Right Fuel, Wrong Aeroplane

A business jet on a stand at first light, a road tanker alongside it, three people at work. Everything about this picture is ordinary, and one thing in it decides whether the aeroplane flies: whether what is in that tank is what this aircraft takes.

Four things before you start. The stand is a generated image. Four of the five tests for a real 360 panorama pass on it, so it sits on a sphere honestly, but it is a plausible stand and not a photograph of anybody's. The fifth test fails, and you should know where: the picture does not quite close, and there is one vertical seam behind you where the aircraft's belly butts straight into the refueller's cab with nothing in between. Nothing you are asked to find is near it. The two nozzle photographs later on are real, and they are the only photographs in this file. And every rule quoted carries its clause number from NFPA 407, the standard for aircraft fuel servicing, so you can go and check it.

Turn round and take the stand in. Drag to look; there is a tanker, a business jet, three people, a hose running between the two of them, and more of the apron behind you than you can see from here.

Drag to look around. Continue lights when you have had a proper look at the stand.

Five things on this stand, numbered. Open each one, and the notes stack up as you go, and Continue lights when all five are read.

Find the legend along the top of the tank and tap it.

JET A. Two words, one product, and it is worth being exact about what they have just settled for you.

NFPA 407 6.1.11.3.3 is specific about what has to be on that sign: the words FLAMMABLE, NO SMOKING, and the name of the product CARRIED, such as JET A, JET B, GASOLINE, or AVGAS. Letters at least 75 mm high (6.1.11.3.1), in a colour contrasting sharply with the background (6.1.11.3.2), weather resistant (6.1.11.3.4), and viewable from all sides of the vehicle (6.1.11.3).

This vehicle names one product. It is telling you, correctly and in three-inch letters, that there is only one thing it can deliver.

A dual-product truck asks a question at the panel: which of these two. This one does not ask it. There is nothing to select and nothing to get wrong, and a whole class of misfuelling has been engineered off this stand before anybody arrived.

THE OTHER CLASS IS UNTOUCHED. The truck still has to be at the right aeroplane.

What goes in the aircraft is decided by the aircraft. NFPA 407 B.4.3 draws the line in one sentence each: aviation gasoline is fuel for RECIPROCATING engine-powered aircraft, of any octane rating; JET A and JET A-1 are kerosene grades for TURBINE engine-powered aircraft, whatever the trade name.

Put one in the other and you have what 3.3.24 calls misfueling: the accidental fueling of an aircraft or refueling vehicle tank with an incorrect grade of product. The NTSB puts the consequence more plainly: it typically results in a complete loss of engine power, which may lead to serious injuries and death.

The legend on that tank reads JET A. What has it settled?

Read the clause again: the sign names the product CARRIED.

6.1.11.3.3 requires the name of the product CARRIED to appear on the sign. It is a statement about the vehicle's contents and nothing else.

The second answer is the accident. The third is the reason it keeps happening: a single-grade truck FEELS like a decision that has already been made, and it is only half of one.

What the aircraft takes is settled by the aircraft. B.4.3: avgas for reciprocating engines, JET A and JET A-1 for turbine engines. And it is settled before anybody walks to the wing.

There is supposed to be a physical defence, and here it is. Open it and look at the two spouts.

NTSB Safety Alert SA-050, Figures 1 and 2. Left: an avgas nozzle. Right: a Jet A nozzle.

In SA-050's words: avgas nozzles are small and round and fit into smaller opening fuel filler ports, while jet fuel nozzles are larger and flattened like a duck's bill, requiring a larger port. A duck's bill will not go into an avgas filler. That is the defence, and on a vehicle carrying only Jet A it is the defence you are leaning on.

IT GETS REMOVED FROM TRUCKS LIKE THIS ONE. NTSB investigations found operators fitting JET trucks with a smaller avgas or round jet spout nozzle, to make life easier with small turbine helicopters, and those nozzles then fit the filler ports of aircraft that require avgas. Separately, some engine conversions under an STC never required the filler port to be resized, so two aircraft that look the same now take different fuel.

A Cessna 421C was fuelled from a jet truck carrying a round nozzle. Both engines lost power on the initial climb and four people were killed (CEN14FA462). The geometry had been designed to make that impossible. Somebody had made it possible again, for a good reason.

Turn to the underside of the wing and hold your view on the coupling going into the open panel.

That is a pressure fuelling connection into a single-point adapter, not a hand-held spout over an open filler. 4.1.3.4: a nozzle for pressure fuel servicing has to be attached securely to the aircraft adapter BEFORE it can be opened. 4.1.3.5: it cannot be disengaged until it is fully closed.

Look at what the standard just promised. It promised the coupling will not open until it is properly on, and will not come off until it is shut. Both are about spillage and static. Neither is about grade.

