.

🎯 Why "human error" replaced "pilot error"🎯 Swiss Cheese model🎯 Safety culture's five traits🎯 Threat and Error Management

💡 Key idea

No single defence is ever perfect. An accident needs gaps in several independent layers of defence — design, training, supervision, procedure — to line up at the same moment. Any one layer holding is enough to stop it.

Four layers of defence, each with its own weaknesses. The accident path only gets through on the rare occasion every hole happens to line up.

A reporting system is only as good as the culture around it

🗣️ Reporting culture

People disclose their own errors because they trust it will improve safety, not punish them.

⚖️ Just culture

Honest mistakes are protected; reckless or deliberate violations are not. Not the same as a blame-free culture.

🔀 Flexible culture

Can shift from a normal hierarchy to a flatter, expert-led structure when a situation demands it.

📚 Learning culture

Actually acts on what the data shows, rather than only collecting it.

Threat and Error Management (TEM)

Threat — something outside the crew's control: weather, traffic, a rushed turnaround.
Error — a crew action or inaction that moves away from the plan.
Undesired aircraft state — the resulting reduced margin: unstable on approach, off the cleared level.
Outcome — recovered in time, or not.

✈️ Pilot tip Briefing a known threat and agreeing how you will handle it is proactive TEM — catching the chain at step one, before it has any chance to produce an error.

❤️ Cardiovascular System 22 questions

The engine that gets oxygen from the lungs to the brain — and the handful of things that quietly reduce its capacity before you ever climb to altitude.

🎯 What actually carries oxygen🎯 Carbon monoxide's trick🎯 Blood pressure and standing up fast🎯 DVT on a long flight

💡 Key idea

Haemoglobin carries the oxygen; carbon monoxide steals its seat. CO binds haemoglobin far more readily than oxygen does, so even a small amount on board quietly lowers the ceiling at which hypoxia starts to bite.

Risk factor	What it actually does
🚬 Smoking	Carbon monoxide takes up carrying capacity for hours; nicotine raises heart rate and blood pressure on top of that.
🩸 Recent blood donation	Temporarily reduced red cell count and blood volume, until the body replaces what was given.
🪑 Long immobility	Sluggish venous return in the legs — the specific setup for a deep vein thrombosis.
📈 Chronic hypertension	Forces the heart to work harder and accelerates damage to artery walls, with no symptoms along the way.

Why standing up fast makes you light-headed

Pressoreceptors (baroreceptors) in the artery walls sense a pressure drop and trigger a reflex correction — but it takes a second or two. Stand up abruptly after sitting a long time, and gravity pools blood in the legs faster than the reflex can compensate: a brief, harmless head rush.

✈️ Pilot tip On a long sector, move your ankles and calves periodically and walk the cabin when you can — it is the muscle pump, not willpower, that keeps venous blood moving.

🫁 Oxygen & Respiration 24 questions

The single most tested idea in this whole subject: altitude does not change the percentage of oxygen in the air. It changes its partial pressure — and that is what your body actually runs on.

🎯 Dalton's Law in one line🎯 TUC vs EPT🎯 Hypoxia or hyperventilation?🎯 The bends

💡 Key idea

21% of a smaller number is a smaller number. Oxygen's share of the atmosphere never changes with height; total pressure does — so the partial pressure of oxygen in every breath falls as you climb, which is the entire mechanism of hypoxic hypoxia.

Schematic only — the point is the shape of the curve, not the exact numbers, which vary by source and by individual.

😶‍🌫️ Hypoxia

Too little oxygen. Early signs are often invisible to the person affected — impaired judgement can arrive before any subjective discomfort, sometimes with a false sense of well-being.

😰 Hyperventilation

Too much breathing relative to need, usually triggered by anxiety. Washes out CO₂, producing tingling and dizziness that can look a lot like hypoxia.

⚠️ If genuinely unsure which one it is Treat it as hypoxia first — oxygen or descent — since that is the more dangerous of the two possibilities, and costs a hyperventilating person nothing they would not also get from being told to breathe slowly.

