product assurance requirements for...

SWARM Ref. : SW-RS-EAD-PA-0001 Issue : 1 Rev. : Date : 24.03.2006

© EADS Astrium GmbH Page i File: SW-RS-EAD-PA-0001_1 PA Rqmts for subs.doc

DOCUMENT CHANGE DETAILS

ISSUE DATE SHEET DESCRIPTION

1 21.3.06 all Initial Issue


© EADS Astrium GmbH Page ii File: SW-RS-EAD-PA-0001_1 PA Rqmts for subs.doc

CONTENTS

1 SCOPE..................................................................................................................................................2 1.1 Applicability........................................................................................................................................2 1.2 Applicable Documents.......................................................................................................................2 1.3 Reference Documents.......................................................................................................................5

2 ABBREVIATIONS .................................................................................................................................6

3 PRODUCT ASSURANCE .....................................................................................................................8 3.1 General ..............................................................................................................................................8 3.2 Right of Access..................................................................................................................................8 3.3 Participation .......................................................................................................................................8 3.4 Risk Management..............................................................................................................................9 3.5 Reporting ...........................................................................................................................................9 3.6 PA Databases....................................................................................................................................9 3.7 Lower Tier Subcontractors Management ..........................................................................................9

4 QUALITY ASSURANCE......................................................................................................................11 4.1 Quality Assurance Management .....................................................................................................11

4.1.1 Quality Assurance Programme............................................................................................11 4.1.2 Personnel Training and Certification ...................................................................................11 4.1.3 PA Programme Audits .........................................................................................................11 4.1.4 QA Role in Configuration Management...............................................................................11 4.1.5 Critical Item List ...................................................................................................................12 4.1.6 Ranking of Critical Items......................................................................................................12

4.2 Quality Assurance General Requirements ......................................................................................12 4.2.1 Documentation and Data Control ........................................................................................12 4.2.2 Quality Records ...................................................................................................................13 4.2.3 Stamp Control ......................................................................................................................13 4.2.4 Traceability...........................................................................................................................13 4.2.5 Metrology and Calibration....................................................................................................13 4.2.6 Non Conformance Control ...................................................................................................13 4.2.7 Alert System ........................................................................................................................14 4.2.8 Handling, Storage and Preservation....................................................................................14 4.2.9 Statistical Quality Control and Analysis ...............................................................................14

4.3 Quality Assurance Requirements for Design and Verification.........................................................15 4.4 Quality Assurance Requirements for Procurement .........................................................................15

4.4.1 Selection of Procurement Sources ......................................................................................15 4.4.1.1 Selection Criteria .................................................................................................................15 4.4.1.2 Record and List of Procurement Sources............................................................................15 4.4.2 Procurement Documents .....................................................................................................16 4.4.3 Surveillance of Procurement Sources .................................................................................16 4.4.4 Receiving Inspection............................................................................................................16

4.5 Quality Assurance Requirements for Manufacturing, Assembly and Integration............................16 4.5.1 General ................................................................................................................................16 4.5.2 Planning of Manufacturing, Assembly and Integration Activities and Associated Doc´s ....17 4.5.2.1 Manufacturing Flow Chart and Mandatory Inspection Points (MIP) ....................................17 4.5.2.2 Shop Travellers....................................................................................................................17 4.5.3 Manufacturing Readiness Review .......................................................................................17 4.5.4 Control of Processes ...........................................................................................................17 4.5.5 Workmanship Standards .....................................................................................................17 4.5.6 Materials and Parts Control .................................................................................................18 4.5.7 Tooling Control ....................................................................................................................18 4.5.8 Cleanliness and Contamination Control ..............................................................................18 4.5.8.1 Particle and Molecular Contamination Control ....................................................................18 4.5.8.2 Magnetic Cleanliness Control ..............................................................................................19 4.5.9 Inspection.............................................................................................................................19


© EADS Astrium GmbH Page iii File: SW-RS-EAD-PA-0001_1 PA Rqmts for subs.doc

4.5.10 Specific Requirements for Assembly and Integration..........................................................19 4.5.10.1 Control of Temporary Installations and Removals ..........................................................19 4.5.10.2 Logbooks .........................................................................................................................20 4.5.10.3 Manufacturing, Assembly and Integration Records.........................................................20

4.6 Quality Assurance Requirements for Tests .....................................................................................20 4.6.1 Test facilities ........................................................................................................................20 4.6.2 Test Equipment....................................................................................................................20 4.6.3 Test Documentation.............................................................................................................20 4.6.4 Test Performance Monitoring ..............................................................................................21 4.6.5 Test Reviews .......................................................................................................................21 4.6.6 Test Readiness Reviews (TRR) ..........................................................................................21 4.6.7 Test Review Board (TRB)....................................................................................................21

4.7 Quality Assurance Requirements for Acceptance and Delivery......................................................22 4.7.1 General ................................................................................................................................22 4.7.2 End Item Data package .......................................................................................................22 4.7.3 Delivery Review Board ........................................................................................................22 4.7.4 Shipping Control ..................................................................................................................23

5 RELIABILITY/DEPENDABILITY .........................................................................................................24 5.1 Dependability Programme Management .........................................................................................24 5.2 Dependability Risk Reduction and Control ......................................................................................24

5.2.1 Identification and Classification of Undesirable Events.......................................................24 5.2.2 Assessment of Failure Scenarios ........................................................................................24 5.2.3 Severity Classification of Functions and Products ..............................................................24 5.2.4 Actions and Recommendations for Risk Reduction ............................................................25 5.2.5 Risk Decisions .....................................................................................................................25 5.2.6 Verification of Risk Reduction..............................................................................................25

5.3 Dependability Engineering...............................................................................................................25 5.3.1 Integration of Dependability in the Project...........................................................................25 5.3.2 Dependability Requirements in Technical Specification......................................................25 5.3.3 Dependability Design Criteria ..............................................................................................25 5.3.4 Involvement in Test Definition..............................................................................................25 5.3.5 Involvement in Operational Aspects ....................................................................................26 5.3.6 Dependability Recommendations........................................................................................26

5.4 Dependability Analysis.....................................................................................................................26 5.4.1 Dependability analysis and the Project Life Cycle...............................................................26 5.4.2 Reliability analysis ...............................................................................................................26 5.4.2.1 FMECA ................................................................................................................................26 5.4.2.2 Reliability Prediction ............................................................................................................27 5.4.2.3 Worst Case Analysis............................................................................................................27 5.4.2.4 Part Derating Analysis .........................................................................................................27 5.4.3 Maintainability Analysis........................................................................................................28 5.4.4 Availability Analysis .............................................................................................................28 5.4.5 Classification of Design Characteristics in Production Documents.....................................28 5.4.6 Critical Item List ...................................................................................................................28

6 SAFETY...............................................................................................................................................29 6.1 General ............................................................................................................................................29 6.2 Safety Programme...........................................................................................................................29 6.3 Safety Engineering ..........................................................................................................................30 6.4 Safety analysis Requirements and Techniques ..............................................................................32 6.5 Safety Verification............................................................................................................................33 6.6 Product Liability Requirements........................................................................................................33

7 ELECTRICAL, ELECTRONIC AND ELECTROMECHANICAL (EEE) COMPONENTS.....................35 7.1 General ............................................................................................................................................35 7.2 Applicability......................................................................................................................................35 7.3 Organisation ....................................................................................................................................35

7.3.1 General ................................................................................................................................35


© EADS Astrium GmbH Page iv File: SW-RS-EAD-PA-0001_1 PA Rqmts for subs.doc

7.3.2 Subcontractor Responsibilities ............................................................................................36 7.3.3 Parts Control Board (PCB) ..................................................................................................36 7.3.4 Procurement Scheme..........................................................................................................36 7.3.5 EEE Part Lists......................................................................................................................37 7.3.5.1 Preferred Parts List (PPL)....................................................................................................37 7.3.5.2 Subcontractor Declared Component List (DCL)..................................................................37

7.4 Parts Selection.................................................................................................................................38 7.4.1 General ................................................................................................................................38 7.4.2 Parts Approval Process .......................................................................................................38 7.4.3 EEE Parts & Material Restriction.........................................................................................39 7.4.3.1 EEE Parts Material ..............................................................................................................39 7.4.3.2 Prohibited EEE Parts ...........................................................................................................40 7.4.4 Component Evaluation and Approval Programme ..............................................................40 7.4.5 Derating ...............................................................................................................................41 7.4.6 Radiation Sensitive Components ........................................................................................41

7.5 Parts Procurement...........................................................................................................................42 7.5.1 Quality Levels ......................................................................................................................42 7.5.2 Parts Procurement Quantities..............................................................................................43 7.5.3 Procurement Specification...................................................................................................43 7.5.4 Customer Precap Inspection (Initial CSI) ............................................................................43 7.5.5 Lot Acceptance Test (LAT)/ Quality Conformance Inspection (QCI)/ Technology

Conformance Inspection (TCI)..........................................................................................43 7.5.6 Final Source Inspection (Final CSI).....................................................................................44 7.5.7 Incoming Inspections ...........................................................................................................45 7.5.8 Destructive Physical Analysis..............................................................................................45 7.5.9 Special Requirements for Commercial EEE Parts ..............................................................46 7.5.10 Radiation Verification Test (RVT) ........................................................................................46 7.5.11 Stocks and Relife.................................................................................................................47 7.5.12 Manufacturer’s Documentation Delivery..............................................................................47 7.5.13 Specific Components...........................................................................................................47 7.5.13.1 Application Specific Integrated Circuits (ASIC) ...............................................................47 7.5.13.2 Subcontractor Programmable Devices............................................................................48 7.5.13.3 Hybrid Circuits .................................................................................................................48 7.5.13.4 Electromagnetic Components .........................................................................................48

7.6 Component Handling and Storage ..................................................................................................48 7.7 EEE Parts Quality Assurance..........................................................................................................49

7.7.1 Non Conformances..............................................................................................................49 7.7.2 Alert and Problem Notification .............................................................................................49 7.7.3 Traceability...........................................................................................................................50

7.8 Procurement Status Reporting ........................................................................................................50

8 MATERIALS, MECHANICAL PARTS AND PROCESSES.................................................................51 8.1 Organisation and Management .......................................................................................................51

8.1.1 General Requirements.........................................................................................................51 8.1.2 Materials and Process Control Board (MPCB) ....................................................................51

8.2 Criticality Analysis............................................................................................................................52 8.3 Technical Requirements for Selection of Materials .........................................................................53

8.3.1 Vacuum................................................................................................................................53 8.3.2 Prohibited Materials .............................................................................................................53 8.3.3 Restricted Materials .............................................................................................................54 8.3.4 Thermal Cycling...................................................................................................................54 8.3.5 Atomic Oxygen (ATOX) .......................................................................................................54 8.3.6 Meteoritic/Debris Environment ............................................................................................55 8.3.7 Electrochemical Compatibility..............................................................................................55 8.3.8 Corrosion .............................................................................................................................55 8.3.9 Stress Corrosion ..................................................................................................................55 8.3.10 Fluid Compatibility ...............................................................................................................56 8.3.11 UV Radiation........................................................................................................................56 8.3.12 Allowable Stress ..................................................................................................................56 8.3.13 Limited Life Time .................................................................................................................56


© EADS Astrium GmbH Page v File: SW-RS-EAD-PA-0001_1 PA Rqmts for subs.doc

8.3.14 Magnetic Materials...............................................................................................................56 8.3.15 Electrostatic Discharge Protection.......................................................................................57 8.3.16 Hydrogen Embrittlement ......................................................................................................57

8.4 Mechanical Parts .............................................................................................................................57 8.5 Procurement of Materials and Mechanical Parts.............................................................................58

8.5.1 Materials and Mechanical Parts for Structural Applications ................................................58 8.5.2 Materials and Mechanical Parts for Non-Structural Applications ........................................58 8.5.3 Films and Tapes ..................................................................................................................59 8.5.4 Procurement of Materials with Limited Shelf Life ................................................................59 8.5.5 Procurement of Printed Circuit Boards ................................................................................59

