Packet identity

Packet ID
academy:industry-maintenance
Packet SHA-256 identity
556e80a6bc3111a18119669df9e74184ca742c57ebfa42e38952d05c20adecf1
Corpus SHA-256 identity
8fa944604ca189f5a9216ca59f640ad2ca20972ad512f2f4970764716782e18d
Release ID
public-alpha-2026-07-26-research-visuals-r14
Source commit
3eb036fce3d711336c8c605625895e8a2e799ab0
Frozen corpus date
2026-07-25
Primary records
6
Reference sources
33

Questions and exclusions

Required questions

  1. Required question 1 (exact ID: question-1)
    Are the five lessons accurate, comprehensible, appropriately bounded, and complete enough for the declared audience?
  2. Required question 2 (exact ID: question-2)
    Do citations, assumptions, transfer limits, uncertainty, and change conditions support every substantive conclusion?
  3. Required question 3 (exact ID: question-3)
    What important affected-community, accessibility, safety, or disciplinary perspective is missing?

Explicit exclusions

  • A track review does not approve linked claim records; those remain primary in system packets.
  • A favorable curriculum review is not mission, product, medical, legal, or operational authorization.

Requested controlled scopes: information-science, manufacturing-maintenance, systems-engineering

Frozen-evidence decision window: 365 days from the packet freeze. Not applicable to this packet family.

Complete primary record set

Every record below has one primary packet owner. Decisions must bind to the exact record and packet fingerprints; a changed lesson body, evidence grade, citation, locator, source snapshot, requirement, policy, release, or commit expires the old packet.

  1. academy-track · industry-maintenance

    Energy, industry & maintenance

    Record fingerprint
    837753e30df8cddba43ec11fc8f69edc6197052c0cf246ef039354ead4523aab
    Minimum approvals
    1
    Required scope groups
    bounded-competence: manufacturing-maintenance, systems-engineering
    High-consequence domains
    None under the named two-person rule
    Review state
    pending
    Published human decisions
    0
    Inspect the complete frozen review surface
    Slug
    industry-maintenance
    Number
    5
    Title
    Energy, industry & maintenance
    Kicker
    The factory must maintain the factory
    Summary
    Explore power islands, machine tools, spares, recycling, ISRU, metrology, electronics, and century-scale repair.
    Core Question
    How much of an industrial civilization must travel with the habitat?
    Image
    /images/chapters/11-manufacturing-repair.avif
    Systems
    1. power-thermal
    2. manufacturing-isru
    3. assembly-logistics
    Lessons
    1. Slug
      power-islands
      Title
      Power islands and black start
      Summary
      Build isolated generation trains, storage, fault isolation, and graceful load shedding.
      Minutes
      22
      Level
      Applied
    2. Slug
      maintenance-metabolism
      Title
      Maintenance as metabolism
      Summary
      Replace immortal-component thinking with inspection, diagnosis, fabrication, and recycling.
      Minutes
      18
      Level
      Foundation
    3. Slug
      factory-stack
      Title
      Manufacturing is a stack, not a printer
      Summary
      Add machine tools, joining, chemistry, metrology, qualification, and skilled work.
      Minutes
      18
      Level
      Foundation
    4. Slug
      isru-and-feedstock
      Title
      From resource to trustworthy feedstock
      Summary
      Connect mining and refining outputs to standardized, traceable materials.
      Minutes
      20
      Level
      Applied
    5. Slug
      semiconductor-bottleneck
      Title
      The semiconductor bottleneck
      Summary
      Understand why printed sensors do not equal a modern chip supply chain.
      Minutes
      24
      Level
      Technical
  2. academy-lesson · lesson-05-01

    Power islands and black start

    Record fingerprint
    4d81bb2616a17bafdc3092c1d34c38242ac8c5e4216f91b05f5d6ed972391cdd
    Minimum approvals
    1
    Required scope groups
    bounded-competence: manufacturing-maintenance, systems-engineering
    High-consequence domains
    None under the named two-person rule
    Review state
    pending
    Published human decisions
    0
    Inspect the complete frozen review surface
    Slug
    power-islands
    Title
    Power islands and black start
    Summary
    Design isolated generation trains, storage, heat rejection, fault boundaries, and recovery sequences that can restart life-critical loads without help from Earth.
    Minutes
    32
    Level
    Applied
    ID
    lesson-05-01
    Track Slug
    industry-maintenance
    Track Title
    Energy, industry & maintenance
    Href
    /academy/industry-maintenance/power-islands
    Prepared By
    GShips Project
    Last Edited At
    2026-07-25
    Review Required Domains
    1. space-power
    2. thermal-control
    3. microgrids
    4. nuclear-safety
    5. operational-technology-cybersecurity
    6. human-factors
    Claim IDs
    1. claim-03-01
    2. claim-03-04
    3. claim-03-06
    4. claim-03-10
    5. claim-12-03
    Exact MDX
    ---
    id: "lesson-05-01"
    track: "industry-maintenance"
    slug: "power-islands"
    title: "Power islands and black start"
    summary: "Design isolated generation trains, storage, heat rejection, fault boundaries, and recovery sequences that can restart life-critical loads without help from Earth."
    minutes: 32
    level: "Applied"
    preparedBy: "GShips Project"
    lastEditedAt: "2026-07-25"
    conflicts: "Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists."
    reviewRequiredDomains: "space-power, thermal-control, microgrids, nuclear-safety, operational-technology-cybersecurity, human-factors"
    claimIds: "claim-03-01, claim-03-04, claim-03-06, claim-03-10, claim-12-03"
    ---
    
    # Power islands and black start
    
    > **Evidence boundary:** Terrestrial microgrids can separate from a larger grid, and black-start sequences have been modeled, simulated, and demonstrated with real power hardware. Spacecraft routinely use segmented electrical buses, batteries, protective devices, and load shedding. NASA’s KRUSTY experiment demonstrated a roughly one-kilowatt-electric fission power system on the ground. None of this demonstrates a self-repairing, generation-scale space power network that can repeatedly recover life support and matching heat rejection after decades without an external utility, factory, or specialist supply chain.
    
    ## Plain-language summary
    
    A generation ship cannot have one power plant and a backup switch. It needs an energy ecosystem that can split into safe islands, keep a small set of survival loads alive, diagnose faults, and rebuild service in controlled steps.
    
    **Black start** means restoring a de-energized power system without relying on electricity from the system it is restarting or from a healthy external grid. The first watts may have to wake protection relays, controllers, communications, lubrication, pumps, valves, and cooling before a larger generator can start. If those first watts or their heat-rejection path are unavailable, a large reactor or array may be present but unusable.
    
    Terrestrial microgrids show that intentional islanding and local restoration are practical engineering fields. Space missions show that careful power budgeting, isolation, storage, and fault protection work at bounded scales. The unsolved problem is closing that loop for a habitat whose power converters, batteries, conductors, switchgear, controls, coolants, radiators, and skilled operators must themselves be renewed.
    
    ## Power is a network, not a source
    
    The useful question is not “Which reactor powers the ship?” It is “Which complete path can energize this load, reject the associated heat, survive a fault, and be restored with available people and materials?”
    
    A power path includes:
    
    1. An energy source or stored reserve.
    2. Conversion machinery and its controls.
    3. Conductors, switching, protection, grounding, and electromagnetic compatibility.
    4. Power conditioning for different voltage, frequency, and quality needs.
    5. Cooling loops, heat exchangers, pumps, working fluids, and radiators.
    6. Sensors, metrology, procedures, software, and trained operators.
    7. Inspectable interfaces, replacement parts, tooling, and safe access.
    8. Fuel, lubricants, insulation, seals, semiconductor devices, and other limited-life inputs.
    
    If one shared controller, coolant header, cable tunnel, software image, or radiator manifold can disable every train, several generators do not create several independent power islands. Independence must be tested across physical, electrical, thermal, digital, spatial, and organizational boundaries.
    
    ## Begin with survival loads
    
    Restoration should follow an explicit load hierarchy. A teaching hierarchy might be:
    
    - **Class 0 — passive survival:** pressure boundary, insulation, fire separation, natural circulation, and other functions that remain safe without command power for a declared interval.
    - **Class 1 — immediate survival:** atmosphere circulation and monitoring, minimum thermal control, fire detection, emergency lighting, essential medical power, and local communications.
    - **Class 2 — recovery:** pumps, environmental processing, command and data systems, diagnostic benches, machine tools needed for the repair, and limited food-system support.
    - **Class 3 — stabilization:** broader agriculture, water processing, sanitation, computing, and industrial services.
    - **Class 4 — deferrable activity:** propulsion support, elective production, high-performance computing, comfort loads, and nonurgent research.
    
    The labels are provisional. A “nonessential” machine shop may become a survival load if it alone can make a cooling-pump shaft. Every class needs a maximum interruption time, minimum service, restart energy, inrush behavior, heat load, staffing need, and safe shutdown state.
    
    ## What a black-start sequence must prove
    
    A credible recovery sequence starts from an intentionally harsh initial condition: sections de-energized, telemetry incomplete, one expected component unavailable, and no assumption that Earth can answer.
    
    A representative sequence is:
    
    1. Confirm fire, radiation, pressure, chemical, and electrical conditions through independent instruments.
    2. Establish a small direct-current control island from protected storage or a mechanically independent source.
    3. Energize protection, local communications, timekeeping, and selected sensors.
    4. Start the minimum cooling and lubrication path required by the first generator.
    5. Bring one generation train to a stable isolated state.
    6. Add loads in measured blocks while watching voltage, frequency, harmonics, temperature, coolant inventory, and protection margins.
    7. Establish a second independently started island.
    8. Synchronize islands only through a verified interface—or deliberately leave them separate.
    9. Restore industrial and ecological loads according to time-to-harm rather than political influence.
    10. Replenish the storage and consumables spent during recovery, then inspect what the transient damaged.
    
    Terrestrial inverter-based black start illustrates both promise and caution. Grid-forming inverters can establish voltage and frequency without a preexisting grid. Transformers, motors, and pumps can demand high inrush current, however; current-limited inverters may not tolerate the same transients as rotating machines. A successful test is evidence for its topology, controls, and loads—not a universal restart recipe.
    
    ## Heat rejection is part of black start
    
    Nearly all electrical energy used inside a habitat ultimately becomes heat unless it leaves in a directed beam, exhaust, exported mass, stored chemical product, or other accounted flow. A black start can therefore fail thermally even while its electrical measurements look healthy.
    
    Cooling creates circular dependencies:
    
    - A reactor or converter may need powered pumps before it can produce electricity.
    - Pumps may require a live bus and functional power electronics.
    - The bus may need the reactor.
    - Radiator deployment, louvers, valves, or heat-pipe geometry may need control power.
    - Batteries that provide first power may have strict temperature limits.
    
    The architecture has to break these loops using protected storage, passive decay-heat removal, natural circulation, mechanical governors, local manual control, or other independently verified means. “The radiator is large enough at full power” does not answer whether the system can reject decay and restart heat after coolant loss, fouling, puncture, or a frozen valve.
    
    KRUSTY is an important bounded demonstration: NASA and partner laboratories operated a new small fission concept with a reactor, heat pipes, and Stirling conversion in a ground test. It is not a flight demonstration, a megawatt system, a black-started habitat, or evidence of century-long fuel, converter, control, and radiator replacement.
    
    ## Fault isolation must include cyber faults
    
    Power control is operational technology: software changes physical conditions. NIST’s OT security guidance emphasizes that security controls must respect safety, availability, timing, and reliability. A ship cannot respond to every suspicious packet by turning off atmosphere circulation.
    
    A defensive architecture should include:
    
    - Physically enforceable protection that does not depend on a network service.
    - Separate safety, control, monitoring, and administrative paths.
    - Locally operable breakers and valves with unambiguous state indication.
    - Signed and reproducible controller software, controlled configuration, and anti-rollback rules.
    - Offline recovery images and documented hardware needed to load them.
    - One-way or tightly mediated data paths where command is unnecessary.
    - Drills that assume compromised credentials, poisoned sensor data, malicious maintenance, and loss of trusted time.
    - Privacy limits so equipment monitoring does not become unrestricted monitoring of residents or workers.
    
    An LLM may help retrieve procedures, compare telemetry with prior cases, translate an old manual, or propose diagnostic branches. It must not be the protection relay, sole procedure archive, or final authority for energizing a life-critical bus. NIST identifies confident false output—confabulation—as an intrinsic generative-AI risk. Any AI-supported instruction should point to the controlled procedure, requirements, current configuration, and observed data that justify it. Operators need an AI-off path, and deterministic safety interlocks must remain effective if the model is unavailable or wrong.
    
    ## Design for maintainable islands
    
    Power independence erodes if every island uses the same irreplaceable semiconductor, bearing, coolant, firmware tool, or calibration artifact. Commonality simplifies training and spares; diversity limits common-cause failure.
    
    Useful design questions include:
    
    - Can one island be opened, inspected, and rebuilt while another carries survival loads?
    - Which failures require a dry dock, clean room, hot cell, vacuum operation, or radiation protection?
    - Can switchgear be mechanically verified when telemetry disagrees?
    - Are cable routes and coolant loops separated against fire, flood, impact, and sabotage?
    - Can old and new converter generations interoperate through documented electrical interfaces?
    - Can the factory make contacts, insulation, buswork, housings, seals, and cooling components?
    - Which power semiconductors, sensors, catalysts, or fuels remain imported “vitamins”?
    - Can people with different bodies and abilities safely reach controls and service points?
    
