← doc
dow-uap-d48-report-september-1996
p012 / 146
relative probabilities of occurrence for all failure-response modes for these vehicles, LLVl,
and other new launch systems.

Although it may be reasonable to establish the relative probability of occurrence of a
Mode-5 failure response by empirical means, the number of Mode-5 failures is too small to
have any hope of establishing accurate values for the shaping constants from this sample
alone. Inadequate descriptions of vehicle behavior in the available historical records and
uncertainty in impact location following a malfunction add to the difficulty of classifying
failure responses. In view of the limited data available for vehicles that have experienced
Mode-5 failures, the values chosen for the Mode-5 constants must depend on simulations of
vehicle behavior following failure.

2. Examples Showing Need for Mode 5
The need for a Mode-5 response or some similar response mode (or a multiplicity of other
response modes) can be seen from the following vehicle performance descriptions extracted
from Appendix D:

(1)   Atlas BE, 24 Jan 61. Missile stability was lost at about 161 seconds, some 30
      seconds after BECO, probably due to failure of the servo-amplifier power supply.
      The sustainer engine shut down at 248 seconds, and the vernier engines about 10
      seconds later. Impact occurred 1316 miles downrange and 215 miles crossrange. •

(2)   Titan M-4, 6 Oct 61. A one-bit error in the W velocity accumulation caused impact
      86 miles short and 14 miles right of target.
(3)   Atlas 145D (Mariner R-1), 22 July 62. Booster stage and flight appeared normal
      until after booster staging at guidance enable at about 157 seconds. Operation of
      guidance rate beacon was intermittent. Due to this and faulty guidance equations,
      erroneous guidance commands were given based on invalid rate data. Vehicle
      deviations became evident at 172 seconds and continued throughout flight with a
      maximum yaw deviation of 60° and pitch deviation of 28° occurring at 270
      seconds. The vehicle deviated grossly from the planned trajectory in azimuth and
      velocity, and executed abnormal maneuvers in pitch and yaw. The missile was
      destroyed by the RSO at 293.5 seconds, some 12 seconds after SECO.
(4)   Atlas SLV-3 (GTA-9), 17 May 66. Vehicle became unstable when B2 pitch control
      was lost at 121 seconds. Loss of pitch control resulted in a pitch-down maneuver
      much greater than 90°. Guidance control was lost at 132 seconds. After BECO,
      the vehicle stabilized in an abnormal attitude. Although the vehicle did not
      follow the planned trajectory, SECO (at 280 seconds), VECO (at 298 seconds), and
      Agena separation occurred normally from programmer commands.

(5)   Atlas 95F (ABRES/AFSC), 3 May 68. Immediately after liftoff the telemetered roll
      and yaw rates indicated that the missile was erratic. During the first 10 seconds of
      flight the missile yawed hard to the left. It then began a hard yaw to the right,

9/10/96                                      3                                           RTI


Vision Description (EN)

Body page containing technical discussion of vehicle failure response modes and safety procedures. Main paragraph at top discusses response-mode definitions from Appendix A and argues that described vehicle failures cannot be classified as Mode 1, 2, 3, or Mode-4 on-trajectory failures. Extended footnote at bottom clarifies safety philosophy regarding prompt destruct action, explaining that safety officers require time to evaluate data after malfunctions and that quick action contradicts safety doctrine unless impact limit lines are threatened. Footer indicates date 9/10/96, page number 5, and RTI marking. Page is primarily blank space with text concentrated at top and bottom margins.

Descrição Vision (PT-BR)

Página de corpo contendo discussão técnica dos modos de resposta a falhas de veículos e procedimentos de segurança. Parágrafo principal no topo discute definições de modos de resposta da Apêndice A e argumenta que falhas de veículos descritas não podem ser classificadas como falhas de resposta Modo 1, 2, 3 ou Modo-4 em trajetória. Nota de rodapé estendida no final esclarece a filosofia de segurança em relação à ação de destruição rápida, explicando que oficiais de segurança requerem tempo para avaliar dados após maus funcionamentos e que ação rápida contraria a doutrina de segurança a menos que linhas de impacto limite sejam ameaçadas. Rodapé indica data 9/10/96, número da página 5 e marcação RTI. A página é principalmente espaço em branco com texto concentrado nas margens superior e inferior.