8.6 Processes ........................................................................................................................................59 8.6.1 General ................................................................................................................................59 8.6.2 Mounting of EEE Parts ........................................................................................................60

8.7 Traceability ......................................................................................................................................60 8.8 Proprietary Materials, Parts and Processes ....................................................................................61 8.9 Configuration Management .............................................................................................................61 8.10 Materials, Parts and Processes List ............................................................................................61 8.11 Specific Requirements for Pyrotechnic Devices..........................................................................62

9 SOFTWARE PRODUCT ASSURANCE..............................................................................................63

10 GROUND SUPPORT EQUIPMENT ...................................................................................................64 10.1 General ........................................................................................................................................64 10.2 Design and Manufacturing...........................................................................................................64 10.3 Procurement ................................................................................................................................64 10.4 Parts and Materials......................................................................................................................65 10.5 Safety Requirements for GSE .....................................................................................................65 10.6 Maintainability Requirements for GSE.........................................................................................66 10.7 Acceptance ..................................................................................................................................66

11 CONFIGURATION MANAGEMENT ...................................................................................................67

12 PRODUCT ASSURANCE DOCUMENT REQUIREMENTS...............................................................68 12.1 PA plan ........................................................................................................................................68 12.2 EIDP.............................................................................................................................................68

12.2.1 General ................................................................................................................................68 12.2.2 Content ................................................................................................................................68 12.2.3 Other PA Documents...........................................................................................................69

ANNEX 1A.......................................................................................................................................................71

ANNEX 1B.......................................................................................................................................................76

ANNEX 2 .........................................................................................................................................................81

ANNEX 3: ........................................................................................................................................................83


© EADS Astrium GmbH Page vi File: SW-RS-EAD-PA-0001_1 PA Rqmts for subs.doc

This page is left intentially blank


© EADS Astrium GmbH Page 2 File: SW-RS-EAD-PA-0001_1 PA Rqmts for subs.doc

1 SCOPE This document defines the Product Assurance requirements applicable to Subcontractors to EADS Astrium as well as for EADS Astrium internal contracted supplies for the project Swarm. All suppliers of products (equipment, software or services) procured in the frame of the project Swarm programme are required to conform to these Product Assurance requirements.

These requirements are based on the ECSS series of documents or in ESA specific documents such as the PSS series when no equivalent ECSS is available. They amend the applicable documents when necessary to address some specific points.

Subcontractors shall impose these requirements upon their lower tier subcontractors and suppliers as appropriate to the procured item.

In this document, the term EADS Astrium means the Division or Business Unit placing the contract.

1.1 Applicability

These requirements are applicable for the development (phase B) and implementation phases (C/D and E),) of the project and apply fully to the design, development, procurement, manufacturing, integration and testing of the following:

Flight and flight spare models

Hardware subjected to or participating in design verification or qualification testing

Deliverable Ground Support Equipment (GSE) and for GSE items with direct interface to flight hardware

Flight software, deliverable checkout software, deliverable simulation and performance evaluation software [AD 6]

Components procurement for the satellite

If specific requirements are considered as non-applicable, impracticable or inefficient for implementation, the Subcontractor may propose alternative procedures to achieve the same objectives. These procedures are subject to approval by EADS Astrium on a case-by-case basis.

.

1.2 Applicable Documents

The following documents are applicable to the Product Assurance Requirements Document:

[AD 1] Contract

[AD 2] Equipment Statement of Work (SOW)

[AD 3] Equipment Requirements Specification

[AD 4] Deleted

[AD 5] Swarm Management Requirements Document for Subcontractors, SW-RS-EAD-SY-0003

[AD 6] Swarm Software Product Assurance Requirements for Subcontractors, SW-RS-EAD-PA-0014

[AD 7] Space Radiation Environment for Swarm Mission, SW-TN-EAD-SY-0017

Standards Documents The following standard documents shall be applicable to the extent and with the modifications specified in this document. When no issue is quoted, latest issue at contract signature shall apply.



Product Assurance/ Quality Assurance

[SD1] ECSS-Q-00A Policy and principles

[SD2] ECSS-Q-20B Quality Assurance

[SD3] ECSS-Q-20-09B Non-Conformance Control System

[SD4] ECSS-Q-20-07A Quality Assurance for Test Centers

[SD5] ECSS-Q-70-01A Contamination and cleanliness control

[SD6] ECSS-P-001B ECSS Glossary of Terms

[SD7] ECSS-M-00-03B Risk Management

[SD8] ESA-PSS-01-202/1 Preservation, storage, handling and transportation of ESA spacecraft hardware

[SD9] ESA-PSS-01-204/1 Particule contamination control in clean rooms by particle fallout measurement

[SD10] ECSS-Q-70-05A The detection of organic contamination of surfaces by infrared spectroscopy

[SD11] ESA-PSS-01-706/1 The particle and ultraviolet (UV) radiation testing of space materials

[SD12] ESA-PSS-01-748/1 Requirements for ESA approved skills training and certification (Electronic assembly techniques)

Dependability and Safety

[SD20] ECSS-Q-30B Dependability

[SD21] ECSS-Q-30-11A Derating and End of Life parameter drifts for EEE components

[SD22] ECSS-Q-30-01A Worst case circuit performance analysis

[SD23] ECSS-Q-30-02A FMECA

[SD24] ECSS-E-30-01A ESA fracture control requirements

[SD25] ECSS-Q-40B Safety

[SD26] ECSS-Q-40-02A Hazard Analysis

Component Selection, Procurement and Control

[SD30] ECSS-Q-60A EEE Components

[SD31] ECSS-Q-60-01A European Preferred parts list (EPPL) and its management

[SD32] ECSS-Q-60-02A ASIC/FPGA development

[SD33] ESA-PSS-01-604/1 Generic specification for Silicon Solar Cells

[SD34] Replaced by [SD72]

[SD35] Replaced by [SD73]

[SD36] ESA-PSS-01-608/2 Generic specification for hybrid microcircuits

[SD37] MIL-STD-981/B Electro-mgnetic device

Materials, Mechanical Parts and Processes

[SD40] ECSS-Q-70A Materials, Mechanical Parts and Processes

[SD41] ECSS-Q-70-71 Data for Selection of Space Materials and Processes



[SD42] ECSS-Q-70-02A Thermal vacuum outgassing test for the screening of

Space materials

[SD43] ECSS-Q-70-04A Thermal cycling for the screening of space materials & processes

[SD44] ECSS-Q-70-045A Standard methods for mechanical testing of metallic materials

[SD45] ECSS-Q-70-046A Requirements for manufacturing and procurements of threaded fasteners

[SD46] ECSS-Q-70-071A Data for selection of space material and processes

[SD47] ECSS-Q-70-07A Verification and approval of automatic machine wave soldering.

[SD48] ECSS-Q-70-08A The Manual Soldering of High-Reliability Electrical Connections

[SD49] ECSS-Q-70-09A Measurement of thermo-optical properties of thermo-control materials

[SD50] ECSS-Q-70-10A Qualification of Printed Circuit Boards

[SD51] ECSS-Q-70-11A Procurement of Printed Circuit Boards

[SD52] ECSS-Q-70-13A Measurement of peel and pull-off strength of coatings and finishes using pressure sensitive tapes

[SD53] ECSS-Q-70-18A The preparation, assembly and mounting of RF coaxial cables

[SD54] ECSS-Q-70-20A Determonation of the susceptibility of silver-plated copper wire and cable to "red-plague" corrosion

[SD55] ECSS-Q-70-22A The control of limited shelf-life materials

[SD56] ECSS-Q-70-25A The application of the black coating Aeroglaze Z306

[SD57] ECSS-Q-70-26A The crimping of high reliability electrical connections

[SD58] ECSS-Q-70-28A The repair and modification of PCB and solder joints for space use

[SD59] deleted

[SD60] ECSS-Q-70-30A The wire wrapping of high reliability electrical connections

[SD61] ECSS-Q-70-33A The application of thermal control coating PSG120FD

[SD62] ECSS-Q-70-34A The application of black electrically conductive coating Aeroglaze H322

[SD63] ECSS-Q-70-35A The application of black electrically conductive coating Aeroglaze HL300

[SD64] ECSS-Q-70-36A Material selection for controlling stress corrosion cracking

[SD65] ECSS-Q-70-37A Determination of susceptibility of metals to stress

[SD66] ECSS-Q-70-38, draft1 High-reliability soldering for surface-mount and mixed-technology PCB

[SD67] ECSS-E-30 Part 6A Mechanical – Part 6: Pyrotechnics

[SD68] ESA-PSS-01-700/2 The technical reporting and procedures for materials and processes

[SD68] ESA-PSS-01-703/1 Black anodising of aluminium using inorgarnic dyes

[SD69] ESA-PSS-01-706/1 Particle and Ultra Violet Radiation Testing of Space Materials

[SD70] MIL HDBK 5 / H Metallic materials and elements for aerospace vehicle structures

[SD71] NHB 8060-1 Flammability, Odour and Outgassing requirements and tests



[SD72] ESA-PSS-01-605/1 The capability approval programme for the hermetic thin-film hybrid microcircuits

[SD73] ESA-PSS-01-606/1 The capability approval programme for hermetic thick film hybrid mictocircuits

Materials, Mechanical Parts and Processes

[SD80] ECSS-Q-80B Software Product Assurance

[SD81] ECSS-E-40 Part 1B Software - Principles and requirements

Others

[SD90] 98/34/EC EU Technical Standard and Regulations Directive

[SD91] 98/48/EC Amendment for 98/34/EC

1.3 Reference Documents

The following documents provide reference material for understanding of these PA requirements. They do not constitute requirements as such.

[RD1] ISO 9001:2000 Quality management system: Requirements

[RD2] MIL-HDBK-217F + Notice 2 Reliability Prediction for Electronic Equipment

[RD3] ESA-RD01 Revision 4 Outgassing and thermo-optical data for spacecraft materials

[RD4] MSFC-HDBK- 527 Materials selection list for space hardware systems



2 ABBREVIATIONS ABCL As Built Configuration List

ASIC Application Specific Integrated Circuit

CIDL Configured Item Data List

CIL Critical Item List

CoC Certificate of Conformance

CSI Customer Source Inspection

CSL Change Status List

DCL Declared Component List

DML Declared Material List

DMPL Declared Mechanical Part List

DoC Declaration of Conformity

DPL Declared Process List

DPA Destructive Physical Analysis

EFRL Exponential failure Rate Law

EIDP End Item Data Package

EPPL European Preferred Part List

ESD Electrostatic Sensitive Device

EM Engineering Model

FM Flight Model

FMECA Failure Mode Effect and Criticality Analysis

FPGA Field Programmable Gate Array

GDIR General Design and Interface Requirements

HSIA Hardware/Software Interaction Analysis

KIP Key Inspection Point

LAT Lot Acceptance Testing

MIP Mandatory Inspection Point

MPCB Material and Process Control Board

MRR Manufacturing Readiness Review

NCR Non-Conformance Report

NCTS Non-Conformance Tracking System

NRB Non conformance Review Board

PA Product Assurance

PAD Parts Approval Document

PCB Part Control Board

PFM Proto Flight Model

PIND Particle Induced Noise Detection

PMP Mechanical Parts, Materials, Processes



PSA Part Stress Analysis

QCI Quality Conformance Inspection

QM Qualification Model

QML Qualified Manufacturers List

QPL Qualified Products List

QSL Qualification Status List

RFA Request for Approval

RVT Radiation Verification Test

SCC Space Components Coordination.

SEP Single Event Phenomenon

SEU Single Event Upset

SOW Statement of Work

SPA Software Product Assurance

SPF Single Point Failure

TRB Test review Board

TRR Test Readyness Review

TCI Technology Conformance Inspection

WCA Worst Case Analysis

WFRL Weibul Failure Rate Law



3 PRODUCT ASSURANCE

3.1 General

31a ECSS-Q-00 shall apply.