A single-point adapter under a wing is sized for pressure fuelling. It does not care which kerosene, or which gasoline, is on the other end of the hose. The duck's bill you just looked at is a defence that protects a small piston aeroplane from a jet truck, and it offers this aircraft nothing at all. It would offer that piston aeroplane nothing either if this truck were parked at it, because nobody would be standing here: they would be up on the wing at an overwing filler, which is the one place the duck's bill actually gets tested.

So on this stand, with this vehicle, the grade is decided entirely by people, paperwork and what gets said out loud.

Thirty seconds of radio. The order is correct in every respect but one, and the one is not the fuel. Play it.

FUEL DESK: Stand four, fuel order. Jet A, twelve hundred litres, both wings. Read back.

STAND FOUR: Stand four, read back: Jet A, twelve hundred litres, both wings. Desk, I am on stand four and stand four is the Baron. That is a piston twin. It takes avgas, and I am on the Jet A truck. I am not connecting.

FUEL DESK: Stand by. You are right. The Jet A order is stand five, the Gulfstream. Stand four is the Baron. Cancel that order.

STAND FOUR: Order cancelled. Nothing goes on stand four until I have a new one, and I have not connected.

[A scripted exchange written for this training, spoken by two synthetic voices. Not a recording of a real operation.]

Tap the operative at the panel.

The read-back did not work because a rule was followed. It worked because the person holding the radio KNEW WHAT JET A IS FOR, and knew what a Baron is.

NFPA 407 4.2.2.1 asks for exactly that, and it is easy to read past: only personnel trained in the safe operation of the equipment AND THE FUELS THEY USE, the operation of emergency controls, and the emergency procedures, are permitted to handle fuel. The fuels they use. Not just the pump.

A read-back by somebody who does not know that a Baron is a piston aeroplane is four words repeated back correctly, and the aeroplane still gets the wrong fuel.

This truck carries one grade, and it is the right grade for something. Which of these will actually stop it reaching an aircraft that should not have it? Choose all that do.

The first two, with a caution on the second: geometry only works while nobody has swapped the nozzle, and SA-050 exists because people had.

Notice what is not on that list and could easily have been: the legend on the tank. It is correct, it is readable, it is required by 6.1.11.3.3, and it would have said JET A just as loudly the whole way to the wrong aeroplane.

The third one is the trap, and it is the reason misfuelling is so dangerous. SA-050: once the wrong fuel is pumped in, identifying that misfueling has occurred can be difficult, if not impossible. A visual check alone may not detect that Jet A and avgas have been mixed. The mixture can appear to be just avgas. In one accident the pilot sumped the fuel, it looked right, and he had already signed a receipt saying Jet A (CEN15LA199).

Every reliable control here acts BEFORE the fuel moves.

There is somebody on this stand who is not touching the vehicle and not touching the aircraft. Find them and tap them.

Radio in hand, standing off the wing, watching. This training cannot tell you what that person's job is on any real stand and it is not going to guess, because the picture is generated and nobody's procedures were seen.

What it can tell you is where the last card's control actually lives. The read-back that stopped the wrong order was two voices, and one of them was not at the panel. Every reliable defence in this subject is a conversation between somebody who knows what is on the truck and somebody who knows what is in front of it, and all of it happens before the deadman is pressed.

4.2.2.1 covers every one of them: only personnel trained in the safe operation of the equipment and the fuels they use are permitted to handle fuel.

Fuelling is finished. Four actions, all of them correct. Put them in the order you would carry them out. One of the four is not visible anywhere in this picture, and the explanation will say so.

Tap them in order. Tap one you have placed to take it and everything after it back.

Release the deadman and let the flow stop

Close and disconnect the connection at the aircraft

Disconnect the bonding lead

Stow the hose, keeping the nozzle off the ground

Correct, and every gap in that order is a clause, not a habit.

Not that order. The bond is the exception: it is the last thing to leave.

This one is written down twice. 4.2.5.5: bonding and fuelling connections shall be disconnected in the REVERSE ORDER OF CONNECTION. The bond went on first, so it comes off last. 4.2.5.1.1 says the same thing from the other side: the bond is maintained until the fuelling connections have been removed.

The flow stops first because flow is under the deadman and nothing else (4.2.6.1), and stowage is last because 4.2.3.1 to 4.2.3.3 are about what happens FOLLOWING fuelling: hoses removed, properly stowed, and nozzles not dragged along the ground.

THE ONE YOU CANNOT SEE IS THE BOND. 4.2.5.1: prior to making any fuelling connection, the fuelling equipment is bonded to the aircraft by a cable, giving a conductive path that equalises potential. 4.2.5.1.2: grounding for the sole purpose of aircraft fuelling is not permitted. There is no bond cable visible anywhere in this panorama. That is a fact about the picture, and this training will not paint one in to make itself look tidier. The clause is real and the order it fixes is real, which is why the step asks you for it anyway.

