SystemFlight Operations & Dispatch

Airline Disruption Management

Airline disruption management that brings the OCC three rehearsed, costed recovery plans before the ground stop

Recovery plans in minutes, each one rehearsed and costed, signed before anything moves.

See one case, screen by screen ↓
demo11plansbuilt for the sample storm evening; 8 failed rehearsal, so only 3 reach the Duty Manager
demo8.2sto re-solve the plan around a Duty Manager's edit typed in plain words
demo$0.77Mless than the hold-and-delay plan on the sample evening: $1.84M against $2.61M
target0tarmac-limit breaches; each passenger kept past the limit can cost up to $75,000
In short

What is Airline Disruption Management?

Airline disruption management is how an airline's operations control center recovers the schedule when weather, a ground stop or a failed system breaks it: which flights to delay, cancel, swap or consolidate, and how to look after crews and passengers. Airline Disruption Management gives the OCC eight agents that build recovery plans, rehearse each one against crew limits, MEL items, curfews, connections and the DOT rules, and price it line by line, while the Duty Manager edits, asks why and signs.

How to choose AI for airlines: a buyer's guide to agentic AI solutions →

Updated

The problem

Why IROPS recovery still runs on a bridge call

When a thunderstorm line, a ground stop or a failed system hits a hub, airline disruption management comes down to minutes: the airline operations control center must decide which flights to delay, cancel, swap or consolidate. The Duty Manager pulls that answer together over a disruption bridge with dispatch, crew control, maintenance control, customer recovery and the hub station, each looking at a different system. Every check that fails sends the plan back for another round: the solver does not know the crew or the passengers, and crew control does not see the cost.

In irregular operations recovery, the expensive mistakes are the ones found late. A plan is chosen and then a crew times out under Part 117. A swap lands on a tail whose MEL item limits it to ETOPS 120 on a route that needs ETOPS 180. Connections are noticed when passengers reach the counter, a tarmac clock is noticed near three hours, a refund under the DOT automatic refund rule is missed — and by the next morning nobody can say why the decision was made.

typical$80Ma year, at most, that an airline of about 100 aircraft can lose to disruption
typical$75,000maximum civil penalty per violation; past the tarmac limit, each passenger can count
Where a storm evening's staff days goestimated
By hand6.5 days
With the solution1.6 days
  • Building options and running bridge rounds1 → 0.2 d
  • Checking crews, tails, curfews and connections1.5 → 0.3 d
  • Telling stations, crews, dispatch and passengers1 → 0.3 d
  • Tarmac, refund and compensation follow-up1 → 0.5 d
  • Rebuilding the day for the after-action review2 → 0.3 d

Estimated staff days across the OCC and customer teams for one hub storm evening and its follow-up, by hand and with the solution.

How it works

How a storm recovery moves

Eight agents watch, plan, rehearse and price every recovery and check each other; the Duty Manager edits, asks why and signs.

What comes in
Signals in9 feeds · weather, FAA flow programs, crew, maintenance, bookings
Agents at work
Watch agentground stop likely 16:40
Then
Recovery agent11 plans built
Then
Crew legality agentPart 117
Aircraft and MEL agentMEL, ETOPS, curfews
Connections agent2,540 at risk
Obligations agenttarmac, refunds, receipt
Then
Release agentafter signature only
Review agentplan vs outcome
A person decides
Duty Manageredits, asks why, signs with a reason code
What comes out
Signed plan with its receipt
Stations, crews, dispatch, ATC told
After-action review
One case, step by step

Airline disruption management on one storm evening at DEN

Thursday, October 15, 16:22 MDT at the Denver hub of Corvane Airways. A line of thunderstorms is coming, and 188 flights, 28,289 passengers and 2,540 connections are at risk in the 16:00, 17:30 and 19:00 banks. Here is what happens next, screen by screen, in the working solution.

  1. 0116:21

    The agents speak first: “I have three plans.”

