> "The exploration and use of outer space… shall be carried out for the benefit and in the interests of all countries… and shall be the province of all mankind."
Prerequisites
- 12
- 33
Learning Objectives
- Explain the Kessler syndrome as a collisional chain reaction, and state the physical condition under which a population of orbital objects becomes self-sustaining.
- Describe the debris environment today by size class, and estimate a satellite's collision probability from a debris flux, its area, and its mission life.
- Distinguish mitigation from remediation: explain the 25-year (and 5-year) disposal rules, passivation, and collision-avoidance maneuvers, and compute a disposal delta-v and a natural-decay lifetime.
- Survey active-debris-removal methods — nets, harpoons, robotic capture, drag augmentation, and lasers — and identify the technical, economic, and legal obstacles each faces.
- Summarize the framework of international space law: the Outer Space Treaty and the Liability and Registration Conventions, and why they make debris such a hard problem to govern.
- Explain space traffic management and orbital sustainability as a tragedy-of-the-commons problem, and quantify why conjunction workload scales with the square of the population.
- Add an end-of-life disposal plan to your Mission Design Review and defend it against the applicable rules.
In This Chapter
- Overview
- Learning Paths
- 35.1 The Kessler syndrome
- 35.2 The debris environment today
- 35.3 Collision avoidance and mitigation
- 35.4 Active debris removal
- 35.5 Space law — the Outer Space Treaty and its companions
- 35.6 Space traffic management and sustainability
- Mission Design Checkpoint: your end-of-life disposal plan and astrotools/debris.py
- Summary
- Spaced Review
- What's Next
Chapter 35: Space Debris, Space Law, and Sustainability
"The exploration and use of outer space… shall be carried out for the benefit and in the interests of all countries… and shall be the province of all mankind." — Outer Space Treaty, Article I (1967)
Overview
Every chapter before this one has helped you put something into orbit. This chapter asks the question that the first fifty years of the Space Age mostly declined to ask: what happens when you are done with it, and what happens to everyone else's things while it is up there? For most of spaceflight's history the answer was a shrug. Space was assumed to be so vast that you could treat it as an infinite landfill — launch, operate, abandon, repeat. That assumption is now visibly, measurably false. Low Earth orbit is not empty; it is a thin, crowded shell, and it is filling with wreckage that moves at seven or eight kilometers per second and does not go away on any human timescale.
The physics is unforgiving in a way you have already met. A one-centimeter fleck of aluminum has no business hurting a two-tonne satellite — until you multiply its modest mass by the square of ten kilometers per second. Then that fleck carries the energy of a car crash, and there is no armor light enough to stop the ones you cannot see coming. This is theme two — space is an unforgiving environment — arriving in its most literal form: the environment now includes our own debris, and it shoots back.
And the timing is the cruelest part. Just as reusable rockets (Chapter 22) have driven launch costs down by an order of magnitude and made the mega-constellations of Chapter 33 possible, the number of objects we are placing in the most useful orbits is exploding. Cheap access to space — the thing this whole book celebrates — is also what makes orbital debris the defining engineering and political challenge of the commercial era (theme five). Sustainability is no longer an add-on; it is becoming the price of admission.
In this chapter, you will learn to:
- Explain the Kessler syndrome — how collisions can breed collisions until an orbit becomes unusable.
- Read the debris environment by size, and estimate the collision risk to a real spacecraft.
- Distinguish preventing debris (mitigation) from cleaning it up (remediation), and price both in delta-v.
- Survey how we might actually remove existing junk, and why it is so hard — technically, legally, and financially.
- Summarize the law that governs space, and why treaties written in 1967 struggle with a sky full of satellites.
- Add a responsible end-of-life disposal plan to your mission — the last major line in your MDR.
Learning Paths
🚀 Space Enthusiast: Read 35.1 (the Kessler cascade — the idea that made this a field) and 35.2 (what is actually up there). Skim the algebra; keep the numbers. Then read 35.5 on space law, which is more history and politics than physics, and the sustainability story in 35.6.
📐 Engineering Student: Read everything. Work the collision-probability estimate in 35.2 and the de-orbit-lifetime calculation in 35.3 yourself — they are direct applications of the drag physics you built in Chapter 12. The ⭐⭐/⭐⭐⭐ exercises on disposal budgets are the ones that matter.
🎮 KSP Player: Stock KSP has no debris field and no drag above a low ceiling, so this is one place the game diverges hard from reality. Focus on 35.1 and 35.3; the "clean up your own debris" habit is one the game rewards you for building. Mods add persistent debris if you want to feel it.
🛰️ Industry Prep: This is the chapter that increasingly gates a launch license. Sections 35.3 (the disposal rules and conjunction operations), 35.5 (liability and registration), and 35.6 (space traffic management) are working knowledge for any operator. Your MDR gains the disposal plan a regulator will actually ask you for.
35.1 The Kessler syndrome
Start with the thing that makes debris different from ordinary pollution: it can make more of itself. Smog does not breed smog. Orbital debris breeds orbital debris, because every piece of it is a projectile capable of shattering the next satellite it meets into thousands of new projectiles. Push that feedback hard enough and you get a chain reaction.
Definition (space debris). Space debris (also orbital debris or space junk) is any human-made object in orbit that no longer serves a useful purpose: defunct satellites, spent rocket upper stages, mission-related castoffs (lens caps, bolts, straps), solid-rocket-motor slag, flecks of paint and insulation, and — above all — the fragments produced when any of these explode or collide. It ranges from whole derelict spacecraft of several tonnes down to sub-millimeter particles, and every piece of it shares an orbit with the things we still use.
The reason a small piece matters is energy, and you already own the equation. A projectile of mass $m$ closing at relative speed $v$ carries kinetic energy $E = \tfrac{1}{2}mv^2$. In orbit, $v$ is not a highway speed; it is orbital speed. Two objects in low Earth orbit each move at roughly $7.5\ \text{km/s}$, and if their orbital planes cross at a steep angle they meet with a closing speed averaging about $10\ \text{km/s}$ — because the relative speed of two objects crossing at angle $\theta$ is $v_{\text{rel}} = 2v\sin(\theta/2)$, and for a typical crossing that is comparable to the orbital speed itself.
Worked Example: the energy of a fleck. Consider a one-centimeter aluminum sphere — small enough to hide inside a bottlecap. Aluminum has density $2{,}700\ \text{kg/m}^3$, so a sphere of radius $0.5\ \text{cm} = 0.005\ \text{m}$ has volume $\tfrac{4}{3}\pi r^3 = \tfrac{4}{3}\pi(0.005)^3 = 5.2\times10^{-7}\ \text{m}^3$ and mass $$m = 2{,}700 \times 5.2\times10^{-7} = 1.4\times10^{-3}\ \text{kg} = 1.4\ \text{g}.$$ At a closing speed of $v = 10{,}000\ \text{m/s}$ its kinetic energy is $$E = \tfrac{1}{2}(1.4\times10^{-3})(10{,}000)^2 = \tfrac{1}{2}(1.4\times10^{-3})(10^8) = 7.0\times10^{4}\ \text{J} = 70\ \text{kJ}.$$ Sanity check: $70\ \text{kJ}$ is the kinetic energy of a $700\ \text{kg}$ compact car moving at $14\ \text{m/s}$ — about $50\ \text{km/h}$. A pea-sized piece of metal, delivering the punch of a car crash. And it is thirty-odd times the muzzle energy of a rifle bullet ($\sim 2\ \text{kJ}$), from an object you could balance on a fingertip. There is no practical armor against something that carries a car crash in a gram — which is why, above roughly a centimeter, the only defense is not being there when it arrives.
