// Failure Modes & Lessons Learned
What Actually Broke
16 cases documented · No euphemisms · Sourced from NASA, OIG, and Soviet archives
| Program / Variant | Subsystem | Year | Failure & Engineering Lesson | Severity |
|---|---|---|---|---|
| Mercury IVA FAIL-001 |
Water survival | 2026 |
Suit lacked adequate flotation during premature hatch jettison water egress
→ Abort-survival packaging must be tested against actual post-egress scenarios, not assumed from lab conditions
|
High |
| Gemini IV FAIL-002 |
EVA human factors | 2026 |
First US EVA physically exhausting and low-productivity despite suit functioning
→ Suit capability and worksite design must be developed together, not sequentially
|
High |
| Apollo SOA prototype FAIL-003 |
Torso / fit | 2026 |
Severe discomfort nicknamed 'crotch cutter' — fit and pressure-load path geometry produced painful localized loading
→ Localized contact loads can kill an otherwise promising concept. Pressure mapping and seat-interface studies are required
|
High |
| Apollo restraint systems FAIL-004 |
Mobility / restraint | 2026 |
Unexpected arm growth when shoulder restraint cable failed; seized pulley caused overheating in crotch-thigh region
→ Critical restraint paths need redundancy or condition monitoring. Small mechanical hardware in pressure-load paths creates outsized crew risk
|
High |
| BERKUT — Voskhod-2 FAIL-005 |
Pressurized mobility / ingress | 2026 |
Suit inflation during Leonov's EVA made movement and airlock re-entry critically difficult — Leonov had to partially deflate to re-enter
→ Make ingress/egress and self-rescue a separate verification gate from EVA capability itself
|
High |
| EMU Pre-Phase VI Gloves FAIL-006 |
Gloves | 2026 |
Numbness, bladder bunching, and palm-bar wear-through into hand across multiple crew members
→ Glove verification must include extended-use comfort and injury surveillance, not just pressure integrity and cold-object performance
|
High |
| ISS Enhanced EMU — EVA-23 FAIL-007 |
Life support / water loop | 2026 |
Water entered Luca Parmitano's helmet during EVA — vision impaired, comms degraded, breathing compromised
→ Cooling-water management is a primary safety-critical function, not a nuisance issue. Contamination tolerance must be designed in from day one
|
Critical |
| Enhanced EMU Sustainment FAIL-008 |
Program / industrial base | 2026 |
Aging suits, obsolescence, contractor quality issues, supply-chain weaknesses — OIG 2025 flagged as mission risk
→ Industrial-base fragility becomes a technical failure mode in long-lived fleets. Supplier resilience must be a first-class design and program requirement
|
Critical |
| SOKOL-K family FAIL-009 |
Donning / visibility / comfort | 2026 |
Difficult donning, restricted downward vision, under-knee discomfort, appendix tie-off burden across decades of operations
→ IVA rescue suits fail operationally when crew usability is treated as secondary. Track don/doff time and visibility as design KPIs
|
Medium |
| xEMU Program FAIL-010 |
Mass / program integration | 2026 |
Suit mass exceeded or stressed downstream lander allocations; requirements breadth and subsystem mass growth degraded feasibility
→ Exploration programs need firm mass control and stable mission assumptions before subsystem elaboration begins. Lock the budget model early
|
Critical |
| Pure oxygen atmosphere FAIL-011 |
Atmosphere / materials | 2026 |
High-pressure pure oxygen atmosphere drastically increased flammability and toxicity consequences
→ Atmosphere, materials, and operations must be treated as a single integrated safety system from day one
|
Critical |
| ORLAN fleet — Mir / ISS FAIL-012 |
Fleet maintenance / humidity | 2026 |
Repeated orbital use shifted primary risk toward maintenance, drying, recharge, and replaceable component management
→ Not all critical failures are dramatic punctures. Slow fleet degradation from poor maintenance design matters as much as acute failures
|
Medium |
| Chinese EVA Program FAIL-CN-001 |
Orbital-to-lunar overextension | 2026 |
Risk that Feitian Gen-2 orbital EVA success may drive incremental adaptation to lunar surface rather than treating Wangyu as a new architecture branch
→ Orbital EVA success is not a sufficient baseline for lunar surface operations — treat as a new product architecture, not an upgrade
|
High |
| Feitian Fleet FAIL-CN-002 |
Fleet lifecycle / telemetry | 2026 |
Suit lifespan initially limited to 15 EVAs over 3 years; exceeded in operations before upgrade to 20 EVAs/4 years D/E series
→ Track cost-per-EVA, turnaround time and anomaly-free hours as primary KPIs once a suit enters fleet operations
|
Medium |
| EVA Suit 2000 FAIL-ESA-001 |
Program / funding dependency | 2026 |
Technically sound rear-entry EVA prototype never operationalized — cancelled when parent Hermes/Columbus program context changed
→ A technically correct architecture without a funded anchor mission will not survive program review — mission pull must precede or accompany suit development
|
High |
| ESA EVA Sovereignty FAIL-ESA-002 |
Strategic / industrial base | 2026 |
ESA astronauts have operated in partner suits (Orlan, EMU, ACES, SpaceX) for 30+ years without a European sovereign EVA capability
→ User experience in partner systems is valuable but does not substitute for sovereign design authority — Europe must choose between partner dependency and independent capability
|
Medium |