Boeing caps cockpit alerts so pilots trust them — under 10% of flights sound any

In a 2015 essay on a 16-year-old patient who survived a 39-fold medication overdose, physician Bob Wachter asked what hospitals could learn from aviation about alarm fatigue — electronic warnings that misled staff or drowned in cacophony until nobody listened. The aviation answer had been built the hard way: early 'gear down' warnings wired to the throttle fired falsely every time pilots slowed the plane, so crews learned to disconnect them — and then ignored the alert when it was real. In the early 727 days, alarms were so frequent and wrong that pilots yanked the circuit breakers.

Boeing's fix is organizational first. One team owns integration of the entire cockpit and vets every proposed alert; when the window-heat engineer brings 25 messages he wants shipped, the pilots say 'We don't care!' — none make the flight deck. Warnings are rationed into a strict hierarchy: red light, red text, voice and shaking stick only for impending catastrophe; about 40 warnings get red-and-voice; roughly 150 cautions get amber and one modality; advisories get an indented line of text. Red is never used for anything but top-level warnings, and each alert pops the matching checklist.

The result: the percentage of flights that trigger any alert at all — warning, caution or advisory — is well below 10 percent, on aircraft recording more than 10,000 data points per flight. Shown the density of alarms in an intensive care unit, Boeing's chief of cockpit integration could only say, 'Oh, my goodness.'

False positives are the worst thing you can do to a warning system — they train humans to tune out, and aviation learned that through accidents.

Central ownership beats subsystem lobbying: only a team accountable for the whole cockpit can say no to the 25 messages each component engineer wants.

Strict scarcity preserves signal: with any alert on under 10 percent of flights, a sounding alarm actually means something.

A consistent grammar — red, amber, indented text, matched checklists — lets pilots parse severity at a glance instead of re-deciding each time.

Every extra warning spends trust: budget alerts centrally, rank them ruthlessly, and treat false positives as system poison.

Wachter's series closed by urging hospitals to import the discipline — prioritized alarms, ruthless filtering, dedicated ownership — that aviation's tragedies had forced it to build; the Boeing engineers, confronted with medicine's alarm density, were astonished.