Now let the cascade turn. When two large objects collide at these speeds, they do not dent — they disintegrate, converting themselves into a cloud of thousands of trackable fragments and millions of smaller ones, each now a projectile in its own right. Those fragments spread along the orbit and into neighboring orbits, raising the local density of debris, which raises the collision rate, which produces more fragments. In 1978 NASA's Donald Kessler and Burton Cour-Palais worked through the arithmetic and reached a startling conclusion: above a certain density of objects, this feedback becomes self-sustaining.
Definition (Kessler syndrome). The Kessler syndrome is a runaway cascade of orbital collisions in which the debris produced by each collision raises the collision rate for the remaining objects, generating still more debris — a self-sustaining chain reaction that, once started in a crowded orbital region, can continue even if all launches stop, and can render that region hazardous to operate in for generations. It is named for Donald J. Kessler, who described the mechanism in 1978.
The physics behind "a certain density" is the same kinetic-theory scaling that governs collisions of molecules in a gas, and it is worth seeing because it reappears at the end of this chapter. The rate at which collisions happen in an orbital shell scales as the square of the number density of objects: each object can hit any of the others, so the number of possible pairs among $N$ objects is $N(N-1)/2 \approx N^2/2$. Double the population and you quadruple the collision rate. Against that runaway production stands only one removal process — atmospheric drag pulling low objects down (Chapter 12). When the collisional production of new fragments outpaces drag's removal of old ones, the population grows on its own. That threshold — production faster than removal — is exactly the tipping point of an epidemic (each case infecting more than one other) or a nuclear chain reaction (each fission triggering more than one more).
🚪 Threshold Concept: an orbit has a carrying capacity. The instinct of everyone new to this is that space is too big to fill — that the sky is effectively infinite and our satellites are specks in it. The Kessler syndrome overturns that instinct completely. The useful orbits are not infinite; they are thin shells with a finite carrying capacity, a maximum sustainable population above which the region degrades itself. Cross that threshold and the damage is not a one-time accident you clean up; it is a self-amplifying process that outruns your ability to stop it, because the debris makes debris faster than nature removes it. Once you have seen orbit as a resource with a carrying capacity — like a fishery, a pasture, or a radio band — every later question in this chapter changes. Disposal stops being courtesy and becomes conservation. A launch stops being a private act and becomes a withdrawal from a shared, exhaustible account. This is the single idea that turned "space junk" from a curiosity into a discipline.
Two real events show the cascade is not hypothetical. In 2007 China destroyed one of its own defunct weather satellites, Fengyun-1C, with a kinetic anti-satellite weapon at about $865\ \text{km}$ altitude — creating roughly $3{,}000$ trackable fragments in a single stroke, the largest debris-generating event in history, most of it still in orbit because $865\ \text{km}$ is far too high for drag to clean quickly. Then in 2009 came the first accidental hypervelocity collision of two intact satellites: the operational Iridium 33 and the derelict Cosmos 2251 met head-on-ish at about $789\ \text{km}$ and $\sim 11.7\ \text{km/s}$, producing some $2{,}000$ more trackable fragments (we reconstruct this collision in Case Study 1). Those two events alone added a substantial fraction of everything then in the catalog — and they clustered in the $700$–$1{,}000\ \text{km}$ band, the most congested and slowest-cleaning region of near-Earth space.
⚠️ Common Misconception: "the Kessler syndrome means a solid wall of debris that traps us on Earth." Popular culture (and the film Gravity) pictures a dense, instantaneous shrapnel storm sweeping the sky. The real syndrome is slower, patchier, and more insidious. Debris is still, on average, extremely sparse — a given satellite may wait centuries between collisions — so the cascade plays out over decades, not minutes, and it afflicts particular altitude shells (notably $\sim 800$–$1{,}000\ \text{km}$) rather than all of space at once. You will not be "trapped on Earth"; low orbits below $\sim 600\ \text{km}$ self-clean and will stay usable. The genuine danger is subtler: that specific, valuable orbital bands slowly become so hazardous, and so expensive to insure and operate in, that we effectively abandon them — losing not the whole sky, but the best real estate in it, for generations.
🔄 Check Your Understanding 1. Why does a one-gram fleck of paint pose a real threat to a satellite, when the same fleck on Earth would be harmless? 2. In one sentence, what physical condition defines the onset of the Kessler syndrome? 3. The 2007 Chinese ASAT test created debris that is still largely in orbit, while debris from a collision at $300\ \text{km}$ would be gone in a year or two. What single variable explains the difference?
Answers
- Because the threat is kinetic energy $\tfrac{1}{2}mv^2$, and in orbit the closing speed $v \approx 10\ \text{km/s}$ is enormous; the tiny mass is multiplied by the square of that speed, giving a gram the energy of a car crash. On Earth the fleck moves slowly and the air stops it. 2. When the collisional production of new debris in an orbital region outpaces the rate at which drag removes old debris, so the population grows on its own — production faster than removal. 3. Altitude. The 2007 test was at $\sim 865\ \text{km}$, where atmospheric density is minuscule and orbital lifetimes are centuries; at $300\ \text{km}$ drag is strong and re-enters debris within months to a year or two (Chapter 12).
35.2 The debris environment today
How bad is it, actually? The honest answer is that we know the big pieces well, the small pieces statistically, and the middle poorly — and it is the middle that will hurt you. Let us take the environment apart by size, because the size of a piece of debris determines everything: whether we can see it, whether we can dodge it, whether we can shield against it, and how much damage it does.
The numbers below are the standard figures published by the space agencies; treat the tracked count as reasonably firm and the modeled small-particle counts as order-of-magnitude estimates (Tier 2 — they come from statistical environment models, not a census, and they climb every year).
| Size class | Estimated number in orbit | Can we track it? | Threat to a satellite |
|---|---|---|---|
| $> 10\ \text{cm}$ | $\sim 36{,}000$ tracked | Yes — cataloged individually | Catastrophic; but avoidable if predicted |
| $1$–$10\ \text{cm}$ | $\sim 1{,}000{,}000$ (modeled) | No — too small to catalog | Catastrophic, and you never see it coming |
| $1\ \text{mm}$–$1\ \text{cm}$ | $\sim 130{,}000{,}000$ (modeled) | No | Serious damage; shieldable at the small end |
| $< 1\ \text{mm}$ | uncountable | No | Erosion, pitting; survivable |
The total mass of all this is on the order of $10{,}000$ tonnes (Tier 2). Of the $\sim 36{,}000$ tracked objects larger than a fist, fewer than a third are working satellites; the rest — some $25{,}000$ objects — are dead. Spent rocket bodies (some massive, multi-tonne stages from the 1960s onward), defunct satellites that were simply switched off and abandoned, and, increasingly, fragments from the roughly $650$ known break-ups, explosions, and collisions that have occurred in orbit (Tier 2).
The table hides the single most important structural fact about the threat, so let us make it explicit.
💡 Intuition: the deadly middle. Debris comes in three regimes, and our defenses fail precisely in the middle one. Against the smallest debris (below about a centimeter) we can build armor — a Whipple shield, a thin sacrificial outer bumper that shatters and vaporizes a small impactor before the fragments reach the pressure hull; the ISS carries them. Against the largest debris (above about ten centimeters) we can track each object from the ground and steer out of its way. But in the middle — objects from one to ten centimeters, the "lethal non-trackable" population, of which there are on the order of a million — we can do neither. They are far too energetic to shield against (a $1\ \text{cm}$ piece carries the car-crash energy we just computed) yet far too small and numerous to track and dodge. Every satellite in low orbit flies through this invisible shrapnel field and simply gambles that nothing hits it. Closing the tracking gap on the $1$–$10\ \text{cm}$ population is one of the central technical goals of the whole field.
