SystemCrew Management & Training

Airline Crew Recovery

Airline crew recovery that re-crews every broken pairing legally, with the crew told in 20 minutes

Every broken pairing re-crewed legally before it costs a flight, crew told in 20 minutes.

See one case, screen by screen ↓
demo18,420checksof crew legality since 06:00, on 3,912 crew members and 1,284 pairings
demo5 of 9repairsfailed by the independent Rules Check agent before the crew controller saw them
demo$3,030for the recommended reserve repair, against $61,400 to cancel two flights
target20minfrom the break to the crew told
In short

What is Airline Crew Recovery?

Airline crew recovery, also called IROPS crew recovery or crew disruption management, is the day-of-operation work of re-crewing flights when a delay, sick call or cancellation pushes a crew past its duty, flight time or rest limits. Airline Crew Recovery puts seven agents on the crew desk. They re-check every crew's legality on every event, build and independently check the repairs, show each one's knock-on and cost, and draft the crew notifications. A crew controller chooses, signs and sends.

How to choose AI for airlines: a buyer's guide to agentic AI solutions →

Updated

The problem

Why airline crew recovery is still a race against the departure

Airline crew recovery starts the moment a delay, a sick call or a cancellation hits the day of operation. The crew controller has to find which crews it pushes past their Part 117 flight duty period, flight time or rest limits, or the flight attendants' 10-hour rest under 14 CFR 121.467, and re-crew those flights before they leave. Today the crew system raises its alert when the break is already a fact. The controller works out the limit by hand, phones reserves down the call list and checks the pilot and flight attendant agreements from memory.

What the controller cannot see is what the repair does next: the pay protection and reassignment premium under the agreement, tomorrow's flight retimed for rest, a base left under its reserve floor for the evening bank. In December 2022 a US carrier's crew scheduling system was overwhelmed by a winter storm. The result was 16,900 cancellations, more than $600 million in refunds and a record $140 million DOT penalty.

typical16,900flightscanceled when one US carrier's crew scheduling system was overwhelmed in December 2022
typical$140Mrecord DOT penalty that followed
typical$600M+in refunds and reimbursements ordered
Where a broken pairing's minutes goestimated
By hand110 days
With the solution19 days
  • Spotting the break and working out the limit15 → 1 d
  • Finding a legal reserve, swap or deadhead25 → 3 d
  • Checking the agreements, qualifications and call order15 → 1 d
  • Working out tomorrow, the reserve floor and the cost15 → 3 d
  • Telling the crew, hotel and station and waiting for replies30 → 10 d
  • Writing up the decision10 → 1 d

Estimated split, in minutes, for one broken pairing at a busy crew base, worked by hand and with the solution.

How it works

How a broken pairing is repaired

Seven agents watch every crew's legality, build and check each repair, show its knock-on and draft the calls; a crew controller chooses and sends.

What comes in
Events in18,420 checks a day · delays, sick calls, schedule changes
Agents at work
Legality Watchmargin in minutes
Then
Crew Recoverybuilds repairs
Then
Rules Check
Knock-on
Reserve
Then
Notificationafter approval
A person decides
Crew controllerasks, chooses and sends
What comes out
Legal pairing
Crew told
Decision logged
One case, step by step

Airline crew recovery, one broken pairing at a time

Tuesday, October 13, at the Denver crew base of Corvane Airways. CV 1442 is two hours late, and pairing 4127 is about to break. Here is what happens next, screen by screen, in the working solution.

  1. 0113:52

    The break reaches her before the gate agent does

    Rosa Delgado · Crew Controller

    Since 06:00 the agents have re-checked 3,912 crew members 18,420 times and repaired 9 pairings with Rosa. Her Today screen shows 3 pairings broken, 11 near a limit and 14 DEN reserves on the A320 family. The Legality Watch agent leads with the one that needs her before 15:05: CV 1442's two-hour delay breaks pairing 4127.

    “Captain Okafor and FO Reyes would land in MSY at 20:35, 1 h 45 past their 18:50 limit.”