31b The Subcontractor shall nominate an experienced Product Assurance (PA) responsible as focal point of contact for ESA and EADS Astrium. He shall have the necessary organizational authority and independence.

31c Experienced personnel from the subcontractors’ Quality Assurance organization shall be involved for tasks, which require specific or more detailed knowledge (for example EEE parts, materials, SW, dependability and workmanship expertise).

31d The Subcontractor shall prepare, submit, implement and maintain an effective PA and Safety programme in accordance with the requirements of this document for the entire project duration. The Product Assurance and Safety Plan shall describe in detail (resources, tasks, responsibilities, methods and procedures, lower tier subcontractors and suppliers monitoring) the programme to be implemented to satisfy the requirements of this specification. It shall be submitted to EADS Astrium for approval.

31e Subcontractor's internal procedures may be referenced in the PA&S Plan. In this case they shall be provided on request. Subcontractors should be aware that referencing internal company procedures in the PA&S Plan will limit the company’s ability to unilaterally change the procedures. All modifications to these procedures shall be considered as modification to the PA&S Plan.

31e The subcontractor shall produce a Compliance Matrix of his PA&S Plan to the requirements of this document.

3.2 Right of Access

32a ESA and EADS Astrium (i.e. The EADS Astrium entity and sister Companies placing the Contract) shall have the right of access to all technical and programmatic documentation, all areas and operations within the Subcontractor’s facilities and his low tier subcontractor’s facilities in which they perform work related to the project or store items used for the project.

32b EADS Astrium shall have the right to have a resident within the Subcontractor’s facilities.

The Subcontractor shall make arrangements to allow ESA and EADS Astrium personnel such access any time when requested.

3.3 Participation

33a ESA and EADS Astrium shall have the right to perform or participate in audits, surveys, source inspections, test reviews, mandatory inspections, Delivery Review Board, Non-conformance



Review Board, etc… at the Subcontractor facilities and his lower tier subcontractors and suppliers. ESA and EADS Astrium participation shall not in any way replace or relieve the Subcontractor of his responsibility. It will rather aim at contributing to the identification of problem areas and assessing satisfactory progress.

3.4 Risk Management

34a The Subcontractor shall establish and maintain a Risk Management System in coherence with ECSS-M-00-03B, as defined in the Statement Of Work and Project Management Requirements.

The Subcontractor shall identify risk areas and associated actions for risk mitigation, and shall guarantee their implementation.

The risk management process shall include the inputs from all Product Assurance disciplines.

3.5 Reporting

35a The Subcontractor shall prepare and submit a periodic PA progress report as part of the overall project progress reporting as defined in the Statement Of Work [AD 2] and Project Management Requirements PMR [AD 5]. It shall cover all the programme tasks under the Subcontractor responsibility, including Lower Tier Subcontractors.

It shall address at the minimum the following topics:

- Key Inspection Points status and results

- Critical items status

- Status of Waivers, Deviations and Non-Conformances

- Qualification status

- Statement of any change (Lower Tier Subcontractors organization, design, part, material, process or procedure) in the period at the Subcontractor or lower tier subcontractor's level.

3.6 PA Databases

36a The subcontractor shall make use of electronic databases for EEE parts listing, mechanical parts, materials and processes listings, tracking of RfWs, RfDs and NCRs.

The data content shall be agreed with EADS Astrium and in order to allow the efficient import/export of data it shall be provided in Microsoft Word, Excel or Access format (not pdf) unless an alternative is agreed with EADS Astrium

36b For NCRs the ESA web-based Non-Conformance Tracking System (NCTS) shall be used. (Further details see § 4.2.6)

3.7 Lower Tier Subcontractors Management

37a If the Subcontractor intends to sub-contract a part of the work to a Lower Tier Subcontractor, this shall be formally notified to EADS Astrium for approval. The Subcontractor shall identify all Lower Tier Subcontractors down to the lowest level in a list identifying the name, the location, the part of the work sub-contracted and the heritage. Approval will be given by EADS Astrium



on the basis of:

- Clear evidence that all requirements applicable to the project are transmitted to the Lower Tier Subcontractor.

- Evaluation of the ability of the Lower Tier Subcontractor to do the work and to fulfil the requirements and availability of a validation file for review by EADS Astrium. If needed, EADS Astrium may request an audit.

- Definition by the Subcontractor of a survey plan of the Lower Tier Subcontractors that includes right of access to EADS Astrium.

37b Any change to the list of Lower Tier Subcontractors shall be submitted to EADS Astrium.

37c The Subcontractor shall audit his Lower Tier Subcontractors to ensure their compliance with the requirements. The subcontractor shall notify EADS Astrium by fax or email at least 5 working days before the planned audit.

The Subcontractor shall produce an audit report one month after the audit.



4 QUALITY ASSURANCE

4.1 Quality Assurance Management

41a ECSS-Q-20B shall apply.

4.1.1 Quality Assurance Programme

411a The Subcontractor shall establish, implement and maintain a QA programme in accordance with ECSS-Q-20B and describe its contents in the QA plan, which can be part of the general PA&S Plan or alternatively be a self-standing document.

4.1.2 Personnel Training and Certification

412a The Subcontractor shall establish a documented training programme for QA personnel and all other personnel whose performance determines or affects product quality.

4.1.3 PA Programme Audits

413a The subcontractor shall conduct audits as defined below of its own and of its lower tier subcontractor and supplier facilities, equipment, personnel, procedures, services, and operations employed in the PA programme. Audits shall include :

a. Examination of all operations and documentation compared with established requirements.

b. Recommendation for corrective and preventive actions and follow up to assess results of recommendation.

EADS Astrium shall be notified at least five working days in advance of audits. Reports shall be available at the subcontractor’s facility for review.

ESA shall have the right to participate to these audits.

4.1.4 QA Role in Configuration Management

414a The subcontractor shall ensure configuration and data management rules conform to those specified by EADS Astrium in [AD5].

414b The subcontractor QA function shall ensure that the configuration and data management rules are applied and shall attend all boards established to authorize release of configured documents.



4.1.5 Critical Item List

415a A Critical Item List (CIL) shall be prepared and kept up to date. It shall list critical items from the equipment design, hardware and software with appropriate risk reduction means defined for the various phases of the project (i.e. design reviews, special procedures/inspections, double verification of highly critical items, single point failure of category catastrophic, critical or major, general recording of single point failure connectors…). This list shall be used to finally close out all the critical items and their associated risk reduction measures after being verified and recorded.

4.1.6 Ranking of Critical Items

416a The Subcontractor shall analyze all product/development items of the equipment against criticality relative to:

- Safety

- Reliability,

- Single Point Failure (SPF)

- Radiation sensitive elements, not meeting the radiation requirements

- Limited life items subject to wear out, drift or degradation below minimum required performance in less than the storage and mission time

- Long lead items

- New industrial processes, technology (not qualified or not standard)

- Items requiring precautions to avoid contamination

- History of non-conformance

4.2 Quality Assurance General Requirements

4.2.1 Documentation and Data Control

421a The subcontractor QA function shall ensure that:

- The pertinent issues of appropriate documents and data are available at all required locations;

- Any obsolete documents and data retained for legal and/or knowledge preservation purposes are suitably identified;

- Proper data and documentation exchange procedures and formats are set up throughout the project organization;

- Documents required by the programme are verified and signed by the designated people before release;

- Documents are identified and verified for adequacy; details are current and incorporation of Product Assurance requirements.

- The list of current revision of documents is regularly established to preclude the use of invalid and/or obsolete documents and data.



4.2.2 Quality Records

422a The subcontractor shall maintain quality records to provide evidence of inspections, tests, configuration and material reviews, to demonstrate completion of QA tasks and achievement of the required quality.

422b If not required as deliverable (e.g. with the EIDP), quality records shall be made accessible on site to EADS Astrium and ESA upon request.

Retaining duration for quality records are defined in requirement DM-32 [AD 5]

4.2.3 Stamp Control

423a Stamps or signatures shall be used to:

- Signify the completion of operations and processes,

- Indicate inspection performance at source and incoming inspection, in process inspection and tests, final inspection,

- Identify (if necessary) the operator and/or the authorized personnel.

4.2.4 Traceability

424a The subcontractor shall implement a traceability system in compliance with the ECSS-Q-20B§ 5.4.

424b The traceability system provide for the ability to:

- Establish bi-directional (backwards and forwards) and unequivocal relationship between parts/materials/products and associated documentation/records

- Trace data, personnel and equipment related to procurement, fabrication, inspection, test and assembly activities.

4.2.5 Metrology and Calibration

425a The Subcontractor shall control, calibrate, validate and maintain inspection, measuring and test equipment to demonstrate the conformance of product, according to the principles of ECSS-Q-20B §5.5.

4.2.6 Non Conformance Control

426a The Subcontractor shall establish and maintain a Non Conformance control system in accordance with the detailed requirements in ECSS-Q-20-09.

426b NCR reporting shall be applicable to hardware and software which contributes to the achievement of qualification and acceptance, e.g. structural model, engineering models, alignment model, spares, GSE… and to the flight standard hardware and software.



426c A summary list of all NCR’s (major and minor) shall be provided to EADS Astrium frequently (e.g. together with the progress report). Frequency of reporting depends on equipment classification (A to D)

426d The Subcontractor shall notify EADS Astrium of all non-conformances within five working days of their detection, which are classified as "major" according to ECSS-Q-20-09

426e For generation and tracking of NCRs classified as "major" the web-based ESA NCTS tool shall be used.

For "minor" NCRs the use of the NCTS tool is recommended, but instead, the Subcontractors may use their own tool.

4.2.7 Alert System

427a The Subcontractor shall inform EADS Astrium within 5 working days about EEE components and Material and Process alerts generated internally.

427b The Subcontractor shall process all alerts (ESA, NASA, GIDEP, etc) including those issued by EADS Astrium

427c The Subcontractor shall assess the impacts of all alerts and shall inform EADS Astrium of their consequences, according to the principles of ECSS-Q-20B §5.7.

4.2.8 Handling, Storage and Preservation

428a The Subcontractor shall prevent handling damage by providing adequate protection of items during handling, appropriate handling devices, procedures and instructions. ESA-PSS-01-202 shall apply.

428b The Subcontractor shall provide secure storage areas compatible with the cleanliness requirements to store incoming materials, intermediate items and end items before shipping.

428c Non-conforming items awaiting disposition, scrap items and all other items which require to be stored separately for health or safety reasons shall be placed in segregated areas.

4.2.9 Statistical Quality Control and Analysis

429a When applicable, statistical methods for process control are recommended for early detection of significant variations in manufacturing processes, in order to determine, analyze and eliminate the causes of undesirable variations.



4.3 Quality Assurance Requirements for Design and Verification

43a The Subcontractor Quality Assurance programme for design and verification shall ensure that:

- The Swarm project requirements are understood and taken into account by the functions involved and any deviation properly resolved with higher level Customers.

- Methods, data and means (including software) required for each activity is developed, available and validated before starting the activities requiring them.

- Critical items are identified.

- All technical risks are identified and provisions for their reduction are implemented.

- Interfaces between different groups, which provide input to the design and verification process, are defined and supported

- Incomplete, ambiguous or conflicting requirements are resolved with originators of requirements

- Feedback information is maintained from production, test, product assurance, and operations, towards design implementation.

- Design and Verification activities are planned in a consistent and logical way in line with the overall schedule

- The verification process is adequate and includes in particular clear test, test model and verification philosophy with acceptance/reject criteria.

43b The Subcontractor QA function shall ensure that all configuration items and their constituent items are properly qualified with margins commensurate with the application and applicable environment

4.4 Quality Assurance Requirements for Procurement

44a The Subcontractor shall control the procurement activity to ensure that all items and services procured conform to SOW requirements.

The control of procurement activity includes selection of procurement sources, control of purchase documents, surveillance of lower tier Suppliers and control of incoming items.

4.4.1 Selection of Procurement Sources

441a The Subcontractor Quality Assurance organization shall participate in and approve the selection of procurement sources, according to ECSS-Q-20B § 7.2.

