A6. Planetary Engineering Foundational Thinking
Timelines & Tipping Points
Named tipping points (milestones that we found bent the curve):
Storage step-change. Site-wide storage reaches 0.3–1.0 MWh/person; dust-season viability no longer blocks ops.
First full black-start. Cold reboot of power→ICS→life support using on-hub resources; unlocks IL-3 credibility.
First 2-HC isolation pass. Demonstrated ≥2×HC without unreviewed inputs (physical + digital); unlocks IL-4.
Machine-tool bootstrap. Local fabrication of pressure boundaries, pumps/valves/seals, filters, PPE, and electronics repair; unlocks IL-5/IL-6 slope.
On-hub vaccine/reagent platform. Cuts bio ρ and removes reagent import chokepoint; accelerates IL-6→IL-7.
Dual deep-space links + local PNT/timebase. Eliminates comms single-points; stabilizes IL-4+ drills.
Cross-planet standards divergence. Ends synchronous updates; enables IL-8 de-correlation.
Leading indicators you’re nearing a tipping point:
Spares-backlog half-life (days to halve open repair tickets) is shrinking quarter-over-quarter.
Import-mass slope (kg/person/quarter) turns negative and stays negative.
Drill pass rate (black-start, dark-Earth 72-hour, 30-day traffic pause) exceeds 2 of last 3 cycles.
Buffer-days trend (food/water/energy) rises with QA’d inventories; fewer “paper buffers.”
Patch-lag offset (Mars vs Earth) stabilizes at policy targets (asynchronous by design).
Model diversity index (critical systems) crosses dual-vendor threshold.
Sentinel coverage (bio) meets cadence & %-population goals; time-to-vax spin-up falls.
First-pass yield in machine-tool line passes threshold for pressure parts.
Risk heatmap (likely delay drivers by rung):
IL-0→IL-2: Logistics & storage — under-sized storage, single power train, immature quarantine.
IL-2→IL-3: Black-start discipline — unexercised cold-start, ICS monoculture, missing signed-artifact corridor.
IL-3→IL-4: Second hub drag — site selection, duplicated utilities, deep-space link redundancy.
IL-4→IL-5: Machine-tool bootstrap — materials, metrology, electronics repair; med expansion (pediatric/OB).
IL-5→IL-6: Spares sovereignty — long-tail parts, QA, configuration control; year-long traffic-drought rehearsal.
IL-6→IL-7: Governance & drills — revocation/rollback muscle memory; culture/knowledge continuity; reagent/vax on-hub.
IL-7→IL-8/9: De-correlation — ending synchronous standards; finance/orbit monocultures; cross-planet break-glass complexity.
What historically compresses the clocks (playbook levers):
Power first. Add firm baseload (e.g., reactors) early; size storage for storm season from day one.
Don’t wait on machine tools. Stand up a bootstrap line as soon as there is air, power, and a roof.
Drill early, drill often. Fail black-start and dark-Earth drills early while the stakes are low; publish after-actions.
Quarantine windows as design, not policy. Treat transfer windows as part of the engineering plan; tie them to incubation math.
Standards heterogeneity. Dual-vendor ICS and asynchronous releases from the first MW of load.
Signed corridors everywhere. Artifacts, firmware, model weights—no auto-update across hubs.
Spin out hubs deliberately. Two smaller, independent hubs beat one mega-city for de-correlation and schedule risk.
Swimlane Approach Roadmaps to IL-5/6/7 (canonical unlocks)
Each rung shows the emphasis and the unlock that typically moves you to the next.
Port-led lane Approach (Moon/cislunar)
IL-1 → IL-2 (E first): MW-class power online + days of storage; sterilized cargo flow; basic quarantine. Unlock: signed-artifact corridor; warehouse + SBOM discipline.
IL-2 → IL-3 (M next): machine-shop/CNC + metrology; first black-start from cold; 1-HC isolation drill. Unlock: pressure-boundary fab + pumps/valves/seals line.
IL-3 → IL-4 (toward A): second hub + duplicated utilities; two deep-space links; closure ~50%. What flipped IL-4? first 2-HC isolation pass with staged, asynchronous updates.