  2. 02The board

    The day's pairings as chains, the broken link glowing

    Rosa Delgado · Crew Controller

    Pairings at DEN are drawn as chains of flights on one time axis, each crew's duty limit marked on its row. Pairing 4127's link at CV 1587 glows red: CV 1442 is two hours late with a bleed-air valve change. Two other crews are near a limit. The cabin crew stay legal at 14 h 00 of 15 h.

  3. 03Duty clocks

    The flight duty period, worked out and cited

    Legality Watch agent

    Captain Okafor reported at 06:50 for four segments, so the Table B flight duty period limits give him 12 hours and a duty end of 18:50. The projected flight duty period is 13 h 45. Rest before tomorrow would be 9 h 05, 55 minutes short of the 10 hours. Flight time is 6 h 16, inside the 9-hour limit. Every value links to its rule.

    The Legality Watch agent never changes a roster. It flags, cites the rule and hands the pairing on.

  4. 0413:52 to 13:55

    Nine repairs built, five failed by an independent check

    The agents

    The Crew Recovery agent reads the roster, the ops feed and maintenance control, then builds 9 repairs: reserves, swaps, a deadhead, an extension and a cancellation. The Rules Check agent re-checks each one on its own and fails 5: 117.19, 117.21, a lapsed qualification, timing and the call-out window. The Knock-on agent simulates 36 hours ahead, and the Reserve agent checks DEN coverage.

    “Recommended option A to the Crew Controller · Waiting for your choice; nothing sent.”

  5. 05She asks

    “Why not extend Captain Okafor?”

    Rosa Delgado and the Rules Check agent

    Rosa asks in plain words. The Rules Check agent answers with its sources. The rule allows only one extension over 30 minutes before a 30-hour rest, and he used one on October 10: 45 minutes on CV 1720, reported to the FAA on October 12. His last 30-hour rest ended October 9, and company policy forbids planning past a limit.

    “So I failed that option; you will find it with the other four on the compare page.”

  6. 06Compare

    Four legal repairs, side by side

    Crew Recovery agent

    A: DEN reserves Capt. Marisol Vega and FO Ethan Brooks fly both legs, with a 1 h 25 margin, for $3,030. B: swap with pairing 4133 for $3,550, but it breaks that pairing and still retimes tomorrow's CV 1588. C: two DEN reserve pairs for $4,860, leaving 10 reserves against a floor of 12. D: cancel CV 1587 and CV 1588 for $61,400, with the Duty Manager's co-approval. Each option passed 12 of 12 rules.

  7. 0736 hours ahead

    What option A does to tomorrow, priced

    Knock-on agent

    CV 1588 MSY–DEN leaves at 08:35 CDT instead of 07:40 so Vega and Brooks get their 10 hours of rest, at $1,850. 112 passengers are booked, and all six DEN connections still make their flights. DEN reserves go from 14 to 12, and the floor of 12 holds. Okafor and Reyes are released with pay protection, $1,180, and the MSY hotel changes names at no charge.

    “Mark each item fine or flag it before you choose.”

  8. 08Chosen

    She chooses with a reason code and her e-signature

    Rosa Delgado · Crew Controller

    Rosa picks option A and the reason code R2, “Reserve covers, knock-on accepted”. The dialog restates the repair: Vega and Brooks report at 15:05 at DEN gate B32, fly CV 1442 and CV 1587, lay over in MSY and fly CV 1588 tomorrow. Nothing has been sent yet.

    “I choose this repair as Rosa Delgado, Crew Controller — e-signature, Oct 13, 2026, 14:10 MDT.”

  9. 0914:12

    Six messages sent on her approval, silence becomes a call

    Notification agent

    The Notification agent drafts six messages: one each for Vega, Brooks, Okafor and Reyes, one for the four flight attendants and one for the crew hotel. Rosa sends all 6 at 14:12. All six acknowledge by 14:21. FO Reyes has not replied after eight minutes, so the agent calls her at 14:20 and she acknowledges by phone.

    “Pairing 4127 is legal again … no flight canceled. 20 minutes from the break to the crew told.”

  10. 10On the record

    Every step chained on the audit trail

    Grant Whitaker · Crew Scheduling Manager

    Every agent step and every human decision is listed, newest first, each row chained to the one before it so a change to any row breaks the chain. The evidence package exports for a grievance, an FAA question or an internal review. At night the Day Review agent writes up the day for Grant to sign.

