Fire, depressurization, refuge and internal emergency response
Prepare for events that immediately threaten the crew: fire, pressure loss, smoke, compartment isolation and internal evacuation.
Mastery objectives
- identify the functions, interfaces and degraded scenarios specific to the subject
- repeat simple calculations and verify units, assumptions and margins
- turn a principle into a verifiable procedure or decision
- connect the subsystem to human, energy and logistics constraints
1. Spacecraft fire combines combustion, toxicity and loss of function
In a pressurized volume, fire is not only a heat source. It creates smoke and contaminants, can damage wiring and fluid lines and may force the crew to abandon a compartment. Detection, warning and extinguishing therefore have to be designed together with ventilation and respiratory protection. An extinguisher that can only be reached through the fire is not a real safety barrier.
2. Detect early without training the crew to ignore alarms
Sensors must detect smoke, heat or combustion products early enough to matter, while excessive false alarms destroy trust. Procedures include rapid confirmation, localization, ventilation actions and respiratory protection. An alarm should tell the crew what is happening, where it is happening and what first action is expected.
3. Depressurization: locate, isolate and count useful seconds
A leak may be slow or rapid. Response depends on volume, leak rate and the time required to close a hatch or enter a refuge. Pressure compartments and isolatable doors turn a large base into manageable volumes. Differential-pressure measurements and makeup-gas flow help distinguish a real leak from a failed sensor.
4. Refuge: survive while diagnosis continues
A refuge needs breathable atmosphere, carbon-dioxide control, water, communications, power and medical capability for its design duration. Its purpose is to create time to inspect the damaged area, decide on repair or wait for another option. A refuge is therefore a small autonomous life-support system, not merely a strong room.
5. Internal evacuation and an injured crewmember
A crewmember may be unable to move without assistance. Routes, openings and equipment must support assisted transport, stretchers or suited extraction. Procedures assign roles and muster points so that nobody is forgotten inside an isolated module.
6. After the flame: contamination and safe return to service
Extinguishing visible fire is not the end of the event. The crew must measure atmosphere, inspect wiring, materials and structure, identify the initiating cause and decide which equipment can safely be re-energized. Restoration should be staged and documented because partially damaged hardware can become the cause of the next incident.
7. Detection: a sensor is not a decision
A smoke, pressure or temperature detector must not be mistaken for a complete diagnosis. A pressure change can result from leakage, an airlock cycle or a deliberate operation; particles can trigger an optical detector without an established fire. Emergency logic should combine several cues, timestamp them and relate them to operational context. A useful alarm states what was detected, where, for how long, which confirmations exist and what automatic action has already occurred. Procedures must also include contradictory sensors, because opening a door or stopping ventilation at the wrong time can create an additional hazard.
8. Isolation: stop propagation without trapping the crew
Closing a bulkhead or valve appears simple until people, power, air or an evacuation route depend on that path. Isolation should be designed as a sequence: identify the compartment, confirm occupant location, transfer indispensable functions, close propagation paths and verify that the healthy zone remains stable. Depressurization adds a physical constraint because differential pressure can make a door impossible to open until pressures are equalized. Rescue paths must therefore match pressure physics and the actual capacity of the refuge.
9. Recovery after an incident: restore service without erasing evidence
After extinguishing a fire or sealing a leak, immediate restart is not the next objective. Pressure stability, toxic products, temperature, electrical integrity and hidden damage must first be checked. Alarm logs, valve states, sensor measurements and damaged parts should be preserved for causal analysis. In a distant settlement this investigation partly substitutes for immediate outside expertise. It should lead to a configuration action such as inspecting similar components, changing a procedure, adding protection or modifying training. Return to normal operation is therefore the final step of an learning loop, not simply the end of the emergency.
10. Worked example: time to a pressure threshold
An 80 m³ module loses an average 0.8% of initial pressure per minute in a simplified teaching model. Reaching a 10% loss therefore takes 10/0.8 = 12.5 min. If the crew needs 6 min to confirm the leak, equip one person and isolate the compartment, only 6.5 min of time margin remain. The example shows why localization and isolation must be rapid.
11. Exercise
Write the first five minutes of response to smoke detected in the workshop while one crewmember is missing from the muster point. State who confirms the alarm, who protects atmosphere, who locates the person and under what conditions a search is abandoned.
12. Reasoned solution
A robust sequence confirms the alarm with several cues, locates the crew, preserves a refuge route, isolates ventilation and power where that reduces risk, then closes the compartment and checks neighbouring-zone stability. Simply shutting every door without checking crew location or pressure differential can create another hazard.
13. Validation mini-project
Build a combined fire-and-leak emergency analysis covering detection, barriers, breathing equipment, isolation, refuge, casualty handling, communications, restoration and end-of-alert criteria.