    The restoration plan is part of the hardware. Procedures, simulation models, labels, test adapters, and training rigs must evolve with every modification.
    
    ## Earth-first test ladder
    
    This work is valuable without a starship:
    
    1. Build a terrestrial habitat or critical facility with two genuinely separable microgrids.
    2. Declare survival loads and their interruption limits.
    3. Demonstrate black start from protected storage with normal automation unavailable.
    4. Inject sensor disagreement, controller compromise, pump inrush, coolant loss, and a missing specialist.
    5. Run one island for an extended period while the other is physically rebuilt.
    6. Manufacture selected replacement bus, cooling, housing, and control components locally.
    7. Repeat with unannounced scenarios and independent safety observers.
    8. Move a bounded version to an isolated terrestrial, underwater, polar, lunar, or orbital testbed.
    
    The same evidence benefits hospitals, disaster shelters, remote communities, data centers, and industrial sites.
    
    ## Evidence ledger
    
    - **L05-01-A — Intentional islanding and black start are demonstrated terrestrial capabilities.** Basis: demonstrated. Readiness: operational in bounded utility and microgrid contexts. Confidence: strong. Limit: configurations, loads, protection, staffing, and external support differ from a closed space habitat.
    - **L05-01-B — Small spacecraft use segmented buses, storage, conversion, protection, and load shedding.** Basis: demonstrated. Readiness: operational at current mission scales. Confidence: strong. Limit: most spacecraft are not repaired internally and do not power a complete society.
    - **L05-01-C — KRUSTY demonstrated a roughly one-kilowatt-electric fission system on the ground.** Basis: demonstrated. Readiness: early research for space fission deployment and major scale-up for habitat power. Confidence: strong about the bounded test.
    - **L05-01-D — A generation-scale power ecosystem must include heat rejection, black start, replacement, and common-cause-failure control.** Basis: normative. Readiness: breakthrough-dependent as an integrated system. Confidence: supported as a systems requirement.
    - **L05-01-E — Generative AI can support diagnosis but cannot be treated as a verified protection system or sole operational authority.** Basis: normative. Readiness: early research for safety-critical offline support. Confidence: strong about the need for bounded authority; tentative about future validated implementations.
    
    Linked corpus claims: `claim-03-01`, `claim-03-04`, `claim-03-06`, `claim-03-10`, and `claim-12-03`. See the claim registry for each record's current evidence grade and independent-review state.
    
    ## Assumptions and limits
    
    - No ship power level, source mix, voltage architecture, radiator temperature, or mission duration is selected.
    - Terrestrial grid-forming inverter results are not assumed to survive launch, radiation, vacuum, or multigenerational maintenance.
    - KRUSTY was a ground technology demonstration, not a flight power plant or generation-scale reactor.
    - “Independent island” requires an explicit common-cause analysis; physical separation alone is insufficient.
    - Nuclear material control, reactor safety, waste, safeguards, and proliferation governance require separate high-consequence review.
    - AI assistance is advisory and evidence-linked; no generic chatbot or autonomous safety authority is proposed.
    
    ## What would change this conclusion?
    
    An integrated long-duration test would materially improve readiness if it operated multiple isolated generation trains with representative heat rejection, restarted from a de-energized condition, survived injected electrical, thermal, cyber, and staffing failures, and replaced failed conversion and control hardware from a bounded local inventory. Flight demonstrations would change the environmental evidence. Discovery of an unavoidable common-mode dependency, unmanageable nuclear or cyber risk, or inability to preserve passive survival time should force redesign or a do-not-launch gate.
    
    ## Sources and locators
    
    - [S01 — U.S. Department of Energy, Distributed Energy Resources and Microgrids Basics](https://www.energy.gov/cmei/systems/solar-integration-distributed-energy-resources-and-microgrids-basics). Locator: intentional islanding, local generation, load-generation balance, and black-start discussion; accessed 2026-07-25.
    - [S02 — NREL, Parallel Grid-Forming Inverter-Driven Black Start](https://docs.nlr.gov/docs/fy24osti/87257.pdf). Locator: power-hardware-in-the-loop black start of a modeled 5 MW unbalanced feeder and transformer/motor inrush treatment; NREL/CP-5D00-87257, 2023 conference preprint; current National Laboratory of the Rockies archive accessed 2026-07-25.
    - [S03 — Poston et al., KRUSTY Reactor Design](https://ntrs.nasa.gov/citations/20205009350). Locator: one-kilowatt-electric prototype purpose, March 2018 nuclear operation, reactor and conversion boundary; *Nuclear Technology* 206 supplement, 2020; NTRS accessed 2026-07-25.
    - [S04 — NASA Small Spacecraft Systems Virtual Institute, Power Subsystems](https://www.nasa.gov/smallsat-institute/sst-soa/power-subsystems/). Locator: source, storage, distribution, regulation, protection, and flight-state-of-practice boundaries; accessed 2026-07-25.
    - [S05 — NASA Small Spacecraft Systems Virtual Institute, Thermal Control](https://www.nasa.gov/smallsat-institute/sst-soa/thermal-control/). Locator: passive and active heat transport, rejection, component limits, and scale-specific examples; accessed 2026-07-25.
    - [S06 — NASA-STD-8729.1A, Reliability and Maintainability Standard](https://standards.nasa.gov/node/279). Locator: program objectives for reliability, maintainability, planning, analysis, verification, and lifecycle evidence; active standard dated 2017-06-13; accessed 2026-07-25.
    - [S07 — NIST SP 800-82 Revision 3, Guide to Operational Technology Security](https://doi.org/10.6028/NIST.SP.800-82r3). Locator: OT safety, reliability and availability constraints; architectures, threats, segmentation, and security countermeasures; September 2023; accessed 2026-07-25.
    - [S08 — NIST AI 600-1, Generative AI Profile](https://doi.org/10.6028/NIST.AI.600-1). Locator: section 2.2 on confabulation and the recommended risk-management actions for consequential decisions; July 2024; accessed 2026-07-25.
    
    ## Editorial record
    
    - Prepared by: GShips Project
    - Last edited: 2026-07-25
    - Required review: space power, thermal control, microgrids, nuclear safety, operational-technology cybersecurity, and human factors
    - Conflicts: Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists
    - Corrections: [Suggest a correction](https://gships.dammonburden.com/corrections)
    
  3. academy-lesson · lesson-05-02

    Maintenance as metabolism

    Record fingerprint
    8e8037e553200f7fc101fafd51b494e87a9f4d2f39ee34934a6bc0db83c82f32
    Minimum approvals
    1
    Required scope groups
    bounded-competence: manufacturing-maintenance, systems-engineering
    High-consequence domains
    None under the named two-person rule
    Review state
    pending
    Published human decisions
    0
    Inspect the complete frozen review surface
    Slug
    maintenance-metabolism
    Title
    Maintenance as metabolism
    Summary
    Replace immortal-component thinking with a renewal loop that senses wear, diagnoses faults, restores function, verifies safety, recovers material, and teaches the next maintainers.
    Minutes
    32
    Level
    Foundation
    ID
    lesson-05-02
    Track Slug
    industry-maintenance
    Track Title
    Energy, industry & maintenance
    Href
    /academy/industry-maintenance/maintenance-metabolism
    Prepared By
    GShips Project
    Last Edited At
    2026-07-25
    Review Required Domains
    1. reliability-maintainability
    2. space-servicing
    3. industrial-maintenance
    4. human-factors
    5. manufacturing
    6. safety-assurance
    7. operational-technology-cybersecurity
    Claim IDs
    1. claim-14-01
    2. claim-14-04
    3. claim-14-07
    4. claim-14-08
    5. claim-14-10
    6. claim-12-07
    Exact MDX
    ---
    id: "lesson-05-02"
    track: "industry-maintenance"
    slug: "maintenance-metabolism"
    title: "Maintenance as metabolism"
    summary: "Replace immortal-component thinking with a renewal loop that senses wear, diagnoses faults, restores function, verifies safety, recovers material, and teaches the next maintainers."
    minutes: 32
    level: "Foundation"
    preparedBy: "GShips Project"
    lastEditedAt: "2026-07-25"
    conflicts: "Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists."
    reviewRequiredDomains: "reliability-maintainability, space-servicing, industrial-maintenance, human-factors, manufacturing, safety-assurance, operational-technology-cybersecurity"
    claimIds: "claim-14-01, claim-14-04, claim-14-07, claim-14-08, claim-14-10, claim-12-07"
    ---
    
    # Maintenance as metabolism
    
    > **Evidence boundary:** Astronauts have assembled and repaired the International Space Station and serviced the Hubble Space Telescope; robotic missions have demonstrated narrower inspection, docking, life-extension, and manipulation functions. NASA has formal reliability and maintainability practices, and terrestrial industry uses condition monitoring and reliability-centered maintenance. These are relevant demonstrations, not evidence that a habitat can renew all life-critical machinery, materials, software, calibration, and skill for centuries without Earth.
    
    ## Plain-language summary
    
    A machine can be reliable for a mission and still be unsuitable for a society.
    
    Conventional spacecraft are usually designed for a defined service life. Some components are redundant; others are replaced from stock or supported by specialists and suppliers on Earth. A generation ship would eventually lose that supplier base. Its central maintenance question is not “How long does this pump last?” but “Can this society repeatedly recognize degradation, restore the pump’s function, verify the repair, replenish what the repair consumed, and preserve the ability to do it again?”
    
    That recurring cycle resembles metabolism. A living body detects damage, moves resources, removes waste, and renews tissue. An industrial habitat needs an engineered version:
    
    `observe → diagnose → decide → isolate → restore → verify → return → recover material → learn`
    
    If any link depends permanently on a sealed box, a forgotten craft, an Earth server, or a consumable that cannot be replaced, the loop is open.
    
    ## Reliability is not immortality
    
    Reliability asks whether a system performs as required for a stated time and environment. Maintainability asks how safely and effectively it can be restored. Availability depends on both, plus logistics and operations.
    
    A high-reliability component can still be a poor choice when:
    
    - Its failure is rare but impossible to diagnose locally.
    - Opening it destroys calibration or containment.
    - Its replacement needs a proprietary tool or expired chemical.
    - The repair requires a skill held by one person.
    - The spare silently ages in storage.
    - Its firmware, test fixture, or interface can no longer run.
    - It shares a hidden failure mode with every redundant copy.
    
    NASA-STD-8729.1 requires reliability and maintainability planning across a program lifecycle. NASA guidance treats access, fault isolation, testability, training, and restoration as design concerns. A generation-scale case must extend the time horizon, close the supply loop, and include people born after the original design.
    
    ## The maintenance metabolism
    
    ### 1. Observe condition
    
    Scheduled inspection remains useful, but calendar replacement alone wastes scarce parts and can introduce maintenance errors. Reliability-centered maintenance asks what functions matter, how they fail, what consequences follow, and which inspection or intervention is effective.
    
    Useful signals include vibration, current, temperature, pressure, leakage, chemical composition, acoustic emission, dimensional change, lubricant debris, radiation dose, software errors, and operator observation. No sensor is neutral: it drifts, needs power, has a sampling limit, and can fail in the same environment as the equipment it watches.
    
    The design therefore needs independent observations and test points. “The digital twin says healthy” is not evidence if the twin receives one biased sensor and has never been updated after modification.
    
    ### 2. Diagnose the function, not only the part
    
    A failed air-circulation function might involve a motor, bearing, impeller, duct obstruction, inverter, breaker, controller, power-quality problem, sensor, or malicious command. Replacing the motor because an error code names it can consume the wrong spare while leaving the cause.
    
    Diagnosis should preserve hypotheses, uncertainty, evidence, and counterevidence. Procedures need branches for unknown configurations and novel faults. Maintainers should be able to reproduce tests and compare physical measurements with the current requirements baseline.
    
    ### 3. Decide and isolate
    
    Maintenance changes risk. Taking a machine offline can endanger life support; keeping it online can worsen damage. An architecture should identify the authority to isolate equipment, the people affected, compensating functions, maximum safe outage, and stop-work rights.
    
    Physical and digital lockout must be possible. A controller should not unexpectedly restart a machine while someone is inside it. Equally, an attacker or governance faction should not be able to misuse maintenance authority to deny air, water, medical service, or mobility.
    
    ### 4. Restore capability
    
    Restoration may mean adjustment, cleaning, lubrication, software rollback, component replacement, machining, joining, rewinding, remanufacture, or controlled cannibalization. Additive manufacturing is one method among many. Bearings need surfaces and heat treatment; seals need controlled polymers; electronics need components and workmanship; pressure hardware needs joining, inspection, and proof.
    
    The replacement part is only one output. The loop also consumes staff time, energy, inert gas, solvents, abrasives, cutting tools, filters, shielding, fixtures, and calibration capacity. Those inputs belong in the material and power budgets.
    
    ### 5. Verify before return
    
    A part that fits is not necessarily trustworthy. Verification may include dimensional inspection, electrical test, leak test, balancing, nondestructive evaluation, pressure proof, software checks, cleanliness, material identification, or a controlled load run.
    
