relative probabilities of occurrence for all failure-response modes for these vehicles, LLVl, and other new launch systems. Although it may be reasonable to establish the relative probability of occurrence of a Mode-5 failure response by empirical means, the number of Mode-5 failures is too small to have any hope of establishing accurate values for the shaping constants from this sample alone. Inadequate descriptions of vehicle behavior in the available historical records and uncertainty in impact location following a malfunction add to the difficulty of classifying failure responses. In view of the limited data available for vehicles that have experienced Mode-5 failures, the values chosen for the Mode-5 constants must depend on simulations of vehicle behavior following failure. 2. Examples Showing Need for Mode 5 The need for a Mode-5 response or some similar response mode (or a multiplicity of other response modes) can be seen from the following vehicle performance descriptions extracted from Appendix D: (1) Atlas BE, 24 Jan 61. Missile stability was lost at about 161 seconds, some 30 seconds after BECO, probably due to failure of the servo-amplifier power supply. The sustainer engine shut down at 248 seconds, and the vernier engines about 10 seconds later. Impact occurred 1316 miles downrange and 215 miles crossrange. • (2) Titan M-4, 6 Oct 61. A one-bit error in the W velocity accumulation caused impact 86 miles short and 14 miles right of target. (3) Atlas 145D (Mariner R-1), 22 July 62. Booster stage and flight appeared normal until after booster staging at guidance enable at about 157 seconds. Operation of guidance rate beacon was intermittent. Due to this and faulty guidance equations, erroneous guidance commands were given based on invalid rate data. Vehicle deviations became evident at 172 seconds and continued throughout flight with a maximum yaw deviation of 60° and pitch deviation of 28° occurring at 270 seconds. The vehicle deviated grossly from the planned trajectory in azimuth and velocity, and executed abnormal maneuvers in pitch and yaw. The missile was destroyed by the RSO at 293.5 seconds, some 12 seconds after SECO. (4) Atlas SLV-3 (GTA-9), 17 May 66. Vehicle became unstable when B2 pitch control was lost at 121 seconds. Loss of pitch control resulted in a pitch-down maneuver much greater than 90°. Guidance control was lost at 132 seconds. After BECO, the vehicle stabilized in an abnormal attitude. Although the vehicle did not follow the planned trajectory, SECO (at 280 seconds), VECO (at 298 seconds), and Agena separation occurred normally from programmer commands. (5) Atlas 95F (ABRES/AFSC), 3 May 68. Immediately after liftoff the telemetered roll and yaw rates indicated that the missile was erratic. During the first 10 seconds of flight the missile yawed hard to the left. It then began a hard yaw to the right, 9/10/96 3 RTI
Vision Description (EN)
Body page containing technical discussion of vehicle failure response modes and safety procedures. Main paragraph at top discusses response-mode definitions from Appendix A and argues that described vehicle failures cannot be classified as Mode 1, 2, 3, or Mode-4 on-trajectory failures. Extended footnote at bottom clarifies safety philosophy regarding prompt destruct action, explaining that safety officers require time to evaluate data after malfunctions and that quick action contradicts safety doctrine unless impact limit lines are threatened. Footer indicates date 9/10/96, page number 5, and RTI marking. Page is primarily blank space with text concentrated at top and bottom margins.
Descrição Vision (PT-BR)
Página de corpo contendo discussão técnica dos modos de resposta a falhas de veículos e procedimentos de segurança. Parágrafo principal no topo discute definições de modos de resposta da Apêndice A e argumenta que falhas de veículos descritas não podem ser classificadas como falhas de resposta Modo 1, 2, 3 ou Modo-4 em trajetória. Nota de rodapé estendida no final esclarece a filosofia de segurança em relação à ação de destruição rápida, explicando que oficiais de segurança requerem tempo para avaliar dados após maus funcionamentos e que ação rápida contraria a doutrina de segurança a menos que linhas de impacto limite sejam ameaçadas. Rodapé indica data 9/10/96, número da página 5 e marcação RTI. A página é principalmente espaço em branco com texto concentrado nas margens superior e inferior.