Who it’s for

Built for everyone on the crew desk.

The same broken pairing, seen by four of the people who carry it: what the day looked like, and what it looks like now.

RD
Rosa DelgadoCrew Controller · DEN desk, Operations Control Center
Crew Controller
Before
Learns of a break when it is already a fact, works out the limit by hand and phones reserves down the call list.
Now
Sees the broken link before the gate agent calls, asks the agents why, and chooses one of four checked repairs with its cost and knock-on.
TL
Theo LindgrenReserve Crew Coordinator · call order and the evening floor
Reserve Crew Coordinator
Before
“Use a reserve, sure — but don't leave me empty for the evening bank.”
Now
Sees reserves by base, fleet and seat in call order, each with its legal-until time, and the evening forecast against the floor of 12.
GW
Grant WhitakerCrew Scheduling Manager · owns the rules, signs the day review
Crew Scheduling Manager
Before
“Show me every rule you applied and where it lives.”
Now
Approves rule and threshold changes, signs the day review written from the audit trail, and approves or rejects the lessons it proposes.
NF
Naomi FischerDuty Manager · Operations Control Center
Duty Manager
Before
“If you cancel, I need to know why a reserve couldn't fly it.”
Now
Co-approves any repair that cancels a flight, and sees the cancellation priced beside the legal reserve and swap repairs that would avoid it.
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents watch every crew's legality, build and check each repair, show its knock-on and draft the calls; a crew controller chooses and sends.

Legality Watch

Re-checks every crew member on every delay, sick call and schedule change, and every 5 minutes. It works out flight duty, flight time, rest and cumulative limits, pilots and cabin crew separately, and flags near-limit and broken pairings with the margin in minutes.

  • Never changes a roster
  • Every flag cites its rule and the record
Crew Recovery

Builds up to 12 repairs for a broken pairing: reserves, swaps, deadheads, retimes, extensions and cancellations. It ranks the ones that pass by cost, knock-on and reserve coverage, and re-plans around the controller's instruction, such as “use Hale's crew instead”.

  • Shows only repairs the Rules Check agent passes
  • Never assigns or contacts a crew member
Rules Check

Re-applies Table B and C, 117.11, 117.19, 117.21, 117.23, 117.25, 121.467, the pilot and flight attendant agreements, company policy and each crew member's qualifications to every repair, on its own.

  • Never reads the Crew Recovery agent's reasoning
  • Fails any repair it cannot cite
Knock-on

Simulates each repair 36 hours ahead: tomorrow's flights and rest, other crews' pairings, reserves, hotels, passengers and pay. It prices every line from its agreement, contract or the delay-cost table.

  • Never rebooks or retimes anything
  • Every price names its source
Reserve

Keeps each reserve's legal-until time under 117.21 by base, fleet and seat, offers reserves in the agreement's call order, and forecasts the evening need against the base floor.

  • Never skips call order
  • Never holds or releases a reserve; the Reserve Crew Coordinator decides
Notification

Drafts one message per person, plus call scripts for reserves. It sends them after a Crew Controller approves, calls anyone who has not replied in 8 minutes and tells the Reserve Crew Coordinator at 15 minutes. After approval it updates crew tracking and the crew hotel.

  • Never sends before approval or changes the approved text
  • Never calls crew in rest
Day Review

Writes up the day from the audit trail at 22:00: every break and repair, how long the crew waited to hear, what it cost, any extensions, and lessons to approve.

  • Never edits the record
  • A person signs
Crew controller

Chooses every repair; the Duty Manager co-approves a cancellation. The agents propose; a named person decides.

Ask in plain words

Ask the agents about any crew, pairing, reserve or rule

Ask why, or tell the agents what to do in plain words. Every answer points to the rule, the roster record or the ops feed message behind it, and no crew member is called, assigned or released until a Crew Controller approves.

Why can't Captain Okafor fly CV 1587?

He reported at 06:50 and today has four segments, so Table B ends his duty at 18:50. CV 1442 is two hours late, so CV 1587 would land at 20:35, 1 h 45 past the limit. An extension is not available: he used one over 30 minutes on Oct 10 without a 30-hour rest since.

What happens to tomorrow's CV 1588?

