The page's regulators are the CMA, the Commission, and an FTC study. A named regulator it does not use: the FAA.
On 8 March 2017 the FAA granted Boeing an amended type certificate for the 737-8, the first of the MAX family. Type Certificate Data Sheet A16WE. The assigned job is in the statute: 49 U.S.C. § 44702, the Administrator issues type certificates. The same section lets the Administrator delegate examination, testing, inspection, and issuing the certificate to a qualified private person.
That private person, here, is Boeing's Organization Designation Authorization — ODA: Boeing employees authorized to perform functions on the FAA's behalf. DOT Inspector General report AV2020037, 29 June 2020: the Boeing Aviation Safety Oversight Office had 42 FAA employees overseeing an ODA unit of about 1,500 Boeing-designated representatives. In 2018, four U.S. manufacturers approved about 94 percent of the certification activities for their own aircraft.
MCAS, the flight-control law that could move the stabilizer without the pilot, was presented as a modification to the existing speed-trim system. After Lion Air 610, the IG says, FAA certification engineers did their first detailed review of MCAS: "the first time they were presented with a full picture of how MCAS worked." Acting Administrator Daniel Elwell told the Senate Commerce aviation subcommittee on 27 March 2019: "We do not allow self-certification of any kind." In the same hearing he confirmed the FAA had initially retained MCAS and later released it to the ODA.
House Transportation majority staff, 16 September 2020: both Boeing and the FAA suggested the MAX certification was compliant.
The interesting claim is not "Boeing hid a stall-protection law." That is already the crash story.
The claim is that two things were allowed to count as one control. The assigned job sat in the FAA: certify that the airplane meets the airworthiness rules. The actual authority to compute MCAS sat in the ODA at Boeing. On 8 March 2017 the first of those was used. The certificate is what later debate treats as the second.
If you walk away thinking the lesson is "don't trust Boeing" or "hire more inspectors," you have read a capture story. You have not read the mismatch. A regulator can be honest, staffed, and still be the seat whose signature is cited as independent review of a mechanism it did not independently compute.
Hypothetical, labelled as such. You are one of the 42 people in the Boeing Aviation Safety Oversight Office. Your assigned job is to certify. The ODA across the table has about 1,500 Boeing employees authorized to act on the Administrator's behalf. The manufacturer presents a new flight-control law as a tweak to speed trim. Your office initially keeps it, then releases it.
What has to be true, this week, for the amended type certificate to be a control rather than a stamp? You have independently computed how MCAS behaves when a single angle-of-attack sensor lies. You can refuse to issue until that computation exists inside the agency. If either of those fails, you are in the March 2017 shape: you had the job title, you used it, and the later sentence "the FAA certified it" is doing the work your office did not.