4.4.1.1 Selection Criteria

4411a Procurement sources shall be selected, according to the principles of ECSS-Q-20B §7.2.2, on the basis of their demonstrated capability to furnish items or services of the type and quality level being procured. This capability shall be supported by objective documentation.

4.4.1.2 Record and List of Procurement Sources

4412a The Subcontractor shall establish and maintain records of all procurement sources, according to



the principles of ECSS-Q-20B § 7.2.3

4.4.2 Procurement Documents

442a The Subcontractor shall ensure that supplies are precisely identified and that all applicable requirements are properly defined in the procurement documents, according to the principles of ECSS-Q-20B § 7.3.

442b The Subcontractor shall flow down EADS Astrium PA requirements tailored to reflect the content and complexity of the procurement activity.

442c The Subcontractor QA function shall review procurement documents prior to release, to verify the correct selection of procurement sources and appropriateness of their content

4.4.3 Surveillance of Procurement Sources

443a The Subcontractor shall exercise surveillance over the activities carried out by his procurement sources during the contract performance, according to the principles of ECSS-Q-20B § 7.4.

The surveillance shall include, to the extent appropriate, audits, reviews, Mandatory Inspection Points, as well as direct supervision by Subcontractor’s resident personnel at his procurement sources facilities and source inspection.

4.4.4 Receiving Inspection

444a The Subcontractor shall take appropriate actions to ensure that all incoming supplies, including documentation and packaging, whether delivered on his own premises or elsewhere, conform to the requirements of the procurement documents, according to the principles of ECSS-Q-20B§ 7.5.

444b Inspections shall be performed in accordance with established procedures and instructions, to ensure that quality level is properly determined.

444c Incoming inspection records shall be maintained to ensure traceability and the availability of historical data to monitor performance of the procurement source.

4.5 Quality Assurance Requirements for Manufacturing, Assembly and Integration

4.5.1 General

451a The Subcontractor shall ensure that the deliverables are built, assembled and integrated to the approved configuration baseline, in a planned, controlled and reproducible manner, according to the principles of ECSS-Q-20B § 8.



4.5.2 Planning of Manufacturing, Assembly and Integration Activities and Associated Documents

452a The Subcontractor, after a complete review of all requirements defined by the design and engineering documentation, shall plan manufacturing, assembly and integration operations in coordination with inspections and tests, according to the principles of ECSS-Q-20B § 8.2

4.5.2.1 Manufacturing Flow Chart and Mandatory Inspection Points (MIP)

4521a Manufacturing, assembly and integration operations and inspections shall be reflected in flow charts for the product, which shall clearly depict the sequence of operations and associated inspections and tests according to the principles of ECSS-Q-20B§ 8.2.2. It shall include the identification of MIPs, together with the reference to the procedures by which the various activities are to be performed and the required cleanliness levels of facilities.

4.5.2.2 Shop Travellers

4522a Adequate instructions, such as shop travellers, shall direct the actual performance of manufacturing, assembly and integration operations and inspections, to ensure that the activities proceed in an orderly manner and according to the planned sequence, according to the principles of ECSS-Q-20B § 8.2.3

4522b The subcontractor shall also provide detail support documents and instructions on request, such as operation drawings and operation instruction sheets, to enable operations to be correctly performed.

4.5.3 Manufacturing Readiness Review

453a The Subcontractor shall perform a review of the readiness for manufacturing, prior to starting manufacturing of the first flight product as specified in the SOW

453b MRRs shall require an invitation five working days in advance, and the participation of EADS Astrium, or EADS Astrium agreement to proceed without their participation

4.5.4 Control of Processes

454a The Subcontractor shall monitor all processes used for manufacturing, assembly and integration, and shall enforce all applicable process requirements.

454b All manufacturing processes shall be covered by documented process specifications or standards.

4.5.5 Workmanship Standards

455a The Subcontractor shall employ workmanship standards throughout all phases of manufacturing, assembly and integration, to ensure acceptable and consistent workmanship quality levels.



Documentary workmanship specifications shall identify acceptance/rejection criteria.

4.5.6 Materials and Parts Control

456a The Subcontractor shall ensure that only conforming items are released and used, and that those not required for the operation involved are removed from work operation areas.

456b Items having limited life or definite characteristics of quality degradation or drift with age and/or use shall be marked to indicate the dates, test times or cycles at which life was initiated and at which the useful life will expire.

456c Sensitive items shall be processed or manufactured, inspected and tested in a controlled environment to prevent any degradation.

4.5.7 Tooling Control

457a The Subcontractor shall make provisions for accountability, identification and maintenance of manufacture, assembly and integration tooling.

457b Manufacture, assembly and integration tooling shall be checked for its dimensional accuracy, regarding the product drawings, and correct function.

457c Records shall be kept of all manufacturing equipment.

4.5.8 Cleanliness and Contamination Control

4.5.8.1 Particle and Molecular Contamination Control

4581a The Subcontractor shall establish controls for molecular and particulate cleanliness of spacecraft hardware and facilities, and the limitation of sources of contamination, according to the principles of ECSS-Q-20B § 8.8 and ECSS-Q-70-01.

4581b The Subcontractor shall define methods, procedures and responsibilities in a Cleanliness and Contamination Control Plan approved by EADS Astrium.

The Cleanliness Plan has to provide a contamination analysis and to define the cleanliness conditions of the hardware environment during manufacturing, assembly and tests (cleanroom class), the associated control of cleanliness (particle counter, witness samples), the personnel clothing, the potential protection devices (covers, bags), the cleaning methods.

4581c Contamination shall be prevented to the maximum extent by operating in clean working areas and by proper handling, preservation, packaging and storage.



4581d Contamination sensitive items shall be cleaned, controlled and maintained to the required cleanliness levels.

The required cleanliness levels for all levels of flight hardware shall be indicated on drawings, specifications, procedures, or other documents controlling the manufacture, assembly, integration and test of the items.

4581e The contamination sensitive components shall be identified in the Critical Item List.

4.5.8.2 Magnetic Cleanliness Control

4582a The subcontractor shall implement measures to control the required magnetic cleanliness during equipment design, manufacturing, testing, transport and storage.

4582b Items that are not compliant with the magnetic requirements given in the equipment requirement specifications shall be identified in the Critical Items List. Those items are subject to RFD/RFW proceesing.

4.5.9 Inspection

459a Inspection and tests shall be defined at the points of the manufacturing, assembly and integration flow where maximum assurance for correct processing and prevention of unrecoverable or costly non-conformances can be obtained, according to the principles of ECSS-Q-20B § 8.9

459b Among the inspections and tests as part of the manufacturing, assembly and integration flow, some selected inspections, called MIPs (Mandatory Inspection Points) shall be performed with EADS Astrium participation.

459c MIPs shall be identified on the manufacturing and Inspection flow chart and agreed upon with EADS Astrium before flight model manufacturing. (ref. 4.5.2.1a)

459d MIP’s shall require an invitation five working days in advance, and the participation of EADS Astrium, or EADS Astrium agreement to proceed without their participation.

4.5.10 Specific Requirements for Assembly and Integration

4.5.10.1 Control of Temporary Installations and Removals

45101a The Subcontractor shall ensure the management and control of flight items which are temporarily removed or non-flight items which are temporarily installed to facilitate assembly, integration, testing, handling or preservation of the end item.

45101b Records of temporary installations and removals shall be established and maintained.



4.5.10.2 Logbooks

45102a The Subcontractor shall prepare and maintain equipment logbooks for all operations and tests performed on the item during the period covered by the logbook, according to the principles of ECSS-Q-20B § 8.10.2

Note: Equipment logbook shall also be prepared and maintained for deliverable Engineering or Structure models.

45102b Equipment logbooks shall start with the flight qualification and first acceptance test after assembly.

45102c The logbooks shall contain historical and quality data and information which is significant for operation of the item, including non-conformances, deviations and open tasks.

4.5.10.3 Manufacturing, Assembly and Integration Records

4510a Manufacturing, assembly and integration records shall be established and maintained, to provide all data required for traceability, according to the principles of ECSS-Q-20B § 8.11.

4.6 Quality Assurance Requirements for Tests

4.6.1 Test facilities

461a The Subcontractor shall ensure that test facilities, either internal or external, comply with the project requirements, according to the principles of ECSS-Q-20B § 9.1.

4.6.2 Test Equipment

462a The Subcontractor shall ensure, according to the principles of ECSS-Q-20B § 9.2, that testing techniques and data are validated prior to use and controlled during their use in testing. In particular, provisions shall be made for testing, approval and configuration control of the software involved and prevention of its being tampered with.

4.6.3 Test Documentation

463a The Subcontractor shall ensure, according to the principles of ECSS-Q-20B § 9.3 that tests are performed in accordance with documented procedures.

The Subcontractor shall ensure that all test are comprehensively documented in test reports, and that they include, as a minimum:

a. reference to the applicable test procedure, and description of the deviations from it during the actual testing.

b. test data records and evaluation.

c. summary of test results.



4.6.4 Test Performance Monitoring

464a The Subcontractor shall verify, according to the principles of ECSS-Q-20B § 9.4, that appropriate monitoring of test activities, is defined in the test procedures, and that any non-conformances are properly documented and treated.

4.6.5 Test Reviews

465a The Subcontractor shall invite EADS Astrium to attend Test Reviews, with a notification of at least 5 working days before the event.

4.6.6 Test Readiness Reviews (TRR)

466a The Subcontractor shall ensure that a Test Readiness Review is performed prior to the flight qualification or the first acceptance tests.

466b The Test Readiness Review (TRR) shall allow to determine the following:

- That the as-built configuration status of the test specimen conforms to the released baseline or differences are acceptable and documented to assure that test objectives can be met,

- Status of existing non-conformances/failures, Request For Waivers, open works and assessment that open actions do not affect the test,

- Availability and approval of test procedures, including acceptance, rejection and retest criteria,

- Verification that hazards and hazardous operations have been clearly identified within the test procedure and appropriate actions are implemented,

- Readiness of the test facilities and associated equipment (cleanliness of test facility, calibration status and validity of all test equipment, including any software),

- Non conformance expected for closure during test execution

- Schedule of key events and milestones,

- Assignment of responsibility during the test,

- Conclusion whether to release for testing.

4.6.7 Test Review Board (TRB)

467a The Subcontractor shall ensure that a Test Review Board is performed after major portions of qualification or acceptance tests.

467b The Test Review Board (TRB) shall be held to determine that :

- All portions and steps of the applicable procedure have been properly executed, and the test specimen and test equipment have been brought to safe condition,

- All deviations from or modifications to the initial test procedure, which had to be made during the test, were properly documented and authorized,

- All required data records are complete and at least a first assessment has been made to determine whether the parameters were within required limits, or whether there is a need



for additional testing and/or further analysis of the results before a conclusion can be reached,

- Non-conformances/failures have been recorded and at least initial dispositions affecting continuation/completion of the test have been made by the appropriate Non-conformance Review Board,

- The test article can be released to the next step and the test set-up can be dismantled.

4.7 Quality Assurance Requirements for Acceptance and Delivery

4.7.1 General

471a The Subcontractor shall establish, according to the principles of ECSS-Q-20B § 10 a formal acceptance process for all deliverable items, at any contractual level, to ensure that conformance of the items to be delivered is fully assessed and documented.

471b The Subcontractor shall ensure that the preparation of the items for delivery and the physical delivery itself are performed in such a way that quality degradation is prevented.

4.7.2 End Item Data Package

472a The Subcontractor shall provide an EIDP for each deliverable end item, according to the principles of ECSS-Q-20B § 10.2.

The EIDP shall constitute the basis for formal acceptance reviews.

472b The Subcontroctor shall deliver the EIDP for review 30 days prior the Delivery Review Board as specified in the Management Plan.

The list of contents for EIDP is given in §11 of this document.

4.7.3 Delivery Review Board

473a The Subcontractor shall ensure that a DRB is convened prior to the delivery of units, separately assembled subsystems or test/handling equipment for higher-level activities, according to the principles of ECSS-Q-20B § 10.3.