With option A, Vega and Brooks are released in MSY at 20:50 MDT and need 10 hours of rest, so CV 1588 leaves at 08:35 CDT, 55 minutes late. 112 are booked; all six DEN connections keep at least 50 minutes. Cost about $1,850. Option C keeps 07:40 but leaves DEN with 10 reserves against a floor of 12.

Use Hale's crew instead

Re-planned and re-checked: Captain Hale and FO Kowalski land at DEN at 14:15 and are legal to 22:45 with four segments. Their CV 1621 to BZN then needs reserves Lowell and Park, and the lost layover pays a $520 premium. They land in MSY at 20:35 like any crew on CV 1587, so CV 1588 still leaves 55 minutes late. Total $3,550 against $3,030, and it changes two crews instead of one.

How many DEN reserves will be left tonight?

14 now. Option A uses two, leaving 12 against an evening need of 11 and a floor of 12. Keller and Lin (737 MAX 8) are held for pairing 4166.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

Today on the crew deskPairings broken now and near a limit, DEN reserves against the floor, break-to-crew-told time, what needs the crew controller and what the agents did.
Pairing chainsThe day's pairings as chains across their flights, each crew's duty limit marked, the broken link glowing, beside the conversation with the Crew Recovery agent.
Duty clocks for one pairingToday's legs, the Part 117 flight duty period, flight time and rest clocks, the rules applied and the events that broke the pairing.
How the agents got thereEach agent step for one broken pairing: roster and ops feed read, nine repairs built, five failed by the independent Rules Check, 36 hours simulated, reserves checked.
Ask whyThe crew controller asks why the captain cannot be extended, and the Rules Check agent answers under 117.19 with its sources.
Repair options comparedFour legal crew recovery options: who flies, legal margin, knock-on, reserves left, flights canceled, rules checked and the cost of each line.
Knock-on, 36 hours aheadWhat a repair does to tomorrow's flight and rest, passengers and connections, reserves, released crew pay, cabin crew and the hotel, priced line by line.
Choose and signThe chosen crew reassignment restated, a reason code, a note for the record and the crew controller's e-signature.
Crew told and acknowledgedNotifications sent on approval, six of six acknowledged, a phone call after eight minutes of silence, and the pairing legal again.
Legality watchThe Legality Watch agent sums up the crews near a limit and takes questions; below, every crew re-checked against Part 117, 121.467 and the agreements, sorted by margin, with the rule and whether options are ready.
Reserve crew managementShort-call reserves in call order with their legal-until times, and the evening coverage forecast against the base floor.
Day reviewThe day written up from the audit trail: pairings repaired, violations, crew-caused cancellations, time to crew told, cost and lessons to approve.
Audit trailEvery agent step and human decision, newest first, each row chained to the last, with an evidence package to export.
Governance

Built for crew legality: checked, cited, signed, on the record.

A crew controller chooses every repairAgents recommend; the Crew Controller chooses with a reason code and an e-signature. Agents never call, assign, release or retime anyone before that approval.
An independent rules checkOnly repairs the Rules Check agent passes reach the controller. It re-applies Part 117, 121.467, the agreements and qualifications without seeing the planner's reasoning.
Every value citedEvery limit, margin, price and agent statement links to its source: the rule text, the roster record, the ops feed message or the agreement clause.
Two people for the big callsA repair that cancels a flight needs the Duty Manager's co-approval. An extension under 117.19 needs the Crew Scheduling Manager and the captain, and its FAA report is drafted within the 10 days.
A chained audit trailEvery agent step and human decision is recorded, each row chained to the one before, and exports as an evidence package for a grievance, an FAA question or an internal review.
Rules change only with approvalAgents cannot change a rule or a threshold. Changes are proposed, versioned and applied only after the Crew Scheduling Manager approves.
Configuration

Your contract, your floors, your approvals

Thresholds and approval levels are settings. A change is proposed, versioned, logged and applied only when the Crew Scheduling Manager approves it.

