“Flight controllers here looking very carefully at the situation, obviously a major malfunction……..We have confirmation from the Flight Dynamics Officer that there has been a failure of the upper stage. The crew of the Space Lifter Liberty are continuing to prepare for their return to Earth.” -- Public Affairs Officer Transcript, STS-116 Mission
Chapter 11: Retropropulsion
110 kilometers above the North Atlantic, the Space Lifter Constitution
drifted slowly, lazily, its flat underside pointed out at the stars, its rounded dorsal hull and immense rudders down to Earth, while keeping its engines pointed east. As the Lifter reached the peak of its trajectory, the onboard guidance computer calculated the precise orientation and duration of the burn that would be necessary to return Constitution
to her launch site. As the seconds ticked by, the peroxide attitude-control thrusters on Constitution
’s nose and tail fired softly, gently, keeping the Lifter pointed at the correct azimuth.
Then the center F-1B restarted, together with two of the outboard engines, pushing Young and Crippen back into their seats with over 4 Gs of acceleration, as the Lifter turned itself around, bleeding off the speed it had husbanded through its flight so far and then pushing itself back toward Florida. The cabin shuddered as the remaining propellant rushed through the turbopumps into the combustion chambers, the mass of the booster dropping slowly as kerosene and oxygen were driven out of the tanks at phenomenal rates. 15 seconds after the burn began, there was a sudden jerk--the outboard engines cut off to control acceleration. The center engine kept burning, throttled up, in fact, at a more modest 2.5 Gs, climbing slowly, slowly, until it, too, cut off, with all but the vapors in the propellant tank spent.
For a brief moment, Young and Crippen were back in microgravity, the earth slowly, imperceptibly, growing larger in their windshield. Then the guidance computer moved on to the next step in its algorithm, continuing the electromechanical dance it began at launch. Valves opened in the nose and tail to release hydrogen peroxide onto a catalyst bed, where, in a burst of heat, it dissociated into steam and hot oxygen gas, which blasted out into the near-vacuum of Earth’s thermosphere. The valves opened and closed in unison, to impart a precisely calculated momentum to the Lifter. Seconds later, the great vehicle was again pointing in the direction of its own travel, its trajectory altered, steeper, but with a slower atmospheric entry speed, and a point of impact considerably closer to Florida than it had been. Like exactingly trained ballet dancers, the valves on the opposite side of the vehicle repeated the movements of their counterparts, cancelling every kilogram-meter-squared-per-second that the earlier bursts of gas had imparted, zeroing the Lifter’s rotation and keeping its nose pointed straight down the line of its descent. For now, the great ship yet operated beyond the Karman line, where the laws of aerodynamics give way to a much purer expression of Newton’s Laws. The thin wisps of air curling around the ship’s wings acted more like discrete clumps of atomic oxygen and nitrogen and helium than a continuous fluid. But soon, they would thicken, and their grasp on the ship grow. The coming struggle would force man and machine alike to the very edge of their capabilities.
Despite the frantic efforts of mission controllers to salvage the
Magellan probe in the minutes after the failure of the J-2S-2 engine to start, the spacecraft and its upper stage soon reached their apogee and began falling back to Earth. When it became apparent that the spacecraft could not complete its mission, controllers ceased attempts to light the engine belatedly to avoid risk to the returning Lifter booster. After a safe gap was opened by the Lifter’s retro burn, range safety officers remotely triggered the self-destruct mechanisms on the S-IVC, activating a number of shaped-charge explosives that destroyed the liquid hydrogen and liquid oxygen tanks, whose contents swiftly boiled in the near-vacuum of Earth’s thermosphere. The small chunks left of the S-IVC and its payload reentered Earth’s atmosphere and disintegrated further shortly afterward, and were torn into ever-smaller fragments as systems built for the forgiving vacuum of space were subjected to the phenomenal loads of hypersonic flight.
Even before the stage was destroyed, engineers across the United States, at Kennedy Space Center, Johnson Space Center, and Marshall Space Flight Center, and at Rocketdyne’s Canoga Park headquarters in California, were poring over the telemetry the stage beamed back in order to determine exactly what had gone wrong. Over the course of the next several months, this telemetry would be combined with intensive scrutiny of all records of the hardware that had been mounted on STS-116, and a regime of static tests of other S-IVCs to identify exactly what had malfunctioned. Every moment for months predating T-0 to the recovery of washed up fragments of hardware on Florida beaches in the weeks following the failure was collected to piece together the cause of the failure that had happened on April 6, 1988.
