Electrical system capacity. The required generating capacity, and number and kinds of power sources must—

Be determined by an electrical load analysis; and

Meet the requirements of § 25.1309.

Generating system. The generating system includes electrical power sources, main power busses, transmission cables, and associated control, regulation, and protective devices. It must be designed so that—

Power sources function properly when independent and when connected in combination;

No failure or malfunction of any power source can create a hazard or impair the ability of remaining sources to supply essential loads;

The system voltage and frequency (as applicable) at the terminals of all essential load equipment can be maintained within the limits for which the equipment is designed, during any probable operating condition; and

System transients due to switching, fault clearing, or other causes do not make essential loads inoperative, and do not cause a smoke or fire hazard.

There are means accessible, in flight, to appropriate crewmembers for the individual and collective disconnection of the electrical power sources from the system.

There are means to indicate to appropriate crewmembers the generating system quantities essential for the safe operation of the system, such as the voltage and current supplied by each generator.

External power. If provisions are made for connecting external power to the airplane, and that external power can be electrically connected to equipment other than that used for engine starting, means must be provided to ensure that no external power supply having a reverse polarity, or a reverse phase sequence, can supply power to the airplane's electrical system.

Operation without normal electrical power. It must be shown by analysis, tests, or both, that the airplane can be operated safely in VFR conditions, for a period of not less than five minutes, with the normal electrical power (electrical power sources excluding the battery) inoperative, with critical type fuel (from the standpoint of flameout and restart capability), and with the airplane initially at the maximum certificated altitude. Parts of the electrical system may remain on if—

A single malfunction, including a wire bundle or junction box fire, cannot result in loss of both the part turned off and the part turned on; and

The parts turned on are electrically and mechanically isolated from the parts turned off.