14 C.F.R. § 25.571
(a) General. An evaluation of the strength, detail design, and fabrication must show that catastrophic failure due to fatigue, corrosion, manufacturing defects, or accidental damage, will be avoided throughout the operational life of the airplane. This evaluation must be conducted in accordance with the provisions of paragraphs (b) and (e) of this section, except as specified in paragraph (c) of this section, for each part of the structure that could contribute to a catastrophic failure (such as wing, empennage, control surfaces and their systems, the fuselage, engine mounting, landing gear, and their related primary attachments). For turbojet powered airplanes, those parts that could contribute to a catastrophic failure must also be evaluated under paragraph (d) of this section. In addition, the following apply:
(1) Each evaluation required by this section must include—
(3) Based on the evaluations required by this section, inspections or other procedures must be established, as necessary, to prevent catastrophic failure, and must be included in the Airworthiness Limitations section of the Instructions for Continued Airworthiness required by § 25.1529. The limit of validity of the engineering data that supports the structural maintenance program (hereafter referred to as LOV), stated as a number of total accumulated flight cycles or flight hours or both, established by this section must also be included in the Airworthiness Limitations section of the Instructions for Continued Airworthiness required by § 25.1529. Inspection thresholds for the following types of structure must be established based on crack growth analyses and/or tests, assuming the structure contains an initial flaw of the maximum probable size that could exist as a result of manufacturing or service-induced damage:
(b) Damage-tolerance evaluation. The evaluation must include a determination of the probable locations and modes of damage due to fatigue, corrosion, or accidental damage. Repeated load and static analyses supported by test evidence and (if available) service experience must also be incorporated in the evaluation. Special consideration for widespread fatigue damage must be included where the design is such that this type of damage could occur. An LOV must be established that corresponds to the period of time, stated as a number of total accumulated flight cycles or flight hours or both, during which it is demonstrated that widespread fatigue damage will not occur in the airplane structure. This demonstration must be by full-scale fatigue test evidence. The type certificate may be issued prior to completion of full-scale fatigue testing, provided the Administrator has approved a plan for completing the required tests. In that case, the Airworthiness Limitations section of the Instructions for Continued Airworthiness required by § 25.1529 must specify that no airplane may be operated beyond a number of cycles equal to 1/2 the number of cycles accumulated on the fatigue test article, until such testing is completed. The extent of damage for residual strength evaluation at any time within the operational life of the airplane must be consistent with the initial detectability and subsequent growth under repeated loads. The residual strength evaluation must show that the remaining structure is able to withstand loads (considered as static ultimate loads) corresponding to the following conditions:
(5) For pressurized cabins, the following conditions:
(6) For landing gear and directly-affected airframe structure, the limit ground loading conditions specified in §§ 25.473, 25.491, and 25.493.
If significant changes in structural stiffness or geometry, or both, follow from a structural failure, or partial failure, the effect on damage tolerance must be further investigated.
(d) Sonic fatigue strength. It must be shown by analysis, supported by test evidence, or by the service history of airplanes of similar structural design and sonic excitation environment, that—
(e) Damage-tolerance (discrete source) evaluation. The airplane must be capable of successfully completing a flight during which likely structural damage occurs as a result of—
(4) Uncontained high energy rotating machinery failure.
The damaged structure must be able to withstand the static loads (considered as ultimate loads) which are reasonably expected to occur on the flight. Dynamic effects on these static loads need not be considered. Corrective action to be taken by the pilot following the incident, such as limiting maneuvers, avoiding turbulence, and reducing speed, must be considered. If significant changes in structural stiffness or geometry, or both, follow from a structural failure or partial failure, the effect on damage tolerance must be further investigated.
[Amdt. 25-45, 43 FR 46242, Oct. 5, 1978, as amended by Amdt. 25-54, 45 FR 60173, Sept. 11, 1980; Amdt. 25-72, 55 FR 29776, July 20, 1990; Amdt. 25-86, 61 FR 5222, Feb. 9, 1996; Amdt. 25-96, 63 FR 15714, Mar. 31, 1998; 63 FR 23338, Apr. 28, 1998; Amdt. 25-132, 75 FR 69781, Nov. 15, 2010; Amdt. No. 25-148, 87 FR 75710, Dec. 9, 2022; 88 FR 2813, Jan. 18, 2023]