473b EADS Astrium shall be notified 5 working days prior to DRB.

473c The DRB shall be responsible for reviewing the equipment related data package and authorizing the shipment of the items under acceptance, and certifying by writing that:

a. The items conform to the contractual requirements and to an approved design configuration.

b. All Non-conformances are closed-out, or corresponding closure action plans, compatible with the delivery, are accepted.

c. The relevant EIDP is complete and accurate.



473d Delivery shall take place only after authorisation by EADS Astrium

4.7.4 Shipping Control

474a The Subcontractor shall ensure that the items to be shipped from his plant are inspected before release and confirmed to be complete, adequately preserved and packaged, correctly marked and accompanied by all the required documentation, according to the principles of ECSS-Q-20B § 10.5. ESA PSS-01-202 shall apply.

474b Accompanying documentation shall include the EIDP and, attached to the outside of the shipping container, the handling and packing/unpacking procedure and any relevant safety procedures.

474c Each item shall be permanently marked with identification label including at least the following:

- Part/product Name

- End Item Number

- Model

- Serial Number

- Name of the manufacturer

The identification label shall be legible with unaided eye from 0.5m distance. The identification label shall meet all the requirements applicable to the item.

474d The Subcontractor shall make provisions for the prevention of damage to items during transportation. ESA PSS-01-202 shall apply.



5 RELIABILITY/DEPENDABILITY

5.1 Dependability Programme Management

51a The Subcontractor shall develop, maintain and implement a Dependability Programme Plan as part of the overall PA&S Plan, based on the principles of ECSS-Q-30B, and addressing the requirements of this chapter 5.

51b The Subcontractor shall demonstrate the compliance of its product with the dependability requirements specified in the equipment technical specification and the applicable documents listed in chapter 1.2.1.

51c Where the Subcontractor proposes to take advantage of previously designed, manufactured, qualified or flown items, he shall demonstrate that the proposed elements do conform to the dependability assurance requirements.

5.2 Dependability Risk Reduction and Control

5.2.1 Identification and Classification of Undesirable Events

521a The Subcontractor shall provide identification of undesirable events leading to the loss or degradation of product performance together with their classification into categories related to the severity of their consequences.

5.2.2 Assessment of Failure Scenarios

522a The subcontractor shall investigate the possible scenarios leading to the occurrence of undesirable events and shall identify failure modes, failure origins and causes.

5.2.3 Severity Classification of Functions and Products

523a The following severity classification shall be used:

A) For Sub-systems / Instruments / Equipments:

1. Loss or major degradation of mission performance 2. Degraded system/mission performance outside of specified limits 3. Loss of hardware redundancy 4. No effect on mission

B) For Units:

1. The failure effect is not confined to the unit. 2. Loss or degradation of the unit’s function and the effect is confined to the unit. 3. Minor internal unit failure. 4. No effect The number identifying the severity category shall be followed by a suffix as defined below:

- Suffix S shall be used to indicate safety impacts / safety hazards. - Suffix R shall be used to indicate redundancy.



- Suffix SP will be added when relevant to indicate a Single Point Failure

523b The severity categories shall be used to focus dependability effort on critical items to comply with dependability requirements.

5.2.4 Actions and Recommendations for Risk Reduction

524a The Subcontractor shall define actions and recommendations for risk reduction.

5.2.5 Risk Decisions

525a The Subcontractor shall make and document decisions on risk acceptance and actions for risk reduction.

525b Decisions shall be taken, controlled and implemented within the risk management process applied on the project, as defined in paragraph 3.4 of this document.

5.2.6 Verification of Risk Reduction

526a The Subcontractor shall perform appropriate verifications in order to ensure that identified risks have been eliminated or reduced to an acceptable level.

5.3 Dependability Engineering

5.3.1 Integration of Dependability in the Project

531a The Subcontractor shall ensure that the dependability assurance process is an integral part of the engineering process and that the corresponding activities are reported to the Product Assurance manager.

5.3.2 Dependability Requirements in Technical Specification

532a The Subcontractor shall ensure that dependability requirements are included in the preparation of technical specifications for their lower tier subcontractors.

5.3.3 Dependability Design Criteria

533a The Subcontractor shall take into account in the design of the product the dependability requirements expressed in the equipment technical specification and other relevant project documents in paragraph 1.2.

5.3.4 Involvement in Test Definition

534a The Subcontractor shall ensure that dependability aspects are covered in all development,



qualification and acceptance test and planning and reviews, including the preparation of test specifications and procedures and the evaluation of test results.

5.3.5 Involvement in Operational Aspects

535a The Subcontractor shall ensure that dependability cognizant and qualified staff reviews operational manual and procedures for verification of consistency with dependability analysis.

5.3.6 Dependability Recommendations

536a The Subcontractor shall establish and maintain a system to track the dependability recommendations until they are implemented in the documentation.

5.4 Dependability Analysis

5.4.1 Dependability analysis and the Project Life Cycle

541a The Subcontractor shall plan dependability analysis according to the project life cycle, development plan and review plan to demonstrate compliance with the dependability requirements.

5.4.2 Reliability Analysis

5.4.2.1 FMECA

5421a A Failure Mode Effect and Criticality Analysis (FMECA) shall be performed on the functional and physical design at equipment level.

5421b The FMECA shall identify how each failure mode is detected. All potential failure modes shall be identified and classified according to severity of their consequences (see 5.2.3). Measures shall be recommended to render all such consequences acceptable for the project.

5421c Common mode and common cause failure shall be considered. Multiple failures resulting from common cause or common mode failures shall be considered as single failures when determining failure tolerance.

5421d The subcontractor shall identify, justify and track all residual non-conformances to failure tolerance requirements, such as Single Failure Points, and Safety Hazards in the Critical Items List, which shall be subject to EADS Astrium and ESA approval.

5421e For separate redundant equipment, the FMECA analysis shall be performed at the functional level of the equipment. For redundancy embedded in the same product and for redundancy interfaces the analysis shall be performed at the parts level of detail.

5421f FMECA items identified as a safety hazard shall include a cross reference to the corresponding paragraph in the Hazard Analysis, where those particular items are treated.



For the first issue of the FMECA, when the Hazard Analysis is not yet started, this cross reference shall be to the Hazard Analysis document.

5421g The FMECA procedure described in ECSS-Q-30-02 is required.

5421h deleted

5421i For equipment containing software, a Hardware/Software Interaction Analysis shall be performed to ensure that the software is designed to react in an acceptable way to hardware failures. This shall be performed at the level of the Software Requirements Baseline and Interface Requirements. The Hardware/Software Interaction Analysis may be included in the FMECA.

5.4.2.2 Reliability Prediction

5422a The Subcontractor shall perform reliability predictions to verify the compliance to the reliability requirement defined in the Technical Specification and to support the design trade-offs.

5422b MIL-HDBK 217F notice 2, taking into account the appropriate quality levels, shall be used preferably as the failure rate database. Where components are not covered by MIL-HDBK 217F notice 2, individual failure rates shall be agreed with EADS Astrium and ESA.

5422c The reliability assessment shall be conducted under the specified environmental (mechanical, thermal, radiation, etc.) conditions and under the actual electrical stress applied.

5422d When the reliability prediction shows that the reliability target is not met, the item shall be identified as critical and incorporated within the risk management process for criticality reduction.

5422e Mechanical parts shall be addressed in the reliability prediction and the reliability data sources shall be provided.

5.4.2.3 Worst Case Analysis

5423a The Subcontractor shall perform a worst case performance analysis on electronic/electrical equipment to assess the effects on performance of variations in its constituent part parameters and the imposed environment.

ECSS-Q-30-01A shall be used as guideline

5423b The analysis shall verify that within combinations of specification characteristics and part tolerance, the design still meets the specified performance at End Of Life.

5.4.2.4 Part Derating Analysis

5424a The Subcontractor shall perform parts derating analysis at equipment level. ECSS-Q-30-11



shall be used for the derating criteria. Deviations from derating criteria shall be subject for a request for deviation.

5.4.3 Maintainability Analysis

543a The Subcontractor shall identify the preventive and corrective maintenance actions for ground operations, including storage.

543b The Subcontractor shall identify in a Maintainability report and agree with EADS Astrium those items that cannot be checked after integration, that require late servicing, access or replacement, and limited-life items or consumables.

5.4.4 Availability Analysis

The Availability Period is defined as the period the space segment and the link to the ground segment provides the required mission data to the ground segment. Any other time is a period of non-availability.

544a The Subcontractor shall identify any known conditions, (failure or otherwise), that will lead to a period of non-availability. For each condition the following data shall be provided:

- Estimate of the duration of the period of non-availability

- If a repetitive condition, the repeat rate.

- If a non-repetitive condition an estimate of the probability of occurrence of the condition.

Where data provided is taken from other sources a reference to the data source shall be made.

5.4.5 Classification of Design Characteristics in Production Documents

545a Not applicable

5.4.6 Critical Item List

546a All critical items identified through the various dependability analyses shall be documented in the Critical Item List defined in paragraph 4.1.5 & 4.1.6 of this document.



6 SAFETY

6.1 General

This section defines the Safety requirements.

The purpose of the safety process is:

• To design and supply a safe product (flight product and associated ground support equipment) in compliance with

o The applicable safety regulations

o The legal European Union (EU) requirements related to the product liability (including new approach directives) where appropriate

• To prevent personnel death and injury on ground

• To prevent any damage to flight hardware, ground support equipment and facilities during integration on ground

61a The Subcontractor is responsible to ensure the safety of his products. The safety programme relates to flight hardware and associated Ground Support Equipment under the responsibility of the Subcontractor.

61b ECSS-Q-40B shall apply supplemented or modified by additional requirements defined within this chapter.

6.2 Safety Programme

62a The Subcontractor shall set up a safety organization and a safety representative as specified in ECCS-Q-40B § 4.2 and 4.3.

62b The Subcontractor shall manage risks to human life, investments made, mission and environment throughout the project by performing the following activities:

- Allocation of safety requirements

- Hazard identification

- Hazard evaluation

- Hazard prevention, reduction and control

- Hazard close out, including residual risk acceptance

All hazard assessments shall consider primarily the hazard potential and categorize all hazards according to the consequence severity defined in paragraph 6.3 of this document. Corresponding controls shall be proposed.

62c The Subcontractor shall develop, maintain and implement a Safety Programme Plan as part of the overall PA&S Plan, in accordance with ECCS-Q-40B § 4.6.



62d The subcontractor shall maintain a safety documentation file, as part of the project documentation, including all data related to safety.

The safety file shall be available in-house for consultation by EADS Astrium.

62e The subcontractor shall generate a request for deviation or waiver when safety requirements are not met.

6.3 Safety Engineering

63a Inherent safety shall be mandatory for design selection.

63b Reduction precedence shall be applied to identified hazards, hazardous conditions and functions whose failures have hazardous consequences, as detailed in ECSS-Q-40B § 5.2.3:

Hazard elimination

Hazard minimization

Hazard control-Safety devices:

Hazard control-Warning devices

Hazard control-Special procedures

63c The equipment design shall meet the applicable safety requirements under the worst-case natural and induced environments as defined by the Equipment Requirement Specification [AD 4].

63d Whenever feasible, a fail-safe design approach shall be used such that a failure brings the equipment in a safe state.

63e The equipment design shall provide the capability for detecting failures that result in degradation of failure tolerance with respect to the hazard detection, signalling and safing function. The performance of these functions shall be verifiable during flight and ground operational phases.

63f No single failure or single human error shall cause loss of the emergency and warning functions together with the monitored functions.

63g Emergency, warning and caution data, out of limit annunciation and safing commands shall be given priority over other data processing and command functions.