    NASA’s additive-manufacturing standard illustrates the depth of qualification expected for flight hardware: feedstock control, process definition, machine qualification, witness material, inspection, acceptance, and configuration control. Tailoring is anticipated for in-space work; the standard does not certify a future onboard factory. It demonstrates why “print the spare” is not a complete safety case.
    
    ### 6. Recover and learn
    
    The removed component is evidence and inventory. It should be examined for root cause, preserved when needed, and otherwise separated into recoverable material streams. The repair record must update remaining-life estimates, spares forecasts, procedures, training scenarios, and design changes.
    
    Learning also needs a social path. Apprentices should perform real work under supervision before an expert generation retires. Documentation must stay legible across language and interface changes. People with diverse bodies and abilities need access to workstations, lifting aids, protective equipment, and technical careers.
    
    ## What has actually been demonstrated?
    
    The 2025 NASA ISAM State of Play distinguishes servicing, assembly, and manufacturing capabilities. Crewed Hubble servicing and ISS assembly and maintenance show that people can inspect, replace, upgrade, and reconfigure complex space hardware with extensive Earth support. Robotic servicing is less mature and has been demonstrated on only a small number of missions.
    
    NASA’s 2025 In-Space Manufacturing Portfolio Plan documents polymer printing and recycling, metal and electronic manufacturing research, welding, biomanufacturing, and supporting inspection. It also records negative evidence: the ISS Refabricator did not complete its planned recycling demonstration and was returned to Earth; post-flight inspection implicated filament breakage and foreign-object debris. That result is valuable. A serious program learns more from the broken loop than from a promotional claim that recycling “will” close it.
    
    GAO’s 2025 technology assessment similarly concludes that robotic ISAM is mostly unproven in space, with few test opportunities and emerging standards. These sources justify a test program. They do not justify assuming autonomous repair is solved.
    
    ## Spares are a portfolio
    
    No single inventory strategy is sufficient:
    
    - **Direct spares** restore known high-risk units quickly but age and consume mass.
    - **Common modules** simplify training and stock but can create common-cause failure.
    - **Piece parts** support board- and mechanism-level repair but require diagnostic and workmanship skill.
    - **Feedstock** is flexible only when appropriate processes, tooling, recipes, and qualification exist.
    - **Cannibalization** recovers scarce parts but can destroy future options and should be governed transparently.
    - **Design modification** may remove an unavailable part, but creates a new verification burden.
    
    Spares planning should track consequence, replacement time, shelf life, storage, repair yield, and replenishment. A century stockpile of identical electronics may be less resilient than repairable controllers with open interfaces and migration paths.
    
    ## AI can assist the loop but cannot close it
    
    Condition-monitoring models can find anomalies, compare spectra, forecast demand, and search a large maintenance record. An offline language model can retrieve controlled procedures, translate legacy explanations, or help a maintainer enumerate hypotheses.
    
    The boundaries must be strict:
    
    - Generated instructions cite the current approved procedure and configuration.
    - Measurements remain distinguishable from inference.
    - Model suggestions never erase dissenting observations.
    - Safety-critical isolation and return-to-service require accountable human and deterministic checks.
    - Training data, model weights, retrieval indexes, and maintenance files are treated as supply-chain artifacts.
    - Teams repeatedly practice with the model absent, corrupted, or confidently wrong.
    
    Onboard manufacturing turns cybersecurity into physical assurance. A changed toolpath, calibration file, material passport, or inspection threshold can create a part that appears correct and fails later. Secure update, access control, provenance, two-person review for critical changes, and independent measurement are maintenance controls, not optional IT features.
    
    ## A representative test
    
    A serious maintenance test should run long enough for deterioration and organizational turnover to matter. Give a mixed crew a bounded habitat and factory with declared inventories. Inject tool wear, a drifting sensor, contaminated feedstock, an obsolete controller, loss of an expert, a compromised work instruction, and an unexpected cross-system dependency.
    
    Success is not “the broken part was printed.” It is:
    
    - The functional loss was detected before unacceptable harm.
    - Diagnosis separated observation from assumption.
    - Isolation preserved safety and rights.
    - Restoration used declared tools and consumables.
    - The repaired system passed an independent acceptance test.
    - Waste and removed material were accounted for.
    - The record changed future maintenance and training.
    - A later crew could repeat the work without the original experts.
    
    Remote communities, hospitals, research stations, utilities, and disaster-response systems could use the same evidence.
    
    ## Evidence ledger
    
    - **L05-02-A — Reliability and maintainability are lifecycle disciplines rather than end-of-design repair instructions.** Basis: normative. Readiness: operational in NASA and terrestrial programs. Confidence: strong within those program boundaries.
    - **L05-02-B — Crewed servicing and maintenance have restored and upgraded complex assets in orbit.** Basis: demonstrated. Readiness: operational for selected missions with Earth support. Confidence: strong.
    - **L05-02-C — Robotic ISAM and in-space recycling remain limited and uneven; the Refabricator did not complete its planned closed-loop demonstration.** Basis: observed. Readiness: early research. Confidence: strong for the cited program record.
    - **L05-02-D — A generation ship requires an end-to-end renewal loop including diagnosis, fabrication, verification, material recovery, and skill continuity.** Basis: normative. Readiness: breakthrough-dependent. Confidence: supported as a whole-system requirement.
    - **L05-02-E — AI-supported maintenance requires provenance, bounded authority, independent measurements, and an AI-off recovery path.** Basis: normative. Readiness: early research for life-critical autonomous use. Confidence: strong about the boundary; tentative about future implementations.
    
    Linked corpus claims: `claim-14-01`, `claim-14-04`, `claim-14-07`, `claim-14-08`, `claim-14-10`, and `claim-12-07`. See the claim registry for each record's current evidence grade and independent-review state.
    
    ## Assumptions and limits
    
    - No failure-rate model, crew size, mission duration, inventory, or repair yield is selected.
    - ISS and Hubble results include extensive Earthside engineering, logistics, communications, and replacement hardware.
    - Reliability-centered maintenance does not eliminate scheduled maintenance or justify operating damaged equipment.
    - Additive manufacturing is treated as one process in a larger factory and qualification chain.
    - Cannibalization and maintenance prioritization have rights and governance consequences not resolved here.
    - AI tools remain advisory; no generic chatbot or autonomous return-to-service authority is proposed.
    
    ## What would change this conclusion?
    
    A multi-year closed test would improve readiness if it preserved critical functions through real degradation, consumed only declared stocks and feedstock, rebuilt its own maintenance tools, qualified safety-critical repairs, survived expert turnover and cyber fault injection, and published failures as well as successes. Evidence that essential catalysts, electronics, calibration, or skills cannot be regenerated should narrow the mission duration or force a wait/do-not-launch decision rather than be hidden inside “future maintenance.”
    
    ## Sources and locators
    
    - [S01 — NASA-STD-8729.1A, Reliability and Maintainability Standard](https://standards.nasa.gov/node/279). Locator: reliability and maintainability objectives, planning, analyses, verification, and lifecycle evaluation; active standard dated 2017-06-13; accessed 2026-07-25.
    - [S02 — NASA TM-4628, Recommended Techniques for Effective Maintainability](https://ntrs.nasa.gov/citations/19950025109). Locator: design access, testability, fault isolation, handling, standardization, maintenance analysis, demonstration, training, and operations; December 1994; accessed 2026-07-25.
    - [S03 — NASA, In-Space Servicing, Assembly, and Manufacturing State of Play, 2025 Edition](https://ntrs.nasa.gov/citations/20250008988). Locator: definitions and eleven capability areas; ISS, Hubble, Mission Extension Vehicle, robotic servicing, inspection, repair, and manufacturing status; NASA peer committee review, 2025; accessed 2026-07-25.
    - [S04 — NASA, In-Space Manufacturing Portfolio Plan](https://ntrs.nasa.gov/citations/20250004020). Locator: manufacturing portfolio and maturation paths; Refabricator outcome, filament breakage, foreign-object debris, and return to Earth; 2025; accessed 2026-07-25.
    - [S05 — U.S. GAO, In-Space Servicing, Assembly, and Manufacturing](https://www.gao.gov/products/gao-25-107555). Locator: demonstrated crewed servicing, limited robotic demonstrations, test-access and standards gaps; GAO-25-107555, July 10, 2025; accessed 2026-07-25.
    - [S06 — NASA-STD-6030, Additive Manufacturing Requirements for Spaceflight Systems](https://standards.nasa.gov/standard/nasa/nasa-std-6030). Locator: sections 4–7 on part classification, process control, feedstock, qualification, witness material, inspection, acceptance, and configuration; active baseline dated 2021-04-21; accessed 2026-07-25.
    - [S07 — NIST SP 800-82 Revision 3, Guide to Operational Technology Security](https://doi.org/10.6028/NIST.SP.800-82r3). Locator: OT architectures, safety and availability constraints, threats, segmentation, maintenance access, and countermeasures; September 2023; accessed 2026-07-25.
    - [S08 — NIST AI 600-1, Generative AI Profile](https://doi.org/10.6028/NIST.AI.600-1). Locator: confabulation, information-integrity, human-AI configuration, evaluation, and incident-disclosure risks; July 2024; accessed 2026-07-25.
    
    ## Editorial record
    
    - Prepared by: GShips Project
    - Last edited: 2026-07-25
    - Required review: reliability and maintainability, space servicing, industrial maintenance, human factors, manufacturing, safety assurance, and operational-technology cybersecurity
    - Conflicts: Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists
    - Corrections: [Suggest a correction](https://gships.dammonburden.com/corrections)
    
  4. academy-lesson · lesson-05-03

    Manufacturing is a stack, not a printer

    Record fingerprint
    2f3ce8f6a75859ff28d10d1da26fdf956e5c784be98cdd3ed7d48c09386c2515
    Minimum approvals
    1
    Required scope groups
    bounded-competence: manufacturing-maintenance, systems-engineering
    High-consequence domains
    None under the named two-person rule
    Review state
    pending
    Published human decisions
    0
    Inspect the complete frozen review surface
    Slug
    factory-stack
    Title
    Manufacturing is a stack, not a printer
    Summary
    Trace a trustworthy part from requirements and feedstock through machine tools, joining, heat treatment, metrology, inspection, qualification, installation, and renewal of the factory itself.
    Minutes
    34
    Level
    Foundation
    ID
    lesson-05-03
    Track Slug
    industry-maintenance
    Track Title
    Energy, industry & maintenance
    Href
    /academy/industry-maintenance/factory-stack
    Prepared By
    GShips Project
    Last Edited At
    2026-07-26
    Review Required Domains
    1. manufacturing-engineering
    2. materials-processes
    3. metrology
    4. nondestructive-evaluation
    5. space-manufacturing
    6. quality-assurance
    7. industrial-cybersecurity
    Claim IDs
    1. claim-14-01
    2. claim-14-04
    3. claim-14-05
    4. claim-14-06
    5. claim-14-10
    6. claim-12-07
    Exact MDX
    ---
    id: "lesson-05-03"
    track: "industry-maintenance"
    slug: "factory-stack"
    title: "Manufacturing is a stack, not a printer"
    summary: "Trace a trustworthy part from requirements and feedstock through machine tools, joining, heat treatment, metrology, inspection, qualification, installation, and renewal of the factory itself."
    minutes: 34
    level: "Foundation"
    preparedBy: "GShips Project"
    lastEditedAt: "2026-07-26"
    conflicts: "Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists."
    reviewRequiredDomains: "manufacturing-engineering, materials-processes, metrology, nondestructive-evaluation, space-manufacturing, quality-assurance, industrial-cybersecurity"
    claimIds: "claim-14-01, claim-14-04, claim-14-05, claim-14-06, claim-14-10, claim-12-07"
    ---
    
    # Manufacturing is a stack, not a printer
    
    > **Evidence boundary:** Polymer additive manufacturing has operated on the International Space Station, and in-space programs are developing metal manufacturing, joining, recycling, electronics, construction, and robotic servicing. Terrestrial factories routinely combine additive and subtractive processes with heat treatment, metrology, nondestructive evaluation, and quality systems. No demonstration has taken mixed waste or local ore through a self-maintaining autonomous factory to a qualified, installed, life-critical space part while also replacing the tools and standards used to make it.
    
    ## Plain-language summary
    
    A printer changes the shape of compatible feedstock. A factory changes trustworthy information and controlled material into a qualified function.
    
    That job may require mills, lathes, grinders, presses, furnaces, welders, chemical baths, clean rooms, winding and coating systems, test stands, nondestructive evaluation, calibrated instruments, and skilled people. It also needs power, cooling, gases, filters, software, fixtures, protective equipment, and waste treatment.
    
    A generation ship’s factory faces one further demand: it must help maintain the factory. Machine-tool bearings wear. Cutting tools dull. lasers, power electronics, seals, lubricants, sensors, reference artifacts, and control computers age. “Tools to make tools” is therefore not a slogan. It is a traceable dependency problem.
    
    The responsible design goal is not perfect self-sufficiency by declaration. It is a bounded account of which functions can be reproduced, which inputs remain finite, how quality is verified, and how failure changes the mission decision.
    