Where is it all? Debris is not spread evenly; it pools where we launch and abandon the most. The number density peaks sharply in the sun-synchronous shells around $800$–$1{,}000\ \text{km}$ (Chapter 9) — high enough that drag barely helps, and crowded with decades of Earth-observation satellites, spent stages, and the fragment clouds of 2007 and 2009. A second, thinner concentration rings the geostationary belt, where dead comsats and their disposal orbits live essentially forever. Between them, and below $\sim 600\ \text{km}$, drag keeps things comparatively clean.
We can turn this environment into an actual risk number for a spacecraft, using a model as simple as raindrops on a windshield.
Strategy first. Treat the debris as a uniform flux — a number of particles crossing each square meter each year, coming from all directions. Then the expected number of impacts on a satellite is just that flux times the satellite's cross-sectional area times how long it is exposed. If the expected number is small, the probability of at least one hit is essentially equal to it. The whole calculation is $N = \Phi\, A\, t$, and $P \approx N$.
Worked Example: will this satellite be hit? Take a satellite presenting a cross-sectional area $A = 10\ \text{m}^2$, flying for $t = 5$ years in a congested shell where the flux of debris larger than $1\ \text{cm}$ is about $\Phi = 1\times10^{-5}$ impacts per square meter per year. (This flux is an illustrative order-of-magnitude value for the busiest altitudes — Tier 3; real fluxes come from models like ESA's MASTER or NASA's ORDEM and vary with altitude and object size.) The expected number of centimeter-class impacts is $$N = \Phi\, A\, t = (1\times10^{-5})(10)(5) = 5\times10^{-4}.$$ The probability of at least one such impact, from Poisson statistics, is $$P = 1 - e^{-N} = 1 - e^{-0.0005} \approx 5\times10^{-4} = 0.05\%,$$ about one chance in two thousand over the mission. Sanity check: that is reassuringly small for one satellite, and it matches reality — confirmed debris-caused satellite kills are rare, a handful in all of history. But now multiply by a constellation of $5{,}000$ such satellites (Chapter 33): the expected number of catastrophic strikes across the fleet is $5{,}000 \times 5\times10^{-4} = 2.5$ over five years. What is negligible for one spacecraft becomes a few destroyed satellites — each a fresh debris cloud — for a large fleet. The risk did not change per satellite; the fleet simply rolled the dice thousands of times. This is the arithmetic that turns Chapter 33's democratization of space into this chapter's problem.
🔗 Connection: the flux you fly through is the debris you and others made. That $\Phi$ is not a natural constant like the solar flux. It is the accumulated output of sixty years of launches, abandonments, explosions, and two big collisions — and it is rising. Every satellite that is not disposed of properly, every stage left with pressurized propellant that later bursts, nudges $\Phi$ upward for everyone who flies after. The collision probability we just computed is, in the most literal sense, a debt the past owes the present. Section 35.3 is about not adding to it; Section 35.4 is about paying it down.
🔄 Check Your Understanding 1. Why is the $1$–$10\ \text{cm}$ size class considered the most dangerous, despite being far less numerous than sub-millimeter particles and far less massive than tracked objects? 2. Using $N = \Phi A t$, by what factor does a satellite's expected number of impacts change if you double both its area and its mission lifetime? 3. A single satellite has a $0.05\%$ chance of a catastrophic hit over its life. Why does a $5{,}000$-satellite constellation not have a $0.05\%$ chance of losing a satellite?
Answers
- Because our two defenses fail in that band simultaneously: the pieces are too energetic to shield against (a $1\ \text{cm}$ object carries $\sim 70\ \text{kJ}$, far beyond what a Whipple bumper stops) yet too small to track and dodge (below the $\sim 10\ \text{cm}$ catalog limit). They are "lethal non-trackable." 2. Fourfold: $N$ is proportional to $A$ and to $t$ separately, so doubling each multiplies $N$ by $2\times2 = 4$. 3. Because the constellation runs the same gamble $5{,}000$ times. The expected number of losses is $5{,}000 \times 0.0005 = 2.5$; the chance that at least one of them is lost is $1 - (0.9995)^{5000} \approx 92\%$. Per-satellite risk is unchanged; fleet-level risk is nearly certain.
35.3 Collision avoidance and mitigation
If you cannot armor a satellite against the things that would destroy it, and you cannot clean the sky before you fly, then responsible operation rests on two disciplines: dodge the debris you can see, and do not become debris yourself. The first is collision avoidance; the second is mitigation. Together they are the practices that a launch regulator will now require of you before you fly at all.
Dodging: collision avoidance
Definition (collision avoidance). Collision avoidance is the operational practice of predicting close approaches — conjunctions — between an operational spacecraft and cataloged objects, and, when the predicted probability of collision exceeds a set threshold, commanding a maneuver to reduce it. The maneuver itself is a collision-avoidance maneuver (COLAM) or debris-avoidance maneuver.
The workflow is now routine. Ground-based radars and telescopes track the $\sim 36{,}000$ cataloged objects and propagate their orbits forward. In the United States, the Space Force's 18th/19th Space Defense Squadron screens the catalog for upcoming close approaches and issues conjunction data messages to operators worldwide — a free service the whole industry currently depends on. Each message carries a predicted miss distance and, crucially, a probability of collision $P_c$, computed from the two objects' positions and their uncertainties. When $P_c$ rises above a threshold — commonly $1$ in $10{,}000$ ($10^{-4}$) — the operator plans a small maneuver, often just a fraction of a meter per second, to open the miss distance. The International Space Station uses a protective box (informally, a "pizza box") roughly $4\ \text{km}$ deep and $50\ \text{km}$ across; if a tracked object is predicted to enter it with sufficient probability, the station fires thrusters to move, and it has done so dozens of times over its life (Tier 2).
🔧 Engineering Reality: most alerts are false alarms — and that is the hard part. You might imagine the difficulty is detecting the threat. It is not; it is the uncertainty. A tracked object's predicted position can be off by hundreds of meters to kilometers, because its orbit is perturbed by the very drag and density variations you struggled with in Chapter 12 — and upper-atmosphere density is the least predictable number in this book. So the covariance ellipsoid around each object is large, and the overwhelming majority of "conjunctions" that cross the alert threshold would have been clean misses. Every unnecessary maneuver costs propellant (shortening mission life — theme four, mass is the enemy), interrupts the mission, and can even create a new conjunction with a third object. Operators live in the gap between "maneuver too often and waste the mission" and "maneuver too little and lose the spacecraft." Better tracking — tighter covariances — is worth more than any single technology, because it turns false alarms back into non-events.
At the scale of a mega-constellation, a human cannot sit in this loop. SpaceX's Starlink satellites screen conjunctions and maneuver autonomously, using onboard ion thrusters and the Space Force's tracking data, executing thousands of avoidance maneuvers in a typical six-month period and rising (Tier 2). Autonomy is not a luxury here; it is the only way to fly tens of thousands of maneuverable objects. We return to what that means for traffic management in 35.6.
Not becoming debris: mitigation
Dodging manages the debris that exists. Mitigation is the discipline of not adding to it — and it is cheaper, by orders of magnitude, than any cleanup. The international consensus is codified in the space-debris mitigation guidelines of the Inter-Agency Space Debris Coordination Committee (IADC, 2002), later adopted in a version by the United Nations (2007). The guidelines are voluntary "soft law" (we will see why that matters in 35.5), but they have hardened into national licensing requirements, and they rest on three ideas.
