Primary finding
Probable cause
The pilot's incapacitation for reasons that could not be determined because the airplane was not recovered from the ocean.
Investigator assessment
Analysis narrative
The commercial pilot was working on the development and modification of hardware and software systems for the experimental airplane, which was being adapted for unmanned flight; however, the purpose of the flight was for personal reasons. The flight was delayed a day so the pilot could work on the airplane and perform unknown maintenance to restore functionality to the batteries, which had been drained. After takeoff, the pilot contacted air traffic control, stating that he was at 18,100 ft and climbing to 21,000 ft. The controller responded that he was cleared to climb and maintain 25,000 ft, which was the altitude listed in the pilot's flight plan. About 4 minutes later, the pilot made his last radio transmission, which was a response to the controller's frequency change instructions. The pilot read back the new frequency correctly; he also made a slight stutter at the beginning of the transmission and double clicked the microphone. The controller checked to see if the pilot was on the frequency about 5 minutes later but did not receive a response. There were insufficient voice communications to determine if the pilot was experiencing hypoxia. Radar data indicated that the airplane made a continuous climb until reaching 25,000 ft and tracked a jet route, passing over a series of waypoints, consistent with the autopilot controlling the airplane. After the controller did not receive a response from the pilot, two military jets intercepted the airplane. Despite trying to get the pilot's attention, they were unable to get a response from or see the pilot inside the cockpit. The airplane overflew the destination airport and eventually descended into the ocean after 4 hours 22 minutes in flight, which was likely when the engine lost power due to fuel exhaustion. The airplane's flight track and the pilot's lack of responsiveness are consistent with pilot incapacitation. After impacting the water, the airplane floated for at least 42 minutes before it sank, which indicates that no catastrophic decompression event occurred because the airplane's pressure vessel was intact enough to not rapidly fill with water. The airplane eventually sank and was not recovered, which precluded any physical examination of the wreckage. Therefore, the configuration and status of the airplane's pressurization and oxygen systems could not be determined. The pilot had received training in the airplane and would have known how the pressurization system operated. He had been in a hypobaric chamber and was likely familiar with the symptoms of hypoxia. He reportedly did not use any medications and was in good health. Because the pilot's body was not recovered, an autopsy and toxicology testing could not be conducted. One of the military pilots who intercepted the airplane stated that, although he could not see anyone in the airplane, he saw what he believed to be a seatbelt shoulder harness fully forward and extremely tight. It is likely that the accident pilot was not visible because he was fully slumped over into the right seat or on the floor.
Source record
Factual narrative
Phoenix Deer Valley Airport reported the following weather conditions near the time of the departure: wind 200° at 8 knots, visibility 10 statute miles, sky clear, temperature 107°F, dew point 48°F, and altimeter setting 29.81 inches of mercury. A review of the airmen records maintained by the Federal Aviation Administration (FAA) showed that the pilot, age 39, held a commercial pilot certificate with ratings for single- and multi-engine land airplanes and instrument airplane. He held a flight instructor certificate with ratings for single-engine airplane and instrument airplane. The pilot was also a certified airframe and powerplant mechanic. His most recent second-class medical certificate was issued in February 2015 and had the limitation that he must wear corrective lenses. On his most recent FAA medical certificate application, the pilot reported a total flight experience of 2,150 hours of which 50 hours were acquired in the last 6 months. The pilot's personal flight records contained entries up to June 17, 2015, at which time the pilot recorded that he had about 4,025 hours of flight experience, which included his pilot-in-command time of unmanned aircraft. On an application for insurance for the accident airplane the pilot reported that he received 25 hours of Lancair Evolution initial flight training from Elite Pilot Services in December 2014. He additionally reported that he had attended Test Pilot Professional Training at the National Test Pilot School in December 2007 and had previously been in a hypobaric chamber to learn his symptoms of hypoxia. He reported that he did not use any medications. According to the airplane's radar flight history, 18 flights were made between June 2015 and the accident flight. The airplane had been flown from Phoenix to Hesperia on June 14, June 21, and August 3. The pilot's friends and acquaintances reported that he had been working long hours but could perform and operate well with little sleep. The pilot reported in the company records that from August 3 to 10, he worked every day for a total of 83 hours; he had not entered his more recent hours. According to the pilot's girlfriend, he was in good health and had recently run a half marathon. The pilot's body was not recovered so an autopsy and toxicological testing could not be performed. The