The development and introduction of an automatic landing system into revenue service is discussed with particular emphasis upon the early achievement of a high level of pilot acceptance. The concept embodied in the performance and failure assessment monitor system of the DC-10, and the extent to which this concept is expected to contribute to greater pilot acceptance and to increased utilization of the automatic landing system, is discussed in detail.This concept differs from previous automatic landing monitor systems primarily with respect to the scope of the monitor's view of the monitored process and the depth of the resulting assessment. Previous systems are based on some scheme of logically associating the outputs of in-line and/or parallel command signal comparators. The performance and failure assessment monitor assesses overall performance of the automatic landing mode of flight control system operations by comparing what the controlled aircraft is, in fact, accomplishing against an independent model of what it should be accomplishing. Failure verification and failure reversion control are based upon the availability of an immediate accurate assessment of the consequences of an indicated failure.