Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safe mode”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

The Distribution of Non-Volatile Elements on Mars: Mars Odyssey GRS Results

The major scientific objective of the Gamma-Ray Spectrometer (GRS) on the 2001 Mars Odyssey Mission is to determine the distribution of elements in the near-surface of Mars. Mars Odyssey has been in its mapping orbit since February, 2002, and the GRS boom, which removes the instrument from the gamma-ray background of the spacecraft, was erected in June, 2002. In the 580 days since boom erection, we have accumulated 453 days of mapping data. The difference is due mostly to two times when Odyssey went into safe mode and the instrument warmed up forcing us to anneal out radiation damage that manifests itself after warming. Other data losses are due to simple transmitter data gaps and to intense solar particle events. The data from the GRS is statistical in nature. We have a very low count rate and a very low signal-to-noise ratio. With the exception of K, the most easily mapped elements have a signal/noise ratio on the order of 0.1 (0.5 for K) and the counting rates are on the order of 0.3 to 0.7 counts/min (4 cpm for K). In order to map the distribution of an element, we have to divide the total signal from Mars up into many cells that define the map s spatial resolution (unless the statistics are good enough that the intrinsic spatial resolution of the instrument, about 550 km diameter, dominates). The data for several elements have now achieved a statistical precision that permits us to make meaningful maps.

Boynton, W.↗

Hubble Space Telescope Star Tracker ad Two-Gyro Control Law Design, Implementation, and On-Orbit Performance

The Hubble Space Telescope (HST) normally requires three gyroscopes for three-axis rate control. The loss of the Space Shuttle Columbia on STS-107 resulted in the cancellation of a shuttle-based HST Servicing Mission 4. Therefore, HST must operate using the on-board hardware until an alternate means of servicing can be accomplished. The probability of gyro failure indicates that fewer than three gyros will be operable before any servicing mission can be performe& To mitigate this, and to extend the HST life expectancy, a rate estimation and control algorithm was developed that requires two gyros to measure rate about two axes, with the remaining axis rate estimated using one of three alternate sensors. Three-axis magnetometers (MSS) are used for coarse rate estimation during large maneuvers and during occultations of other sensors. Fixed-Head Star Trackers (FHSTs) are used for rate estimation during safe mode recovery and during transition to science operations. Fine rate estimation during science operations is performed using the Fine Guidance Sensors (FGSs). The FHST mode (T2G) relies on star vectors as measured by the FHSTs to estimate vehicle rate about the axis not measured by the gyros. Since the FHSTs were not designed to estimate body rate, this method involves a unique set of problems that had to be overcome in the final design, such as the effect of FHST break tracks and moving targets on rate estimation. The solutions to these problems, as well as a detailed description of the design and implementation of the rate estimation are presented Also included are the time domain and frequency domain analysis of the T2G control law. A high fidelity HST simulator (HSTSIM) was used to verify T2G performance prior to on-orbit use. Results of these simulations are also presented. Finally, analysis of actual T2G on-orbit test results is presented for design validation.

VanArsdall, John C.↗

Operational Experience with Autonomous Star Trackers on ESA Interplanetary Spacecraft

Mars Express (MEX), Rosetta and Venus Express (VEX) are ESA interplanetary spacecrafts (S/C) launched in June 2003, March 2004 and November 2005, respectively. Mars Express was injected into Mars orbit end of 2003 with routine operations starting in spring 2004. Rosetta is since launch on its way to rendezvous comet Churyumov-Gerasimenko in 2014. It has completed several test and commissioning activities and is performing several planetary swingbys (Earth in spring 2005, Mars in spring 2007, Earth in autumn 2007 and again two years later). Venus Express has also started routine operations since the completion of the Venus orbit insertion maneuver sequence beginning of May 2006. All three S/C are three axes stabilized with a similar attitude and orbit control system (AOCS). The attitude is estimated on board using star and rate sensors and controlled using four reaction wheels. A bipropellant reaction control system with 10N thrusters serves for wheel off loadings and attitude control in safe mode. Mars Express and Venus Express have an additional 400N engine for the planetary orbit insertion. Nominal Earth communication is accomplished through a high gain antenna. All three S/C are equipped with a redundant set of autonomous star trackers (STR) which are based on almost the same hardware. The STR software is especially adapted for the respective mission. This paper addresses several topics related to the experience gained with the STR operations on board the three S/C so far.