    ## Follow one replacement part
    
    Consider a corroded pump impeller in a water-treatment loop. Printing its geometry does not close the repair. A defensible route includes:
    
    1. **Requirement recovery.** What flow, pressure, speed, temperature, fluid compatibility, lifetime, balance, and failure consequence must the impeller satisfy?
    2. **Configuration identification.** Which installed pump version is present, and what modifications have accumulated?
    3. **Material selection.** Which alloy, polymer, ceramic, coating, or composite has the required corrosion, fatigue, radiation, and cleaning behavior?
    4. **Feedstock assurance.** Is composition known? Are contamination, particle size, moisture, morphology, and reuse history within limits?
    5. **Process planning.** Which forming, machining, heat treatment, joining, coating, and cleaning steps create the required properties?
    6. **Tool and fixture preparation.** Can the factory hold, reference, and safely process the workpiece?
    7. **Manufacture.** Are machine condition, atmosphere, temperature, forces, and process data controlled?
    8. **Post-processing.** Does the part need support removal, stress relief, hot isostatic pressing, solution treatment, aging, grinding, polishing, or passivation?
    9. **Inspection and test.** Are dimensions, surface finish, balance, chemistry, microstructure, internal defects, and mechanical properties acceptable?
    10. **Installation and acceptance.** Does the repaired assembly work across its operating range without contaminating the water system?
    11. **Record and recovery.** Are the digital record, consumed material, waste, failed part, and lessons returned to the maintenance system?
    
    Each step can invalidate the next. A dimensionally accurate part can have unacceptable porosity. A sound weld can introduce distortion. A correct alloy can be weakened by the wrong thermal history. A passed sensor reading can be meaningless if its calibration is lost.
    
    ## The factory stack
    
    ### Requirements, models, and process knowledge
    
    The stack begins before hardware. Drawings, specifications, tolerances, process limits, hazard controls, software, acceptance criteria, and their rationale must remain interpretable. A three-dimensional model is not a complete product definition; critical characteristics may live in notes, standards, inspection plans, or worker knowledge.
    
    ### Material preparation
    
    Raw material rarely enters a final process unchanged. Metals may require sorting, assay, refining, alloying, atomization, powder classification, wire production, casting, or billet preparation. Polymers may require monomer production, compounding, drying, filtration, and extrusion. Ceramics require controlled powder, binders, mixing, forming, debinding, and sintering.
    
    Recycled material carries history. Oxidation, absorbed water, mixed alloys, degraded polymer chains, abrasive particles, or trace contaminants may alter processing and lifetime. NIST’s additive-manufacturing measurement programs explicitly treat virgin and recycled feedstock characterization as a qualification problem.
    
    ### Shaping and property creation
    
    Additive manufacturing is strong when complex geometry, low production volume, and digital reconfiguration matter. Subtractive methods provide surfaces, tolerances, bores, threads, and repair operations that many printed parts still need. Forming, casting, rolling, drawing, and extrusion can offer material efficiency or properties unavailable from a chosen print process.
    
    Geometry and properties are produced together. Grain structure, residual stress, anisotropy, porosity, surface condition, contamination, and heat treatment can control performance more than external shape.
    
    ### Joining and assembly
    
    Most useful systems contain multiple materials and replaceable elements. Welding, brazing, soldering, adhesive bonding, mechanical fastening, sealing, wiring, fiber termination, and fluid connections have distinct process controls and inspection needs.
    
    Joining is also where maintainability becomes visible. A permanently bonded enclosure may be light but difficult to open. A standardized bolted interface may be heavier but preserve repair options. Factory planning should reward reversible, accessible, nonexclusive interfaces where safety permits.
    
    ### Metrology and calibration
    
    Metrology connects a measurement to a known reference with stated uncertainty. NASA-STD-8739.12 requires proper selection, calibration, and use of measuring and test equipment when measurements affect safety or mission success.
    
    A ship would need to preserve dimensional, mass, electrical, temperature, pressure, flow, radiation, time, chemical, optical, and material references. Some can be realized from physical constants; others depend on artifacts, reference materials, controlled procedures, and cross-comparison. The metrology system itself needs maintenance, environmental control, redundancy, and a way to detect collective drift.
    
    ### Qualification and acceptance
    
    NASA-STD-6030 shows why additive flight hardware is not accepted from appearance alone. It addresses part classification, process control, machine qualification, witness specimens, inspection, acceptance, and configuration. NASA-STD-6016 separately controls materials and processes.
    
    Those standards are not generation-ship certification. They establish a present-day evidence discipline. An onboard system would need a justified way to requalify after a machine rebuild, software change, new feedstock route, missing test method, or modified design—without relaxing every threshold merely because resupply is impossible.
    
    ## Tools to make tools
    
    Factory closure can be represented as a reproduction matrix. Put required capabilities in both rows and columns. A row asks what capability is needed to restore an asset; a column asks what assets that capability can restore.
    
    For example:
    
    - A lathe can make shafts and bushings but depends on bearings, ways, drives, cutters, controls, lubrication, and metrology.
    - A furnace can heat-treat tools but depends on insulation, elements or fuel, seals, atmosphere control, thermometry, and power.
    - A coordinate-measuring machine can verify geometry but depends on scales, probes, software, environmental stability, and calibration artifacts.
    - A semiconductor-controlled drive can run many machines but may depend on electronics the factory cannot fabricate.
    
    The matrix exposes “vitamin inputs”: small items that control large capability. Bearings, seals, lubricants, catalysts, optics, high-purity gases, cutting inserts, power semiconductors, and calibration references may matter more than bulk steel.
    
    Closure should therefore be reported in several ways:
    
    - Fraction of annual material mass recovered.
    - Fraction of part families reproducible.
    - Fraction of life-critical functions restorable.
    - Longest finite-input depletion time.
    - Factory downtime after representative failures.
    - Number of independent people able to perform and teach each process.
    - Qualification yield, scrap rate, and measurement uncertainty.
    
    A “95 percent recycled by mass” claim can conceal the missing five grams that disables a megawatt system.
    
    ## Cybersecurity and AI are physical factory issues
    
    The authoritative product definition, toolpath, machine parameters, heat-treatment recipe, inspection threshold, and calibration correction are executable controls over matter. A malicious or accidental change can produce a latent defect.
    
    Controls should include:
    
    - Versioned and signed product and process records.
    - Reproducible generation of machine instructions where practicable.
    - Separation between design exploration and released production.
    - Two-person review for critical process or acceptance changes.
    - Physical witness specimens and independent measurements.
    - An offline known-good toolchain and restoration procedure.
    - Traceable material passports without branding them as infallible.
    - Detection of rollback, unapproved substitution, and configuration drift.
    
    AI can help schedule work, detect anomalies, estimate tool wear, compare inspection images, or search process history. It cannot turn missing evidence into a qualified part. An AI-generated repair, alloy substitution, or acceptance rationale must remain a proposal until checked against controlled requirements and physical tests. If a model cannot explain which data and requirement support a release decision, it should not release the part.
    
    ## What current evidence permits
    
    NASA’s 2025 ISAM State of Play documents inspection, servicing, assembly, fabrication, and construction. Its manufacturing plan describes ISS polymer work and development in metals, electronics, welding, recycling, and biomanufacturing. GAO finds robotic servicing is not routine and manufacturing is less mature.
    
    This supports three conclusions:
    
    1. Space manufacturing is a real engineering program, not merely fiction.
    2. Its demonstrated boundary is narrow relative to an industrial ecosystem.
    3. Qualification, economics, serviceable interfaces, test access, and standards remain central—not secondary to the printer.
    
    ## Earth-first test ladder
    
    Start with an isolated terrestrial factory cell and a declared product family. Require it to:
    
    - Accept virgin, recycled, and deliberately contaminated feedstock.
    - Manufacture parts by more than one process.
    - Rebuild a worn fixture, cutter, sensor mount, and machine subassembly.
    - Detect a bad material lot and a poisoned toolpath.
    - Maintain calibrated measurement through environmental drift.
    - Qualify and install a critical replacement under independent review.
    - Account for energy, gases, fluids, filters, consumables, scrap, and worker time.
    - Continue after loss of a specialist and the primary software environment.
    
    Later tests can move to parabolic flight, orbital platforms, or surface demonstrations. The evidence also serves remote industry, circular manufacturing, and right-to-repair.
    
    ## Evidence ledger
    
    - **L05-03-A — Polymer parts have been additively manufactured in orbit.** Basis: demonstrated. Readiness: operational for bounded noncritical applications. Confidence: strong.
    - **L05-03-B — In-space metal manufacturing, welding, electronics, recycling, and large construction remain development portfolios rather than an integrated factory.** Basis: observed. Readiness: early research to major scale-up by process. Confidence: strong for the cited portfolio boundary.
    - **L05-03-C — Mission-critical additive parts require material, machine, process, inspection, acceptance, and configuration controls.** Basis: normative. Readiness: operational in current NASA programs with Earth infrastructure. Confidence: strong.
    - **L05-03-D — No end-to-end chain was identified in the reviewed public sources that converts mixed waste or ore into an autonomously installed critical part independently accepted against declared requirements.** Basis: bounded public-source review, not proof of universal absence. Readiness: breakthrough-dependent for integrated closure. Confidence: supported.
    - **L05-03-E — Toolchains, metrology, material records, and AI-assisted process decisions are cyber-physical assurance assets.** Basis: normative. Readiness: early research for an isolated multigenerational factory. Confidence: supported.
    
    Linked corpus claims: `claim-14-01`, `claim-14-04`, `claim-14-05`, `claim-14-06`, `claim-14-10`, and `claim-12-07`. See the claim registry for each record's current evidence grade and independent-review state.
    
    ## Assumptions and limits
    
    - No factory throughput, product mix, habitat population, mission duration, or closure percentage is assumed.
    - “Qualified” means accepted against declared requirements and evidence, not certified by this lesson.
    - Current NASA standards rely on institutions, suppliers, laboratories, and reference chains that would not automatically exist onboard.
    - Additive processes are not assumed to replace subtractive work, forming, joining, chemistry, or inspection.
    - Material recycling does not guarantee preservation of alloy, polymer, ceramic, or composite properties.
    - AI support remains bounded and advisory; no generic chatbot or autonomous certification authority is proposed.
    
    ## What would change this conclusion?
    
    Readiness would improve through an end-to-end factory demonstration that starts from characterized waste or resource-derived feedstock, survives tool wear and calibration drift, makes replacement tooling, produces and independently qualifies a safety-relevant part, installs it, and repeats the cycle with measured yield and consumables. A persistent inability to reproduce a small set of life-critical “vitamin” inputs should bound mission duration or trigger a wait/do-not-launch decision.
    
    ## Sources and locators
    
    - [S01 — NASA, In-Space Manufacturing Portfolio Plan](https://ntrs.nasa.gov/citations/20250004020). Locator: portfolio architecture and sections on polymer, metal, electronics, welding, recycling, inspection, and cross-cutting maturation; 2025; accessed 2026-07-25.
    - [S02 — NASA, In-Space Servicing, Assembly, and Manufacturing State of Play, 2025 Edition](https://ntrs.nasa.gov/citations/20250008988). Locator: definitions, capability taxonomy, demonstrated missions, in-situ fabrication and repair, assembly, and construction status; NASA peer committee review, 2025; accessed 2026-07-25.
    - [S03 — U.S. GAO, In-Space Servicing, Assembly, and Manufacturing](https://www.gao.gov/products/gao-25-107555). Locator: maturity comparison, demonstrated servicing boundary, limited test opportunities, emerging standards, and serviceable-interface policy options; GAO-25-107555, July 2025; accessed 2026-07-25.
    - [S04 — NASA-STD-6030, Additive Manufacturing Requirements for Spaceflight Systems](https://standards.nasa.gov/standard/nasa/nasa-std-6030). Locator: sections 4–7 and appendices on classification, feedstock, machine and process qualification, witness material, inspection, acceptance, and tailoring; active baseline dated 2021-04-21; accessed 2026-07-25.
    - [S05 — NASA-STD-6016C with Change 1, Standard Materials and Processes Requirements for Spacecraft](https://standards.nasa.gov/standard/NASA/NASA-STD-6016). Locator: scope plus materials-and-process selection, control, verification, contamination, and documentation requirements; change dated 2023-11-15; accessed 2026-07-25.
    - [S06 — NASA-STD-8739.12 Revision A, Metrology and Calibration](https://standards.nasa.gov/standard/NASA/NASA-STD-873912). Locator: selection, calibration, control, and use of measuring and test equipment affecting safety and mission success; active revision dated 2024-11-20; accessed 2026-07-25.
    - [S07 — NIST, Measurement Science for Additive Manufacturing](https://www.nist.gov/programs-projects/measurement-science-additive-manufacturing-program). Locator: material characterization, process sensing and control, qualification, part inspection, data, and model-validation program; accessed 2026-07-25.
    - [S08 — Mani et al., Measurement Science Needs for Real-time Control of Additive Manufacturing Powder Bed Fusion](https://doi.org/10.6028/NIST.IR.8036). Locator: process-parameter/signature/quality relationships and gaps in traceable dimensional and thermal metrology; NISTIR 8036, 2015; accessed 2026-07-25.
    - [S09 — NIST SP 800-82 Revision 3, Guide to Operational Technology Security](https://doi.org/10.6028/NIST.SP.800-82r3). Locator: manufacturing-control architectures, safety/availability constraints, supply-chain and maintenance threats, segmentation, and recovery; September 2023; accessed 2026-07-25.
    