Decompression sickness, in one paragraph

Nitrogen dissolved in the tissues at one pressure comes out of solution as bubbles if the surrounding pressure falls too quickly — joint pain ("the bends") is the classic sign. This is exactly why diving shortly before flying is a real risk even in a normally pressurized cabin: the dive has already loaded the tissues with extra nitrogen before the flight even starts.

👂 Hearing & Balance 20 questions

The inner ear is two separate instruments sharing one housing: a hearing organ, and a motion sensor that is remarkably easy to fool.

🎯 Semicircular canals vs otoliths🎯 The leans🎯 Somatogravic illusion🎯 Motion sickness

💡 Key idea

The semicircular canals only sense a change in turn rate, not the turn itself. A smoothly entered, sustained turn can feel like straight flight within seconds — which is exactly how a graveyard spiral gets started.

Illusion	What the body senses	What is actually happening
🌀 The leans (somatogyral)	A turn in the opposite direction	You have just rolled wings-level after a sustained turn
⬆️ Somatogravic	Pitching up	Pure forward acceleration (a go-around, a catapult launch)
🥃 Alcohol nystagmus	Rotation with eyes closed	Alcohol diffusing unevenly through the canal fluid and tissue

⚠️ The graveyard spiral An unnoticed bank develops along with a descent. Pulling back to arrest the apparent sink — without levelling the wings first — only tightens the turn and steepens the dive. The fix is always the same: trust the instruments, wings level first.

Motion sickness: a sensory conflict, not a stomach problem

Reading in the back seat of a moving car is the classic case: the eyes report a stationary page while the vestibular system reports real motion. The mismatch, not the motion itself, is what provokes nausea — which is why looking at the horizon helps and reading makes it worse.

👁️ Vision 22 questions

Most of what a pilot "sees" is actually the brain filling gaps efficiently — which works brilliantly until the gap it fills is wrong.

🎯 Fovea vs periphery🎯 Why collision-course traffic is hard to see🎯 Dark adaptation🎯 The blind spot

💡 Key idea

Cones need light and give detail; rods need almost none and give only shapes. The fovea — your sharpest vision — is nearly all cones and almost no rods, which is exactly why staring straight at a faint light is the worst way to actually see it at night.

🌕 Night scanning

Look slightly off to the side of a faint target (off-centre viewing) so its image lands on the rod-rich periphery, not the rod-poor fovea.

✈️ Traffic on a collision course

Shows almost no relative motion and barely changes size until very late — exactly the cue the eye is worst at detecting.

⏱️ ~30 min to fully dark-adapt

...and one bright flash can undo it almost instantly. Keep cockpit lighting low before and during a night flight.

🕳️ The blind spot

No photoreceptors where the optic nerve exits. A small, unmoving target can, by coincidence, sit exactly there and vanish.

🌫️ Empty-field myopia

With nothing to focus on, the eye relaxes to a near resting distance. Deliberately refocus on a wingtip now and then.

✈️ Pilot tip Scan in short, overlapping segments with brief pauses to actually fixate — one smooth sweep blurs everything and resolves nothing.

🏃 Flying & Health 24 questions

G-forces, trapped gas, substances and simple hygiene — the physical side of staying fit to fly.

🎯 Greyout → blackout → G-LOC🎯 Boyle's Law and your sinuses🎯 Alcohol's real elimination rate🎯 Cosmic radiation

💡 Key idea

Duration matters as much as magnitude. The same peak G is far better tolerated as a brief impulse than sustained for several seconds, because it takes time for blood to actually redistribute and starve the eyes and brain.

Vision narrows and dims before consciousness itself is lost — reduced blood pressure reaches the eyes before it fully starves the brain.

Boyle's Law shows up everywhere in this section

Trapped gas expands as pressure falls and must contract again on the way back down. A blocked sinus or middle ear (a head cold) cannot vent that change smoothly — pain and injury follow, usually worse on descent, when ambient pressure is rising faster than the blocked passage can let it in.

🍷 Alcohol clears at a steady rate

Coffee, a cold shower or willpower do not speed it up. Only time does.

