NOAA-N Prime weather satellite toppled in clean room after 24 bolts borrowed without documentation

NOAA-N Prime NOAA Creative Commons Photo

Summary and Key Points

On September 6, 2003, the nearly complete NOAA-N Prime weather satellite toppled from its handling cart onto a clean-room floor at Lockheed Martin in Sunnyvale, California. The cause was 24 bolts that another program had quietly removed from the shared fixture without documentation — and a verification no one performed. NASA's investigation ran a year; the spacecraft was rebuilt, launched in 2009 as NOAA-19, and operated for more than sixteen years.

The Fall

It was a Saturday morning in Sunnyvale, California, in a high-bay clean room at Lockheed Martin Space Systems, and the spacecraft on the work stand was nearly finished.

NOAA-N Prime, a weather satellite the size of a delivery van — 14 feet long and six feet across — stood upright on a wheeled fixture called a turnover cart. This piece of ground equipment was built to rotate a satellite through 360 degrees and tilt it up to 90 degrees, so that technicians could reach whatever face of the machine the day's work required.

The task that morning was routine: tilt the spacecraft from vertical to horizontal so the team could adjust the fit of one of its atmospheric instruments. The team had done such operations many times. The cart had held satellites many times.

The tilt began, and the satellite kept going. It slid off the fixture, past the point where anyone could do anything, and slammed into the concrete floor with the team standing feet away. Nobody was hurt.

The spacecraft was another matter: the structure and many of the instruments and components aboard took extensive damage in the fall, in full view of the people whose job was to protect it. Photographs taken afterward show one of the most sophisticated machines the American weather enterprise had ever ordered lying on its side on a factory floor like a tipped refrigerator.

What Hit the Floor

The thing on the floor was the last and most capable member of a line of American polar-orbiting weather satellites reaching back to 1960 — a family that had become the quiet workhorse of civilian Earth observation, most of its members outliving their design lives again and again.

Satellites of this type:

• Circle the planet from pole to pole about 14 times a day
• Pass beneath every point on Earth
• Image clouds
• Profile the temperature and humidity of the atmosphere in vertical slices
• Monitor the space environment
• Relay distress signals from ships and downed aircraft as part of the international search-and-rescue system

Their data feeds the forecast models that civilian meteorologists and military planners alike depend on.

NOAA-N Prime was valued at roughly $233 million, carried years of assembly and test work, and was closing in on its delivery date when it went over.

Twenty-Four Missing Bolts

The cause was established almost immediately because it was lying in plain sight. The satellite mated to its turnover cart through an adapter plate, and the plate was supposed to be fastened to the cart with 24 bolts. When investigators examined the fixture after the accident, the adapter plate was not secured to the cart at all: the 24 bolts were simply not there. Nothing had been holding the spacecraft to its fixture except gravity and friction, and the moment the tilt shifted the load, both let go.

The bolts had not failed; they had been borrowed. At some earlier point, while the cart sat idle in a shared staging area, a crew from a different program had taken the two dozen bolts for their own hardware. The NASA investigation report states it plainly: the bolts were removed "by another project while the cart was in a common staging area" — an activity never communicated to the team that would use the cart next. No paperwork recorded the removal. No tag hung on the cart. The fixture looked, from across the room, exactly as it always had, and the empty bolt holes waited.

Somebody Did Check

What makes this accident a case study rather than a freak event is what happened in the minutes before the lift, because the story is not that nobody looked.

The handling procedure required the team to verify the cart's configuration physically before the operation, and the Responsible Test Engineer running the job verified it instead from paperwork, concluding from the records of a prior operation that the cart was ready. The paperwork, of course, knew nothing about the borrowed bolts.

Then came the moment the investigation board would return to again and again. A technician supervisor on the floor noticed the empty holes and said so. The observation was dismissed, the team's attention already narrowed onto their in...