    Dana Whitfield · Duty Manager

    Dana's Today screen opens on a message from the Recovery agent: “Ground stop likely at 16:40. I have three plans.” Since 15:41 the agents have read 9 feeds, built 11 recovery plans and rehearsed every one. Plan B cancels 14 short flights, swaps a healthy 787 onto London and keeps 2,262 of 2,540 connections for $1.81M. Under “Needs you”: nothing has gone to stations, crews or customers yet, two aircraft are in the departure queue, and one swap waits for maintenance control.

    “One decision needs you before 16:40.”

  2. 02How sure is it?

    An early warning with its confidence and its sources

    Watch agent

    The Watch agent read convective SIGMET 47C — a line 40 nm wide moving east at 25 kt, tops FL450 — the DEN TAF amendment, lightning within 5 nm and FAA advisory 112, which calls a ground stop probable from 16:40 with a ground delay program likely after. Confidence rose from 0.74 to 0.82. A what-if tries the ground stop at 16:30 or 17:00 to show how sensitive the plans are; it never changes them.

    The Watch agent warns and cites; it never declares an event.

  3. 03The recovery

    The hub's banks, the storm and three plans, side by side

    Recovery agent

    The Recovery screen draws the DEN day as arrival and departure bank waves from 12:00 to 23:00, with the thunderstorm line from 16:30 to 19:00, the likely ground stop from 16:40 to 18:30 and the ramp closed for lightning from 16:35 to 17:45. Plan A holds and delays for $2.61M with 9 crew time-outs; Plan B thins the 17:30 bank for $1.81M; Plan C cancels early for $2.05M. Each plan is drawn over the real schedule, with its cost receipt below.

    “I built 11 plans and rehearsed each against crew duty limits, MEL items, curfews, connections and the DOT tarmac rule; three passed. I recommend Plan B.”

  4. 04Rehearsal

    Eight plans failed, and she can see why

    Four checking agents

    The crew legality, aircraft and MEL, connections and obligations agents rehearse every plan without seeing the planner's reasoning. Plan D kept N806CV on CV 118 to London, but MEL 49-11-01 (APU inoperative) limits it to ETOPS 120 minutes and the route needs ETOPS 180. Plan G would land CV 1187 at Santa Ana at 23:24, after the 23:00 curfew. Plan H would take CV 1206 to its 3-hour tarmac limit at 19:05. None of the eight is ever offered as an option.

    “8 plans failed rehearsal — never shown as options; here so you can see what was tried.”

  5. 05One sentence

    “Keep CV 418, cancel CV 412 instead”

    Dana Whitfield · Duty Manager

    Plan B as proposed cancels CV 418 to Chicago. Dana knows Chicago matters more tonight and types the change. The Recovery agent re-solves Plan B in 8.2 seconds and the four checks run again: still 14 cancellations, connections kept 2,262 → 2,310 (+48), cost $1.81M → $1.84M (+$30,000). CV 418 carries 96 connecting passengers to Chicago, CV 412 carries 48. She accepts the edit with reason E1 · Customer priority.

    Nothing changes until she presses “Accept the edit”; “Undo” puts Plan B back as proposed.

  6. 0616:27

    “Why not delay CV 412?” — answered with the rule

    Crew legality agent

    Captain Henrik Dahl and First Officer Maya Collins reported at 07:05 and CV 412 is their fourth segment, so Part 117 Table B allows 13 hours and their duty ends at 20:05. The earliest slot is 19:10, block-in 21:15 — a 1 h 10 min extension. The captain took a 52-minute extension on Tuesday with no 30-hour rest since, so a second one over 30 minutes is not allowed, and no reserve A321neo captain is at DEN before 21:40.

    “Canceling and rebooking its 142 passengers costs $41,000 less than a reserve-crew delay after 22:00.”

  7. 07The London swap

    A healthy 787 for London, confirmed by maintenance control

    Aircraft and MEL agent · Grace Lindqvist

    N806CV's APU has been inoperative since Oct 14 at 21:12, a category C item under MEL 49-11-01, which limits it to ETOPS 120 minutes. N812CV came in from SFO at 16:05 with no open items and takes CV 118 to London at 20:05; N806CV flies the domestic CV 1772 to Houston, where ground power and air are confirmed. Grace Lindqvist, maintenance control, confirmed both swaps at 16:20.