SettingDefaultChoose from
Near-a-limit margin30 minAny margin in minutes; pairings inside it are listed and options prepared
Planning buffer before a limit15 minAny buffer in minutes; repairs must end at least this long before the limit
DEN evening reserve floor12 reserves, 17:00–21:00Set per base, fleet and time of day (company policy CR-7)
Call when no reply after8 minAny number of minutes; crew app first, then a phone call
No planned extension over 30 minutesAlways onCompany policy CR-4
Crew Controller chooses aloneRepairs up to $10,000 with no cancellationReason code and e-signature
A repair that cancels a flightCrew Controller + Duty ManagerCo-approval (company policy CR-9)
An extension under 117.19Crew Scheduling Manager + the captainFAA report drafted within 10 days
Connections

Works with the systems the crew desk already runs on

Crew management systemrosters, pairings, reserves, crew tracking and the extension log; written to only after approval
Operations feedETDs, ETAs, delay codes and cancellations
Maintenance controlestimated return to service by tail
Rules and agreementsPart 117, 121.467, the pilot and flight attendant agreements and company policies
Crew app and telephonycrew messages, call scripts and acknowledgments
Hotels and reservationscrew hotel and ground transport contracts, passenger bookings and connections
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
0
crew scheduled past a duty or rest limit
1,284 of 1,284
pairings re-checked on every event
target
0
flights canceled for a crew a legal reserve or swap could cover
Cancel CV 1587 + CV 1588$61,400
DEN reserves$3,030
target
20min
from the break to the crew told
Told at 14:12
break flagged at 13:52

“demo” = seen in the working solution, on the sample day of the fictional Corvane Airways · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (US DOT consent order, December 2023: a record $140M penalty, 16,900 cancellations, over $600M in refunds and reimbursements). Rules cited: 14 CFR 117.11, 117.13 (Table B), 117.19, 117.21, 117.23, 117.25 and 121.467. People, flights, pairings and hotels named on this page are fictional: characters and sample data in the working solution.

Questions

What crew control and crew planning leaders ask us.

What is airline crew recovery?

Airline crew recovery, also called IROPS crew recovery or crew disruption management, is the day-of-operation work of re-crewing flights when a delay, sick call or cancellation pushes a crew past its duty, flight time or rest limits. Airline Crew Recovery puts seven agents on the crew desk. They re-check every crew's legality on every event, build and independently check the repairs, show each one's knock-on and cost, and draft the crew notifications. A crew controller chooses, signs and sends.

How does crew recovery software check Part 117 legality?

The Legality Watch agent works out each crew's flight duty period from Table B by report time and segments, plus flight time under 117.11, rest under 117.25 and the cumulative limits under 117.23. It does this on every event and every 5 minutes. Each limit and margin cites its rule. Every repair is then re-checked on its own by the Rules Check agent, including qualifications.

How are reserve crews chosen during irregular operations (IROPS)?

The Reserve agent offers short-call reserves in the agreement's call order, each with its legal-until time under 117.21: the reserve availability period plus duty may not exceed Table B plus 4 hours or 16 hours, whichever is less. It warns when a repair would leave the base under its evening floor. The Reserve Crew Coordinator decides any hold or release.

Does it check flight attendant rest under 14 CFR 121.467?

Yes. Cabin crew are checked separately from pilots: 10 hours of rest after a scheduled duty of 14 hours or less, with no reduction, and the flight attendant agreement's actual duty limit. In the demo, the four flight attendants on pairing 4127 stay legal at 14 h 00 of 15 h, with 10 h 15 of rest at MSY.

Does the AI call, assign or release crew members on its own?

No. The agents never call, assign, release or retime anyone before a Crew Controller approves. The Notification agent sends only the approved text, and never calls crew in rest, except reserves on short call.

Do people stay in control of cancellations and extensions?

Yes. A repair that cancels a flight needs the Duty Manager's co-approval: nothing is canceled and no one is told until the Duty Manager co-approves. An extension under 117.19 needs the Crew Scheduling Manager and the captain, and its FAA report is drafted within 10 days. Company policy CR-4 rules out any planned extension over 30 minutes.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents: your crew system, ops feed, Part 117 rules, pilot and flight attendant agreements and company policies. It goes live once every quality gate has passed. Before go-live it replays one of your past disrupted days and compares its repairs with what your desk did.

See it on
your worst day.

We'll replay Airline Crew Recovery on one of your own past disrupted days, against your rules and agreements.