The first is post-mission disposal: get out of the way when you are done. The headline rule is the 25-year rule — a satellite or stage in low Earth orbit should be removed, by de-orbiting or by moving to an orbit that will decay, within 25 years of the end of its mission. In 2022 the U.S. Federal Communications Commission went further, adopting a 5-year rule for satellites it licenses that end their lives in or below low Earth orbit — a fivefold tightening that reflects how much more crowded the sky has become, and one that reshapes mission design (Tier 2). For geostationary satellites, which cannot practically be de-orbited (we will price that shortly), disposal means boosting a few hundred kilometers up into a graveyard orbit (Chapter 9) above the operational belt.
The second idea is the one you should carry out of this chapter if you carry only one operational fact.
Definition (passivation). Passivation is the process of permanently removing all stored energy from a spacecraft or rocket stage at the end of its mission — venting residual propellant, relieving pressurized tanks, discharging and disconnecting batteries, and de-spinning momentum wheels — so that the derelict cannot later explode or rupture and fragment. Because the explosion of an abandoned stage's leftover propellant was historically the single largest source of orbital debris, passivation is the most effective preventive measure known, and it is now standard practice.
Passivation is a beautiful example of cheap prevention beating expensive cure. A spent upper stage, left in orbit with a few hundred kilograms of residual propellant and a pressurized tank, is a bomb on a long fuse: thermal cycling, corrosion, or a small impact can rupture it years later, turning one tracked object into hundreds. Venting that propellant at end of mission costs almost nothing — a valve command — and prevents an entire fragment cloud. Most of the historical break-ups in the catalog were exactly this: un-passivated stages that burst. The lesson of theme two is that the unforgiving environment punishes stored energy left unattended.
The third idea is design for demise: build the satellite so that when it does re-enter, it fully burns up (Chapter 7), leaving no fragments large enough to reach the ground and endanger anyone. The standard is a casualty risk below $1$ in $10{,}000$ per re-entry. Dense, refractory components — steel reaction wheels, titanium tanks — are the usual survivors, and "design for demise" means engineering them to melt.
Pricing disposal: the two options
Disposal is not free; it is delta-v, and delta-v is propellant (Chapter 3). The cost depends entirely on where you are, and the contrast between low orbit and geostationary orbit is enormous.
Worked Example: graveyard versus de-orbit — why GEO goes up and LEO comes down. A geostationary satellite sits at radius $a = 42{,}164\ \text{km}$ moving at $v = 3{,}070\ \text{m/s}$. To reach a graveyard orbit $\Delta h = 300\ \text{km}$ higher, the two-burn delta-v for a small circular raise is approximately $$\Delta v \approx \frac{v}{2}\,\frac{\Delta h}{a} = \frac{3{,}070}{2}\,\frac{300}{42{,}164} = 1{,}535 \times 0.00712 = 10.9\ \text{m/s}.$$ About eleven meters per second — a rounding error in a mission's delta-v budget. Now instead try to de-orbit that same GEO satellite by lowering its perigee into the atmosphere: that is a full Hohmann descent from $42{,}164\ \text{km}$ down to $\sim 6{,}500\ \text{km}$, costing on the order of $1{,}500\ \text{m/s}$ — over a hundred times more. So from GEO you go up to a graveyard, always.
A low-orbit satellite at $800\ \text{km}$ ($v = 7{,}455\ \text{m/s}$) does the opposite. To de-orbit, lower the perigee to $\sim 120\ \text{km}$ ($r_p = 6{,}491\ \text{km}$) so the orbit re-enters within weeks. The transfer ellipse has $a_t = (7{,}171 + 6{,}491)/2 = 6{,}831\ \text{km}$; by vis-viva (Chapter 6) its speed at the $800\ \text{km}$ apogee is $$v_{\text{apo}} = \sqrt{\mu\!\left(\frac{2}{7{,}171} - \frac{1}{6{,}831}\right)} = \sqrt{398{,}600 \times 1.325\times10^{-4}} = 7{,}267\ \text{m/s},$$ so the de-orbit burn is $\Delta v = 7{,}455 - 7{,}267 = 188\ \text{m/s}$. From LEO you go down, and it costs a couple hundred meters per second — modest, but real, and it must be budgeted and its propellant reserved from the start.
But there is a third option in low orbit, and it is free: let drag do the work. The question is whether it does it fast enough to satisfy the rule.
Worked Example: does a dead satellite decay in time? Recall from Chapter 12 that a circular orbit decays under drag at the rate $\dot a = -\rho\, v\, a / \beta$, where $\beta = m/(C_D A)$ is the ballistic coefficient. Because the air density $\rho$ rises roughly exponentially as the orbit descends — with scale height $H$ — the decay accelerates, and a short calculation gives a compact estimate of the total natural lifetime of a circular orbit. Separating variables in $\dot a$ with $\rho = \rho_0\, e^{-(a-a_0)/H}$ and integrating from the starting altitude down to re-entry yields $$\boxed{\ \tau \approx \frac{H\,\beta}{\rho_0\, a\, v}\ }$$ — the lifetime is the ballistic coefficient times the scale height, divided by the density, the radius, and the speed. Apply it to a typical satellite ($\beta = 100\ \text{kg/m}^2$) at $600\ \text{km}$, where $a = 6{,}971\ \text{km}$, $v = \sqrt{\mu/a} = 7{,}562\ \text{m/s}$, the scale height is about $H = 70\ \text{km} = 7.0\times10^4\ \text{m}$, and the density is roughly $\rho_0 = 2\times10^{-13}\ \text{kg/m}^3$: $$\tau \approx \frac{(7.0\times10^4)(100)}{(2\times10^{-13})(6.971\times10^6)(7{,}562)} = \frac{7.0\times10^6}{1.05\times10^{-2}} = 6.6\times10^{8}\ \text{s} \approx 21\ \text{years}.$$ So a dead satellite at $600\ \text{km}$ comes down naturally in about 21 years — just inside the 25-year rule, but outside the new 5-year rule. Run the same numbers at $800\ \text{km}$ (thinner air, $\rho_0 \sim 10^{-14}\ \text{kg/m}^3$) and $\tau$ climbs to several centuries. Sanity check: this recovers exactly the altitude–lifetime pattern of Chapter 12's table (days at $200\ \text{km}$, centuries above $1{,}000\ \text{km}$), and it explains a design fact you can now see in the sky: constellations that intend to comply passively must fly low — Starlink orbits near $550\ \text{km}$, where nature de-orbits a dead satellite in a handful of years. Anything higher must carry its own de-orbit capability. Flag: $\rho_0$ swings by $10\times$ over the solar cycle, so any single lifetime figure is a central estimate with a wide error bar — treat these as "which side of the rule are we on?" numbers, not precision predictions.
🐛 Find the Error. A CubeSat team argues: "Our satellite will orbit at $800\ \text{km}$ for its two-year science mission, then we'll switch it off. Drag will bring it down eventually, so we comply with the disposal rules for free — no de-orbit system needed." Where is the reasoning wrong?
Answer
"Eventually" is doing catastrophic work in that sentence. At $800\ \text{km}$ the natural decay lifetime is centuries (the worked example above gives several hundred years), not a few years — utterly outside both the 25-year and 5-year rules. Drag is only a free disposal system low enough: it works within the rules below roughly $600\ \text{km}$, and fails badly above it. An $800\ \text{km}$ satellite must carry an active de-orbit capability — reserved propellant for a $\sim 190\ \text{m/s}$ burn, or a drag-augmentation device (35.4) — or it will be a derelict in the most congested shell in space long after everyone who built it has retired. The team has confused "will decay someday" with "will decay in time," and the difference is about twenty human generations.
🔄 Check Your Understanding 1. Why is passivation considered the most cost-effective debris-mitigation measure ever adopted? 2. Why do geostationary satellites go up to a graveyard while low-orbit satellites come down? 3. A satellite operator gets a conjunction alert with $P_c = 3\times10^{-4}$. Should they maneuver, and what is the main downside if the alert turns out to be a false alarm?