    ## Editorial record
    
    - Prepared by: GShips Project
    - Last edited: 2026-07-25
    - Required review: manufacturing engineering, materials and processes, metrology, nondestructive evaluation, space manufacturing, quality assurance, and industrial cybersecurity
    - Conflicts: Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists
    - Corrections: [Suggest a correction](https://gships.dammonburden.com/corrections)
    
  5. academy-lesson · lesson-05-04

    From resource to trustworthy feedstock

    Record fingerprint
    8645b0c9b50cd1c12fd245cd72261d71a288718f6906defabad9a58395fd726f
    Minimum approvals
    1
    Required scope groups
    bounded-competence: manufacturing-maintenance, systems-engineering
    High-consequence domains
    None under the named two-person rule
    Review state
    pending
    Published human decisions
    0
    Inspect the complete frozen review surface
    Slug
    isru-and-feedstock
    Title
    From resource to trustworthy feedstock
    Summary
    Bound every ISRU claim across prospecting, excavation, beneficiation, extraction, purification, storage, waste, power, and qualification before calling local material usable.
    Minutes
    34
    Level
    Applied
    ID
    lesson-05-04
    Track Slug
    industry-maintenance
    Track Title
    Energy, industry & maintenance
    Href
    /academy/industry-maintenance/isru-and-feedstock
    Prepared By
    GShips Project
    Last Edited At
    2026-07-25
    Review Required Domains
    1. isru
    2. extractive-metallurgy
    3. planetary-geology
    4. materials-characterization
    5. mining-systems
    6. environmental-governance
    7. mass-balance-assurance
    Claim IDs
    1. claim-14-03
    2. claim-14-04
    3. claim-14-05
    4. claim-14-06
    5. claim-14-10
    6. claim-05-10
    Exact MDX
    ---
    id: "lesson-05-04"
    track: "industry-maintenance"
    slug: "isru-and-feedstock"
    title: "From resource to trustworthy feedstock"
    summary: "Bound every ISRU claim across prospecting, excavation, beneficiation, extraction, purification, storage, waste, power, and qualification before calling local material usable."
    minutes: 34
    level: "Applied"
    preparedBy: "GShips Project"
    lastEditedAt: "2026-07-25"
    conflicts: "Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists."
    reviewRequiredDomains: "isru, extractive-metallurgy, planetary-geology, materials-characterization, mining-systems, environmental-governance, mass-balance-assurance"
    claimIds: "claim-14-03, claim-14-04, claim-14-05, claim-14-06, claim-14-10, claim-05-10"
    ---
    
    # From resource to trustworthy feedstock
    
    > **Evidence boundary:** MOXIE produced oxygen from the Martian atmosphere sixteen times, totaling 122 grams, and terrestrial test programs have excavated simulants and extracted oxygen or metals through multiple candidate processes. These are real, bounded demonstrations. No off-Earth system has autonomously prospected, mined, beneficiated, refined, stored, certified, and delivered industrial feedstock at settlement scale while maintaining its own equipment. Lunar simulants reproduce selected properties; they are not lunar material or proof of performance at a particular site.
    
    ## Plain-language summary
    
    “The Moon contains oxygen” is a geological statement. “This factory has qualified oxygen, metal, glass, or ceramic available on schedule” is an industrial statement. Between them is a chain of machines, measurements, energy, people, waste streams, and uncertainty.
    
    In-situ resource utilization—ISRU—uses material found at the place of operation rather than importing every product. It can reduce transported mass; it is not free inventory.
    
    A responsible claim names:
    
    - The body and specific site.
    - The measured resource and uncertainty.
    - The product and required purity or properties.
    - Every transformation and transport step.
    - Energy, water, gases, reagents, wear parts, and labor.
    - Waste, losses, contamination, and environmental limits.
    - Production rate, storage, reserves, and downtime.
    - The evidence level achieved at the relevant scale and environment.
    
    For a generation ship, the boundary is sharper. During interstellar cruise there may be no practical external ore body to mine. ISRU could support precursor infrastructure, Solar System construction, or destination operations, but it does not replace a closed onboard material strategy for transit.
    
    ## Resource, reserve, product, and feedstock are different
    
    A **resource** is material known or inferred to exist. A **reserve** is the economically and technically recoverable portion under stated conditions. A **product** is an output such as oxygen, water, iron, silicon, or aggregate. **Feedstock** is material characterized and prepared for a specific downstream process.
    
    Those categories must not be collapsed. Regolith rich enough in oxygen-bearing minerals may still be:
    
    - Buried or geographically dispersed.
    - Mechanically difficult to excavate.
    - Abrasive, electrostatic, or thermally extreme.
    - Variable in mineralogy and grain size.
    - Mixed with contaminants that poison a process.
    - Expensive to heat, reduce, transport, or purify.
    - Unsuitable for the properties required by the next machine.
    
    Feedstock is relational. Powder acceptable for a construction binder may be unacceptable for laser powder-bed fusion. Oxygen suitable for an industrial furnace may not meet breathing, medical, or propellant specifications. A bulk metal may still need alloying, removal of sulfur or other impurities, casting, heat treatment, and certification.
    
    ## The resource-to-feedstock chain
    
    ### 1. Prospect and characterize
    
    Remote sensing narrows possibilities; representative local sampling establishes what is present. The model needs composition, mineral phases, volatiles, particle distribution, depth, mechanical properties, spatial variation, and uncertainty. A rich point measurement cannot be multiplied by an area without a justified geological model.
    
    ### 2. Excavate and transport
    
    Excavation transfers reaction forces, generates dust, consumes power, and wears tools. Low gravity changes traction and material behavior; vacuum and temperature alter lubrication, heat flow, and volatile loss. Haulers, hoppers, seals, bearings, cables, and dust barriers become part of the production system.
    
    A tonne delivered to a processor is not equivalent to a tonne disturbed at the face. Report availability, distance, grade, dilution, spillage, and downtime.
    
    ### 3. Beneficiate
    
    Beneficiation separates or concentrates useful fractions before chemical extraction. It may screen by size, remove magnetic material, sort optically, separate electrostatically, crush, mill, dry, or heat.
    
    This stage can lower downstream energy and reactor mass, but it creates its own wear, dust, rejected material, and quality-control burden. A process demonstrated with carefully prepared simulant may fail when site material is broader, more cohesive, or chemically different.
    
    ### 4. Extract
    
    Extraction changes chemical form. Candidate lunar processes include reduction, electrolysis, and thermal routes to oxygen, metals, or construction material. Mars atmospheric ISRU can compress and electrolyze carbon dioxide.
    
    The useful metric is net product after startup, purification, maintenance, and off-spec batches, divided by total energy and consumed inputs over a declared interval.
    
    ### 5. Purify and condition
    
    The next process defines acceptable composition, particle size, moisture, phase, morphology, temperature, and packaging. Purification may demand multiple separation stages, high-purity reagents, filters, crucibles, electrodes, membranes, or catalysts.
    
    Some of those inputs are small in mass and difficult to make. They are “vitamins” in the industrial metabolism. An ISRU proposal that imports all electrodes, catalysts, filters, and electronics may still be valuable, but it should report the dependency.
    
    ### 6. Store, distribute, and verify
    
    Production and demand rarely align continuously. Gases may need compression, liquefaction, containment, and purity monitoring. Powders may oxidize, absorb moisture, segregate, or become hazardous. Metals require lot identity and protection from cross-contamination.
    
    The feedstock passport should record source location, sampling, transformations, equipment state, batch genealogy, measurements, uncertainty, deviations, and authorized use. It is evidence, not magic: records can be wrong or altered and should be checked against physical assays.
    
    ### 7. Manage waste and disturbed sites
    
    Tailings, rejected regolith, gases, heat, chemical residues, dust, and depleted sites are part of the mass balance. “Using local resources” does not erase environmental stewardship, planetary protection, worker exposure, cultural and scientific value, or political questions about who may appropriate a resource.
    
    At a destination with possible life or irreplaceable scientific evidence, extraction may be prohibited or delayed. A capable system must preserve the option not to mine.
    
    ## Make the mass balance visible
    
    For a declared boundary and interval:
    
    ```text
    opening inventory + inputs
    = closing inventory + products + recoverable by-products
    + stored waste + releases + measurement discrepancy
    ```
    
    Each term needs units and uncertainty. Flowmeters, scales, assays, tank models, and stockpile surveys disagree. The discrepancy should not be silently assigned to “recycling.”
    
    Useful performance measures include:
    
    - Kilograms excavated, delivered, and processed.
    - Grade and spatial uncertainty.
    - Product mass, purity, and qualified yield.
    - Energy and peak power per unit qualified product.
    - Imported consumables and replacement mass.
    - Water, gas, reagent, and coolant inventories.
    - Waste composition and containment.
    - Availability, maintenance hours, and mean recovery time.
    - Measurement uncertainty and unexplained loss.
    
    Closure should be bounded by element and function. Recovering 99 percent of bulk oxygen does not solve a missing catalyst. Producing aluminum does not establish semiconductor-grade silicon or bearing steel.
    
    ## What MOXIE demonstrated
    
    MOXIE is the clearest off-Earth chemical ISRU demonstration to date. Aboard Perseverance, it drew in the Martian atmosphere and used solid-oxide electrolysis to produce oxygen. The peer-reviewed mission paper documents operation across different atmospheric conditions. NASA’s final record reports sixteen runs, 122 grams total production, and up to 12 grams per hour at 98 percent purity or better.
    
    That evidence supports a specific statement: oxygen production from Martian atmospheric carbon dioxide was demonstrated on Mars at instrument scale.
    
    It does not demonstrate:
    
    - Continuous industrial operation.
    - Liquefaction, long-term storage, or delivery.
    - Breathing- or propulsion-system integration.
    - Production and replacement of cells, compressors, seals, filters, electronics, or power.
    - Lunar regolith processing.
    - A self-maintaining settlement supply chain.
    
    MOXIE’s value increases when the boundary is kept intact.
    
    ## Simulants are test materials, not destinations
    
    Actual lunar samples are scarce, so most engineering tests use terrestrial simulants. NASA guidance emphasizes application-specific properties, characterization, and traceability.
    
    There is no single “lunar dirt.” Highland and mare materials differ; local impact history, grain shapes, agglutinates, glass, nanophase iron, electrostatic charging, vacuum exposure, and volatile content matter. A simulant chosen for excavation may not be appropriate for oxygen extraction or human-health testing.
    
    Every test should state which properties the simulant represents, which it does not, its lot, preparation, and environmental conditions. Passing a bucket-wheel test in Earth gravity with one simulant is not lunar production readiness.
    
    ## Autonomy, cybersecurity, and AI
    
    Delayed communication makes autonomous planning, equipment coordination, fault detection, and resource-model updates attractive. NASA’s ISRU autonomy work explicitly maps robotic functions across prospecting, excavation, beneficiation, extraction, product storage, and delivery.
    
    Automation does not remove assurance:
    
    - Resource estimates must retain uncertainty and raw observations.
    - Machine-learning classifications need physical samples and out-of-distribution checks.
    - Production commands require bounded authority and collision/exclusion controls.
    - Material passports, assay data, recipes, and calibration are cyber-physical assets.
    - Safety-critical process changes require accountable review.
    - Manual and degraded modes must exist when positioning, models, or networks fail.
    
    An LLM can help retrieve procedures or compare production histories. It cannot declare an unknown deposit a reserve, invent an assay, or waive a purity limit. Generated recommendations must cite current evidence and remain subordinate to physical measurement.
    
    ## Earth-first and Solar System test ladder
    
    1. Publish a reference process with a complete mass, energy, consumables, and waste boundary.
    2. Run variable, blinded simulant lots rather than a single prepared batch.
    3. Integrate excavation, transport, beneficiation, extraction, purification, storage, and product verification.
    4. Inject dust, abrasive wear, sensor drift, contamination, power interruption, and missing consumables.
    5. Demonstrate repair and return to qualified output.
    6. Operate in thermal-vacuum, reduced-gravity analogs, and finally an off-Earth pilot.
    7. Require independent resource and environmental review before scale-up.
    
    The same discipline improves terrestrial mining, recycling, critical-material recovery, and circular-economy claims.
    
    ## Evidence ledger
    
    - **L05-04-A — MOXIE produced oxygen from Martian atmospheric carbon dioxide on Mars.** Basis: demonstrated. Readiness: operational as a completed instrument experiment; major scale-up for continuous production. Confidence: strong.
    - **L05-04-B — Lunar excavation and extraction concepts have substantial terrestrial test activity but no integrated off-Earth production chain.** Basis: demonstrated. Readiness: early research. Confidence: supported across the cited NASA program sources.
    - **L05-04-C — Lunar simulants represent selected properties and require application-specific characterization.** Basis: normative. Readiness: operational test practice. Confidence: strong.
    - **L05-04-D — No cited system closes prospecting through qualified feedstock while maintaining its production equipment.** Basis: observed. Readiness: no known path for integrated closure. Confidence: strong for the bounded source set.
    - **L05-04-E — ISRU claims require declared mass balance, uncertainty, imported consumables, waste, storage, and environmental boundaries.** Basis: normative. Readiness: operational as an accounting practice; early research as an integrated off-Earth assurance system. Confidence: strong.
    
    Linked corpus claims: `claim-14-03`, `claim-14-04`, `claim-14-05`, `claim-14-06`, `claim-14-10`, and `claim-05-10`. See the claim registry for each record's current evidence grade and independent-review state.
    