    The Aircraft and MEL agent never clears an MEL item and never confirms a swap; maintenance control does.

  8. 08The clocks

    Every tarmac, refund and curfew clock in view

    Obligations agent

    CV 1206 closed its door at 16:05 and CV 1318 at 16:12, so their 3-hour domestic tarmac limits fall at 19:05 and 19:12. Plan B returns both to the gate by 17:12. The obligations agent warns at 2 h 15 min, starts returns by 2 h 30 min, and keeps the refund queue under the DOT automatic refund rule. In Plan A, four flights would have come within 30 minutes of the limit.

    The obligations agent never waives an obligation and never sends a refund.

  9. 0916:31 · signed

    She signs with a reason code; only then does anything move

    Dana Whitfield · Duty Manager

    The signing screen restates the plan — 14 cancellations, 22 delays, 4 swaps, 2,310 of 2,540 connections kept, $1.84M, all five checks passed — and what will be sent. The plan is under the co-sign limits of 25 cancellations and $3M, so her signature is enough. She picks S2 · Protects connections and customers and signs as Dana Whitfield, Duty Manager, at 16:31 MDT.

    “When you sign, the release agent sends the plan to 8 stations, dispatch, ATC, 31 crew members and 5,072 passengers, and tracks every acknowledgment.”

  10. 10The release

    Everyone who acts on the plan is told, and every acknowledgment is tracked

    Release agent

    Cancellation and gate notices go to 8 stations, 22 amended releases to dispatch for Marcus Bell to sign, 9 slot substitutions from the canceled DEN arrivals, new reports and hotels for 31 crew members, messages to 1,964 passengers on canceled flights and 3,108 on delayed ones, and 410 rooms at six contracted DEN hotels. Each has a time limit and an owner; OMA station is flagged as overdue at 7 of 8.

    The release agent never sends before signature; the dispatcher signs every amended release.

Who it’s for

Built for everyone on the disruption bridge.

The same storm evening, seen by five of the people who carry it — what it looked like by hand, and what it looks like now.

DW
Dana WhitfieldDuty Manager, Operations Control Center · signs every recovery plan
Duty Manager
Before
Runs the disruption bridge and assembles a plan from dispatch, crew control, maintenance control and customer teams, round after round.
Now
Opens three rehearsed plans with cost receipts, edits a flight in plain words, asks why, and signs with a reason code.
MB
Marcus BellFlight Dispatcher, evening desk
Flight Dispatcher
Before
Hears about moved flights late, then amends releases, fuel and alternates one by one.
Now
Gets the 22 amended releases drafted with new times, fuel and alternates the moment the plan is signed, and signs them himself.
GL
Grace LindqvistMaintenance Controller (MCC) · confirms every swap
Maintenance Controller
Before
Finds out a swap broke an MEL restriction after the plan is already chosen.
Now
Sees each tail's open MEL items, ETOPS capability and station support checked before a plan is shown, and confirms the swap.
TR
Tomás ReyesCustomer Recovery Manager · rebooking, hotels, refunds
Customer Recovery Manager
Before
Learns about missed connections when passengers reach the counter, and chases refund clocks afterwards.
Now
Sees every group re-accommodated by priority — unaccompanied minors and wheelchair passengers first — with hotel rooms and messages ready to go at signature.
RC
Ruth CallowayVP Operations Control · co-signs above 25 cancellations or $3M
VP Operations Control
Before
Waits days for someone to rebuild the evening from logs and chats for the after-action review.
Now
Reads a review built from the signed plan and the live outcome, and decides which proposed lessons become rules.
Built on the engine

8 agents. Each with one job, and hard limits.

Eight agents watch, plan, rehearse and price every recovery and check each other; the Duty Manager edits, asks why and signs.

Watch agent

Reads aviation weather, FAA flow programs and advisories, lightning and systems status every minute, and warns of ground stops, ground delay programs and ramp closures with a confidence and its sources.