Lauer, Mathias↗

Guaranteeing Pointing Performance of the SDO Sun-Pointing Controllers in Light of Nonlinear Effects

The Solar Dynamics Observatory (SDO) mission is the first Space Weather Research Network mission, part of NASA s Living With a Star program.1 This program seeks to understand the changing Sun and its effects on the Solar System, life, and society. To this end, the SDO spacecraft will carry three Sun-observing instruments to geosynchronous orbit: Helioseismic and Magnetic Imager (HMI), led by Stanford University; Atmospheric Imaging Assembly (AIA), led by Lockheed Martin Space and Astrophysics Laboratory; and Extreme Ultraviolet Variability Experiment (EVE), led by the University of Colorado. Links describing the instruments in detail may be found through the SDO web site.2 The basic mission goals are to observe the Sun for a very high percentage of the 5-year mission (10-year goal) with long stretches of uninterrupted observations and with constant, high-data-rate transmission to a dedicated ground station. These goals guided the design of the spacecraft bus that will carry and service the three-instrument payload. At the time of this publication, the SDO spacecraft bus is well into the integration and testing phase at the NASA Goddard Space Flight Center (GSFC). A three-axis stabilized attitude control system (ACS) is needed both to point at the Sun accurately and to keep the roll about the Sun vector correctly positioned. The ACS has four reaction wheel modes and 2 thruster actuated modes. More details about the ACS in general and the control modes in particular can be found in Refs. [3-6]. All four of SDO s wheel-actuated control modes involve Sun-pointing controllers, as might be expected from such a mission. Science mode, during which most science data is collected, uses specialized guide telescopes to point accurately at the Sun. Inertial mode has two sub-modes, one tracks a Sun-referenced target orientation, and another maintains an absolute (star-referenced) target orientation, that both employ a Kalman filter to process data from a digital Sun sensor and two star trackers. However, this paper is concerned only with the other two modes: Safe Hold (SH) and Sun Acquisition (SA).

Starin, Scott R.↗

First In-Orbit Experience of TerraSAR-X Flight Dynamics Operations

TerraSAR-X is an advanced synthetic aperture radar satellite system for scientific and commercial applications that is realized in a public-private partnership between the German Aerospace Center (DLR) and the Astrium GmbH. TerraSAR-X was launched at June 15, 2007 on top of a Russian DNEPR-1 rocket into a 514 km sun-synchronous dusk-dawn orbit with an 11-day repeat cycle and will be operated for a period of at least 5 years during which it will provide high resolution SAR-data in the X-band. Due to the objectives of the interferometric campaigns the satellite has to comply to tight orbit control requirements, which are formulated in the form of a 250 m toroidal tube around a pre-flight determined reference trajectory (see [1] for details). The acquisition of the reference orbit was one of the main and key activities during the Launch and Early Orbit Phase (LEOP) and had to compensate for both injection errors and spacecraft safe mode attitude control thruster activities. The paper summarizes the activities of GSOC flight dynamics team during both LEOP and early Commissioning Phase, where the main tasks have been 1) the first-acquisition support via angle-tracking and GPS-based orbit determination, 2) maneuver planning for target orbit acquisition and maintenance, and 3) precise orbit and attitude determination for SAR processing support. Furthermore, a presentation on the achieved results and encountered problems will be addressed.

Kahle, R.↗

Mars Odyssey Mission Status

The status of the Mars Odyssey Mission is discussed, including mission statistics, science data return, UHF relay support, consumables and expected lifetime, spacecraft activity, safe mode operation, and mission scheduling.