Answers
- Because it prevents entire fragment clouds at almost zero cost — a valve command to vent residual propellant and relieve pressurized tanks stops the abandoned stage from later exploding, and un-passivated stage explosions were historically the largest single source of debris. Cheap prevention versus enormously expensive cure. 2. Cost in delta-v. From GEO, raising $\sim 300\ \text{km}$ to a graveyard costs $\sim 11\ \text{m/s}$, while de-orbiting into the atmosphere would cost $\sim 1{,}500\ \text{m/s}$; from LEO, de-orbiting costs only $\sim 100$–$200\ \text{m/s}$, and there is no useful "up" to go to. You always pick the cheap direction. 3. Yes — $P_c = 3\times10^{-4}$ exceeds the common $10^{-4}$ threshold, so they should maneuver. The downside if it was a false alarm (which most are, due to large position uncertainties) is wasted propellant that shortens mission life, an interruption to operations, and the small risk of maneuvering into a conjunction with a third object.
35.4 Active debris removal
Mitigation stops the problem from getting worse. It does not make it better — and the sobering result from NASA's modeling is that, in the most crowded shells, mitigation alone is not enough. Even under the assumption of zero future launches, the large-object population above roughly $800\ \text{km}$ is already dense enough that collisions among the objects already there would keep the debris count slowly growing. The region is, in the technical sense, already supercritical. To stabilize it you must not merely stop adding junk; you must remove what is there — and remove the right pieces.
Definition (active debris removal). Active debris removal (ADR) is the deliberate capture and removal of existing debris objects from orbit by a dedicated spacecraft or system — either dragging them down to re-entry or boosting them to a disposal orbit — as opposed to mitigation, which only prevents the creation of new debris. ADR targets the objects that contribute most to future collision risk: typically the largest, most massive derelicts (spent rocket bodies and defunct satellites), because each is both a huge collision cross-section and, if struck, a source of thousands of fragments.
The modeling gives a concrete, almost shockingly small target: removing on the order of five to ten large derelicts per year — the worst individual offenders — would be enough to arrest the growth in the critical shells (Tier 2). The problem is not that we must sweep up a million fragments; it is that we must reliably capture a handful of massive, tumbling, uncooperative objects, and do it economically and legally. That turns out to be very hard.
How you might grab a dead satellite
A menagerie of methods has been proposed and, in a few cases, demonstrated in orbit. Each trades capability against risk.
- Nets. Fire a deployable net to envelop a tumbling object, then reel it in or tow it down. Forgiving of the target's exact shape and spin, and it keeps the capture spacecraft at a safe distance. The UK-led RemoveDEBRIS mission demonstrated a net capture of a target CubeSat in 2018 (Tier 2).
- Harpoons. Fire a barbed penetrator into the object's structure and reel it in — simple and positive, but it risks shattering a fragile target into more debris, exactly the outcome to be avoided. RemoveDEBRIS also demonstrated a harpoon.
- Robotic capture. Rendezvous and grapple the object with a robotic arm or a set of clamping arms. Precise and controllable, but it demands the hardest kind of guidance and navigation: matching the motion of an object that is tumbling on unknown axes, with no docking fixture designed to be grabbed. ESA's ClearSpace-1 is designed to capture a $\sim 100\ \text{kg}$ derelict rocket adapter with a four-arm embrace; Astroscale's ELSA-d (2021) demonstrated magnetic docking to a prepared plate, and its ADRAS-J (2024) rendezvoused with and inspected a spent upper stage.
- Drag augmentation. Instead of capturing the object, make it fall faster — deploy a large, lightweight drag sail or inflatable that hugely increases the object's area-to-mass ratio, lowering its ballistic coefficient $\beta$ so that drag brings it down in years instead of centuries. Cheap, passive, propellant-free — but it only works low enough for drag to bite, and the big deployed surface temporarily raises the object's collision cross-section on the way down.
- Electrodynamic tethers. Trail a long conductive tether; as it moves through Earth's magnetic field it drives a current, and the resulting Lorentz force acts as a brake — de-orbiting without propellant. Elegant physics, still maturing.
- Lasers. Aim a high-power ground- or space-based laser at a small debris object; ablating a thin layer off its surface creates a tiny jet of vapor that acts as a thruster, nudging the object's perigee down over many passes. Plausible for the untrackable centimeter-class population that no gripper could ever catch, but unproven and freighted with obvious dual-use concerns.
The drag-augmentation idea deserves a number, because it ties this chapter's cleanup directly to Chapter 12's physics.
Worked Example: a drag sail as a de-orbit brake. A $150\ \text{kg}$ satellite at $800\ \text{km}$ has a compact cross-section $C_D A \approx 1.5\ \text{m}^2$, so $\beta = m/(C_D A) = 150/1.5 = 100\ \text{kg/m}^2$ — and, from 35.3, a natural lifetime of several centuries. Now deploy a $15\ \text{m}^2$ drag sail. With a satellite drag coefficient $C_D \approx 2.2$, the sail adds $2.2 \times 15 = 33\ \text{m}^2$ of $C_D A$, for a total of $34.5\ \text{m}^2$, so the ballistic coefficient plummets to $$\beta_{\text{new}} = \frac{150}{34.5} = 4.3\ \text{kg/m}^2.$$ Because lifetime scales linearly with $\beta$ ($\tau \propto \beta$, from the boxed formula in 35.3), the lifetime drops by the factor $4.3/100 = 0.043$ — from several centuries to roughly twenty years. A sail lighter than a picnic blanket turns a $500$-year derelict into a rule-compliant one. Sanity check: even so, twenty years only just clears the old 25-year rule and badly fails the new 5-year rule — which is exactly why, at $800\ \text{km}$, drag augmentation is marginal and controlled propulsive de-orbit is often mandatory. The higher you operate, the less nature will help you, no matter how big a sail you unfurl.
Why it hasn't happened at scale
The engineering is hard, but the engineering is not the main obstacle. Three deeper problems have kept active removal a matter of demonstrations rather than routine operations.
🔧 Engineering Reality: who pays to clean up a commons? Active removal has no natural customer. The derelict you would remove belongs to someone — often a government whose program ended decades ago — and it generates no revenue; removing it benefits everyone who flies through that shell, which is to say no one in particular pays. This is the economics of a commons: the benefit is shared and diffuse, the cost is concentrated and immediate, so nobody volunteers to bear it. Add the technical risk (a botched capture makes more debris), and you have an activity that is valuable to the collective and irrational for any single actor — the classic structure of an under-provided public good. Fixing it requires either a public funder (ESA's ClearSpace is largely that) or a policy that puts a price on the externality (35.6).
The second obstacle is legal, and it is a direct consequence of the treaties we turn to next: under the Outer Space Treaty, a nation retains ownership and jurisdiction over its space objects indefinitely — you cannot legally touch another country's derelict without its consent, even to helpfully drag it out of everyone's way. The junk has an owner, forever, and the owner's permission is not always easy to get.
The third is that the capability is dual-use, and everyone knows it. A spacecraft that can rendezvous with an uncooperative, tumbling object and grab it or tow it is, functionally, a co-orbital anti-satellite weapon. The same GN&C that captures a dead rocket body (Chapter 27) could capture a live adversary's satellite. That ambiguity makes states cautious about who is allowed to operate removal craft, and near whose assets — a suspicion that slows the very cooperation the problem demands.
🔄 Check Your Understanding 1. Why does removing just five to ten large objects a year matter more than sweeping up thousands of small fragments? 2. A drag sail lowers a satellite's ballistic coefficient. Using $\tau \propto \beta$, explain qualitatively why that shortens its orbital lifetime, and name the one situation where a sail cannot help. 3. Give one technical, one economic, and one legal reason active debris removal has not become routine.