    ## Assumptions and limits
    
    - No target body, site, ore grade, production rate, process, population, or product specification is selected.
    - ISRU during interstellar cruise is not assumed; external material access would require a separately defined architecture.
    - MOXIE results apply to its Mars instrument, operating conditions, and oxygen product.
    - Simulant tests do not validate local geology or reproduce every environmental property simultaneously.
    - Resource use remains subject to environmental, scientific, legal, labor, safety, and governance review.
    - AI is advisory and evidence-linked; no generic chatbot or autonomous resource-appropriation authority is proposed.
    
    ## What would change this conclusion?
    
    An off-Earth pilot that prospectively predicts a deposit, excavates variable native material, produces and stores a specified product, reports complete mass and energy balance, survives faults, and restores qualified output after maintenance would advance readiness. Long-duration evidence must also show that catalysts, electronics, filters, wear parts, and calibration can be replenished. Discovery of harmful contamination, unacceptable environmental impact, poor grade, or unstable supply must be allowed to move the gate to wait, import material, choose another site, or do not extract.
    
    ## Sources and locators
    
    - [S01 — Hoffman et al., Mars Oxygen ISRU Experiment—Preparing for Human Mars Exploration](https://doi.org/10.1126/sciadv.abp8636). Locator: instrument architecture, solid-oxide electrolysis, operating conditions, initial Mars results, and scale-up boundary; *Science Advances* 8(35), 2022; accessed 2026-07-25.
    - [S02 — NASA/JPL, MOXIE Completes Mars Mission](https://www.nasa.gov/solar-system/nasas-oxygen-generating-experiment-moxie-completes-mars-mission/). Locator: sixteen runs, 122 grams total oxygen, peak 12 grams per hour, purity, and missing liquefaction/storage system; September 6, 2023, updated June 22, 2026; accessed 2026-07-25.
    - [S03 — Sanders and Kleinhenz, Overview of NASA ISRU Plans, Priorities, and Activities](https://ntrs.nasa.gov/citations/20220007350). Locator: water and oxygen mining, metal/feedstock development, resource assessment, system integration, and end-to-end pilot priorities; NASA technical-management-reviewed presentation, 2022; accessed 2026-07-25.
    - [S04 — Sanders, Autonomy and Robotics Needed for Integrated ISRU Operations](https://ntrs.nasa.gov/citations/20240013907). Locator: functions across prospecting, excavation, transport, beneficiation, extraction, product handling, coordination, and maintenance; NASA technical presentation, 2024; accessed 2026-07-25.
    - [S05 — Slabic et al., Lunar Regolith Simulant User’s Guide, Revision A](https://ntrs.nasa.gov/citations/20240011783). Locator: simulant selection, lunar-material variability, properties, applications, limitations, and periodic revision; NASA/TM-20240011783, October 2024; accessed 2026-07-25.
    - [S06 — Sibille et al., Lunar Regolith Simulant Materials](https://ntrs.nasa.gov/citations/20060051776). Locator: need for common, traceable, repeatable simulant characterization, production, and distribution; NASA/TP-2006-214605, September 2006; accessed 2026-07-25.
    - [S07 — NASA-STD-1008, Classifications and Requirements for Testing Systems and Hardware to be Exposed to Dust in Planetary Environments](https://standards.nasa.gov/standard/nasa/nasa-std-1008). Locator: dust classes, simulant selection, facility conditions, documentation, and test requirements; active baseline dated 2021-08-21; accessed 2026-07-25.
    - [S08 — NASA-STD-6030, Additive Manufacturing Requirements for Spaceflight Systems](https://standards.nasa.gov/standard/nasa/nasa-std-6030). Locator: feedstock control, reuse, contamination, machine/process qualification, witness material, inspection, and acceptance; active baseline dated 2021-04-21; accessed 2026-07-25.
    
    ## Editorial record
    
    - Prepared by: GShips Project
    - Last edited: 2026-07-25
    - Required review: ISRU, extractive metallurgy, planetary geology, materials characterization, mining systems, environmental governance, and mass-balance assurance
    - Conflicts: Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists
    - Corrections: [Suggest a correction](https://gships.dammonburden.com/corrections)
    
  6. academy-lesson · lesson-05-05

    The semiconductor bottleneck

    Record fingerprint
    b42a929f6f0c46721a3c3f752714994499195cd9e7c5948d8e121446c996a9a4
    Minimum approvals
    1
    Required scope groups
    bounded-competence: manufacturing-maintenance, systems-engineering
    High-consequence domains
    None under the named two-person rule
    Review state
    pending
    Published human decisions
    0
    Inspect the complete frozen review surface
    Slug
    semiconductor-bottleneck
    Title
    The semiconductor bottleneck
    Summary
    Treat computing, sensors, power electronics, packaging, radiation assurance, high-purity materials, process tools, and metrology as a supply ecosystem—not a stockpile of chips.
    Minutes
    36
    Level
    Technical
    ID
    lesson-05-05
    Track Slug
    industry-maintenance
    Track Title
    Energy, industry & maintenance
    Href
    /academy/industry-maintenance/semiconductor-bottleneck
    Prepared By
    GShips Project
    Last Edited At
    2026-07-25
    Review Required Domains
    1. semiconductor-manufacturing
    2. microelectronics-metrology
    3. space-avionics
    4. radiation-hardness-assurance
    5. electronic-parts-assurance
    6. power-electronics
    7. hardware-cybersecurity
    Claim IDs
    1. claim-14-05
    2. claim-14-07
    3. claim-03-06
    4. claim-12-03
    5. claim-12-07
    Exact MDX
    ---
    id: "lesson-05-05"
    track: "industry-maintenance"
    slug: "semiconductor-bottleneck"
    title: "The semiconductor bottleneck"
    summary: "Treat computing, sensors, power electronics, packaging, radiation assurance, high-purity materials, process tools, and metrology as a supply ecosystem—not a stockpile of chips."
    minutes: 36
    level: "Technical"
    preparedBy: "GShips Project"
    lastEditedAt: "2026-07-25"
    conflicts: "Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists."
    reviewRequiredDomains: "semiconductor-manufacturing, microelectronics-metrology, space-avionics, radiation-hardness-assurance, electronic-parts-assurance, power-electronics, hardware-cybersecurity"
    claimIds: "claim-14-05, claim-14-07, claim-03-06, claim-12-03, claim-12-07"
    ---
    
    # The semiconductor bottleneck
    
    > **Evidence boundary:** Semiconductor fabrication, packaging, testing, and assurance operate today through a global network of highly specialized suppliers, tools, materials, clean facilities, standards, and expertise. NASA qualifies, acquires, stores, tests, and applies electronic parts for bounded missions, and space-manufacturing programs are exploring printed conductors, sensors, and electronics. No spacecraft or isolated terrestrial analog has demonstrated an end-to-end local supply chain for modern integrated circuits, power semiconductors, detectors, memory, packaging, and radiation assurance across generations.
    
    ## Plain-language summary
    
    Modern chips are light enough to disappear inside a mass budget and important enough to disable nearly everything.
    
    They regulate power, read sensors, control machinery, store knowledge, run communications, support medicine, and implement safety functions. A ship can carry spares and preserve analog or mechanical fallbacks. But it must address aging stock, changing interfaces, missing radiation data, lot variation, and machines that depend on electronics to repair electronics.
    
    Printing a conductive trace or a simple sensor is valuable. It is not equivalent to fabricating a modern integrated circuit. The difference is not only feature size. It is a stack of high-purity inputs, repeated physical and chemical processes, contamination control, precision motion, vacuum, optics, plasma, metrology, yield learning, packaging, and test.
    
    The semiconductor bottleneck should change the design philosophy now: use the least complex electronics that safely meet the function, make modules replaceable, preserve multiple computational pathways, record provenance, and treat local chip fabrication as an unproven research program rather than assumed closure.
    
    ## What the chip supply chain actually contains
    
    NIST describes the semiconductor supply chain as global, specialized, and interconnected, with chipmakers relying on thousands of suppliers. A lithography tool alone contains subsystems from many specialist tiers. A bounded factory model should include at least the following layers.
    
    ### Device and system design
    
    Design starts with function, timing, power, interfaces, fault behavior, radiation environment, lifetime, and verification. Logic description, analog layout, device models, libraries, compilers, electronic-design-automation tools, and test patterns all influence the physical product.
    
    The design archive must preserve more than source code. It needs tool versions, models, constraints, known errata, test benches, synthesis and layout settings, masks or direct-write data, packaging definition, and acceptance evidence.
    
    ### Starting materials
    
    Semiconductor processes need substrates and films with controlled composition, crystal quality, defects, and surface condition. NIST’s CHIPS metrology work names silicon, germanium, copper, gold, silver, compound semiconductors, and other high-purity solids while emphasizing contaminants and provenance.
    
    The process also consumes specialty gases, acids, bases, solvents, photoresists, developers, dopant sources, deposition precursors, ultrapure water, filters, targets, slurries, and clean packaging. “Silicon is abundant” says little about the ability to deliver a qualified wafer and hundreds of process chemicals.
    
    ### Wafer fabrication
    
    A simplified integrated-circuit flow repeats combinations of:
    
    - Surface preparation and cleaning.
    - Oxidation or film deposition.
    - Photoresist coating and pattern transfer.
    - Lithographic exposure and alignment.
    - Etching.
    - Doping through implantation or diffusion.
    - Thermal processing.
    - Planarization and polishing.
    - Metallization and interconnect formation.
    - In-line inspection and electrical measurement.
    
    Small contamination, overlay, thickness, dose, temperature, or particle errors can affect many devices at once. Yield is learned through process control and failure analysis across lots.
    
    ### Dicing, packaging, and interconnection
    
    A working die still needs separation, attachment, wire bonds or bumps, encapsulation or hermetic packaging, thermal paths, external connections, markings, inspection, and test. Packaging can dominate thermal, mechanical, moisture, radiation, and repair behavior.
    
    A ship also needs printed circuit boards, passive components, connectors, cables, fiber, magnetics, power modules, sensors, relays, and electromechanical parts. Reproducing a processor while importing every capacitor and connector does not close avionics.
    
    ### Metrology, qualification, and assurance
    
    NIST’s semiconductor metrology program spans material purity and provenance, process measurement, advanced packaging, modeling, standards, and supply-chain trust. The need persists even in current world-class factories.
    
    NASA-STD-8739.10 requires programs to manage selection, acquisition, traceability, testing, handling, packaging, storage, and application of electrical, electronic, and electromechanical parts. NASA’s NEPP program generates technical knowledge about performance, failure modes, test methods, reliability, radiation, and supply-chain quality.
    
    Those institutions are part of the capability. A ship cannot carry only parts and assume the assurance ecosystem follows.
    
    ## “Use an older process” helps, but does not close the loop
    
    Mature, larger-feature semiconductor processes can reduce some lithography, device, and yield challenges. They may support robust controllers, analog functions, memory, and power devices without pursuing leading-edge density. Long-lived architectures should seriously consider them.
    
    But “older” does not mean simple or self-replicating. The factory still needs:
    
    - Controlled substrates and chemicals.
    - Many precise thermal, vacuum, deposition, etch, doping, and cleaning steps.
    - Masks or pattern-generation tools.
    - Particle and molecular contamination control.
    - Electrical and physical metrology.
    - Packaging and interconnect.
    - Recipe preservation and yield analysis.
    - Replacement pumps, seals, optics, power supplies, sensors, and controllers.
    
    Different functions use different materials and processes. Power switching, imaging, radiation detection, radio, memory, precision analog measurement, and light emission do not come automatically from one logic process.
    
    The correct research question is not “Can the ship make chips?” It is “Which device families, at what performance and yield, using which locally renewable inputs, can be repeatedly fabricated and assured?”
    
    ## Build an electronics resilience portfolio
    
    Because local fabrication is unproven, resilience should combine strategies.
    
    ### Carry qualified inventory
    
    Store characterized parts and modules in controlled environments, with lot traceability, packaging controls, periodic inspection, and test samples. Inventory estimates should include radiation exposure, storage degradation, handling damage, destructive testing, manufacturing yield, and redesign reserves.
    
    A stockpile can share a latent lot defect or become unusable as software and connectors evolve.
    
    ### Use replaceable, documented modules
    
    Standard electrical, mechanical, data, and cooling interfaces can let newer and older controllers coexist. Test access, socketed or serviceable packaging where appropriate, isolation, and readable schematics improve repair.
    
    Standards should be governed as commons rather than tied to a vendor that no longer exists. Changes need migration tools and physical adapters.
    
    ### Match complexity to consequence
    
    Not every valve needs a high-performance computer. Simple local control, mechanical governors, analog instrumentation, field-programmable logic, and redundant low-rate networks may preserve essential function when high-end computing is scarce.
    
    This is not an argument to reject advanced electronics. High-performance computation may improve science, autonomy, design, and medicine. It is an argument against making survival depend on one irreproducible computing tier.
    
    ### Preserve diversity and graceful degradation
    
    Common hardware simplifies spares and training; excessive commonality creates common-mode failure. Independent implementations, different lots, dissimilar sensing, and manual fallback can reduce correlated risk when justified.
    
    Specify degraded modes: lower sensor resolution, slower planning, local optimization, reduced bandwidth, and manual procedures. “Computer unavailable” must not mean “air unavailable.”
    