While the engineers worked to identify why the S-IVC had failed to complete its mission, NASA and USAF managers began coordinating with their counterparts at Martin-Marietta to bring the mothballed Titan launch pads, LC-40 and LC-41 at Cape Canaveral and SLC-4E at Vandenberg Air Force Base, back online. Though a previous Lifter flight, STS-113, had launched the final KH-12 just a few months before the
Magellan failure, satisfying the Department of Defense’s need for the very high-mass optical reconnaissance satellites, the USAF still had a manifest of electronic intelligence and general communications payloads to loft--ones that, depending on how long Lifter remained out-of-service, might have to go up on Titan III. For Martin, deep in planning with the newly-formed Trans-Pacific Launch Industries (TPLI) for their own reusable vehicle, the contracts to activate the Titan III contingencies was a mix of benefits and drawbacks: engineers had to be pulled from design meetings to dust off stages which had lain preserved in warehouses for years.. At the same time, the contract brough important revenue to Martin at a time when TPLI was gearing up for major investments. Thus, even as the Space Lifter stand-down helped reinforce Martin’s lobbying to politicians about the benefits of a second (even partially) American reusable launch vehicle, Martin worked diligently to restore operational status to a rocket many had written off as condemned to the history books.
Space Transportation Corporation’s commercial customers like Geostar, Intelsat, and a host of foreign companies had their own back-ups planned. Though Europe’s Ariane was not nearly as powerful as Lifter, and somewhat more expensive even so, it had a crucial advantage over the Lifter system in 1988: it was operational. While Lifter stood down, Ariane won over half a dozen new payloads--three Intelsat geostationary communications satellites, a Swedish communications satellites, a Japanese communications satellite, a Japanese meteorological satellite, and a British communications satellite named Skynet. Though the increased revenue was a welcome bonus to Arianespace as it worked to bring its new reusable launch vehicle from the drawing board to the runway, no one at Arianespace or the European Space Agency was under any illusion that it would last--sooner or later, they knew, Lifter would be back, and then Europe would be playing catch-up again. Worse, even the newer Ariane 2/3 family was incapable of lifting many of the satellites which had been originally manifested for Lifter. Some commercial customers began to demand that if the stand-down went on beyond some time, STC should work with the US government to make the USAF’s husbanded Titans available for commercial payloads that STC could no longer deliver.
As the commercial launch market adapted to Lifter’s indefinite stand-down, and the US government brought its handfuls of stored Titans out of storage, the initial tension at NASA and STC began to give way to a sense of relief. Though it had been over twenty years since that horrendous winter night, many NASA managers, particularly the older ones who had actually worked for the program in those days, could not shake the specter of Apollo 1. It quickly became clear that the cause of the accident had not been unique to the payload--the failure that splashed
Magellan into the western Atlantic could have just as easily put a Shuttle crew into the unenviable position of having to either maneuver around for a Return to Launch Site abort or ditch into the ocean, far from any naval recovery force. Though the Shuttle was rated for a suborbital reentry, and though the crews were all trained in mid-air evacuations, no one wanted to put that training to the test.
As much, then, as this failure vindicated the arguments made by Boeing’s engineers all the way back in 1971, that the Interim Semi-Reusable System was safer than the competing Thrust-Augmented Orbiter (TAOS) model because it did not necessarily need to carry crew all the way to orbit, it put the entire Space Transportation System under an uncomfortable congressional microscope. In one of his last major initiatives before retirement, Wisconsin Senator William Proxmire took the opportunity to criticize the US space program as an exercise in corporate welfare for Boeing and McDonnell-Douglas, citing a “history of corner-cutting predicated on a nutty fantasy of space industrialization,” and criticize the Reagan administration for putting control over Lifter and the S-IVC under a private corporation. Though Proxmire did not end up having much say in the investigation (having already announced his retirement and endorsed fellow Democrat Herb Kohl for the upcoming 1988 election), his criticisms set the tone for the inquiries that would follow.