Answers
- Because the large derelicts dominate future risk: each massive object is a huge collision cross-section and, if struck, breaks into thousands of new fragments, so removing the worst few prevents the collisions that would create the fragment population. Sweeping small fragments is nearly impossible and treats the symptom, not the source. 2. A lower $\beta = m/(C_D A)$ means more drag per unit mass, so the orbit loses energy faster and re-enters sooner ($\tau \propto \beta$); a sail cannot help when the orbit is too high for drag to matter at all (well above $\sim 800\ \text{km}$), where even a huge area over a small mass still meets almost no air. 3. Technical: rendezvous and capture of a tumbling, uncooperative object is extremely demanding (and a failed capture makes more debris). Economic: the benefit is a shared public good with no paying customer. Legal: the debris remains the property and jurisdiction of its launching state indefinitely, so removal needs consent.
35.5 Space law — the Outer Space Treaty and its companions
Every technical fix in this chapter runs, sooner or later, into a question of law. Who is liable when your dead satellite hits mine? Whose permission do you need to remove a derelict? Who is allowed to enforce a traffic rule in a place no nation owns? The answers come from a body of international law that is, remarkably, older than the Moon landing — written when there were dozens of satellites, not tens of thousands, and strained today by a sky its authors could not have imagined.
Definition (Outer Space Treaty). The Outer Space Treaty (OST) — formally the 1967 Treaty on Principles Governing the Activities of States in the Exploration and Use of Outer Space — is the foundational instrument of international space law. Its core principles: outer space is free for exploration and use by all states (Article I) and is not subject to national appropriation — no country may claim sovereignty over orbit, the Moon, or any celestial body (Article II); no nuclear weapons or other weapons of mass destruction may be placed in orbit (Article IV); and each state bears international responsibility for its national space activities, including those of its private companies, which it must "authorize and continually supervise" (Article VI). It entered into force in 1967 and has been ratified by more than $110$ states, including every major spacefaring nation (Tier 2).
Two features of the OST shape everything about debris, and both flow from a single choice its drafters made: they made the state, not the operator, the unit of responsibility.
The first is Article VI's rule that a government answers internationally for everything its nationals do in space, private companies included. This is why a commercial operator cannot simply launch — it must be licensed and supervised by its own government (in the U.S., by the FCC for communications, the FAA for launch and re-entry, NOAA for imaging). The voluntary mitigation guidelines of 35.3 acquire their teeth precisely here: a government, made responsible by treaty, imposes the 25-year or 5-year rule as a license condition on its companies. Soft international law becomes hard national law through the funnel of state responsibility.
The second is Article VIII's rule that the state which registers a space object retains jurisdiction and control over it — and ownership of it — even in orbit, and does not lose that ownership by abandoning the object. A dead satellite is not res nullius, free for the taking; it belongs to its registering state in perpetuity. This is the legal root of the ADR consent problem from 35.4: the junk always has an owner.
Around the OST sit four more UN treaties; two of them govern debris directly.
Definition (Liability Convention). The Convention on International Liability for Damage Caused by Space Objects (1972) establishes two liability regimes. A launching state is held to absolute liability — fault need not be shown — for damage its space object causes on the surface of the Earth or to aircraft in flight; and it is held liable on the basis of fault for damage caused in space to another state's space object. It has been formally invoked only once: after the Soviet nuclear-powered satellite Cosmos 954 scattered radioactive debris across northern Canada in 1978, Canada claimed roughly six million Canadian dollars and settled for three (Tier 2).
Definition (Registration Convention). The Convention on Registration of Objects Launched into Outer Space (1976) requires each launching state to maintain a national registry of its space objects and to furnish identifying orbital information to a public United Nations register. Registration is what makes liability and traffic management possible — you cannot assign fault for a collision, or coordinate around an object, if you cannot identify whose it is and where it is.
The remaining two treaties round out the framework: the Rescue Agreement (1968) obliges states to return astronauts and recovered space objects, and the Moon Agreement (1979) declared the Moon and its resources the "common heritage of mankind" — but was ratified by no major spacefaring power and is effectively a dead letter, a cautionary tale about writing rules that the actors who matter will not accept.
📜 From History: a fault regime with almost no case law. The most striking thing about space liability is how rarely it has been tested. In over sixty years of spaceflight, the Liability Convention has been formally invoked exactly once — Cosmos 954, and that was damage on the ground, under the easy absolute-liability arm of the treaty. The hard arm — fault-based liability for a collision in space — has never been litigated, not even after the 2009 Iridium–Cosmos collision destroyed an operational American satellite by way of a derelict Russian one. Why not? Because "fault" in orbit is a quagmire: both objects were where they were entitled to be, tracking was imperfect, no traffic rules assigned right-of-way, and proving negligence would have been nearly impossible. The gap is instructive. We have a liability treaty, but the concept of fault it relies on presumes rules of the road that do not yet exist. Law can assign blame only where there were duties to breach — and in the crowded orbits of 35.6, defining those duties is the unfinished work.
⚠️ Common Misconception: "no one owns space, so it's a lawless free-for-all." The opposite is closer to the truth. Because Article II forbids any nation from owning orbit, space is a global commons — and a commons is governed by shared rules, not by no rules. States are fully responsible for their activities (Article VI), fully liable for their damage (Liability Convention), and required to register their objects (Registration Convention). The genuine problem is not lawlessness; it is that the existing law is state-centric and gap-ridden: it was written for a handful of government spacecraft, it says almost nothing explicit about debris, congestion, traffic rules, or commercial resource extraction, and its enforcement runs only through national licensing. The sky is not ungoverned — it is under-governed for the traffic it now carries.
🔄 Check Your Understanding 1. Article VI makes governments responsible for their companies' space activities. How does that turn voluntary debris-mitigation guidelines into binding requirements on a commercial operator? 2. Under the Liability Convention, how does the standard for damage on the ground differ from the standard for a collision in orbit? 3. Which OST article explains why you cannot legally remove another country's derelict satellite without permission?
Answers
- Because a government, made internationally responsible by treaty for its nationals' activities, discharges that responsibility by licensing and supervising its operators — and it writes the mitigation guidelines into the license as conditions. The operator is bound not by the international guideline directly, but by the national license that implements it. 2. Damage on Earth's surface (or to aircraft) is absolute liability — the launching state pays regardless of fault. Damage in space to another state's object is fault-based — the claimant must show the other party was at fault, which in practice is extremely hard to prove. 3. Article VIII: the registering state retains jurisdiction, control, and ownership of its space object indefinitely, even after abandonment — so the derelict is not free for the taking and its owner's consent is required.
35.6 Space traffic management and sustainability
Put the pieces together and a single conclusion emerges: we have built a global infrastructure in a shared, finite resource, governed by rules written for a nearly empty sky, and we are about to multiply the traffic in it by an order of magnitude. Managing that is the frontier of the field, and it has a name.
Definition (space traffic management). Space traffic management (STM) is the planning, coordination, and regulation of activities and traffic in orbit to keep operations safe, prevent collisions, and steward the orbital environment as a shared, finite resource. It is the space analogue of air traffic management — but, as yet, without a single global authority, without binding "rules of the road," and without a complete, shared picture of where everything is.
The scale of what is coming is the heart of the matter. In all of history before 2020, humans launched on the order of $10{,}000$ satellites. The constellations now approved or filed — Starlink's tens of thousands, Amazon's Kuiper ($\sim 3{,}200$), OneWeb, China's Guowang ($\sim 13{,}000$), and others — point toward more than $100{,}000$ active satellites within a decade (Tier 2). And the danger of that number is not linear; it is quadratic, for exactly the reason the Kessler cascade was.