63h The severity consequence of identified hazardous events shall be classified as follows:

Catastrophic:

- Loss of life

- Life-threatening or permanent disabling injury to personnel

- Occupational illness

- Loss of flight equipment

- Loss of ground systems/facilities

- Loss of public or private property

- Severe detrimental environmental effects

- Critical:

- Temporary disabling but not life-threatening injury

- Temporary occupational illness

- Major damage to flight equipment

- Major damage to ground systems/facilities

- Major damage to private or public property

- Propagation of failure to higher level equipment

- Short term detrimental environmental effects.

- Marginal:

- Minor injury, minor disability, minor occupational illness, or minor system or environmental damage.

- Negligible:

- Other less than minor events.

63i Failure tolerance is a basic safety requirement that shall be used to control hazards.

The failure tolerance requirements are defined in ECSS-Q-40B § 5.3.2.1 “Basic requirements”.

Multiple failures, which result from common-cause or common failure mechanisms, shall be considered as single failures for determining failure tolerance.

Alternate or redundant safety-critical functions shall be physically and functionally separated or protected in such a way that any event that causes the loss of one path shall not result in the loss of alternative or redundant paths.

Hardware or software failures shall not cause additional failures with hazardous effects or propagate to cause the hazardous operation of interfacing hardware.

63j Hazards related to mechanisms, structures, pressure vessels, pressurized lines and fittings, material compatibility and material flammability shall be controlled by the safety-related properties and characteristics of the design, such as margin or factors of safety.

Positive safety margins shall exist when considering the worst credible combination of environmental conditions.



63k A Safety Critical Items List shall be established (may be part of general Critical Items List) and maintained. Safety critical items are :

• Functions that if lost or degraded, or through incorrect or inadvertent operation, would result in a catastrophic or critical hazard consequence

• Hardware, software or firmware items or procedures which support a safety critical function and which do not comply to the applicable safety technical requirements or which cannot be verified as complying with those requirements,

Each safety Critical Item that is retained shall be supported with a justification for retention which shall be subject to EADS Astrium / ESA / launcher authorities' approval.

6.4 Safety analysis Requirements and Techniques

64a Safety analysis shall be performed, initiated early in the design phase, in a systematic manner.

64b Hazard analysis shall be performed in accordance with ECSS-Q-40-02 and documented in Hazard Reports to support the hazard reduction process. Hazard analysis and reports shall conform to Annex B of ECSS-Q-40B to identify and evaluate:

- Hazards associated with the equipment design, its operation and the operation environment

- Hazardous effects resulting from the physical and functional propagation of initiator events

- Hazardous events resulting from the failure of equipment functions

- Time critical situations

The following potential initiators events shall be considered:

- Hardware failure (random or time dependent)

- Latent software error

- Operator error

- Design inadequacies, including:

Inadequate margins

Unintended operating modes caused by sneak-circuits

Material inadequacies and incompatibilities

- Hardware/software interactions

- Natural and induced environmental effects

- Procedural deficiency

64c Safety risk assessment shall be conducted all along the safety programme implementation.

64d The results of FMECA shall be used to support the hazard analysis in the evaluation of effects of failures.



6.5 Safety Verification

65a Adequate end-to-end validation tests on safety critical functions to determine or demonstrate the margin of safety or degree of hazard shall be implemented where appropriate. Where failure effects or failure tolerance in safety critical functions is not clear, induced failure tests shall be conducted to collect data.

6.6 Product Liability Requirements

In addition to safety analyses, the Subcontractor will address specifically the requirements issued by the European Union in terms of product liability and related directives.

66a The liability requirements shall apply to every equipment (flight product and ground support equipment) under the responsibility of the Subcontractor

66b The Subcontractor shall identify for each equipment under his responsibility the applicability of the EU directives.

A non exhaustive list of directives to be considered is given hereunder for information:

Reference Title

92/59/EEC General Product Safety

85/374/EEC Product Liability

99/5/EEC Radio equipment and telecommunications terminal equipment

73/23/EEC Low voltage

98/37/EEC Machinery

89/336/EEC Electromagnetic compatibility (EMC)

97/23/EEC Pressure equipment

93/15/EEC Explosives for civil use

94/9/EEC Equipment and protective systems intended for use in explosive atmospheres

90/270/EEC Display screen equipment

91/157/EEC Batteries and accumulators

92/58/EEC Safety signs

66c Where applicable, the Subcontractor shall perform the related certification towards the EU directives.

66d The Subcontractor shall perform for each equipment under its responsibility a safety assessment report in line with the safety analysis.

66e After compliance assessment the Subcontractor shall deliver a formal liability Declaration of Conformity (DoC) mentioning the legal data asserted by the EU directives.



66f Each equipment, where appropriate, shall be CE marked. The CE marking shall include the name of the Subcontractor company.

66g The user’s manual of each equipment, where appropriate, shall address the equipment safety issues and the related procedures.



7 ELECTRICAL, ELECTRONIC AND ELECTROMECHANICAL (EEE) COMPONENTS

7.1 General

This chapter establishes, for the Project Swarm programme, the requirements for selection, procurement, use and control of EEE (Electrical, Electronic and Electromechanical) parts.

These requirements are in line with the principles of ECSS-Q-60.

The objective is to assure that the parts, used in the flight hardware are acceptable and possess adequate functional, radiation, quality, reliability, schedule and cost characteristics to meet the programme requirements.

7.2 Applicability

In this document the term "EEE Component" is used interchangeably with the terms "EEE Part", "Component" or just "Part".

Qualified part refers to a part qualified in accordance with an international standard (i.e. listed in the relevant QML or QPL).

72a This specification is applicable to all EEE parts, identified in qualification hardware, flight hardware and flight spares used on platform and payload of the Project Swarm programme.

72b Components for engineering models when used for qualification purpose (EQM) shall be from the same design type (form, fit, function) and manufacturer as the ones intended to be used on flight standard models.

Any deviation to this rule shall be identified and authorized, on a case-by-case basis, through a RFD submitted to EADS Astrium and ESA for approval.

72c Where parts used in ground equipment come into direct contact with the flight standard, the ground equipmement parts shall be in accordance with this specification.

72d RF switches (coaxial or wave guide types) shall be considered as equipment and shall follow the requirements applicable for equipment. The incorporated EEE parts shall be in accordance with the applicable rules of this document.

72e A non-exhaustive list of constituents considered as EEE parts is given in Annex 1. It should be noted, in particular, that solar cells shall be considered as EEE parts.

7.3 Organisation

7.3.1 General

EADS Astrium appoints a parts engineer for the programme who is in charge of the overall activities, at EADS Astrium level, concerning the selection, procurement, use and control of EEE parts.



731a The Subcontractor shall describe, in a EEE parts management plan (which may be part of his PA plan), all activities implemented for conformance to this present specification, i.e. the selection, procurement, use and control of EEE parts (including links with other disciplines as radiation, assembly, RAMS… ).

It shall be submitted to EADS Astrium for approval.

7.3.2 Subcontractor Responsibilities

732a The Subcontractor shall be considered fully responsible of selection, procurement and use of EEE parts with respect to the product subject to the contract.

After parts approval the Subcontractor shall remain responsible for parts to be used.

732b The Subcontractor shall ensure that all parts requirements are flowed down to all lower tier subcontractors' levels and ensure that all lower tier subcontractors are compliant to these parts requirements.

7.3.3 Parts Control Board (PCB)

733a The selection of EEE parts and their usage approval are implemented through Part Control Boards (PCBs) held between EADS Astrium and each Subcontractor (and/or lower tier subcontractor).

At the EADS Astrium level, the PCB is chaired by the EADS Astrium parts engineer and may be composed of designer, EEE parts engineer, PA responsible, system representative, any other experts (radiations, assembly, RAMS…) from EADS Astrium and the Subcontractor.

The ESA representative has the right to participate as a PCB member.

Depending on the progress of the programme, the main PCB activities are:

- Review and approval of the Subcontractor's EEE parts management plan and any associated document

- Parts approval, through Subcontractor DCL review, including evaluation activities (via justification documents, when applicable) and PAD approval

- Problem resolution (non conformances, RFD, RFW, ...).

7.3.4 Procurement Scheme

734a The Subcontractor shall indicate, in his EEE parts management plan, the scheme proposed to handle the procurement of EEE parts in the frame of the programme.

Baseline procurement scheme is user-self procurement.

734b For each possible method (direct procurement at manufacturers, use of distributors, use of agencies, use of a « corporate » procurement, ...), the Subcontractor shall describe the way to organise it, and to select and manage the different selected procurement entities.



7.3.5 EEE Part Lists

7.3.5.1 Preferred Parts List (PPL)

7351a The Subcontractor is encouraged to use the European PPL ECSS-Q-60-01 in order to support the selection of EEE parts.

7.3.5.2 Subcontractor Declared Component List (DCL)

7352a The required information for the DCL is given in Annex 2 and shall reflect the procurement conditions of EEE parts.

The Subcontractor's DCL shall be submitted in an editable electronic format agreed by EADS Astrium, preferably MS Word or Excel (not pdf).

“As designed” DCL

7352b The Subcontractor shall establish a DCL listing all EEE parts (encapsulated, add-on parts used in hybrids and hybrids themselves, in house magnetic parts) intended to be used for each equipment. This list shall reflect the "as designed" status of the equipment and shall be in compliance with the justification files (design analysis, WCA, PSA, …) planned to be handled.

For in-house magnetic parts the list shall include the magnetic material characteristics (e.g. type, designation, µr, mass)

This list shall be kept under configuration control

The Subcontractor DCL shall include lower tier subcontractor or supplier lists.

7352c Each "as designed" DCL shall be submitted to EADS Astrium and ESA for approval.

7352d The preliminary "as designed" DCL shall be issued at the equipment PDR.

7352e The frozen "as designed" DCL shall be issued at the equipment CDR.

7352f After equipment CDR, all modifications (change of parts type or manufacturer, change of quality level…) shall be implemented, in the "as designed" DCL, through the CN / CR process, submitted to EADS Astrium and ESA for approval.

“As built” DCL”

7352g Any change of parts during product manufacturing (type, manufacturer, …) shall be handled through NCR / RFW, submitted to EADS Astrium and ESA for approval.

7352h The "as built" DCL, taking into account the EEE parts actually installed in the equipment and their Date Code, shall be provided to EADS Astrium within the equipment data package, at the DRB, for review.



7.4 Parts Selection

7.4.1 General

741a The Subcontractor shall ensure that the selected parts meet the operating, environmental, radiation, material, safety, quality and reliability conditions defined for the programme.

741b In order to reduce time and cost effort for EEE parts evaluation programmes, the maximum use of parts listed on existing QPLs, PPLs or from already successfully qualified space applications shall be used, such as:

- All parts belonging to the European PPL (ECSS-Q-60-01) provided the procurement specification is as listed in the EPPL and the parts quality levels are compliant with the programme requirements

- All parts qualified (belonging to QPL or PPL) to space standards (e.g. ESCC, MIL, NASA..), provided the parts quality levels are compliant with the programme requirements

- Parts successfully used in space applications provided quality levels are compliant with the programme requirements.

741c The selection of parts, and their associated manufacturers, shall be based on the knowledge regarding technical performance, qualification status and history of previous usage in similar applications.

741d The parts shall be derated and able to withstand all the environmental conditions specified for its applications, including tolerance to radiation exposure.

741e In the case that a valid and acceptable status cannot be demonstrated, an adequate evaluation programme shall be implemented to comply with the requirements specified for the programme

741f Any part used out of its specification shall be identified in the DCL by the Subcontractor with an associated programme of risk reduction, as part of the action plan, and shall be handled in accordance with the uprating paragraph.

7.4.2 Parts Approval Process

742a ESA & EADS Astrium approval of selected parts is made, during PCB, through the Subcontractor DCL and PAD review.

742b deleted

741g The selection of commercial parts is allowed for performance criteria or severe cost impact, when no equivalent part can be found in the quality level defined in Annex 1.

741h Where commercial parts have to be used, an appropriate evaluation programme (see 7.4.4) agreed by the PCB has to be applied.