  • Never declares an event — it warns and cites
  • Read-only on every feed
Recovery agent

Builds up to 12 candidate plans for schedule and crew recovery — delays, cancellations, swaps, consolidations, ferries — sends each to the four checking agents, shows the best three that pass by the airline's weights, and re-solves around a person's edits.

  • Never shows a plan that has not been rehearsed
  • Never changes the schedule
Crew legality agent

Checks every crew member a plan touches against Part 117 Table B, the 117.19 extension rules, rest and the crew agreement, flags any duty within 30 minutes of its limit and finds qualified reserves.

  • Never assigns a crew; the Crew Controller does
  • Never assumes a captain's agreement to an extension
Aircraft and MEL agent

Checks each tail in a plan: open MEL items and their operational restrictions, ETOPS capability for the route, checks due, curfews and what each station can support.

  • Never clears an MEL item
  • Never confirms a swap; maintenance control does
Connections agent

Scores every connection under each plan and re-accommodates passengers by priority — children traveling alone, passengers needing assistance, last flights of the day, then everyone else — and drafts the customer messages.

  • Never rebooks a passenger before the plan is signed
  • Never moves a passenger who chose to stay
Obligations agent

Watches every tarmac, refund and curfew clock a disruption starts, and prices each plan's cost receipt line by line from hotel, crew and partner contracts, fares and the rules.

  • Never waives an obligation
  • Never sends a refund
Release agent

After signature, sends the plan to stations, dispatch, ATC, crews, customers and hotels, tracks every acknowledgment against its time limit and escalates silence.

  • Never sends before signature
  • The dispatcher signs every amended release
Review agent

Writes the after-action review from the signed plan, the outcome and the conversation — plan against outcome, the decisions on the record — and proposes lessons.

  • Never edits the record
  • Lessons are proposed; a person approves
Duty Manager

Signs every plan; maintenance control confirms swaps; the dispatcher signs amended releases. The agents propose; a named person decides.

Ask in plain words

Ask about the storm, any flight, crew or passenger

Ask in plain words, or say what to change. Every answer cites the roster, MEL record, contract or rule it came from, and opens the screen it is about.

Could CV 412 wait out the storm with a delay?

Not with its crew. Captain Henrik Dahl reported at 07:05 and CV 412 is his fourth segment; Table B ends his duty at 20:05. Any slot after the bank — 19:10 is the earliest — needs a second extension over 30 minutes this week, which 117.19(a)(2) forbids, and no reserve captain is at DEN before 21:40. So CV 412 either flies at 17:50 or is canceled.

What does Plan B cost, line by line?

Plan B as proposed: $1.81M — refunds and lost revenue $0.90M, hotels and meals $0.30M, crew $0.18M, partner rebooking $0.21M, goodwill $0.14M and aircraft $0.08M. Plan A is $2.61M.

Which flights are close to the 3-hour tarmac limit?

None yet. CV 1206 closed its door at 16:05 and CV 1318 at 16:12, so their limits are 19:05 and 19:12; the plan returns both to the gate by 17:12. Each passenger kept too long can cost up to $75,000.

Who has not acknowledged yet?

OMA station has not acknowledged after 10 minutes. The release agent paged Gary Lindell again and escalates to the Duty Manager at 15 minutes.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