Worked Example: why crowding is a squared problem. The number of pairs of objects that could conjoin — and so the screening and collision-risk workload — grows as the number of pairs among $N$ objects, which is $$\binom{N}{2} = \frac{N(N-1)}{2} \approx \frac{N^2}{2}.$$ Go from $N = 5{,}000$ active satellites to $N = 100{,}000$ — a factor of $20$ more objects — and the number of pairs grows by a factor of $20^2 = 400$. The conjunction-screening load, the number of close approaches to assess every day, the coordination burden between operators: all of it grows not twentyfold but four-hundred-fold. Sanity check: this is the same $N^2$ scaling that made the collision rate in 35.1 grow as the square of the population — collisions and conjunctions are the same pairwise geometry, one realized and one narrowly avoided. It is why "just add more satellites" is not a strategy the current, manual, human-in-the-loop system can survive, and why autonomous avoidance (35.3) is not optional at scale but structural.
Managing a four-hundred-fold workload demands three things the field is racing to build. First, better space situational awareness — tracking not just the $36{,}000$ large objects but the million lethal-non-trackable ones, through better radars, space-based sensors, and a growing commercial tracking industry. Second, coordination: today the U.S. military provides conjunction warnings to the whole world for free, and the U.S. is moving that civil traffic-coordination role to the Department of Commerce's Office of Space Commerce — but there is still no global regulator, no binding requirement to share maneuver plans, no agreed right-of-way. Third, automation and rules of the road: at $100{,}000$ satellites, collisions must be avoided by machines following agreed conventions, the way aircraft follow air-traffic rules — who maneuvers, when, and how operators tell each other.
Underneath the engineering sits an economic truth that this chapter has circled from the start.
🔗 Connection: orbit is a commons, and the commons is tragic. Each operator who launches a satellite gains the full benefit of that satellite but imposes only a fraction of the added collision risk on itself — the rest is spread across everyone else who flies through that shell, now and for decades. Because no one pays for the risk they create, everyone rationally creates too much of it: the individually sensible choice, summed over all operators, degrades the resource for all. This is the tragedy of the commons, the same structure as an overfished sea or an overgrazed pasture, and it is why voluntary good behavior, however admirable, is not a stable solution. The proposed fixes all try to price the externality — orbital-use fees that make congested altitudes cost more, debris bonds or deposit-refund schemes that you reclaim only by de-orbiting on time, liability regimes with real teeth. Sustainability, in the end, is not a technical problem with a technical answer; it is a commons problem that needs the economics and the law of 35.5 to catch up with the engineering of the rest of this book.
And yet the commercial era that created the crisis is also, encouragingly, building the tools to survive it. The mega-constellations fly low — Starlink near $550\ \text{km}$ — precisely so that drag cleans up a failed satellite within a few years (theme two: design with the unforgiving environment, not against it). They carry propulsion and autonomous collision avoidance as standard. Reusable rockets (Chapter 22) make de-orbit propellant and drag devices cheap to loft. The same forces that made the sky crowded — cheap, frequent, commercial access — are the forces that can make it sustainable, if the rules and the prices are built to point them that way. That is the wager of the coming decade, and it is squarely theme five: reusability is changing everything, including our obligation to the orbits we have made so easy to reach.
🧩 Productive Struggle. Before the checkpoint, reason about your mission's footprint. If everyone who might fly a mission like yours behaved as you plan to, would the orbits you use survive it? Where does your spacecraft go when it dies, how long until it is gone, and who bears the risk in the meantime? Try to answer honestly before you write the disposal plan — because a regulator, an insurer, and eventually a fee schedule will ask you the same questions.
🔄 Check Your Understanding 1. Why does the conjunction-management workload grow as $N^2$ rather than $N$? 2. In what sense is orbit a "commons," and why does that make voluntary good behavior an unstable solution? 3. Name one way the commercial mega-constellation era is reducing debris risk even as it increases the number of satellites.
Answers
- Because the risk lives in pairs of objects, and the number of pairs among $N$ objects is $N(N-1)/2 \approx N^2/2$; multiplying the population by $k$ multiplies the pairs — and the screening and collision workload — by $k^2$. 2. Orbit is non-appropriable (no one may own it, per OST Article II) and shared, so its finite carrying capacity is a common resource. Each operator captures the full benefit of a launch but bears only a fraction of the collision risk it creates, so all rationally over-use it — the tragedy of the commons — and individual restraint cannot hold when others are not bound to it. 3. Any of: mega-constellations fly low ($\sim 550\ \text{km}$) so drag de-orbits failed satellites in a few years; they carry propulsion and autonomous collision avoidance as standard; cheap reusable launch makes de-orbit devices and propellant affordable to carry.
Mission Design Checkpoint: your end-of-life disposal plan and astrotools/debris.py
This is the last major line your Mission Design Review acquires before the capstone, and it is the one that increasingly determines whether your mission gets a license at all. Every mission you design must now answer: where does it go when it dies, how do you get it there, and how long until it stops being a hazard?
The design. Open your MDR and add an end-of-life disposal plan with three parts — a disposal destination, a disposal delta-v (added to your budget), and a passivation commitment.
- Track A — GEO comsat. Destination: a graveyard orbit $\sim 300\ \text{km}$ above GEO. Add a disposal line of $\sim 11\ \text{m/s}$ to your delta-v budget (trivial next to the $\sim 0.8\ \text{km/s}$ of station-keeping from Chapter 12), and reserve that propellant — a satellite that runs its tanks dry cannot dispose of itself. Commit to passivation.
- Track B — lunar lander. No atmosphere and no Kessler regime, but disposal still matters: plan a controlled impact at a documented site (away from heritage and future landing sites) or a stable disposal orbit, and passivate. Note the connection to planetary-protection norms.
- Track C — Mars orbiter. Planetary protection dominates: your disposal orbit must not impact Mars for a long quarantine period (decades), to avoid contaminating it with Earth microbes (Chapter 34). Budget the delta-v to raise into a long-lived orbit, and passivate.
- Track D — asteroid rendezvous. Heliocentric, negligible debris risk; plan a stable disposal (a controlled departure or a documented impact on the target), and passivate to prevent a late rupture.
For any low-Earth-orbit element of your mission, compute the natural decay lifetime with the formula from 35.3 and decide: does it meet the applicable rule (25-year, or 5-year for U.S. licenses)? If yes, disposal is free. If no, budget an active de-orbit ($\sim 100$–$200\ \text{m/s}$) or a drag device, and record which.