Odyssey↗

Reactive Collision Avoidance Algorithm

The reactive collision avoidance (RCA) algorithm allows a spacecraft to find a fuel-optimal trajectory for avoiding an arbitrary number of colliding spacecraft in real time while accounting for acceleration limits. In addition to spacecraft, the technology can be used for vehicles that can accelerate in any direction, such as helicopters and submersibles. In contrast to existing, passive algorithms that simultaneously design trajectories for a cluster of vehicles working to achieve a common goal, RCA is implemented onboard spacecraft only when an imminent collision is detected, and then plans a collision avoidance maneuver for only that host vehicle, thus preventing a collision in an off-nominal situation for which passive algorithms cannot. An example scenario for such a situation might be when a spacecraft in the cluster is approaching another one, but enters safe mode and begins to drift. Functionally, the RCA detects colliding spacecraft, plans an evasion trajectory by solving the Evasion Trajectory Problem (ETP), and then recovers after the collision is avoided. A direct optimization approach was used to develop the algorithm so it can run in real time. In this innovation, a parameterized class of avoidance trajectories is specified, and then the optimal trajectory is found by searching over the parameters. The class of trajectories is selected as bang-off-bang as motivated by optimal control theory. That is, an avoiding spacecraft first applies full acceleration in a constant direction, then coasts, and finally applies full acceleration to stop. The parameter optimization problem can be solved offline and stored as a look-up table of values. Using a look-up table allows the algorithm to run in real time. Given a colliding spacecraft, the properties of the collision geometry serve as indices of the look-up table that gives the optimal trajectory. For multiple colliding spacecraft, the set of trajectories that avoid all spacecraft is rapidly searched on-line. The optimal avoidance trajectory is implemented as a receding-horizon model predictive control law. Therefore, at each time step, the optimal avoidance trajectory is found and the first time step of its acceleration is applied. At the next time step of the control computer, the problem is re-solved and the new first time step is again applied. This continual updating allows the RCA algorithm to adapt to a colliding spacecraft that is making erratic course changes.

Scharf, Daniel↗

Spacecraft Attitude Tracking and Maneuver Using Combined Magnetic Actuators

The accuracy of spacecraft attitude control using magnetic actuators only is low and on the order of 0.4-5 degrees. The key reason is that the magnetic torque is two-dimensional and it is only in the plane perpendicular to the magnetic field vector. In this paper novel attitude control algorithms using the combination of magnetic actuators with Reaction Wheel Assembles (RWAs) or other types of actuators, such as thrusters, are presented. The combination of magnetic actuators with one or two RWAs aligned with different body axis expands the two-dimensional control torque to three-dimensional. The algorithms can guarantee the spacecraft attitude and rates to track the commanded attitude precisely. A design example is presented for Nadir pointing, pitch and yaw maneuvers. The results show that precise attitude tracking can be reached and the attitude control accuracy is comparable with RWAs based attitude control. The algorithms are also useful for the RWAs based attitude control. When there are only one or two workable RWAs due to RWA failures, the attitude control system can switch to the control algorithms for the combined magnetic actuators with the RWAs without going to the safe mode and the control accuracy can be maintained.

Zhou, Zhiqiang↗

Tools Ensure Reliability of Critical Software

In November 2006, after attempting to make a routine maneuver, NASA's Mars Global Surveyor (MGS) reported unexpected errors. The onboard software switched to backup resources, and a 2-day lapse in communication took place between the spacecraft and Earth. When a signal was finally received, it indicated that MGS had entered safe mode, a state of restricted activity in which the computer awaits instructions from Earth. After more than 9 years of successful operation gathering data and snapping pictures of Mars to characterize the planet's land and weather communication between MGS and Earth suddenly stopped. Months later, a report from NASA's internal review board found the spacecraft's battery failed due to an unfortunate sequence of events. Updates to the spacecraft's software, which had taken place months earlier, were written to the wrong memory address in the spacecraft's computer. In short, the mission ended because of a software defect. Over the last decade, spacecraft have become increasingly reliant on software to carry out mission operations. In fact, the next mission to Mars, the Mars Science Laboratory, will rely on more software than all earlier missions to Mars combined. According to Gerard Holzmann, manager at the Laboratory for Reliable Software (LaRS) at NASA's Jet Propulsion Laboratory (JPL), even the fault protection systems on a spacecraft are mostly software-based. For reasons like these, well-functioning software is critical for NASA. In the same year as the failure of MGS, Holzmann presented a new approach to critical software development to help reduce risk and provide consistency. He proposed The Power of 10: Rules for Developing Safety-Critical Code, which is a small set of rules that can easily be remembered, clearly relate to risk, and allow compliance to be verified. The reaction at JPL was positive, and developers in the private sector embraced Holzmann's ideas.

