Study robotic losses as failures of interfaces and checks

Mars Climate Orbiter was lost in September 1999. Its investigation identified a ground-software file that supplied thruster impulse data in pound-force seconds where the documented interface required newton-seconds. Navigation calculations interpreted the values using the expected units, introducing trajectory-estimation errors.

The important lesson is broader than memorizing two unit names. Interface requirements, software verification, team communication and checks of navigation behavior did not catch the mismatch before it became critical. The investigation examined those contributing conditions as well as the immediate data problem.

Mars Polar Lander was also lost in 1999. The subsequent review identified premature engine shutdown from spurious landing-leg deployment signals as the most probable cause — open definition. The proposed mechanism involved software treating a transient signal as evidence of touchdown before the lander had reached the surface.

The loss of communication limited direct knowledge of the final sequence. Preserve the report’s probability language rather than present an exact observed chain. Testing a plausible mechanism can strongly support an explanation while still leaving uncertainty about what happened on the inaccessible spacecraft.

Check semantics and state across the system

For a fictional interface test, a sender labels a duration in milliseconds while a receiver interprets the number as seconds. Checking only whether a numeric value arrived would miss the error. A useful test verifies the physical meaning at both ends, including representative values and the intended conversion.

For a separate fictional landing controller, a brief sensor pulse should be interpreted in the context of mission phase and validated logic. This is a conceptual software lesson, not flight-control implementation advice. Integrated tests, traceable requirements and independent review help reveal errors that isolated component tests can miss.