The code. Create astrotools/debris.py — the sustainability increment to your toolkit. It answers the three questions the plan asks: how risky is the orbit, how long until natural decay, and how much delta-v does disposal cost.
import math
MU_EARTH = 3.986e14 # m^3/s^2
RE_EARTH = 6.371e6 # m (mean radius)
SEC_PER_YEAR = 3.156e7
def collision_probability(flux, area_m2, years):
"""P(>=1 impact) for a debris flux (impacts/m^2/yr), area, and exposure. (Ch. 35.2)"""
n = flux * area_m2 * years
return 1.0 - math.exp(-n)
def orbit_lifetime(alt_km, beta=100.0, rho0=2e-13, H_km=70.0):
"""Natural circular-orbit decay lifetime (years): tau ~ H*beta/(rho0*a*v). (Ch. 35.3)"""
a = RE_EARTH + alt_km * 1e3
v = math.sqrt(MU_EARTH / a)
tau_s = (H_km * 1e3) * beta / (rho0 * a * v)
return tau_s / SEC_PER_YEAR
def reorbit_dv(v, dh_km, a_km):
"""Two-burn delta-v (m/s) to raise a circular orbit by dh (small-change approx). (Ch. 35.3)"""
return 0.5 * v * (dh_km / a_km)
if __name__ == "__main__":
print("P(>=1 impact, 10 m^2, 5 yr):", round(collision_probability(1e-5, 10, 5), 6))
print("lifetime at 600 km (yr):", round(orbit_lifetime(600), 0))
print("lifetime at 800 km (yr):", round(orbit_lifetime(800, rho0=1e-14, H_km=80), 0))
print("GEO graveyard raise (m/s):", round(reorbit_dv(3070, 300, 42164), 1))
# Expected output:
# P(>=1 impact, 10 m^2, 5 yr): 0.0005
# lifetime at 600 km (yr): 21.0
# lifetime at 800 km (yr): 474.0
# GEO graveyard raise (m/s): 10.9
Every number here is one you now understand: a $1$-in-$2{,}000$ collision chance, a $21$-year decay at $600\ \text{km}$ that just clears the old rule, a several-century decay at $800\ \text{km}$ that fails it badly, and an $11\ \text{m/s}$ graveyard raise. In Chapter 40 these functions become the "responsible actor" section of your complete MDR — the proof that your mission not only reaches orbit but leaves it as it found it.
Summary
Space debris is the environment fighting back with our own castoffs, and managing it is the defining challenge of the commercial era. Carry these forward:
| Idea | The essential fact |
|---|---|
| Space debris | Any defunct human-made object in orbit — dead satellites, spent stages, fragments. A $1\ \text{cm}$ fleck carries $\sim 70\ \text{kJ}$ (a car crash) at orbital closing speeds; above $\sim 1\ \text{cm}$, the only defense is avoidance. |
| Kessler syndrome | A self-sustaining collision cascade: debris breeds debris once a shell's production outpaces drag removal. Collision rate $\propto N^2$. An orbit has a finite carrying capacity. |
| The environment | $\sim 36{,}000$ tracked ($>10\ \text{cm}$), $\sim 10^6$ in the "lethal non-trackable" $1$–$10\ \text{cm}$ band, $\sim 10^8$ down to $1\ \text{mm}$; $\sim 10{,}000$ t total. Worst in the $800$–$1{,}000\ \text{km}$ shells. (Tier 2.) |
| Collision risk | $N = \Phi A t$; $P = 1 - e^{-N} \approx N$. Tiny per satellite; multiply by a constellation and losses become expected. |
| Collision avoidance | Screen conjunctions, maneuver when $P_c \gtrsim 10^{-4}$. Uncertainty makes most alerts false alarms; at scale it must be autonomous. |
| Mitigation | 25-year (now 5-year, U.S.) disposal rule; passivation (vent stored energy — stops explosions, the top historical debris source); design for demise. |
| Disposal delta-v | GEO → graveyard $\sim 11\ \text{m/s}$ (go up); LEO de-orbit $\sim 100$–$200\ \text{m/s}$ (go down); natural decay $\tau \approx H\beta/(\rho_0 a v)$ — free only below $\sim 600\ \text{km}$. |
| Active debris removal | Remove $\sim 5$–$10$ big derelicts/yr to stabilize crowded shells. Nets, harpoons, robotic capture, drag sails ($\beta$↓ shortens $\tau$), tethers, lasers. Blocked by economics, law, and dual-use fears. |
| Space law | OST (1967): no appropriation; states responsible for private actors (→ licensing); ownership retained forever (→ ADR consent). Liability Convention (absolute on ground, fault in space). Registration Convention. |
| Space traffic management | $>100{,}000$ satellites coming; workload $\propto N^2$. Orbit is a tragic commons — needs SSA, coordination, automation, and priced externalities. |
Numbers worth remembering: $1\ \text{cm}$ fleck $\approx 70\ \text{kJ}$; $\sim 36{,}000$ tracked objects; disposal window $600\ \text{km}$ ($\sim$ decades) vs $800\ \text{km}$ ($\sim$ centuries); GEO graveyard $\approx 11\ \text{m/s}$; LEO de-orbit $\approx 100$–$200\ \text{m/s}$; OST year $1967$; collisions and conjunctions both scale as $N^2$.
Spaced Review
Retrieval strengthens memory. Answer from memory before checking. This chapter revisits Chapter 12 (perturbations, drag decay) and Chapter 33 (constellations).
- (Ch. 12) Chapter 12 showed low orbits self-clean while high ones do not. Explain, using the density scale height, why a dead satellite decays in ~20 years at $600\ \text{km}$ but takes centuries at $800\ \text{km}$.
- (Ch. 12) Two derelicts share an altitude; one deploys a drag sail. Using the ballistic coefficient $\beta = m/(C_D A)$ and $\tau \propto \beta$, which comes down first, and why?
- (Ch. 12) A dead GEO satellite is boosted to a graveyard rather than de-orbited. Why is that the cheap choice, and which perturbation governs how the derelict then drifts?
- (Ch. 33) Chapter 33 celebrated the democratization of space via CubeSats and rideshare. Restate the debris downside it flagged, and connect it to this chapter's $N^2$ collision scaling.
- (Ch. 33) Why do large constellations deliberately operate at altitudes low enough for drag to still act?
Answers
- Air density falls roughly exponentially with altitude (scale height $\sim 60$–$70\ \text{km}$ in the thermosphere), so $200\ \text{km}$ of extra height thins the air by more than an order of magnitude. In $\tau \approx H\beta/(\rho_0 a v)$, lifetime is inversely proportional to $\rho_0$, so the far thinner air at $800\ \text{km}$ stretches the lifetime from ~20 years to centuries. 2. The one with the sail. The sail raises $C_D A$, lowering $\beta = m/(C_D A)$; since $\tau \propto \beta$, a lower $\beta$ means a shorter lifetime, so the sailed object re-enters first. 3. De-orbiting from GEO would cost $\sim 1{,}500\ \text{m/s}$ (a full descent), while raising $\sim 300\ \text{km}$ to a graveyard costs only $\sim 11\ \text{m/s}$; there is no atmosphere at GEO to help. A dead GEO satellite's drift is then governed chiefly by luni-solar third-body perturbation (inclination growing $\sim 0.85^\circ$/yr) plus solar radiation pressure. 4. Cheap, plentiful small satellites and rideshare put thousands of objects into popular shells; because collision risk scales as $N^2$, multiplying the population multiplies the pairwise collision (and conjunction) rate far faster — democratized access concentrates risk in exactly the orbits everyone wants. 5. So that atmospheric drag naturally de-orbits any failed or dead satellite within a few years (meeting disposal rules passively), preventing derelicts from accumulating in orbits too high for drag to clean — designing with the unforgiving environment.
What's Next
We have reached the edge of the present. Part V has taken a mission from a requirement to an architecture, to the pad, into flight, and — now — to a responsible end, cleaning up after itself in orbits that we have finally learned to treat as finite. The debris problem is the shadow cast by everything this book celebrates: the cheaper and easier we make it to reach space, the more crowded and fragile the best orbits become, and the more the engineering must answer to law, economics, and a duty to those who fly after us.
To understand how we arrived at this moment — a sky full of satellites, a commercial gold rush, and a sustainability reckoning — it helps to see where the whole endeavor began. Part VI turns to history and the future. In Chapter 36, A History of Rocketry, we trace the line from Chinese fire arrows and gunpowder, through the theorists and the V-2, through Sputnik and Apollo and the Shuttle, to the commercial era whose defining challenge you have just studied. Every equation in this book was hard-won by someone; the debris in orbit is the residue of that same history. Knowing the story is how the engineering finally makes sense — and how we judge what to do next.