Flight Controller Design
Table
| Subsystem | Failure Mode | Effect | Severity | Likelihood | Detection | RPN | Mitigation |
|---|---|---|---|---|---|---|---|
| LiPo battery | Reverse polarity at J2 | Charger/regulator damage, heating | 8 | 3 | 4 | 96 | Use keyed JST PH connector, verify polarity in bring-up, consider reverse-polarity protection before production. |
| Charger | Charge current too high for selected cell | Battery stress/heating | 8 | 3 | 5 | 120 | R7 sets about 100 mA; require protected 100–250 mAh+ LiPo and verify cell charge rating. |
| 3V3 rail | LDO dropout at low battery | ESP32 brownout/data loss | 4 | 6 | 3 | 72 | Firmware brownout handling; consider buck-boost regulator for production. |
| ESP32 RF | Antenna keepout violated | Poor wireless range or certification risk | 5 | 4 | 5 | 100 | Enforce antenna keepout in PCB layout; review against Espressif datasheet. |
| IMU | Mechanical mounting flex/vibration | Inaccurate telemetry | 4 | 5 | 4 | 80 | Place IMU near rigid mechanical reference; validate with known motion tests. |
| Flash logging | Power loss during write | Corrupted log sector | 3 | 5 | 4 | 60 | Use wear-leveling/log records with CRC; buffer and commit atomically in firmware. |
| USB-C | ESD event on connector | USB/MCU damage | 5 | 3 | 3 | 45 | USBLC6-2SC6 ESD array included on D+/D-. |
| Firmware | Wi-Fi active too long | Short runtime / hot battery area | 3 | 6 | 3 | 54 | Duty-cycle Wi-Fi; stream compressed summaries; measure active current. |
Scope
Failure Mode Table
Top Risk Actions
Open Items