Source record↗

Spacecraft Attitude Tracking and Maneuver Using Combined Magnetic Actuators

A paper describes attitude-control algorithms using the combination of magnetic actuators with reaction wheel assemblies (RWAs) or other types of actuators such as thrusters. The combination of magnetic actuators with one or two RWAs aligned with different body axis expands the two-dimensional control torque to three-dimensional. The algorithms can guarantee the spacecraft attitude and rates to track the commanded attitude precisely. A design example is presented for nadir-pointing, pitch, and yaw maneuvers. The results show that precise attitude tracking can be reached and the attitude- control accuracy is comparable with RWA-based attitude control. When there are only one or two workable RWAs due to RWA failures, the attitude-control system can switch to the control algorithms for the combined magnetic actuators with the RWAs without going to the safe mode, and the control accuracy can be maintained. The attitude-control algorithms of the combined actuators are derived, which can guarantee the spacecraft attitude and rates to track the commanded values precisely. Results show that precise attitude tracking can be reached, and the attitude-control accuracy is comparable with 3-axis wheel control.

Zhou, Zhiqiang↗

CoNNeCT Baseband Processor Module Boot Code SoftWare (BCSW)

This software provides essential startup and initialization routines for the CoNNeCT baseband processor module (BPM) hardware upon power-up. A command and data handling (C&DH) interface is provided via 1553 and diagnostic serial interfaces to invoke operational, reconfiguration, and test commands within the code. The BCSW has features unique to the hardware it is responsible for managing. In this case, the CoNNeCT BPM is configured with an updated CPU (Atmel AT697 SPARC processor) and a unique set of memory and I/O peripherals that require customized software to operate. These features include configuration of new AT697 registers, interfacing to a new HouseKeeper with a flash controller interface, a new dual Xilinx configuration/scrub interface, and an updated 1553 remote terminal (RT) core. The BCSW is intended to provide a "safe" mode for the BPM when initially powered on or when an unexpected trap occurs, causing the processor to reset. The BCSW allows the 1553 bus controller in the spacecraft or payload controller to operate the BPM over 1553 to upload code; upload Xilinx bit files; perform rudimentary tests; read, write, and copy the non-volatile flash memory; and configure the Xilinx interface. Commands also exist over 1553 to cause the CPU to jump or call a specified address to begin execution of user-supplied code. This may be in the form of a real-time operating system, test routine, or specific application code to run on the BPM.

Yamamoto, Clifford K.↗

Communicating by Doppler: Detecting Spacecraft Dynamics During Critical Maneuvers

Communicating information from spacecraft in deep space utilizes sophisticated techniques of modulations onto a microwave signal carrier. Under most conditions, there is a high success rate of sending commands to the spacecraft and receiving science data acquired by on-board instruments along with health and status information. There are conditions, however, where the signal dynamics are too high and/or the received signal-to-noise ratio is below the receiver threshold. Under these conditions, often by design and sometimes as a result of planned or unplanned critical maneuvers, events (e.g., orbit insertion or descent and landing), safe mode, etc., it becomes highly critical but exceedingly challenging to receive information about the health and dynamical behavior of the spacecraft. The Deep Space Network, being a world-class instrument for Radio Science research, developed openloop receivers, called the Radio Science Receiver, designed to capture the raw incoming electromagnetic signals and associated noise for Radio Science experiments; post data capture digital signal processing extracts the signal carrier for scientific analysis. This receiver provides a high level of configuration flexibility and can be optimized for the various types of experiments. In addition to its scientific utility, it proved to be useful, and in some cases critical, for the support of missions during specific scenarios were the link budget is below the threshold of the tracking receiver to maintain lock or the frequency dynamics are faster than the limits of the tracking receiver. In these cases, the signal carrier is often detected only in the open-loop receiver to provide information on the specific behavior of the spacecraft from the carrier dynamics. This paper describes the utility of the system to support mission-critical events for the three cases of Cassini's Saturn orbit insertion, Huygens Titan landing, and Mars rovers landing.

radio science↗

Transforming Community Access to Space Science Models

Researching and forecasting the ever changing space environment (often referred to as space weather) and its influence on humans and their activities are model-intensive disciplines. This is true because the physical processes involved are complex, but, in contrast to terrestrial weather, the supporting observations are typically sparse. Models play a vital role in establishing a physically meaningful context for interpreting limited observations, testing theory, and producing both nowcasts and forecasts. For example, with accurate forecasting of hazardous space weather conditions, spacecraft operators can place sensitive systems in safe modes, and power utilities can protect critical network components from damage caused by large currents induced in transmission lines by geomagnetic storms.

