[phire]

> Another _unverified_ thing I heard was that initially MCAS would only be able to issue a single nose down command, and was later modified to be able to issue multiple.

My understanding is that it was never limited to one command.

Instead, all their failure analysis was based on the assumption the pilot would correctly identify the problem immediately after the first activation and follow the runaway stabilizer checklist (disabling all electric trim) before the second activation could occur.