Lancair Evolution was developed by Lancair and is available as an amateur-built kit from Evolution Aircraft. The high-performance, pressurized airplane is constructed mainly of composite materials and is equipped with four seats, retractable tricycle landing gear, and traditional flight control surfaces. The accident airplane was manufactured in 2009 as serial number EVO-002 and received a special airworthiness certificate in the experimental category for the purpose of research and development in October 2014. The airplane was equipped with a Pratt and Whitney PT6A-135A engine, serial number PCE-P21565. According to airplane records, the engine was installed new in December 2014. An airplane discrepancy list dated February 2, 2015, included an operational check of the pressure controller. There was a further notation that the cabin pressure could not maintain the maximum differential possibly due to a cabin leak or the outflow valve not closing entirely. The records indicated that various maintenance was performed, and the problem was rectified. A new carbon monoxide detector was installed in April 2015. The airplane was equipped with two EnerSys sealed lead acid batteries. The standard battery installation is two sealed lead acid 24-volt batteries wired in parallel located on the cabin side of the firewall forward of the pilot and co-pilot rudder pedals. About 1700 on the day of the accident, the airplane was fueled with 70 gallons of fuel topping the wing tanks to full. The airplane was equipped with a Garmin 900X primary flight display (PFD) and multifunction display (MFD) arrangement with a Radiant Power Corporation (formerly Moritz) touchscreen system between the units. The Moritz touchscreen controlled cabin pressure settings, cabin temperature, cabin fan, and internal and external lighting. A small overhead electrical subpanel controlled pitot heat, prop heat, door seals, the deice door, XM satellite radio volume, and the environmental control system (ECS) flow pack. An oxygen subpanel with an oxygen pressure gauge and switch was mounted to the right of the MFD. In the several months before the accident, the pilot had been working on the development of a prototype to replace the Radiant/Moritz touchscreen control panel, which had a history of failures. People familiar with the pilot and the airplane stated that the pilot's prototype touchscreen was mounted in the panel, and the Radiant/Moritz touchscreen (which had been removed from the panel but was still connected to the airplane's systems) would rest on the seat beside the pilot. The pilot told a co-developer of the prototype touchscreen that, when he returned from the accident flight, he would give the prototype to the co-developer so that software could be loaded into the unit. The co-developer stated that he thought the pilot still had the Radiant/Moritz touchscreen installed in the airplane (resting on the seat adjacent), and it was possibly a unit that had a history of failing when it overheated. He further stated that, if the Radiant/Moritz touchscreen stops working, it becomes a monitoring device. The Lancair repair station manager stated that a few weeks before the accident, the pilot had flown from Oshkosh, Wisconsin, to Phoenix with his prototype touchscreen installed on the airplane and a failed Radiant/Moritz touchscreen in his possession. Moritz/Radiant Touchscreen The Moritz/Radiant touchscreen had five main screen selections: cockpit pressure control system (CPCS) control, climate control, breaker control, main, and utility. The CPCS control page had an automatic mode selection, an option to set field elevation, and showed "cabin altitude comm error" and "differential pressure comm error" if these conditions occurred. The Breaker Control page contained the electronic circuit breakers for numerous items, including the CPCS, fan power, and air conditioning. The CPCS button would map to pages where the cockpit pressure control system could be configured. In the event of cabin pressure exceeding 12,000 ft or differential pressure exceeding 6.7 pounds per square inch (psi), the CPCS button background would change from blue to red. There would also be an audible alarm if either of these conditions occurred. Pressing the red button would take the pilot to the CPCS page where the pressure error data would be indicated in red. The unit displayed actual cabin pressure in feet and had a yellow background if cabin altitude exceeded 10,000 ft. The CPCS page did not need to be selected for the pilot to receive warnings (including if no power was going to the outflow valve). The airplanes' outflow valve supplied an analogue signal at the selected pressure altitudes that was fed to the CO Guardian carbon monoxide detector unit, which also provided cabin pressure warnings. This signal triggered the same aural tone via the audio panel as would be sent for a high carbon monoxide level in the cabin. The tone that the CO Guardian transmitted was not triggered by an output from the outflow valve. According to Lancair builders, the warning tone is a loud, intermittent beeping sound clearly identifiable as a warning and would not be confused with any other sound normally heard in flight. According to Lancair, the most common type of failure on the Moritz/Radiant touchscreen was the touchscreen becoming unresponsive or "going black." They suspected that the cause of these failures was heat sensitivity of the unit, which warped the touchscreen board. If such a failure happened during flight, the pilot would lose the ability to control the screen-based functions, includin