door, in theory, allowed it to be "blown open" by the pressure inside the cargo area. To prevent this, the DC-10 used a "fail-safe" latching system held in place by "over top dead center latches", five C-shaped latches mounted on a common torque shaft that are rotated over fixed latching pins ("spools") fixed to the fuselage. Because of their shape, when the latches are in the proper position, pressure on the door does not place torque on the latches that could cause them to open, and further seats them on the pins. Normally the latches are opened and closed by a screw jack powered by an electric actuator motor. Because the wiring powering the actuator motor was too small, it was possible for the voltage delivered to the motor to drop too low for it to operate as designed under high loads. In these cases, the motor would stop turning even if the latches had not rotated over the pins. Since the operators listened for the motors to stop as an indication of their complete rotation, a failure in the drive system during operation would erroneously indicate that the door was properly latched. To ensure this rotation had completed and the latches were in the proper position, the DC-10 cargo door also included a separate locking mechanism. The locks consisting of small pins that were slid horizontally through holes on the back of the latches, between the latch and the frame of the aircraft. When the pins were in place, they mechanically prevented movement back into the open position, so even the actuator motor could no longer open them. If the latches were not in their correct positions, the pins could not enter the holes, and the operating handle on the outside of the door would remain open and visually indicate that there was a problem. Additionally, the handle moved a metal plug into a vent cut in the outer door panel; if the vent was not plugged the door would not retain pressure, eliminating any force on the door. Lastly, there was an indicator light in the cockpit that would remain on if the door was not correctly latched. In theory, motor failure on the plane could not present a problem because it would fail to close the locking lever. During the investigation, however, a McDonnell Douglas test rig demonstrated that the entire locking pin operating system was too