As vicious as Proxmire and his associates in the Senate could get, however, their influence over NASA and STC remained limited by the most crucial difference between
Magellan and Apollo 1--no one had died. As NASA’s internal accident investigation procedures took effect and a team of NASA and STC engineers and managers sat down to identify the cause of the failure, they could count on relative inattention from the public and the President taking a fairly hands-off approach.
Apollo veteran and Lifter pilot John Young, then Head of the Astronaut Office, was named Chairman of the Magellan Review Board on April 17, 1988. Like NASA’s last major accident review board, that for Apollo 13, the Magellan Review Board was staffed by astronauts, administrators, and USAF officers. For two months, the Review Board zeroed in on the cause of the accident and determined exactly
why it had been allowed to happen. Within hours of the launch failure, it became apparent that the problem lay with the J-2S-2 engine on the S-IVC stage, which had apparently
begun its start-up procedure, but had not completed it.
As more telemetry was analyzed, STC also returned two of the lost stage’s batch-mates to the test stand at Stennis Space Center. The lost stage, S-IVC-116, had, like most S-IVCs, never been fired after the installation of its engine. The J-2S-2 had been fired by Rocketdyne at its Santa Susana test facility, but the completed stages were not generally fired after engine installation. This cost-saving measure had been implemented early on in the program, and had been planned for second-run Saturn Vs before that program had been terminated. When subjected to full-duration testing at Stennis, neither S-IVC-117 nor -118 seemed the least bit flawed. Whatever had caused S-IVC-116 to fail, it had been unique to that engine, or to the marriage of that engine to that stage--and the engine itself had shown no anomalies when it was first fired at Santa Susana in 1986.
Following the trail of paperwork, Rocketdyne and McDonnell-Douglas engineers meticulously examined the history of every part that had gone into the engine and propellant tanks that made up S-IVC-116. Rocketdyne’s engineers finally identified the issue 43 days after
Magellan’s loss, tracing it to a failure of Augmented Spark Ignition system on the engine. An electrical connection between the ASI and the engine’s control board had been improperly secured--whether through a calibration failure on the torque wrench used to fasten the bolts or a mistake on the responsible technician’s part, it had been sturdy enough to take the static test at Santa Susana, but not enough to survive the stresses of first-stage flight. The faulty connection led the ASIs to light fractions of a second later than they should have, when the combustion chamber contained more propellant than it was designed to. The result was a “hard start,” or, as such incidents were sometimes known, a “hardware-rich combustion environment.” The stage’s control systems had noticed the excessive build-up of pressure in the engine and closed the propellant feed valves, but by then the resultant small explosion had damaged both the injector plate and the ASIs beyond further operation. It was a failure that could have happened at any point in the Lifter program, but had only shown itself on this flight. The failure raised questions about what other failures could have slipped past quality control checks at Huntington Beach. Static fire testing of the stage might have revealed the failure, or more thorough testing, but the former had been deemed an unnecessary expense early in the Space Transportation System’s development program, and the latter were being slowly reduced through the years as the S-IVC continued to perform reliably and STC hunted for ways to reduce the stage’s manufacturing and test costs.
The Review Board also uncovered a somewhat lax safety culture at STC, which had been under pressure to ramp up its launch rate in 1987 and 1988 in response to the growing number of orders and the planned ramp-up of the American civil manned space program. Though the Magellan Review Board did not comment on it, accounts and memoirs published in the 1990s reveal that the organization was also attempting to proactively counter the possibility of cheaper competitors in the near future. As former USAF General James Abrahamson, former NASA Associate Administrator and then-Director of the Strategic Defense Initiative, wrote, “We pushed STC to ramp up in preparation for the maturation of SDI, but what really lit a fire under them were proposals in 1987 from the Soviets that their aerospace sector would be reorganized under Perestroika, and that they would start selling launch services themselves. That and the European progress on their Ariane successor got them going more than we could--for the first time in almost a decade, Lifter had real competitors on the horizon.” STC moved to launch more often and reduce costs further, to assure its continued dominance of the global launch market. Though the Magellan Review Board did not comment on every reason, it did conclude that quality control at STC had slipped since the start of the decade, and that a culture of arrogance had taken hold. STC’s rocket engines, after all, dated to the early 1960s or late 1950s, and had been flying for twenty years--a general sentiment had emerged that anything that
could go wrong already
had.