IL-4 → IL-5 (A plateaus risk): closure ~80%; pediatric/OB capability; electronics repair cell. Why IL-5 plateaued? reagent/vaccine dependence + missing useful-node semis.
Pivot to IL-6/7: bring local reagents/vax platform + useful-node semis; year-long traffic-drought drill; achieve closure ≥95% and multi-HC endurance.
Biosphere-led lane Approach (Mars)
IL-1 → IL-2 (L first): water/O₂ closure climbs; greenhouse/bioprocess baselines; pulsed traffic + incubation-covering quarantine. Unlock: storage step-change (0.3–1.0 MWh/person) for storm season.
IL-2 → IL-3 (A before M): closure ≥25%; first full black-start; 1-HC isolation pass. Unlock: outbreak drill + signed-artifact corridor (asynchronous by default).
IL-3 → IL-4 (toward S): two hubs with independent utilities; 2-HC isolation; dual deep-space links. What flipped IL-4? proven multi-HC ops without unreviewed inputs.
IL-4 → IL-5 (M catches up): machine-tool bootstrap; electronics repair; pediatric/OB. Why IL-5 plateaued? long spares tail; lack of useful-node semis slows rebuilds.
Pivot to IL-6/7: commission useful-node semis + reagent/vax platform; >80% critical SKUs by count; year-long traffic-drought drill; closure ≥95%; regular revocation/capability-cap drills.
Cross-domain coupling (how weaknesses cascade)
Power → Life Support (L) → Separation (S). Storage shortfalls force throttling of habitat air/water loops, which then reduces isolation margins (S) during dust storms and comms outages.
Medical fragility → Workforce → Manufacturing (M). Thin med/ICU/OB depth spikes downtime and attrition, shrinking skilled shifts just when you need multi-HC coverage; spares backlog grows.
Software/toolchain fragility → Droids stranded → Logistics & Construction. A brittle firmware/toolchain (single vendor, synchronous updates) can ground robotic fleets; import reliance rises; isolation drills fail.
Comms/timebase single-points → Autarky (A) illusions. Lose a relay + timebase and ICS coordination degrades; “local-only” drills reveal hidden Earth dependencies.
Reagents & vaccines → Biosecurity gates. Lack of on-hub reagents/vax platforms keeps outbreak response Earth-coupled; quarantine windows become theater.
Make vs Ship
Category tiers on the chokelist
Must-make (from the start): bulk/continuous-use, short shelf-life, or uptime-critical items where downtime cost ≫ any import alternative.
Examples: oxygen and CO₂ scrubbing media; water processing; regolith shielding/brick; basic glass; pressure seals/filters; fertilizers & growth media; base polymers/resins; batteries & structural metals (primary forms).
Should-make (cross over when evidence supports): medium-mass or medium-cadence items whose import risk or backlog starts to dominate.
Examples: PCBs (standard stack-ups), passives, power electronics; pumps/valves/impellers; standard fasteners; medical disposables & IV fluids; reagents and on-hub vaccine/antiviral platforms.
Never-make (for now): low-cadence, high-precision, or exotic goods whose local CAPEX/QA burden dwarfs risk — until volume or risk flips the frontier.
Examples: leading-edge lithography nodes; specialty optics; niche catalysts—non-survival-critical items at early rungs.
Decision tree (evidence to flip categories)
Survival-critical? If yes → Must-make or stock ≥1 HC of tested inventory; if shelf-life < HC → Must-make.
Downtime cost vs CAPEX? If expected downtime > amortized local line + OPEX, flip to Should-make.
Mass × Cadence × Fragility: If mmm high, shipments frequent, or QA fragile → flip earlier.
QA maturity & yield: Require Y ≥ Y* (program threshold), metrology in place, and first-pass yield trend ↑ for 2–3 quarters.
Spares tail: If spares-backlog half-life isn’t shrinking with imports, build the line.
Drill proof: Pass black-start and traffic-pause drills using locally made replacements before declaring victory.