TodayThe Duty Manager's start screen: the Recovery agent's three plans, the ground stop at 16:40, flights and passengers at risk, and what needs a decision.
Early warningThe ground stop warning with its confidence, the SIGMET, FAA advisory and lightning it came from, and a what-if on the ground-stop time.
IROPS recovery on the hubOperations control recovery on the hub: the arrival and departure banks with the storm, ground stop and ramp closure, three recovery plans in the conversation and Plan B's cost receipt.
Plans that failed rehearsalEight plans the checks rejected — MEL and ETOPS, crew duty limits, curfews, the tarmac limit, connections — each with why.
An edit, re-solved“Keep CV 418, cancel CV 412 instead” re-solved and rehearsed again, with the change to connections and cost before the edit is accepted.
Asking whyWhy CV 412 cannot be delayed: the crew's Part 117 duty clock, the extension rule and the reserves, each cited.
Aircraft and MELThe tails a plan touches, with N806CV's open APU item, the ETOPS check for its new route and the swaps maintenance control confirmed.
Passenger re-accommodationPassenger re-accommodation after the edit: 2,310 of 2,540 connections kept and every passenger group ready to rebook by priority, with 5,072 messages drafted and 410 hotel rooms, sent when the plan is signed.
Tarmac, refund and curfew clocksEvery tarmac clock against its 3-hour limit, with the return to gate each flight gets in the plan.
Sign the planThe plan restated, the reason code, the e-signature, and whether the plan is under the VP's co-sign limits.
The releaseThe signed plan going to stations, dispatch, ATC slot substitutions, crews, passengers and hotels, each with its time limit, owner and acknowledgments.
After-action reviewThe after-action review of the signed plan: plan against outcome as the evening goes, the decisions on the record and the lessons the review agent proposes.
Your recovery rulesPlan weights, ground-stop and tarmac warnings, return-to-gate and refund thresholds, minimum connections, crew duty warning, co-sign limits and curfews.
Governance

Airline disruption management that is rehearsed, signed and on the record.

Only rehearsed plans are shownFour checking agents rehearse every plan against crew duty limits, MEL and ETOPS, curfews, connections and the tarmac and refund rules, without seeing the planner's reasoning. The plans that failed stay visible with the check that failed them.
A named person signs every planThe Duty Manager signs with a reason code and an e-signature; above 25 cancellations or $3M the VP Operations Control co-signs, and whoever edits a plan cannot co-sign it.
Nothing moves before the signatureSeats can be held, but tickets reissue and messages go to stations, crews, dispatch, ATC and passengers only once the plan is signed. Maintenance control confirms every swap and the dispatcher signs every amended release.
Every number cites its sourceEach cost receipt line, crew duty clock, MEL restriction and agent statement links to the contract, fare, roster, maintenance record, advisory or rule it came from.
Agents stay inside their limitsAgents never change the schedule, assign crews, clear MEL items, rebook before signature, waive an obligation or send a refund. Turning an agent off needs the VP Operations Control's approval.
A trail nobody can editEvery agent step and every decision is recorded in order, each entry chained to the one before it. One export gives the evidence pack for a DOT or FAA question: the trail, the signed plan, every cited source, tarmac clocks minute by minute and passenger messages.
Configuration

Your recovery rules, not ours

Recovery rules v7 at Corvane, approved by the VP Operations Control, set how airline recovery optimization weighs cost, connections kept and tomorrow’s schedule. A change needs a reason code and is rehearsed on the last six disruption days before it applies.

SettingDefaultChoose from
Plan weightsCost 40 · connections kept 40 · tomorrow's schedule 20Your own weights, changed by the VP Operations Control
Plans built / shownUp to 12 built · 3 shownHow many candidates to build and how many rehearsed plans to show
Ground-stop warningConfidence 0.60 or moreThe confidence at which the Watch agent warns
Tarmac warning2 h 15 min domestic · 3 h 15 min internationalWhen the clock alerts the Duty Manager, station and captain
Return to gate starts by2 h 30 min domestic · 3 h 30 min internationalSet inside the 3- and 4-hour limits of 14 CFR 259.4
Significant change (refund)Delay over 3 h domestic, 6 h internationalFollows the DOT automatic refund rule
Minimum connection at DEN40 min domestic · 75 min internationalPer hub
Crew duty warningWithin 30 minutes of the limitYour company buffer on top of Part 117
Co-signature by the VPOver 25 cancellations or $3MYour thresholds
CurfewsSNA 23:00 · SAN 23:30 · FRA 23:00–05:00 · LHR night quotaEvery station's curfew or quota
Connections