🤢 Hangover ≠ zero impairment

Disrupted sleep and metabolic byproducts can impair performance well after blood alcohol itself reaches zero.

☢️ Cosmic radiation

Rises with altitude and latitude. No practical cockpit shielding exists — it is managed as a tracked, cumulative exposure instead.

😰 Stress 20 questions

Stress is not the event. It is the gap between what is being demanded and what you believe you can handle.

🎯 Arousal–performance curve🎯 GAS: alarm, resistance, exhaustion🎯 Four kinds of stressor🎯 Tunnel vision under pressure

💡 Key idea

Performance against arousal is an inverted U, not a straight line. Too little arousal is sluggish and inattentive; too much narrows attention and degrades judgement. The optimum sits in the middle — and that optimum is lower for a complex task than a simple one.

Boredom on one side, panic on the other — both cost performance, for different reasons.

🌡️ External physiological

Noise, heat, cold, vibration — acting on the body from outside.

🤒 Internal physiological

Hunger, illness, poor sleep, dehydration — the body's own state.

🧩 Cognitive

Ambiguity, time pressure, information overload.

💔 Personal / life events

Bereavement, divorce, money worries — brought to work from outside it.

✈️ Pilot tip Under real pressure, break the problem into prioritized steps and say what you are doing out loud — both directly counter stress's narrowing effect on attention and working memory.

🧠 Information Processing & Error 24 questions

Every error is explainable once you know which stage of processing it actually broke down in — and each stage breaks in its own characteristic way.

🎯 Slip vs lapse vs mistake vs violation🎯 Confirmation bias🎯 Working memory's limits🎯 Why checklists work

💡 Key idea

Not all errors are the same kind of failure, so not all of them need the same fix. A slip is an execution failure, a lapse is a memory failure, a mistake is a planning failure, and a violation is not a failure at all — it is a choice.

Error type	What went wrong	What tends to fix it
🖐️ Slip	Right intention, wrong execution	Separate, shape-code or guard similar controls
🧠 Lapse	Right intention, forgotten entirely	Checklists, reducing interruptions, reminders
🗺️ Mistake	The plan itself was wrong	Better training, diagnosis aids, cross-checking
🚫 Violation	A deliberate departure from procedure	Culture, supervision — not a design fix

🧮 Worked example — spotting the error type

Reached for the flap lever and bumped the gear lever instead: a slip — the plan was right, the hand went to the wrong place.

Got interrupted by a radio call mid-checklist and skipped the next item: a lapse — place-keeping in memory was lost.

Diagnosed a problem as one thing when it was actually another, then handled it correctly for the wrong diagnosis: a mistake — the plan itself was flawed.

Skipped a checklist item on purpose because "it's always fine": a violation — a conscious choice, not an accident.

🧠 Memory aid Working memory holds only a handful of items and fades within seconds without rehearsal — write down a complex clearance rather than trusting it to stay in your head.

🎯 Behaviour & Motivation 20 questions

How automatic a response is, and how aware you are of the bigger picture, both sit on their own spectrum — and both can fail in opposite directions.

🎯 Skill → Rule → Knowledge🎯 Three levels of situational awareness🎯 Complacency🎯 Plan continuation bias

💡 Key idea

The SRK model predicts the error, not just the behaviour. Skill-based actions are prone to slips; rule-based actions are prone to applying the wrong rule; knowledge-based reasoning is slow, effortful and the most error-prone of the three, exactly when there is the least time to spare.

🖐️ Skill-based

Automatic, little conscious thought. Fast, but prone to slips.

📘 Rule-based

A recognised situation, a known procedure applied. Most of normal flying.

🧩 Knowledge-based

Genuinely novel, first-principles reasoning. Slow and the most error-prone — this is what simulator training for rare emergencies is trying to convert into rule-based.

Situational awareness has three levels — and losing it is usually a slow drift, not a sudden switch

Perceive the relevant elements (instrument readings, traffic, terrain).
Comprehend what they mean together, not as isolated facts.
Project how the situation is likely to develop next.

⚠️ Complacency A long run of a system working correctly can quietly erode active monitoring — exactly the condition under which a rare failure is most likely to be missed.