On July 22, 1988, the Magellan Review Board submitted its draft findings to NASA Administrator James Beggs, concluding that the damaged ASIs were to blame for the failed launch. The Board made a number of quality-control regulations for Rocketdyne and STC to implement. Somewhat controversially, the decision to not static-fire the completed S-IVC stages was not noted as needing to be reversed. The Review Board concluded that such testing would not have caught the failure, or indeed any other failure they had identified as particularly likely. The most likely cause of a failure that such static-testing would prevent, foreign object ingestion by the rocket turbopumps, was already effectively countered by the use of wire meshes in the fuel and oxidizer feed lines. At the end of the day, concluded the report, some failures could only be checked by flight or by painstaking inspections of every bolt on the spacecraft. While a static fire might
look reassuring, it would not necessarily prove anything that previous tests did not. Instead, issues like the STS-116 ignition failure could be better caught by more rigorous quality and process control, with more extensive testing of the systems of the integrated stage short of actual firings.
The Magellan Review Board concluded that almost every quality control issue they identified could be addressed through simple procedural changes at Rocketdyne and STC--better tracking of tools, more frequent inspections--and that in any event the upcoming Dual-Engine Upper Stage (DEUS) variant of the S-IVC, with its second J-2S-2 engine, would provide sufficient redundancy that most missions could be completed even with the failure of one engine. The Board recommended that Lifter operations be suspended until DEUS stages were ready for flight, a very lax restriction on the system all things considered; DEUS was, by that point, on-track for a first flight in early 1989 anyway. As Richard Truly, a Lifter pilot who had taken a management position at STC after leaving the astronaut corps, wrote in his memoirs, “We got lucky. If we had to lose a payload, there was no better time than 1988.” Shaken, but still dedicated to their tasks, NASA and its contractors set to work preparing the Space Transportation System for its return-to-flight in spring of 1989.
The loss of
Magellan, however, kicked off a small storm of controversy both within and outside of NASA, centering on whether the agency had been right to spin off Lifter operations to STC in the first place, whether the Interim Semi-Reusable System architecture had been the right choice all those years ago, and, as the dependence of Spacelab, Shuttle, and NASA’s flagship unmanned programs on Lifter was thrown into sharp relief, exactly how NASA should go forward and face the last decade of the second millennium.
Senator William Proxmire of the Senate Armed Services Committee (almost certainly unwittingly) helped lay the foundation for NASA’s new direction when he arranged a series of hearings of NASA, USAF, and STC managers in early fall 1988. The most infamous political enemy of the human spaceflight program, Proxmire had made a name for himself by criticizing government waste (particularly on scientific research he found frivolous) and excessive military spending. The temporary stand-down of the Space Transportation System presented a golden opportunity to pin a Golden Fleece Award on a program that seemed tailor-made for him.
In his capacity as a member of the Armed Services Committee, Proxmire summoned STC Chairman Harry Stonecipher to testify before the Committee. Proxmire took aim at STC’s Launch Services Contract with the Department of Defense, criticizing the company for using the hardware financed by that contract to operate a commercial launch service, and doing a bad job of that to boot.
“So, tell me. I have here this report from NASA, your biggest client. They say you took those funds, failed to pay overtime, ran your operations to the bone after every red cent, and then managed to destroy a multi-million dollar piece of NASA property because of a $25 wrench. Why should we trust that you will fix this boondoggle, that you will do anything different in the future? Why should we trust that you can economically and reliably deliver payloads for the Department of Defense?”
