Evaluation of Risk and Possible Mitigation Schemes for Previously Unidentified Hazards

In April 2004, the NASA Engineering and Safety Center (NESC) was commissioned by NASA's Chief Safety and Mission Assurance (S&MA) Officer to review and render a technical opinion on the probability of a catastrophic failure related to this scenario: The Space Shuttle Program (SSP) recognized a zero-fault-tolerant design related to an inadvertent firing of the primary reaction control system (RCS) jets on the Orbiter during mated operations with the International Space Station (ISS). It was determined that an un-commanded firing of an RCS jet could cause serious damage or loss of both the SSP Orbiter and the ISS. Several scenarios were suggested in which an un-commanded firing of the RCS jet is possible. These scenarios include an arc track event in the 28-volt heater circuits that could result in a wire-to-wire short to the adjacent reaction control jet wire. In this worst-case scenario, enough current and power could be applied to activate the reaction control jet valves and fire a thruster. The following report summarizes the work that was sponsored by the NESC as part of their assessment of the Orbiter inadvertent firing of a RCS thruster while attached to the ISS.