Back to Incidents Registry
NASA-OIG-2024-0824NIST REGISTRYHuman Spaceflight & Propulsion

Boeing Starliner CFT-1: Helium Flange Leaks & Reaction Control Thruster Thermal Deselection

Incident Failure Topology Brief
Catastrophic (Level 5)Sev 9.1/10

Thermal saturation degraded physical valve seal Buffer_Reserves. Flight control software automated health checks detected performance delta and permanently deselected thruster Decision_Nodes, trapping spacecraft in degraded operational state.

Failure Invariant Breach
Mission abort & commercial reputation loss
Absent Safety Recovery Mechanism
Heartbeat timestamp verification and automatic stale-data greying
Domain De-Aliasing & Jargon Stripping
Raw Domain Record (Subjective Narrative)

During Crew Flight Test 1 (CFT-1) rendezvous with the International Space Station, Boeing Starliner service module suffered 5 helium manifold flange leaks. When firing Reaction Control System (RCS) thrusters in pulse mode, doghouse thermal insulation traps caused thruster poppet seals to overheat and swell, reducing fuel flow. The flight computer detected degraded thrust and automatically deselected 5 thrusters, leaving the spacecraft with degraded docking redundancy and stranding 2 astronauts on the ISS for 8+ months.

PatternDB Invariant Representation

Thermal saturation degraded physical valve seal Buffer_Reserves. Flight control software automated health checks detected performance delta and permanently deselected thruster Decision_Nodes, trapping spacecraft in degraded operational state.

Causal Failure Topology & State Vectors
4 Sequential Invariant Breaches
STEP 01DEGRADE
Helium_Manifold_Flanges

Extruded micro-gaskets under pressure, developing 5 active helium gas leaks

Vector: Material seal extrusion
STEP 02DEGRADE
Doghouse_Enclosure

Trapped heat during frequent pulse firings, swelling Teflon thruster poppet seals

Vector: Thermal accumulation boundary breach
STEP 03DEGRADE
Flight_Software

Automatically deselected 5 thrusters when flow rate dropped below health thresholds

Vector: Automated channel lockout
STEP 04RUPTURE
NASA_Leadership

Deemed uncrewed return too risky, flying astronauts home on SpaceX Dragon 8 months later

Vector: Mission abort & commercial reputation loss
Decision Nodes Involved
Starliner Autonomous Flight Control Software
NASA Mission Management Team
Crew Astronauts
Telemetry Channels
Helium Manifold Pressure Sensors
Thruster Chamber Pressure & Temperature Telemetry
Constraint Boundaries Breached
RCS Doghouse Thermal Envelope Ceiling (< 250°F Poppet Seal Limit)
Official Regulatory Audit Citation
NIST RegistryNASA-OIG-2024-0824
Incident Official DateJun 5, 2024
Quantified Systemic Loss$1,600,000,000 In Program Cost Overruns & Astronaut 8-Month ISS Stranding
Primary Investigation Transcripts:

"The software was shutting thrusters down because it saw them underperforming, but the problem was thermal swelling inside the doghouses."

Immutable Archive RecordVerify at NIST Primary Database

Cross-Domain Invariant Twin Failures (41)

Cross-Domain Invariant Twin
100% Topological MatchΔ 0.000
NASA-OIG-2024-0824Human Spaceflight & Propulsion
Boeing Starliner CFT-1: Helium Flange Leaks & Reaction Control Thruster Thermal Deselection

Thermal saturation degraded physical valve seal Buffer_Reserves. Flight control software automated health checks detected performance delta and permanently deselected thruster Decision_Nodes, trapping spacecraft in degraded operational state.

Source Authority:NIST
FAA-AD-2018-23-51Aerospace & Avionics
FAA Emergency Airworthiness Directive: AOA Resolver Stale State Freezes

Physical sensor state frozen due to hardware anomaly. Telemetry_Channel continued latching last-known good values to Decision_Node without state invalidation timestamp.

Source Authority:FAA
Shared Failure Vector: Physical_Sensor -> Driver_Buffer -> Display_Node (Stale Value Latch)
Deep Compare
Cross-Domain Invariant Twin
100% Topological MatchΔ 0.000
NASA-OIG-2024-0824Human Spaceflight & Propulsion
Boeing Starliner CFT-1: Helium Flange Leaks & Reaction Control Thruster Thermal Deselection

Thermal saturation degraded physical valve seal Buffer_Reserves. Flight control software automated health checks detected performance delta and permanently deselected thruster Decision_Nodes, trapping spacecraft in degraded operational state.

Source Authority:NIST
NIST-CVE-2021-32944Industrial Control Systems & SCADA
CISA Advisory ICSA-21-084: SCADA Modbus PLC Stale Register Latching

Network buffer congestion desynchronized PLC internal registers from physical sensors. Status telemetry reported healthy communication while physical Constraint_Boundary was breached.

Source Authority:NIST
Shared Failure Vector: Physical_Sensor -> Driver_Buffer -> Display_Node (Stale Value Latch)
Deep Compare
Cross-Domain Invariant Twin
100% Topological MatchΔ 0.000
NASA-OIG-2024-0824Human Spaceflight & Propulsion
Boeing Starliner CFT-1: Helium Flange Leaks & Reaction Control Thruster Thermal Deselection

Thermal saturation degraded physical valve seal Buffer_Reserves. Flight control software automated health checks detected performance delta and permanently deselected thruster Decision_Nodes, trapping spacecraft in degraded operational state.

Source Authority:NIST
BEA-AAR-2009-0601Commercial Aviation
Air France Flight 447: Pitot Tube High-Altitude Icing & Dual Side-Stick Cancellation

Transient physical Telemetry_Channel blockage triggered automation disconnect. Decision_Node executed continuous contradictory control inputs, which remained unobserved by supervisory node due to decoupled side-stick physical telemetry.

Source Authority:FAA
Shared Failure Vector: Physical_Sensor -> Driver_Buffer -> Display_Node (Stale Value Latch)
Deep Compare