MacNeice, Peter↗

An Examination of Coarse Sun Sensor Contingencies in Attitude Determination and the Sun Vector Calculation

Satellite pointing is vital to the success of a mission. One element of that entails describing the position of the sun relative to the frame of the satellite. Coarse Sun Sensors (CSS) are typically used to provide the information to calculate the sun's position in Safe Modes or contingency operations. In the OCO-2 configuration there are 13 CSS total, which provide redundant 4 celestial coverage. Failures of the individual CSS elements can introduce holes in the celestial coverage resulting in potential loss of sun knowledge. These failures must be analyzed to determine if the contingency plan is sufficient to assure mission success. First the static case was looked at and determined that at a maximum, 3 CSS failures can be sustained on the body and 1 on the array without causing coverage holes. Also array sensors are more important to mission success. The Sun Vector calculation has been transcribed to MATLAB code and failure scenarios are being examined to determine the maximum error given a set of failure scenarios. This activity indicated that if there is a loss of the sun, the sun-searching algorithm could be modified to use XZ rotation as that is guaranteed to find it whereas the design using the YZ rotation misses the sun if it is at the + or - Y orientation.

celestial bodies↗

Cassini at Saturn Proximal Orbits - Attitude Control Challenges

The Cassini mission at Saturn will come to an end in the spring and summer of 2017 with a series of 22 orbits that will dip inside the rings of Saturn. These are called proximal orbits and will conclude with spacecraft disposal into the atmosphere of the ringed world on September 15, 2017. These unique orbits that cross the ring plane only a few thousand kilometers above the cloud tops of the planet present new attitude control challenges for the Cassini operations team. Crossing the ring plane so close to the inner edge of the rings means that the Cassini orientation during the crossing will be tailored to protect the sensitive electronics bus of the spacecraft. This orientation will put the sun sensors at some extra risk so this paper discusses how the team prepares for dust hazards. Periapsis is so close to the planet that spacecraft controllability with RCS thrusters needs to be evaluated because of the predicted atmospheric torque near closest approach to Saturn. Radiation during the ring plane crossings will likely trigger single event transients in some attitude control sensors. This paper discusses how the attitude control team deals with radiation hazards. The angular size and unique geometry of the rings and Saturn near periapsis means that star identification will be interrupted and this paper discusses how the safe mode attitude is selected to best deal with these large bright bodies during the proximal orbits.

Huygens↗

Cassini's Maneuver Automation Software (MAS) Process: How to Successfully Command 200 Navigation Maneuvers

To keep Cassini on its complex trajectory, more than 200 orbit trim maneuvers (OTMs) have been planned from July 2004 to July 2010. With only a few days between many of these OTMs, the operations process of planning and executing the necessary commands had to be automated. The resulting Maneuver Automation Software (MAS) process minimizes the workforce required for, and maximizes the efficiency of, the maneuver design and uplink activities. The MAS process is a well-organized and logically constructed interface between Cassini's Navigation (NAV), Spacecraft Operations (SCO), and Ground Software teams. Upon delivery of an orbit determination (OD) from NAV, the MAS process can generate a maneuver design and all related uplink and verification products within 30 minutes. To date, all 112 OTMs executed by the Cassini spacecraft have been successful. MAS was even used to successfully design and execute a maneuver while the spacecraft was in safe mode.

Yang, Genevie Velarde↗

BioSentinel: Mission Development of a Radiation Biosensor to Gauge DNA Damage and Repair Beyond Low Earth Orbit on a 6U Nanosatellite.