🌀 Illusions & Disorientation 22 questions

Every illusion in this section works the same way: it fools the senses, not the instruments. Which is also why every defence against it is the same.

🎯 Black-hole approach🎯 Runway width & slope illusions🎯 Autokinesis🎯 Flicker vertigo

💡 Key idea

Every illusion here depends on the absence of a reliable outside reference — cloud, darkness, haze or featureless terrain. Where a clear horizon and good visual texture exist, almost none of these illusions get a foothold.

Illusion	Visual picture seen	Tempts a pilot to
🕳️ Black-hole approach	Dark terrain, lit runway ahead	Fly dangerously low
↔️ Narrow runway	Looks like a normal runway, farther away	Fly too low
↕️ Wide runway	Looks like a normal runway, closer	Fly too high / flare early
⬆️ Upsloping runway	Looks higher than it is	Fly too low
⬇️ Downsloping runway	Looks lower than it is	Fly too high
🌧️ Rain on the windscreen	Runway looks farther and higher	Fly too low

⚠️ The one rule that covers all of them When bodily sensation or the visual picture disagrees with the instruments, trust the instruments. That is the entire basis of instrument flight, and it is the single consistent defence this whole section keeps returning to.

Flicker vertigo

A flashing light at the wrong frequency — sunlight through a propeller disc, a strobe reflecting off cloud at night — can trigger disorientation, nausea or, rarely, seizures in susceptible people. The fix is simple and direct: remove the specific flickering stimulus (switch off the strobe in those conditions).

😴 Sleep & Fatigue 24 questions

An internal clock that runs close to, but not exactly, 24 hours — and the predictable trouble that comes from asking it to run on a different schedule than the sun.

🎯 The circadian low🎯 Why eastward is harder than westward🎯 Sleep stages across the night🎯 Microsleeps

💡 Key idea

The free-running body clock is a little longer than 24 hours, so delaying it (staying up later, as westward travel asks) comes more naturally than advancing it (going to bed and waking earlier, as eastward travel asks). This is the whole reason eastward jet lag usually hits harder.

Schematic shape of the alertness curve — the lowest point of the day falls in the early hours of the morning, a separate, smaller dip in the early afternoon.

💤 Short naps, deliberately

Kept under ~20-30 min to avoid waking from deep sleep (sleep inertia) and feeling worse, not better.

🍷 Alcohol before sleep

Falls asleep faster, fragments and worsens sleep later in the night. A net loss, not a shortcut.

😮 Obstructive sleep apnoea

Repeated airway narrowing fragments sleep without the person remembering — daytime sleepiness despite "enough" time in bed.

🧠 Memory aid Acute fatigue: one bad night, fixed by one good one. Chronic fatigue: a debt built up over days that one night does not clear.

🤝 Individual Differences & Leadership 20 questions

Two people can face the identical demand and respond completely differently — and a crew's dynamic can go wrong by being either too close or too distant.

🎯 Groupthink🎯 Leadership styles🎯 The authority gradient, both ways

💡 Key idea

Cohesion is good until it suppresses disagreement. A strongly unified crew coordinates well, but the same unity can make a dissenting voice feel socially costly to raise — exactly the conditions groupthink needs.

⛰️ Steep authority gradient

A junior crew member may sense a problem and still not speak up — the perceived gap in authority silences them.

🏞️ Flat authority gradient

When a fast, decisive call is genuinely needed, nobody clearly steps up to make it.

Leadership style is a tool, not a personality

Style	Best suited to	Costs
👑 Autocratic	Genuine time-critical emergency	Misses other crew members' information
🗳️ Democratic / participative	Time available, input is valuable	Too slow for an immediate emergency
🌊 Laissez-faire	Low-stakes, highly experienced team	No clear direction when one is needed

✈️ Pilot tip Trained, escalating assertive phrasing for raising a concern exists precisely because a steep authority gradient makes improvising that confidence in the moment much harder than it sounds.

📡 Communication & Cooperation 20 questions

A message is not safely delivered just because it was said. It is delivered once it was heard, understood, and confirmed.