While this was in character for the man regarded in the spaceflight community as Senator Proxmire, Enemy of Progress, it is important to recall that his ire toward spaceflight was not all-encompassing--and indeed, that contributed to his grievances. In 1983, Promire had been persuaded by Carl Sagan to support, or at least not oppose, the Search for Extraterrestrial Intelligence. In the years since then, he had warmed to at least the unmanned part of the American space program, particularly those parts relating to Earth observation. While most writers at the time dismissed Proxmire’s attacks as cynical self-promotion, of the same kind as that which Proxmire’s hated predecessor, Joe McCarthy, employed against alleged Communists, there does appear to have been an element of genuine anger that one of NASA’s “worthwhile” missions had been lost by a failure of a vehicle in the manned spaceflight program. He spent a great deal of time asking Stonecipher whether STC had taken special precautions to ensure a successful flight for
Magellan. Stonecipher, for his part, answered that every Lifter launch was taken very seriously by STC, but that every flight carried some risk. “We’re aiming for airliner-like operation. But even the 747 I took to get here from Los Angeles does not have a perfect safety record.”
Moving on from STC, Proxmire next summoned the Director of the Launch Contracts Office at NASA to explain how much oversight NASA had over STC, and why NASA had not called attention to the culture of complacency noted by the Magellan Review Board. The Launch Contracts Office, established in 1983, awarded launch contracts to STC and to Martin-Marietta (beginning in 1985 with the Complementary Expendable Launch Vehicle (CELV) block-buy). It was also the main office through which NASA interacted with STC for Lifter operations, though a separate office, the Crewed Spacecraft Launch Operations Office, coordinated Shuttle operations with STC until separation from the S-IVC, after which Johnson Space Center took over directly. Proxmire asked the Director, Timothy Cizadlo, why NASA had chosen to stick to Lifter even as this culture developed, rather than go with proven expendable launch vehicles like Titan IIIE or Atlas-Centaur, whose pads, still in mothballs, could have theoretically been revived. Cizadlo answered gracefully enough to get a laugh out of Proxmire’s colleagues: “We didn’t want to fleece the taxpayers by buying the same service for a higher price.” Proxmire, undeterred, continued by calling into question NASA’s ability to oversee even its unmanned spacecraft. “Perhaps NOAA would do a better job studying the atmospheres of other planets,” he mused.
As the hearing continued, Proxmire called into question the efficacy of the Space Lifter program in satisfying the US government’s space access needs, asking whether the program was really a great improvement over earlier, expendable rockets. He asked further whether the Launch Contracting Office was under pressure to favor STC over other programs, due to that company’s closer relations to NASA’s manned spaceflight program. On this point, Cizadlo was adamant: "One failure does not obscure the fact that the Lifter has been a success. Launch costs are down. Private investment in space is up. We've turned the investment of NASA into an entire new sector of the American economy. I challenge anyone in this room to tell me that Atlas or Titan could have done that." Hearing no objection, and seizing the moment, he went on: “My office has done business with STC since that company’s foundation, and during that time, and even before that, while Lifter was under NASA’s direct jurisdiction, the program’s safety record and costs were equal to or better than those of the expendable boosters it’s replaced. Better than Atlas or Titan could have, Lifter has enabled NASA to achieve its goals in space--and when I say that, I’m not just talking about launching any given payload, but about the objectives listed in the National Aeronautics and Space Act--the preservation of American leadership in applied space technologies. Launching cheaply is not the end goal, though it is an important part of our selection process. My job, and the job of everyone at LCO, at NASA, and the job for which we pay STC, is to
expand American companies’ access to space. In my judgement, even with this recent incident, STC has done an admirable job.”
Ultimately, Proxmire’s hearings did not have a great impact on the relationship of NASA and STC, or on STC’s place as the primary launch provider for US government satellite services. While Ariane won more launch contracts in the years after
Magellan than it did before, as satellite operators made sure to keep relations with Arianespace open in the event of another failure, STC would ultimately return the Space Transportation System to flight, and reclaim its share of the commercial satellite market. Contemporary political commentators wrote the hearings off as one last windmill at which Proxmire wanted to tilt before his retirement, an assessment that Proxmire himself strengthened when, in January of 1989, he awarded the last Golden Fleece of his career to the Space Transportation Corporation and NASA’s Launch Contracting Office (for his part, STC Chairman Stonecipher is said to have hung that Golden Fleece on the wall in his home office, remarking “it’s a shame they didn’t call Lifter ‘Argo’”). However, Cizadlo’s defense of the accomplishments of the Space Transportation System reflected a growing sentiment at NASA that the agency’s role in opening the High Frontier was that of a trailblazer.