There is a way to make a vehicle mechanically refuse the wrong product, and NFPA 407 mentions it in the annex rather than the body: it is a recommendation, not a requirement.

A.6.1.3.12.2.3: an optional precaution against misfueling of aircraft fuel servicing tank vehicles is to equip the coupler and truck fitting with CODED LUGS OR A MECHANICAL DEVICE to ensure product selection and prevent mixing of products. The annex adds that this might not be feasible on over-the-road tank vehicles.

Now read that against the vehicle you are standing beside. It is about PRODUCT SELECTION and MIXING: loading the tank, and the couplings that fill it. A single-grade truck has already closed that gap by having one product. Coded lugs guard the moment somebody tries to put avgas into a tank marked JET A. They do nothing whatever about which aeroplane the truck then drives to.

The mechanical defence exists, it is not mandatory, and it protects the half of this subject that this vehicle had already protected.

On the tank side, a hazard placard: UN 1863, class 3. 6.1.11.3.6: hazardous material placards meeting 49 CFR 172.504 or equivalent are displayed on ALL FOUR SIDES of a fuel servicing vehicle. Signs contrast sharply with their background (6.1.11.3.2) and are weather resistant (6.1.11.3.4).

Weather resistant is not decoration. SA-050's advice to pilots is to make sure fuel placards are correct, in the right place and EASY TO READ, because placards degrade over time with exposure. A marking nobody can read has already stopped working, and it looks exactly like one that is working.

One note on the picture, and it applies to every card you have seen. This stand is generated, and unlike most generated pictures its markings genuinely resolve: you have read six of them by now. That makes them usable as SUBJECTS. It does not make them EVIDENCE. Nothing here says this vehicle complies with 6.1.11.3.6. It says what 6.1.11.3.6 asks for, standing next to a drawing of it.

This scene opens facing the vehicle's working side: the control panel up on the left, the rear manifold low on the right. It is the same stand and the same picture, and you can still turn round and look anywhere in it.

The last two things in this training are controls, and controls are something you study rather than somewhere you go, so the view is brought to them instead of leaving you to hunt. Both are marked. Tap each one when it is asked for.

Tap the gauges and the digital meter.

On a dual-product vehicle, this panel is where the product is SELECTED. On this one there is nothing to select, so everything here decides HOW MUCH and HOW FAST, and holds the means of stopping it.

4.1.3.1: any valve controlling the flow of fuel into or from an aircraft has a deadman control. 4.2.6.1: the flow is controlled by that deadman. Every emergency fuel shutoff station on the vehicle is placarded EMERGENCY FUEL SHUTOFF in letters at least 50 mm high (6.1.11.4.1), with the method of operation shown by an arrow or the word PUSH or PULL (6.1.11.4.2), and is accessible at all times (4.2.4.1).

Those clauses are quoted here because they are the rule. This is a generated picture: do not read the panel in it as a compliant one, or as a non-compliant one.

Tap the couplings at the vehicle's rear manifold.

The last marking in this training, and the least visible one.

5.1.11.5: fuel transfer piping is marked in accordance with EI 1542 as to the product type. EI 1542 is the Energy Institute's standard for identification markings on dedicated aviation fuel equipment: the colour bands and product codes that run along pipework so that a line carrying one grade cannot be mistaken for a line carrying another.

On a single-product vehicle that marking is doing a quieter job than on a dual one. It is not keeping two of this truck's own hoses apart, because there is only one. It is keeping THIS truck's pipework from being coupled to something that is not Jet A, at the depot, at the hydrant, at the next piece of equipment it meets. The grade on this stand was decided a long way before this stand.

Twenty-one steps, and the whole of it comes down to one sentence. The truck tells you what it has. It does not tell you where to take it.

A single-grade vehicle is a real defence and it deserves the credit: nobody on this stand can select the wrong product, because there is only one to select. What it cannot do is the other half, and the other half is where the accidents are. Every case NTSB SA-050 cites has the same shape. The fuel was right. The aeroplane was not.

The defences, in the order they are worth anything: the order and its read-back, by somebody who knows what the grades are for (4.2.2.1); the markings, while they stay readable (6.1.11.3, 5.1.11.5); coded lugs, which guard the tank rather than the destination, if they are fitted at all (A.6.1.3.12.2.3); and the shape of the spout, until somebody changes it (SA-050). After the fuel is in there is very little left. A visual check may tell you nothing, because the mixture can look like avgas.

What this was: a demonstration. The stand is a generated image, its seam was declared rather than hidden, and no step asked you to judge the work in it. The two nozzles were real: NTSB SA-050, Figures 1 and 2. Every rule carried its clause from NFPA 407 (2022), and the project's SOURCES file lists all 32 of them with their sources, and the list of what this training deliberately does not cover.

It is not a qualification and finishing it certifies nobody.