    ## Radiation assurance is mission-specific
    
    Space radiation can cause total ionizing dose effects, displacement damage, and single-event effects. The Johnson Space Center AIRES standard treats radiation-hardness assurance as an iterative combination of environment definition, requirements, part data, analysis, test, and system design.
    
    A label such as “radiation hardened” is not a universal guarantee. Suitability depends on particle spectrum, shielding, location, dose, lifetime, operating state, lot variation, and circuit consequences. The JPL radiation-effects database explicitly warns that absence of data is not evidence of immunity.
    
    For a generation ship, replacement electronics may differ from the original lot and process. Each new source or onboard process needs a proportionate assurance case. Redundancy cannot be credited blindly when one radiation event, power transient, timing fault, or design error can affect all channels.
    
    ## AI increases both capability and dependency
    
    LLMs and other AI systems can help interpret failure reports, generate candidate code, search design archives, optimize schedules, compare microscopy, and identify process anomalies. They may let smaller teams work across more of the electronics stack.
    
    They also consume the hardware being conserved. Model training and inference require processors, memory, storage, power conversion, cooling, and networks. Generated code and circuit changes can be subtly wrong. A poisoned model, compromised design library, or altered test oracle can turn a digital error into thousands of defective devices.
    
    The boundary should be explicit:
    
    - AI may propose; controlled tools and accountable people release.
    - Generated code, layouts, recipes, and tests enter the same configuration and verification system as human work.
    - Design claims link to executable tests and physical measurements.
    - High-consequence electronics receive independent review and diverse test.
    - Known-good compilers, libraries, models, and documentation remain usable offline.
    - AI-off drills prove that essential diagnostics and production do not depend on one model.
    - No model may fabricate radiation data, waive missing traceability, or promote an unverified part.
    
    A specialized evidence-linked assistant may eventually support this workflow. A generic chatbot is not a parts-assurance system.
    
    ## A semiconductor closure research ladder
    
    1. Inventory every electronic function, part family, package, supplier dependency, and expected replacement interval in a terrestrial closed-system analog.
    2. Redesign selected life-critical controls for serviceability, low complexity, open interfaces, and degraded operation.
    3. Demonstrate long-term storage, periodic screening, rework, packaging, and radiation-aware substitution.
    4. Manufacture passive components, boards, interconnect, simple sensors, and power assemblies locally.
    5. Operate a bounded mature-node microfabrication line with declared imported chemicals, tools, spares, reference materials, yield, and waste.
    6. Rebuild part of the line using its own output and the broader factory stack.
    7. Qualify new lots in a relevant radiation and lifecycle environment.
    8. Repeat after loss of an expert, a design tool, a metrology instrument, and a trusted software image.
    
    Earthside benefits include resilient infrastructure, right-to-repair, long-lived instruments, and trustworthy supply chains.
    
    ## Evidence ledger
    
    - **L05-05-A — Present semiconductor manufacturing depends on a global, specialized network of materials and equipment suppliers.** Basis: observed. Readiness: operational terrestrially. Confidence: strong.
    - **L05-05-B — Space programs have mature electronic-parts assurance and radiation-hardness-assurance practices for bounded missions.** Basis: normative. Readiness: operational within supported programs. Confidence: strong.
    - **L05-05-C — Printed conductors, sensors, boards, or simple electronics do not demonstrate integrated-circuit supply-chain closure.** Basis: demonstrated. Readiness: early research for in-space electronics manufacturing. Confidence: strong.
    - **L05-05-D — No cited demonstration reproduces the semiconductor fabrication, packaging, metrology, qualification, and equipment-renewal stack in isolation.** Basis: observed. Readiness: no known path for integrated closure. Confidence: strong for the bounded source set.
    - **L05-05-E — AI can support electronics work but must remain inside controlled design, verification, provenance, and physical-test boundaries.** Basis: normative. Readiness: early research for isolated safety-critical use. Confidence: strong about the assurance boundary; tentative about future productivity.
    
    Linked corpus claims: `claim-14-05`, `claim-14-07`, `claim-03-06`, `claim-12-03`, and `claim-12-07`. See the claim registry for each record's current evidence grade and independent-review state.
    
    ## Assumptions and limits
    
    - No chip process, feature size, product mix, compute demand, inventory, lifetime, or radiation environment is selected.
    - Mature-node processes are treated as potentially simpler, not simple or self-reproducing.
    - NASA parts and radiation standards govern present programs and do not certify a multigenerational onboard foundry.
    - Stockpiling reduces near-term risk but does not establish indefinite availability.
    - Mechanical and analog fallbacks require their own verification and maintenance; they are not automatically safer.
    - AI remains advisory and verification-bound; no generic chatbot or autonomous parts-release authority is proposed.
    
    ## What would change this conclusion?
    
    Readiness would improve if an isolated pilot fabricated several relevant device families from characterized inputs, packaged and tested them, established yield and radiation performance, replaced failed process equipment, and repeated production across operator and tool generations. A long-lived stockpile program with transparent degradation data could narrow early mission risk. Evidence that one irreplaceable device class controls survival should force redesign, shorter mission bounds, external support, or a wait/do-not-launch decision.
    
    ## Sources and locators
    
    - [S01 — NIST CHIPS Program Office, Vision for Success: Semiconductor Materials and Manufacturing Equipment](https://www.nist.gov/chips/vision-success-facilities-semiconductor-materials-and-manufacturing-equipment). Locator: global specialized supply chain, thousands of suppliers, materials/equipment dependencies, and lithography-tool subsystem example; accessed 2026-07-25.
    - [S02 — NIST, Metrology Gaps in the Semiconductor Ecosystem](https://www.nist.gov/document/chips-rd-metrology-gaps-semiconductor-ecosystem). Locator: metrology needs across materials, devices, fabrication, packaging, automation, security, provenance, modeling, and standards; June 2023; accessed 2026-07-25.
    - [S03 — NIST, Metrology of Purity and Contaminants in Solid Materials](https://www.nist.gov/programs-projects/metrology-purity-and-contaminants-solid-materials). Locator: high-purity semiconductor solids, priority contaminants, provenance, and reference-material gaps; accessed 2026-07-25.
    - [S04 — NASA-STD-8739.10, Electrical, Electronic, and Electromechanical Parts Assurance Standard](https://standards.nasa.gov/standard/NASA/NASA-STD-873910). Locator: selection, acquisition, traceability, testing, handling, packaging, storage, application, and risk control; active baseline dated 2017-06-13; accessed 2026-07-25.
    - [S05 — NASA Electronic Parts and Packaging Program](https://nepp.nasa.gov/). Locator: program scope covering performance, application, failure modes, test methods, reliability, radiation, and supply-chain quality; accessed 2026-07-25.
    - [S06 — JSC-67551, JSC Avionics Ionizing Radiation Effects Standard](https://ntrs.nasa.gov/citations/20230013399). Locator: scope and iterative assurance requirements for single-event effects, total ionizing dose, total non-ionizing dose, analysis, test, and documentation; standard dated 2021-04-16; accessed 2026-07-25.
    - [S07 — JPL Center for Space Radiation, Radiation Effects Database](https://www.jpl.nasa.gov/go/space-radiation/radiation-database/). Locator: mission-assurance purpose and warning that absence of data is not evidence of radiation tolerance or immunity; accessed 2026-07-25.
    - [S08 — NASA, In-Space Manufacturing Portfolio Plan](https://ntrs.nasa.gov/citations/20250004020). Locator: electronics and sensor-manufacturing portfolio boundary, cross-cutting inspection, and maturation needs; 2025; accessed 2026-07-25.
    - [S09 — NIST AI 600-1, Generative AI Profile](https://doi.org/10.6028/NIST.AI.600-1). Locator: confabulation, information integrity, value-chain and component-integration risks, human oversight, testing, and incident disclosure; July 2024; accessed 2026-07-25.
    
    ## Editorial record
    
    - Prepared by: GShips Project
    - Last edited: 2026-07-25
    - Required review: semiconductor manufacturing, microelectronics metrology, space avionics, radiation-hardness assurance, electronic-parts assurance, power electronics, and hardware cybersecurity
    - Conflicts: Maintainer intends to explore a commercial venture based on some GShips work; no entity, funding, customer, sponsor, or partner relationship currently exists
    - Corrections: [Suggest a correction](https://gships.dammonburden.com/corrections)
    
Equivalent record table for this packet
RecordSubjectFingerprintApprovalsScope groups
academy-track:industry-maintenance Energy, industry & maintenance 837753e30df8cddba43ec11fc8f69edc6197052c0cf246ef039354ead4523aab 1 bounded-competence: manufacturing-maintenance, systems-engineering
academy-lesson:lesson-05-01 Power islands and black start 4d81bb2616a17bafdc3092c1d34c38242ac8c5e4216f91b05f5d6ed972391cdd 1 bounded-competence: manufacturing-maintenance, systems-engineering
academy-lesson:lesson-05-02 Maintenance as metabolism 8e8037e553200f7fc101fafd51b494e87a9f4d2f39ee34934a6bc0db83c82f32 1 bounded-competence: manufacturing-maintenance, systems-engineering
academy-lesson:lesson-05-03 Manufacturing is a stack, not a printer 2f3ce8f6a75859ff28d10d1da26fdf956e5c784be98cdd3ed7d48c09386c2515 1 bounded-competence: manufacturing-maintenance, systems-engineering
academy-lesson:lesson-05-04 From resource to trustworthy feedstock 8645b0c9b50cd1c12fd245cd72261d71a288718f6906defabad9a58395fd726f 1 bounded-competence: manufacturing-maintenance, systems-engineering
academy-lesson:lesson-05-05 The semiconductor bottleneck b42a929f6f0c46721a3c3f752714994499195cd9e7c5948d8e121446c996a9a4 1 bounded-competence: manufacturing-maintenance, systems-engineering

Linked records—not review targets here

These records provide dependency or relationship context. Their decisions belong to their single primary packet, preventing double counting.

Frozen source snapshots

Source inclusion does not determine the disposition. Reviewers must inspect the cited locator and relation, note inaccessible material, and identify stronger or conflicting evidence.