742c The Subcontractor shall prepare a Parts Approval Document (PAD), according to guidelines given in ECSS-Q-60 for the following types of parts (non-standard parts) used on the programme :

- commercial parts

- components procured through CECC standards

- not qualified parts (not ESA or MIL QPL/QML listed)

- Any part that requires radiation verification testing (RVT)

- any part requiring specific tests during procurement. For justification of use of such parts, the additional tests shall be identified in a PAD.

No PAD will be required for "Standard Parts", which are:

Parts belonging to a QPL, provided that the qualification is valid at the time of procurement and meets the project requirements. In this case, the EEE part will be approved by EADS Astrium and ESA during the PCB, through the review of the subcontractor DCL.

742d Not applicable

742e The PAD shall be submitted to EADS Astrium and ESA, for approval, during PCB.

742f Not applicable

742g In the case of an evaluation programme being implemented, the preliminary approval of the EEE part does not prejudge its final acceptance.

The final approval shall be definitely pronounced when the evaluation is successfully completed.

7.4.3 EEE Parts & Material Restriction

7.4.3.1 EEE Parts Material

7431a The Subcontractor shall ensure that materials, which are not hermetically sealed within components, meet the requirements of ECSS-Q-70 regarding off-gassing, out gassing, flammability, toxicity and/or other criteria defined by the intended use.

7431b The Subcontractor shall also evaluate the robustness of selected EEE components to the stresses induced by his assembly techniques.

7431c The Subcontractor shall insure that the EEE parts comply with the requirements of paragraph 8.3.2 (Prohibited materials) and 8.3.3 (Restricted material).

The use of some of the prohibited or restricted materials may be authorized, on a case-by-case basis, through RFD submitted to EADS Astrium for approval, in the frame of PCB.



7.4.3.2 Prohibited EEE Parts

7432a For limited life, known instability, safety hazard or reliability risk reasons, the use of EEE parts listed below shall be prohibited :

- Components using pure tin material plating

- Components containing Beryllium oxide, Cadmium, Lithium, Magnesium, Mercury, Radioactive materials,

- Hollow core resistors ,

- Potentiometers,

- Non-metallurgically bonded diodes,

- Semiconductor dice without passivation or glassivation over exposed junctions,

- Wet slug tantalum capacitors (except CLR 79 construction using double seals and a tantalum case),

- RNC90 > 100 Kohms

- TO5 and GP250 relays (for new design)

- Wire-link fuses (for new design)

- TO3 & DO4/DO5 or similar packages (for new design)

The use of some of the above parts may be authorized, on a case-by-case basis, through RFD submitted to EADS Astrium for approval, in the frame of PCB.

7.4.4 Component Evaluation and Approval Programme

744a When a valid and acceptable approval status cannot be demonstrated, a component evaluation and approval testing programme shall be implemented by the Subcontractor.

744b The evaluation programme, documented by an evaluation plan, shall identify the manufacturing baseline in order to ensure that the flight parts shall be built according to the same technology and manufacturing processes as the evaluated components.

In the case that a change affects the qualification status, a new qualification or a delta qualification shall be undertaken.

For commercial parts, the Subcontractor is encouraged to perform a single procurement for evaluation and flight and spare parts in order to ensure that the evaluation results are representative of the flight parts.

744c The evaluation plan shall be based on the following elements :

- Constructional analysis,

- Manufacturer assessment,

- Evaluation testing,

- Radiation testing (if applicable, depending on the component sensitivity)

Reduction or complete omission of any element of the evaluation requirements may be done on the basis of documentary evidence provided by the responsible of the evaluation programme.

744d The evaluation plan shall be submitted to EADS Astrium for approval, in the frame of the PCB.



744e The evaluation results, documented by an evaluation report, shall be submitted to EADS Astrium for approval in the frame of the PCB

744f Failure analysis shall be conducted on any part which failed during this evaluation programme, in order to determine the reason for failure and to react at procurement level or at part selection level.

7.4.5 Derating

The EEE parts derating requirements are defined in chapter 5 (Reliability / Dependability)

7.4.6 Radiation Sensitive Components

These requirements are established for all kinds of radiation including cosmic (heavy ions), trapped (charged particles - electrons, protons - in radiation belts) and solar flares (heavy ions, protons).

The space radiation environment for Swarm is specified in the Space Radiation Environment for Swarm Mission [AD 7]

746a The Subcontractor shall implement a Radiation Hardness Assurance programme at his level consisting of assessing the actual radiation tolerance of the selected components for compliance with the Project Swarm radiation requirements in terms of total dose (high and low dose rate), displacement damages and single events effects.

This programme shall be documented by a Radiation Hardness Assurance plan or by a compliance matrix covering the collection of all relevant information and specifying the necessary actions in terms of preventive / corrective solutions (e.g. local shielding, design solution, derating…), evaluation and procurement (e.g. RVT), planning and control.

746b The Radiation Hardness Assurance plan or a compliance matrix shall be submitted to EADS Astrium for approval.

746c The programme shall define any special traceability or lot homogeneity constraints appropriate for commercial components.

746d The Subcontractor shall issue a Radiation Assessment document identifying all sensitive components with respect to the relevant radiation effects, their impact and giving an adequate design solution (local shielding, design solution, specific test, RVT, …) for the relevant equipment.

746e The Radiation Assessment document shall be provided to EADS Astrium for review, during the parts approval process

746f For equipment located in the spacecraft main structure body a total dose exposure of 8 Krad (Si) considering 2,6 mm equivalent Al shielding (0,6 mm spacecraft and 2 mm box shielding) must be taken into account.

For all radiation sensitive components a safety factor of 2 must be maintained as a minimum.

For parts not meeting the 16 Krad (Si) the subcontractor has to demonstrate by sectoring



7.5 Parts Procurement

7.5.1 Quality Levels

751a Any EEE part incorporated in flight hardware shall be submitted to screening tests. These screening tests shall be designed such that accumulated stress will not jeopardize the part reliability.

751b For all single point failure applications on component level as well as for equipment which are used on system level in a non-redundant configuration, the quality level as indicated in the PA Plan annex 1A shall be used, while for all other applications the quality levels as per annex 1B shall be used as minimum.

Experiment units may follow a different approach which has to be agreed between all involved parties.

751c deleted

751d For any reduction to the established screening flow, as referenced in Annex 1, the procurement responsible shall indicate and justify the deviation on the PAD submitted to EADS Astrium for approval.

analysis and valid component radiation data, that the safety factor of 2 is maintained.

Notes:

1) For equipmemt that is not located in the spacecraft main structure body (e.g. the ASM sensor head and the Startracker heads) a different radiation environment must be considered. For details see [AD 7]

2) In case the box thickness is less than 2 mm higher dose rates must be taken into account. For details see [AD 7]

746g Where ever possible components shall be selected which are inherently insensitive to single event upset (SEU) and latch-up (SEL). Parts with an assured LETth > 70 MeV/mg cm² are considered as SEL and SEU insensitive.

746h Components exhibiting a sensitivity between 15 MeV/mg cm² < 70 MeV/mg cm² shall be subject to the appropriate Heavy Ion SEE rate prediction.

746i Components with a sensitivity < 15 MeV/mg cm² shall be subject to the appropriate Heavy Ion SEE and Proton rate prediction.

746j Radiation testing under the responsibility of the subcontractor is required for sensitive parts, where no valid data are available. The radiation test programme must be suitable to provide evidence that radiation effects on EEE parts will not degrade the required equipment performance for the given mission life cycle.



7.5.2 Parts Procurement Quantities

752a Each subcontractor using EEE parts shall procure sufficient quantities of each individual part type (incl. printed board) in order to be prepared for potential repair activities.

The minimum requirements are defined in the SOW.

752b For programmable EEE parts which cannot be re-programmed after programming (e.g. PROMs, FPGAs) a set of unprogrammed spare parts shall be procured in order to allow potential late programme changes.

7.5.3 Procurement Specification

753a Any EEE part intended for use in flight hardware shall be procured to controlled specifications (specifications systems, procurement responsible specifications or manufacturers’ specifications) or data sheet.

753b In any case, this document shall be configured (dated and referenced) by the Subcontractor, and submitted to EADS Astrium for approval through the DCL and - where required - the PAD.

This configuration process allows the Subcontractor to identify data sheet modification that may occur between the selection and the procurement step.

753c The EEE parts procurement responsible is requested to ask the manufacturer to give notification of any product change affecting qualification, performance, quality, reliability and interchangeability and to communicate this information to the Subcontractor (if applicable).

753d The issue and revision of the detail procurement specifications shall be only specified in the DCL for non qualified parts or commercial parts.

7.5.4 Customer Precap Inspection (Initial CSI)

754a As part of the control of the EEE parts procurement, the procurement responsible has to carry out, at the manufacturer’s premises, a pre-cap inspection if required by the specification system used for the procurement (e.g. MIL or ESCC).

For any non standard parts a CSI shall be agreed with the parts manufacturer for at least:

relays

oscillators

x-tals

hybrids

Where CSI is not accepted by the parts manufacturer an increased number of samples for DPA may be defined on the PAD to be agreed during the parts approval process.

7.5.5 Lot Acceptance Test (LAT)/ Quality Conformance Inspection (QCI)/ Technology Conformance Inspection (TCI)

755a Any lot / Date Code of EEE parts shall be submitted to a LAT (ESCC system) or QCI/TCI (MIL



system) procedure according to the following rules :

- ESA qualified parts

The LAT procedure may be omitted except for tantalum capacitors, crystals, oscillators, relays, where LAT3 is mandatory.

- MIL qualified parts

The QCI/TCI procedure shall be applied in line with the qualification status of the part.

A lifetest 1000hrs / 125°C / 1.5 Vr is mandatory on each lot of glass capacitors.

- For non-standard parts

The LAT / QCI / TCI level shall be defined according to the available data (die and package).

The proposed lot acceptance level is approved through the Parts approval process

755b Life test or environmental / mechanical test may be omitted on a lot / Date Code if data of the part under consideration are available on an other lot / Date Code not older than two years, provided there have been no changes to the manufacturing process and no changes to the part design and construction.

755c When a lot built with different sub lots is submitted to LAT, the distribution of these sub lots shall be identified and the LAT sampling shall be representative of this distribution.

755d For integrated circuits from the same family (e.g. 54...), discrete components series (Zener diodes ...), or passive components series, procured from the same manufacturer without major change in the process, or for expensive parts, the LAT samples size may be reduced and submitted to EADS Astrium for approval through the PAD process.

755e A failure analysis shall be performed on any part which failed during the LAT/QCI/TCI whatever the LAT/QCI/TCI accept/reject criteria are.

755f LAT/QCI/TCI shall not be considered as valid until the result of the failure analysis is accepted by the Subcontractor.

Such a result shall be available for review, by EADS Astrium, on request.

755g The use of life test samples in flight application is prohibited.

7.5.6 Final Source Inspection (Final CSI)

756a As part of the control of the EEE parts procurement, the procurement responsible has to carry out, at manufacturer’s premises, prior to shipment, a final source inspection if required by the specification system used for the procurement (e.g. MIL or ESCC).

For any non standard part a CSI shall be agreed with the parts manufacturer for at least:

relays

oscillators

x-tals

hybrids



Where final CSI is not accepted by the parts manufacturer the CSI shall be replaced by incoming inspection at procurement responsible according requirement 757b

7.5.7 Incoming Inspections

757a For all components (qualified or not), the Subcontractor shall carry out the following verifications as minimum:

- Quantities,

- Checking of packing,

- Manufacturer Certificate of Conformance (COC),

- Documentation (correlation between documentation and delivered components).

757b When the final CSI is not performed, an incoming inspection shall be performed by the procurement responsible to verify compliance with the purchase order requirements and will consist in:

- Review of the delivered manufacturer documentation,

- External visual inspection by AQL 0.65% or sampling (20 parts from min/med/max values),

- Certificate of Conformance,

- Electrical measurements, at room temperature, of critical parameters on sampling basis (if no test data are delivered by the manufacturer).

- Destructive Physical Analysis (where required by the Parts Control Board)

757c The incoming inspection process shall be described, by the Subcontractor, in a procedure, available for review, on request, during PCB.

