QUOTE (mcaplinger @ Jan 16 2020, 10:25 AM)
![*](http://www.unmannedspaceflight.com/style_images/ip.boardpr/post_snapback.gif)
it was just human error, no doubt exacerbated by the complex cross-organizational, international nature of the mission and the fact that the commanding was somewhat arcane and error-prone.
Yes, but Bobik is right, there should have been a more complete and open description of the circumstances and procedures to avoid similar occurrences in future (and IIRC David Southwood, ESA D-SCI at the time said in front of the cameras that the investigation would be published, but it never was). There are a couple of SpaceOPS papers by some of the relevant individuals 2005-2006, but these remarkably fail to mention the commanding error at all. One does note some useful background, setting the context for the missing command, but doesnt discuss the failure as such :
"The Probe Relay critical sequence only required 38 commands to set the proper spacecraft configuration and
enforce the required tracking attitude. However, in order to provide the necessary critical sequence infrastructure
and provide enforcement of the spacecraft state in response to a fault, 107 more commands were added. The
distinction of the Probe Relay critical sequence is its integration of changes to various fault protection algorithms to
achieve full autonomy and complete its objectives even in a fault scenario. The critical sequence was designed with
a “mark and rollback” logic that supported these objectives. This capability allowed the critical sequence to interact
with fault protection and adapt to the different hardware configurations and states deemed necessary by fault
protection."
(Allestad et al., Systems Overview of the Cassini-Huygens Probe Relay Critical Sequence, AIAA 2005-6388)
The guy whose job it was to assemble the PSA commands once told me it was 'headslap' moment, as soon as the telemetry started coming in, he knew what had gone wrong. And on the documentary 'Destination Titan', you can hear Robin Dutta-Roy of the Doppler Wind Experiment asking on the voicenet 'what time was the RUSO to be powered on', so the DWE team (hurt most by the failure) knew pretty quickly too.
As you note above, though, there were lots of interfaces and steps here. When there are singular events like this, it is not always possible to test things in the configuration they are going to be in. So it's easy for such things to be missed, which is why such failures should be documented for the benefit of all. At this point, there's no need for ESA to be bashful, no careers are at stake at this point, Huygens was a success and will always be considered such, warts and all.
Ralph