Sources, verification dates, scope notes, and exact fingerprints
Source IDSourceCheckedScope boundaryFingerprint
src-c814-eu-ecodesign-regulation Sustainable Products to Become the Norm as the Ecodesign for Sustainable Products Regulation Enters into Force (opens external site in a new tab) 2026-07-25 Durability, reparability, recycled content, remanufacturing, recycling, circularity, environmental information, and Digital Product Passport provisions, with implementation still progressing by product group. da81477d420591afc612b54ac8d62736160ef75e96843cf9c74c3d680218059e
src-ce-nasa-als-baseline Advanced Life Support Baseline Values and Assumptions Document (opens external site in a new tab) 2026-07-25 Life-support material-flow assumptions and baseline values for analysis; not a multigenerational closure demonstration. 274c7b49853e4097a56bdfd3f9300237fceb56e9182912a0ea9ea20924f2fee9
src-cr-ccsds-350-0-g-3 The Application of Security to CCSDS Protocols (opens external site in a new tab) 2026-07-26 Consensus informational report on security concepts, mechanisms, implementation options, and effects on CCSDS services, primarily for space-ground and ground-space links. The report explicitly is not a CCSDS Recommended Standard and excludes detailed security-analysis and risk-assessment methods. 44f5371a3c01028d94ba87eb2c3367b47b781a3fe2f7de8e0bb5c7486278d8fb
src-cr-cisa-sbom Software Bill of Materials (opens external site in a new tab) 2026-07-25 Official SBOM definition, ecosystem roles, use cases, community resources, and minimum-elements guidance; an SBOM is component evidence rather than proof of safety. d551139e9329c0f04e2480582f3dd9123e7d717b8bfedf5cb6141bc087053d16
src-cr-ietf-rfc9019-suit A Firmware Update Architecture for Internet of Things (opens external site in a new tab) 2026-07-25 Informational IETF architecture for authenticated firmware manifests, stakeholder separation, target matching, sequence control, dependencies, interruption tolerance, and recovery. f89082ee842c244fde0169bd864fb0a0b2e4390d2b8bda120bbe1fcb414b62e7
src-cr-nasa-cryptolib-2023 The State of CryptoLib – The Open-Source Satellite Cryptography Library (opens external site in a new tab) 2026-07-26 Professionally reviewed conference record distributed in 2023; NTRS marks the available record onlyAbstract=true. The abstract describes an actively developed open-source C library that aims to be CCSDS Space Data Link Security compliant and reports selected Telecommand, Telemetry, and Advanced Orbiting Systems encryption and decryption functions. It does not establish CCSDS conformance, secure implementation, operational deployment, flight qualification, key-management assurance, or long-duration maintenance. 841fcaee2944c6aef6a4e4b5275ddaaea99533977c6de713671c428d94b6998c
src-cr-nist-firmware-800193 Platform Firmware Resiliency Guidelines (opens external site in a new tab) 2026-07-25 Roots of trust and mechanisms to protect, detect, and recover platform firmware and critical data after destructive attacks. 08984a00ed4540ac34b3290412d4c5c6eddd595f4207fee8aa92a63c48b9017c
src-cr-nist-ssdf-800218 Secure Software Development Framework (SSDF) Version 1.1 (opens external site in a new tab) 2026-07-25 Outcome-based practices for preparing an organization, protecting software, producing well-secured releases, and responding to vulnerabilities. bda553d2c9f6bc9091b819eb153491cf8392cac73836f86a15eefee22fac1003
src-im-gao-isam-2025 In-Space Servicing, Assembly, and Manufacturing: Benefits, Challenges, and Policy Options (opens external site in a new tab) 2026-07-25 Independent government assessment of demonstrated servicing, limited robotic use, test-access gaps, emerging standards, serviceability, costs, and policy options. f34a4c41466659821eede3dfde4b257733374fd7d50c558c8f7d1bbb1078a8e7
src-im-jpl-radiation-database JPL Radiation Effects Database (opens external site in a new tab) 2026-07-25 Radiation-effects test data and assurance context, including the warning that absent data is not evidence of tolerance or immunity. The official page is browser-accessible but returns HTTP 403 to automated checks. 034ab1d0da86af17631b632d49c139753286d3d07ff7c633c1fa7005457d206b
src-im-moxie-science Mars Oxygen ISRU Experiment (MOXIE)—Preparing for Human Mars Exploration (opens external site in a new tab) 2026-07-25 Primary results and scale boundary for oxygen production from Martian atmospheric carbon dioxide. The stable DOI resolves in browser access but the publisher returns HTTP 403 to automated checks. 936cbbaae07311b3b8cd4aff7c8b0c48720498eb4753a55f50009ba1670b6e47
src-im-nasa-eee-873910 Electrical, Electronic, and Electromechanical Parts Assurance Standard (opens external site in a new tab) 2026-07-25 Selection, acquisition, traceability, testing, handling, packaging, storage, application, and risk control for spaceflight electronic and electromechanical parts. 7de974366c68ddd53ce47a7829040b0f7d644de2713f873827f7eacbe97c2287
src-im-nasa-isam-2025 In-Space Servicing, Assembly, and Manufacturing State of Play: 2025 Edition (opens external site in a new tab) 2026-07-25 NASA peer-committee-reviewed taxonomy and status survey of inspection, servicing, assembly, fabrication, repair, construction, and enabling capabilities. 4ee5cffad11832f3a52484c44217ef44f63bb5d5da9e3d47186f35fea1ab886d
src-im-nasa-ism-portfolio-2025 In-Space Manufacturing Portfolio Plan (opens external site in a new tab) 2026-07-25 Program record for polymer, metal, electronics, welding, recycling, inspection, and biomanufacturing work, including the incomplete ISS Refabricator demonstration. 06cea319893cf8240cb44a60e3ce511ca3f41a48b46c87b9915567ef6fc29ba1
src-im-nasa-isru-autonomy Autonomy and Robotics Needed for Integrated ISRU Operations (opens external site in a new tab) 2026-07-25 Robotic and autonomous functions across prospecting, excavation, transport, beneficiation, extraction, product handling, coordination, and maintenance. 98d607701b4c6a9cfffd9f565a8baf370844c371eddbf9769a9454c5cf53a303
src-im-nasa-isru-priorities Overview of NASA ISRU Plans, Priorities, and Activities (opens external site in a new tab) 2026-07-25 NASA priorities for water and oxygen mining, metal and manufacturing feedstock, resource assessment, integration, and end-to-end pilot demonstrations. 751943e37363db62202ca505da89bdf66ce92100ad7f54d63af0c5e0618cb6fb
src-im-nasa-krusty KRUSTY Reactor Design (opens external site in a new tab) 2026-07-25 Design and March 2018 ground nuclear operation of a roughly one-kilowatt-electric Kilopower prototype; not a flight or habitat-scale power demonstration. f0f36371e176f9cd40e5050e09e8de492f5780a05f979f99531b9f9ba6788592
src-im-nasa-maintainability-tm4628 Recommended Techniques for Effective Maintainability (opens external site in a new tab) 2026-07-25 Design access, fault isolation, testability, standardization, handling, maintenance analysis, demonstration, training, and operational restoration. 8d07e8e57c8b39afc5ed42418438ee95064f7602aeb1849436bec43bac7d270c
src-im-nasa-metrology-873912 Metrology and Calibration (opens external site in a new tab) 2026-07-25 Selection, calibration, control, and use of measuring and test equipment whose results affect safety or mission success. 8fa80c312101f162e43d1a51a136596e2cd0ff81f1b218ff7227df062b3e3540
src-im-nasa-rm-8729 NASA Reliability and Maintainability Standard for Spaceflight and Support Systems (opens external site in a new tab) 2026-07-25 Lifecycle reliability and maintainability objectives, planning, analysis, verification, validation, and evidence for NASA programs. 1adc452418fbda7d9b7258bee174773a26d9b60c7ee5859ac78c77443cf1866d
src-im-nasa-std-6030 Additive Manufacturing Requirements for Spaceflight Systems (opens external site in a new tab) 2026-07-26 Requirements for part classification, feedstock and process control, machine qualification, witness material, inspection, acceptance, configuration, and tailored in-space additive manufacturing. This is normative authority for NASA spaceflight hardware, not a demonstration of printed-part performance, autonomous repair, circular manufacturing, or cyber recovery. 7e6a5d45f27e760d46772f9f030ecd9397047f8274aa4525946c18e6d6b34d90
src-im-nist-am-measurement-program Measurement Science for Additive Manufacturing Program (opens external site in a new tab) 2026-07-25 Material characterization, process sensing and control, machine and feedstock qualification, part inspection, data, reference methods, and model validation. c8f6eb76b1a5e91f56d4320b96e92ada9823a967a01df2bc463a43da497d8fdd
src-im-nist-chips-metrology Metrology Gaps in the Semiconductor Ecosystem (opens external site in a new tab) 2026-07-25 Metrology needs across materials, devices, fabrication, advanced packaging, models, automation, security, provenance, interoperability, and standards. 262322d91a33825ba17c2527a26293c60e798749a6b8a45652effb3e5bc333fd
src-im-nist-chips-supply-chain Vision for Success: Facilities for Semiconductor Materials and Manufacturing Equipment (opens external site in a new tab) 2026-07-25 Global specialization, thousands of suppliers, geographic concentration, materials, equipment, and multi-tier dependencies in semiconductor manufacturing. 346c53795aeb4a6e01fb5ada14ae8125e3e4a008c537bbb6a3103bd70d10cae3
src-im-nist-ir8036 Measurement Science Needs for Real-time Control of Additive Manufacturing Powder Bed Fusion Processes (opens external site in a new tab) 2026-07-25 Traceable dimensional and thermal metrology gaps and relationships among powder-bed-fusion process parameters, process signatures, and part quality. aa3f92c0e41852f17a4d8ae0c3c7d278dea7eda098a9bc69b9a8ee8ebc87ce5b
src-im-nist-ot-80082r3 Guide to Operational Technology Security (opens external site in a new tab) 2026-07-25 Operational-technology architectures, safety and availability constraints, threats, segmentation, supply-chain and maintenance risks, countermeasures, and recovery. 079024b69f4ab4aeaa8755b5bf62674b9f4cae4428d4ea97744c9cb78cdb593e
src-im-nlr-black-start Parallel Grid-Forming Inverter-Driven Black Start: Power-Hardware-in-the-Loop Validation (opens external site in a new tab) 2026-07-25 Power-hardware-in-the-loop black-start validation using a commercial grid-forming inverter with a modeled five-megawatt unbalanced feeder, transformer, motor, and inrush behavior. 446b4c21bcf2d6945bd5498ca1b18d1666a931b8f394c3a4140b76b3beb5c2fb
src-mp-nasa-power Small Spacecraft Power Subsystems (opens external site in a new tab) 2026-07-25 Flown and developing power generation, storage, conversion, and distribution technologies. 7ffb4fcfdd64a058106a28aa8491e5faecc309c5c6327a114e3104f0c3f907d7
src-mp-nasa-se-handbook NASA Systems Engineering Handbook (opens external site in a new tab) 2026-07-25 Lifecycle, requirements, interfaces, verification, validation, decision analysis, and risk. 3337ce334909311c3ab1c604773fdcc31a01dd8e0e781d040debd3b6e33cea22
src-mp-nasa-thermal Small Spacecraft Thermal Control (opens external site in a new tab) 2026-07-25 Passive and active heat transport and rejection at current spacecraft scales. 7a8659671693753ce207112d78647e13c0d16ca614f88384ce45d0fbae82b9fd
src-pa-nasa-iss-water NASA Achieves Water Recovery Milestone on International Space Station (opens external site in a new tab) 2026-07-25 Operational water-recovery architecture, treatment chain, recovery target, and brine-processor milestone. 7bfee15fcbeb1f53be60acc4c375aedf1873a2d241861a9641f52838258fee95
src-pa-nist-ai-600-1 Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (opens external site in a new tab) 2026-07-25 Generative-AI governance, provenance, evaluation, security, confabulation, privacy, and incident disclosure. 4066eeecafdc810d0ad828dd8bd53e4a05daeb6b03dde36fafe581976402cb59
src-pn-ietf-bpsec RFC 9172: Bundle Protocol Security (opens external site in a new tab) 2026-07-25 Bundle integrity and confidentiality blocks, security processing, threat assumptions, key-management exclusions, and interoperability requirements. 266d01cc374ffb39ae67ac92d5819b03617401cdf12935e25b0dea13f4a3a1d4

Offline packet and worksheet

Downloads contain no reviewer contact details. Downloading does not create an account or store a review response in the GShips application. Ordinary provider request or analytics logs may record the download request. Work locally: the public site has no review account, upload endpoint, or decision-submission API.

Frozen packet · JSON

145.9 KB · packet identity 556e80a6bc3111a1…

Download packet

Blank decision worksheet · JSON

6.0 KB · template identity 20947b7fc8a56aaa…

Download blank JSON

Review-notes worksheet · Markdown

Readable notes companion only—not a decision-bundle equivalent. Use the closed JSON template for structural validation.

Download notes worksheet

Do not paste a completed decision, identity documents, private contact data, confidential conflict evidence, medical information, controlled material, or exploit details into a public form. Until a separately authorized private handoff exists, retain the completed worksheet locally.

Packet schema · JSON · Decision-bundle schema · JSON

Validate offline

Use Node.js 22.13.0 or later. Keep the packet, worksheet, completed decision, and all six kit files together in a local directory.

  1. Download the six kit files below. Complete a copy of the JSON template offline and preserve its templateFingerprint.
  2. Finalize a separate output file.
    node finalize-review-decision.mjs \
      --input DRAFT.json \
      --output COMPLETED.json

    This marks the copy complete and calculates an unkeyed canonical bundle fingerprint. A fingerprint detects changes; it is not a reviewer signature.

  3. Validate the packet and completed copy.
    node check-review-decisions.mjs \
      --packet PACKET.json \
      --decision COMPLETED.json

    Add another --decision for each independent reviewer.

  4. Interpret the result narrowly. A zero exit proves structural consistency only. Neither command appoints or qualifies a reviewer, establishes independence, accepts a decision, or authorizes publication.

Completion criteria

Every primary record must receive the required number of valid, current-fingerprint approvals; every complementary scope group and required domain must be covered; any unresolved revise, contest, or reject disposition blocks publication.

Named medical, reproductive, nuclear, radiation, cybersecurity, governance, and dual-use conclusions require two distinct qualified independent humans covering complementary domain-method and rights/public-interest scopes.

  • Reviewer identity, qualification, independence, conflicts, and compensation must be assessed by accountable human governance; local validation can only report structural validity.
  • Approve, revise, contest, reject, and recuse remain visible. A negative finding cannot be hidden by an aggregate approval percentage.
  • Revision creates a new record and packet fingerprint. Prior approvals do not carry forward automatically.
  • AI may assist with clerical comparison but cannot count as an independent reviewer, identity attestor, appeal authority, or second person.

Prepared review packet · 0 published human decisions · Independent review pending · Suggest a correction

Accountability record

How to inspect this page

Scope: Prepared review packet academy:industry-maintenance · 556e80a6bc3111a18119669df9e74184ca742c57ebfa42e38952d05c20adecf1

Page citations and accountability links

  • Exact frozen packet
    Complete packet payload; SHA-256 556e80a6bc3111a18119669df9e74184ca742c57ebfa42e38952d05c20adecf1 · fingerprint-bound review artifact
  • Blank closed decision template
    Offline structured-decision starting point · unsubmitted local artifact
  • Review-notes worksheet
    Human-readable notes companion; not validator input · offline notes aid
  • Review corpus index
    Corpus SHA-256 8fa944604ca189f5a9216ca59f640ad2ca20972ad512f2f4970764716782e18d · release and ownership index

Assumptions and limits

  • The exact packet, record, source, policy, release, and source-commit fingerprints bound this prepared page; human review has not started.
  • Downloading, local structural validation, or completing notes does not appoint or qualify a reviewer, establish independence, accept a decision, authorize publication, or create a relationship.

What would change this page?

Staffed governance, appointed qualified reviewers, completed record-level decisions, published conflicts, minority findings, corrections, or changed review policy would change this page.

People, review, and conflicts

Prepared by
GShips Project
Editorial status
public-alpha accountability pass
Editorial reviewer
GShips Project AI-assisted editorial synthesis
Last editorial review
2026-07-26
Independent review
pending
Independent reviewer
No independent reviewer assigned
Last independent review
No independent-review date exists
Last content edit
2026-07-25

Declared conflicts

  • The maintainer intends to explore a commercial venture based on some GShips work. No entity, outside funding, customer, sponsor, or indexed-organization relationship currently exists.

Suggest a correction to this page