We are designing and developing a "6U" (10 x 22 x 34 cm; 14 kg) nanosatellite as a secondary payload to fly aboard NASA's Space Launch System (SLS) Exploration Mission (EM) 1, scheduled for launch in late 2017. For the first time in over forty years, direct experimental data from biological studies beyond low Earth orbit (LEO) will be obtained during BioSentinel's 12- to 18- month mission. BioSentinel will measure the damage and repair of DNA in a biological organism and allow us to compare that to information from onboard physical radiation sensors. In order to understand the relative contributions of the space environment's two dominant biological perturbations, reduced gravity and ionizing radiation, results from deep space will be directly compared to data obtained in LEO (on ISS) and on Earth. These data points will be available for validation of existing biological radiation damage and repair models, and for extrapolation to humans, to assist in mitigating risks during future long-term exploration missions beyond LEO. The BioSentinel Payload occupies 4U of the spacecraft and will utilize the monocellular eukaryotic organism Saccharomyces cerevisiae (yeast) to report DNA double-strand-break (DSB) events that result from ambient space radiation. DSB repair exhibits striking conservation of repair proteins from yeast to humans. Yeast was selected because of 1) its similarity to cells in higher organisms, 2) the well-established history of strains engineered to measure DSB repair, 3) its spaceflight heritage, and 4) the wealth of available ground and flight reference data. The S. cerevisiae flight strain will include engineered genetic defects to prevent growth and division until a radiation-induced DSB activates the yeast's DNA repair mechanisms. The triggered culture growth and metabolic activity directly indicate a DSB and its successful repair. The yeast will be carried in the dry state within the 1-atm P/L container in 18 separate fluidics cards with each card having 16 independent culture microwells, with integral microchannels and filters to supply nutrients and reagents, confine the yeast to the wells, and enable optical measurement. The measurement subsystem will monitor each subgroup of culture wells continuously for several weeks, optically tracking DSBtriggered cell growth and metabolism. BioSentinel will also include physical radiation sensors based on the TimePix sensor, as implemented by JSC's RadWorks group, which record individual radiation events including estimates of their linear-energytransfer (LET) values. Radiation-dose and LET data will be compared directly to the rate of DSB-and-repair events measured by the S. cerevisiae biosentinels. The spacecraft bus will operate in a deep space environment with functions that include command and data handling, communications, power generation (via deployable solar panels) and storage, and attitude determination-and-control system with micropropulsion. Development of the BioSentinel spacecraft will mature and prove multiple nanosatellite advances in order to function well beyond LEO: Communications from distances of ≥ 500,000 km; Autonomous attitude control, momentum management, and safe mode of nanosatellites in deep space; Shielding-, hardening-, design-, and software-derived radiation tolerance for electronics; Reliable functionality for 12 - 18 months of key subsystems for biofluidics, memory, communications, power, etc.; Close integration of living biological radiation event monitors with miniature physical radiation spectrometers; Biological measurement of solar particle events beyond Earth orbit In addition to providing the first biological results from beyond LEO in over 4 decades, BioSentinel will provide an adaptable small-satellite instrument platform to perform a range of human-exploration-relevant measurements that characterize the biological consequences of multiple outer space environments. BioSentinel is being developed under NASA's Advanced Exploration Systems program.

DNA damage↗

Odyssey Mars Orbiter - Thirteen Years of On-Orbit Navigation

The Odyssey spacecraft has been in Mars orbit since October 24, 2001 and has nearly completed 61,490 orbits. Navigation operational objectives include the following: Control the local mean solar time for science observations; for most of the mission, this varied from 3:45 pm to 5:20 pm. Currently, an orbit trim maneuver planned for November 10, 2015 will place Odyssey at 6:45 pm/6:45 am at equator crossings in order to observe early morning ground frost, fog and clouds. Initially, Odyssey was late by 42 minutes for an over-flight of the critical seven minutes of Phoenix's entry, descent and landing (EDL). Odyssey was successfully positioned for this over-flight using the Delta V from angular momentum desaturations (AMD). Similar results for the Mars Science Laboratory's EDL and Comet Siding Spring's minimum risk location will be presented. Odyssey has and continues to relay significant quantities of rover data. Navigation successfully models frequent AMD Delta Vs in order to generate accurate sixty-day trajectory predictions; a typical timing error is 25 seconds after 60 days. However, unexpected events, such as safe-mode entries with their larger and more frequent thrusting, severely impact that trajectory accuracy. Impacted trajectories can have timing errors ranging from a few minutes to ten-to-fifteen minutes after sixty-days. Other analyses (briefly stated) include: a) the offset of the orbital ground track pattern after an initial cycle of 30 days or 362 orbits and b) an operations environment of continuous thrusting if/when one of the three remaining reaction wheels fails.

trajectory accuracy↗