Persona: Senior Aerospace Systems Engineer and Mission Failure Analyst
Abstract:
This analysis examines the NASA Type A mishap report concerning the Boeing Starliner Crew Flight Test (CFT), detailing systemic technical failures and management oversights. The mission was reclassified as a Type A mishap—the highest severity level—due to financial losses exceeding $200 million resulting from the need to reassign crew seats and extend orbital duration. Technical investigation focuses on the degradation of the Reaction Control System (RCS) and Orbital Maneuvering and Attitude Control (OMAC) thrusters located within the service module’s "doghouse" pods.
Primary failure modes identified include two-phase flow (oxidizer boiling) caused by thermal soak-back and plume recirculation, and poppet valve extrusion due to Nitrogen Tetroxide (N2O4) plasticizing Teflon seals. These issues led to a critical loss of six-degree-of-freedom (6-DOF) control during the approach to the International Space Station (ISS). Furthermore, the report highlights persistent helium leaks attributed to O-ring degradation from N2O4 permeation and a catastrophic lack of redundancy in the Command Module’s RCS, which rendered the spacecraft zero-fault tolerant during re-entry. The findings suggest a breakdown in the validation process regarding agreed-upon redundancy and safety requirements.
Starliner Crew Flight Test: Technical Failure Analysis and Mission Impact
0:01:06 Type A Mishap Classification: NASA upgraded the Starliner CFT from a "close call" to a Type A mishap. While no lives were lost, the financial impact exceeded the $2 million threshold, estimated at $200 million due to the mission extension and the displacement of two planned crew members on the subsequent Crew Dragon flight.
0:02:20 Legacy Thruster Issues (OFT-1 & OFT-2): Previous Orbital Flight Tests experienced thruster anomalies. OFT-1 failures were initially attributed to sensor issues following excessive firing caused by a software clock error, while OFT-2 saw continued RCS failures that set a precedent for CFT's propulsion challenges.
0:05:30 Service Module Propulsion Architecture: Starliner utilizes a bi-propellant system (Nitrogen Tetroxide and Monomethylhydrazine). The service module features four "doghouse" pods containing RCS thrusters (85 lbs thrust) for fine maneuvering and OMAC thrusters for orbital changes and launch aborts.
0:12:00 Loss of 6-DOF Control: During ISS approach, the spacecraft lost translation control in the X-direction. Multiple aft-firing RCS thrusters in the starboard and bottom pods failed simultaneously, preventing balanced forward thrust and forcing the crew into a two-hour troubleshooting hold.
0:14:40 Root Cause: Two-Phase Flow and Thermal Soak-back: Investigators believe Nitrogen Tetroxide (N2O4) boiled within the propellant lines, creating gas pockets (two-phase flow) that starved the thrusters. This was exacerbated by "thermal soak-back" and plume recirculation, particularly in the starboard pod where a structural flange likely trapped heat.
0:18:54 Poppet Valve Extrusion: A second failure mechanism involves the Teflon seals in the poppet valves. N2O4 acted as a plasticizer, causing the Teflon to swell and soften. Under pressure and heat, this material extruded into the flow path, physically obstructing propellant delivery.
0:29:50 Helium System Leaks: Seven of eight RCS manifolds experienced helium leaks. Analysis points to O-ring seals that were incorrectly sized according to industry standards (Parker Handbook) and subsequently degraded by N2O4 vapor permeation.
0:35:28 Command Module RCS Vulnerability: Upon departing the ISS, one of the Command Module’s 12 RCS thrusters failed. It was subsequently discovered that the system architecture lacked the required redundancy for certain axes, meaning a second failure would have resulted in a total loss of crew (LOC) during re-entry.
0:37:21 Carbasic Acid Corrosion: The Command Module thruster failure is linked to the formation of carbasic acid (a reaction between N2O4 and CO2/moisture). This acid corroded internal stainless steel components, leading to valve seizure or debris blockage.
0:41:13 Validation and Oversight Gaps: The report underscores a significant failure in the safety and validation pipeline. Starliner reached crewed flight despite possessing a propulsion architecture that did not meet the basic "one-fault tolerant" redundancy requirements agreed upon during the development phase.