Works with the systems the OCC already runs on

FAA flow programs and advisoriesground stops, GDPs, AFPs, EDCTs and slot substitutions
Aviation weather and lightningSIGMETs, TAFs, METARs, radar and strikes near each hub ramp
Crew managementrosters, pairings, duty history and reserves
Maintenance and engineeringMEL items, checks due and aircraft status
Reservations and departure controlbookings, connections, seats and check-in
Station, crew, customer and hotel messagingstation messages, the crew app, passenger app, text and email, contracted hotels
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

estimated
$0.77M
less than the delay-first plan on one storm evening
Hold and delay$2.61M
Rehearsed Plan B$1.84M
target
0
tarmac-limit breaches; each passenger past 3 hours can cost up to $75,000
estimated
91%
of connections kept on the night
2,310 of 2,540
the rest rebooked with a hotel

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (AltexSoft, June 2026, citing an airline IT provider — an airline of about 100 aircraft can lose up to $80 million a year to disruption; 49 U.S.C. 46301 as amended by the FAA Reauthorization Act of 2024 — up to $75,000 per violation; 14 CFR 259.4 tarmac delays, 14 CFR Part 260 refunds, 14 CFR Part 117 crew duty). Corvane Airways and the people, flights and aircraft named on this page are fictional — characters and sample data in the working solution.

Questions

What airline operations leaders ask about airline disruption management.

What is airline disruption management?

Airline disruption management is how an airline's operations control center recovers the schedule when weather, a ground stop or a failed system breaks it: which flights to delay, cancel, swap or consolidate, and how to look after crews and passengers. Airline Disruption Management gives the OCC eight agents that build recovery plans, rehearse each one against crew limits, MEL items, curfews, connections and the DOT rules, and price it line by line, while the Duty Manager edits, asks why and signs.

How does it handle IROPS recovery when a ground stop is coming?

The Watch agent reads weather, lightning and FAA advisories and warns with a confidence. On the sample evening it saw a ground stop and ground delay program coming at DEN: the stop likely from 16:40 at 0.82, the program likely after it. The Recovery agent builds up to 12 plans for the affected banks, the checking agents rehearse them, and the Duty Manager sees the three best that passed, each with its cost receipt.

How does it keep crews legal under Part 117 during a delay?

The crew legality agent checks every crew member a plan touches against Table B duty limits, the 117.19 extension rules, rest and the crew agreement, and flags any duty within 30 minutes of its limit. A plan that times out a crew fails rehearsal and is never offered. The agent never assigns a crew; the Crew Controller does.

Does it check MEL items and ETOPS before a tail swap?

Yes. The aircraft and MEL agent reads each tail's open MEL items and their restrictions, ETOPS capability, checks due, curfews and station support. On the sample evening it caught that MEL 49-11-01 limits N806CV to ETOPS 120 on a London route that needs ETOPS 180. Maintenance control confirms every swap.

How does it help with the DOT tarmac delay rule and automatic refunds?

The obligations agent runs every tarmac clock from door close or touchdown, warns at 2 h 15 min and starts returns to the gate by 2 h 30 min, inside the 3-hour domestic limit of 14 CFR 259.4. It keeps the queue of DOT automatic refunds under 14 CFR Part 260 — a delay over 3 hours domestic or 6 hours international is a significant change — and prices refunds into each plan's receipt. It never waives an obligation or sends a refund itself.

Can the Duty Manager change a plan or ask why a flight was chosen?

Yes, in plain words. “Keep CV 418, cancel CV 412 instead” was re-solved in 8.2 seconds and rehearsed again, showing +48 connections and +$30,000 before the edit was accepted. “Why not delay CV 412?” was answered with the crew's duty clock, the extension rule and the reserve list, each cited.

Do people stay in control of the recovery?

Yes. It is OCC decision support: nothing reaches stations, crews, dispatch, ATC or passengers until the Duty Manager signs with a reason code; the VP Operations Control co-signs above 25 cancellations or $3M, maintenance control confirms swaps and the dispatcher signs amended releases. Every step and decision is on a trail nobody can edit.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your recovery rules, crew agreements, contracts and customer service plan — and it goes live once every quality gate has passed. Before go-live it is replayed on your past disruption days; on the sample setup, its plans matched or beat the decisions made on 5 of 6.

See it on
your worst day.

We'll run Airline Disruption Management on one of your own past disruption days.