🎯 Readback / hearback🎯 Hearing vs listening🎯 Standard phraseology🎯 Metacommunication

💡 Key idea

A readback is only a safety check if someone actually verifies it. A readback error paired with a hearback failure lets a mistake pass straight through the one mechanism designed to catch it.

📻 Standard phraseology

Fixed, predictable wording that reduces ambiguity — especially valuable between speakers of different native languages.

🤐 Sterile cockpit

Non-essential conversation restricted during the highest-workload phases, not the whole flight.

🗣️ Metacommunication

Tone and pacing can carry more real urgency than the literal words — a hedged, flat "we might want to check the fuel" can understate a genuine concern.

⚠️ Expectation bias on the radio A pilot who strongly expects a routine clearance can mishear an actual change to it as the expected, routine version — which is exactly why an attentive readback matters even for "obvious" instructions.

🖥️ Man and Machine 20 questions

A well-designed system expects a person to slip occasionally, and builds in a way to catch it before it matters.

🎯 Population stereotypes🎯 Mode confusion🎯 Clumsy automation🎯 Error tolerance

💡 Key idea

Design-induced error is a design problem, not a pilot problem. Two identical switches placed close together, or a control that moves opposite to the shared, learned expectation ("up means more"), set a trap that good design removes before it ever catches anyone.

🖐️ Shape-coded controls

Throttle, prop and mixture levers feel different by design, so they can be identified correctly without looking.

🔀 Clumsy automation

Saves the most workload when workload is already low, and demands the most attention exactly when workload is already high.

✈️ Pilot tip A mismatched mental model — believing the automation is doing something it is not — is the root of most "automation surprises." If the aircraft is doing something unexpected, check what mode it is actually in before assuming it has malfunctioned.

⚖️ Decision Making & Risk 22 questions

Good judgement is not about having the right instinct. It is about weighing real risk against real resources — and building in a defence before pressure ever has a chance to bias it.

🎯 Five hazardous attitudes🎯 Plan continuation bias🎯 SOPs as pre-made decisions🎯 Deciding under real time pressure

💡 Key idea

A go-around criterion decided calmly in advance beats a judgement call made under the pull of "we've come this far." Deciding ahead of time, before any sunk-cost pressure exists, is the direct countermeasure to plan continuation bias.

Hazardous attitude	The underlying belief
🚫 Anti-authority	"Nobody tells me what to do"
⚡ Impulsivity	"Do something, now"
🛡️ Invulnerability	"That happens to other pilots, not me"
💪 Macho	"I can prove I can handle this"
🤷 Resignation	"There's nothing I can do about it anyway"

🧠 Memory aid SOPs are decisions already made, calmly, in advance — which is exactly why a genuine emergency is handled with memorised, rule-based memory items rather than a fresh decision process with no time to run it properly.

👥 CRM & Incident Reporting 20 questions

The whole subject's throughline, stated plainly: use every resource actually available, and learn from the near-misses before one of them becomes the accident.

🎯 "All available resources"🎯 Hearing vs listening🎯 Aviate, navigate, communicate🎯 Why confidential reporting works

💡 Key idea

CRM exists because technically skilled crews still had accidents. The gap was never stick-and-rudder skill — it was communication, leadership and decision making, which is exactly why CRM treats teamwork as a trainable skill rather than a fixed trait.

💪 Assertive

States the concern clearly and directly, while staying respectful. The style CRM training aims for.

🤐 Passive

Avoids confrontation at the cost of the concern possibly never being raised at all.

😡 Aggressive

Gets the point across but risks a defensive reaction that shuts the conversation down.

Under real overload

Aviate — basic control of the aircraft, above everything else.
Navigate — know where you are and where you are going.
Communicate — everything else, shed or delayed if capacity runs out.

✈️ Pilot tip Confidential incident reporting only works if people trust it will not be used against them — a genuine just culture is what makes the reports honest in the first place, not the existence of the reporting form itself.

This guide explains general human-performance concepts for study purposes and is not a substitute for type-specific training or a medical opinion.