From 'Icarus bug' to flawed panels: Airbus counts cost of relying on single model