7.5.8 Destructive Physical Analysis

758a As part of the incoming inspection process, the procurement responsible shall perform a DPA, on 3 samples from each lot / Date Code where required by the Parts Control Board (PCB).

Note: For QPL parts a DPA is not generally required, however, may be decided by the PCB for certain types in the frame of the parts approval process (e.g. for relays, oscillators, x-tals and hybrids).

758b The DPA sample size (3 parts) may be reduced or increased in some cases (see 7.5.4).

758c The DPA may be performed either by the procurement responsible or an approved independent laboratory or by the EEE part manufacturer.

In the later case, the DPA shall be witnessed by the procurement responsible.

758d The DPA procedure including lot accept / reject criteria shall be available for review, on request, during PCB.

Note: For health and safety hazard reasons, any test producing beryllium oxide dust may be omitted.



758e The DPA reports shall be provided to EADS Astrium, for review, on request (original photos, or good quality copies).

758f The Subcontractor should not mount the parts before the final DPA result is known.

The Subcontractor is responsible for any outcome of premature mounting.

7.5.9 Special Requirements for Commercial EEE Parts

759a The selection of commercial parts is allowed for performance criteria when no equivalent part can be found in the quality level defined in Annex 1.

For those parts an evaluation and approval programme according § 7.4.4 shall be applied.

759b When possible, commercial EEE parts are directly procured from the manufacturer.

If not possible, it is essential to select only authorised (by the manufacturer) or franchised distributors.

759c As far as possible, the EEE parts procurement responsible shall order the parts from a single Date Code to minimise the variability of the performance characteristic of the components.

If not possible, the distribution of Date Codes shall be identified during incoming inspection and the sampling used for the different tests done by the Subcontractor shall be representative of this distribution.

759d The Subcontractor is requested to ensure that the elements of the justification document, including the action plan, are fully applicable at the time of the procurement of flight parts.

759e The Subcontractor shall select components existing in industrial (-40 /+85°C) or military (-55 / +125°C) temperature range

7.5.10 Radiation Verification Test (RVT)

7510a When the component radiation sensitivity, as calculated either from radiation characterization test or from existing radiation data, is suspected to be inadequate, 11 samples (10 irradiated parts + 1 witness part) from the lot Date Code or wafer lot under procurement shall be submitted to RVT.

On a case-by-case basis, for mature technology having demonstrated no major hardness variability in total dose response, the sample size may be limited to 6 samples (5 irradiated parts + 1 witness part).

7510b The results of the RVT shall be documented by a report and shall be available for review, on request.

7510c In case the radiation verification results are non compliant to the requirements the NCR process shall be applied



7.5.11 Stocks and Relife

7511a When necessary, EEE parts from existing stocks may be used, provided the following requirements are met :

- The parts are stored according to minimum conditions given in § 7.6.1

- The lot homogeneity and traceability can be demonstrated,

- The EEE parts documentation, including LAT/QCI/TCI documentation of the concerned lot, is available and the content is acceptable, in accordance with the project requirements (including radiation data, if necessary),

- The minimum overall requirements (including screening) are in accordance with the present document,

- No open NCR or no alert exist for the relevant lot / Date Code.

7.5.12 Manufacturer’s Documentation Delivery

7512a For qualified parts and non qualified parts, the manufacturer’s Certificate of Conformance shall be delivered to the procurement responsible.

7512b Any other data, defined in the applicable procurement standards, shall be available, on request.

When not delivered, these data may be available, on procurement responsible request, at the manufacturer’s facilities

7.5.13 Specific Components

7513a For specific component types, dedicated requirements in addition to those described in this present document shall be applied.

7.5.13.1 Application Specific Integrated Circuits (ASIC)

75131a The Subcontractor shall describe, in a specific document, the requirements covering

7511b Components from stocks which have a lot / Date Code which exceeds 6 years (calculated from the manufacturing Date Code to the date of intended installation in flight hardware) shall be submitted to relifing procedure, called in the Subcontractor EEE parts management plan, and approved by EADS Astrium.

7511c Relifing shall contain the following activities as minimum:

− Visual inspection (AQL = 0.65, level II)

− Solderability test on a sample (AQL = 0.65, level II)

− Hermeticity test where applicable (AQL = 0.65, level II)

− DPA in case normally required and no DPA report covers the lot, or if degradation during storage may have occured

− Electrical testing of aging sensitive parameter (AQL = 0.65, level II



development, prototype manufacturing, testing, validation and quality assurance applied to ASICs. For new developments the ECSS-Q-60-02 shall be used as guideline.

75131b The document required in 75131a shall be submitted to EADS Astrium and ESA for approval.

7.5.13.2 Subcontractor Programmable Devices

75132a The Subcontractor shall submit a post-programming procedure, depending on part types (including, when necessary, electrical tests, programming conditions and product, burn-in conditions, additional screening tests and specific marking after programming) to EADS Astrium for approval, during PCB.

75132b Due to this post-programming operation, the procurement of unprogrammed parts may be adapted providing that the final level after incoming, programming and post-programming activities is equivalent to the standard for integrated circuits in Annex 1.

7.5.13.3 Hybrid Circuits

75133a Hybrids shall be manufactured in accordance to MIL-PRF-38534 or ESA PSS-01-608

7.5.13.4 Electromagnetic Components

75134a For any electromagnetic component (in-house or procured), the Subcontractor shall submit a requirement procedure to EADS Astrium for approval.

75134b The "in house" magnetic parts shall be designed and screened using MIL-STD-981 as a guide line.

Minimum screening on a 100% sampling basis shall be :

- visual inspection,

- electrical measurements before test,

- thermal cycling ,

- high temperature storage (minimum 96 hrs)

- final electrical measurements

7.6 Component Handling and Storage

76a The Subcontractor shall establish and implement procedures for handling and storage of EEE parts in order to prevent any degradation.

76b These procedures shall be available for review by EADS Astrium, on request.

76c As a minimum the following areas shall be covered :

- Control of storage environment such as temperature (22° + 5°C), humidity (45% < RH <



65%), protected against contamination

- Appropriate measures and facilities for segregating and protecting components during incoming inspection, storage and delivery to manufacturing,

- Control measures to ensure that components susceptible to electrostatic discharge (ESD) are identified and handled only by properly trained personnel using antistatic packaging, tools and other means, including procedures.

- Traceability

761 Before mounting Plastic Encapsulated Devices (PED), the following process shall be applied :

• Baking

- JEDEC classes 1 & 2 : no baking

- JEDEC classes 2A, 3 & 4 : 125°C during 6 to 12 hours

- JEDEC classes 5, 5A & 6 : 125°C during 24 hours

- wheel tape parts : 50°C during 1 week minimum (except if JEDEC classes 1 or 2) or equivalent conditions to be proposed by the Subcontractor.

• Mounting

Mounting within 10 hours or according to JEDEC classification after end of baking.

• In case of hand soldering, no baking is required.

7.7 EEE Parts Quality Assurance

7.7.1 Non Conformances

771a The Subcontractor shall apply the requirements defined in paragraph 4.2.6 of this document.

7.7.2 Alert and Problem Notification

772a The Subcontractor shall establish and implement procedures for handling any problem arising on EEE parts during procurement, post-procurement or during all levels of equipment manufacturing or testing.

772b The Subcontractor shall investigate and resolve any component alert or problem notification received in the frame of international alert system or sent by EADS Astrium.

772c The Subcontractor shall initiate and distribute any notification for all major problems arising on EEE parts during procurement, incoming inspection or during all levels of equipment manufacturing or testing, which are of general concern.

772d Any alert notification which may be relevant to an EEE part belonging to the DCL shall be identified by the Subcontractor, within one week, with the proposed dispositions.



7.7.3 Traceability

773a Traceability during EEE parts manufacturing and testing is covered by the procurement specifications and the applicable system (ESCC or MIL).

Such traceability shall be kept by the procurement responsible.

773b For commercial parts, the manufacturer Date Code is required as element of traceability.

773c Traceability of EEE parts during installation in equipment shall be ensured by the Subcontractor to allow the traceability of the manufacturer lot / Date Code number of the EEE parts actually mounted, as included in the "as built" DCL.

773d When the equipment is on the launch pad, the Subcontractor shall be able to provide the part type and manufacturer actually installed with its relevant lot / Date Code number within one day or within one week, in the other cases

7.8 Procurement Status Reporting

78a Each procurer of EEE parts is responsible to issue a procurement status report within its progress report. This report will describe:

- General situation

- The overall status of the procurement

- The current activities and details of any specific problem or problem area foreseen, and recommendations to solve those.

- Status of evaluation/qualification: information about details of all planned, current and completed evaluation/qualification work.

- Status of specifications: details of all current planned and completed specification work. The approval status of the specifications must be shown.

- Non-conformance status. NCR's listed with the following to allow traceability: NCR-number, Part type, summary of the problems, disposition, status, schedule.



8 MATERIALS, MECHANICAL PARTS AND PROCESSES

8.1 Organisation and Management

8.1.1 General Requirements

811a The materials, mechanical parts and processes organization and management programme shall be defined in the Subcontractor PA&S Plan, according to the principles of ECSS-Q-70.

811b It shall be the responsibility of each Subcontractor and their lower tier contractors to ensure that materials, mechanical parts and processes used in all their equipment and during the assembly, integration and testing (AIT) of flight hardware, QM´s and EQM´s, comply with all contractual, design, quality and performance requirements and that the materials will not be degraded as a result of manufacturing, assembly, test, transportation and operating conditions to which they will be subjected.

811c The materials, mechanical parts and processes shall satisfy ground and flight environmental constraints concerning :

- Resistance to mechanical environment (shocks and vibrations during tests and launch…)

- Resistance to vacuum

- Resistance to radiation and atomic oxygen

- Compatibility to thermal cycling

- Compatibility to in-orbit thermal environment

8.1.2 Materials and Process Control Board (MPCB)

812a A Material and Process Control Board (MPCB) shall be established between EADS Astrium and the Subcontractor specialists of Materials and Processes.

Where deemed necessary MPCP meetings shall be convened.

812b deleted

812c The function of the MPCBs is to ensure that each of the following is carried out:

- Evaluate and approve the DML, DMPL and DPL prior to submission of these documents to PDR, CDR and/or QR.

- Ensure that PMP management is conducted in accordance with this document.

- Evaluate the RFAs submitted for approval of critical materials, mechanical parts and processes.

- Ensure that PMP implementation is performed in accordance with design and manufacturing documents (mandatory inspection points and key inspection points) and to request audits and/or technical reviews where considered necessary.

- Support investigations to resolve PMP non-conformances.

- Provide EADS Astrium and ESA with regular PMP updates.



812d The following documentation should be made available to MPCB participants prior to any meeting:

- DML, DMPL, DPL

- CIL

- PMP qualification programme and associated reports

- Audit reports (where applicable)

- Incoming PMP reports

- Top level drawings

- RFA documentation

- Non-conformance reports/deviation requests/waivers

8.2 Criticality Analysis

The Critical Items List detailed in sections 4.1.5 of this document shall include all critical materials, mechanical parts and processes. The definition of a critical material, mechanical part or process, taken from PSS-01-700 and ECSS-Q-70 is detailed below:

Materials: a material is to be considered critical if:

- It is new, has no previous space use or is non-validated, in the application in question.

- Previous use has highlighted technical issues.

Mechanical parts: a mechanical part is considered critical if:

- It is new, has no previous space use or is non-qualified, in the application in question.


- Failure of the mechanical part can adversely affect the performance or destroy a major part or function of the spacecraft.

- The quality of the mechanical part cannot be assessed by simple tests.

Processes: a process is considered critical if:

- It is new, has no previous space use or is non-validated, in the application in question.


- Failure of the process can adversely affect the performance or destroy a major part or function of the spacecraft.

- The Subcontractor has no prior application experience.

- The quality of the process cannot be assessed by examining the end product.

82a Materials, mechanical parts and processes identified as critical shall be subject to the Request for Approval (RFA) procedure detailed in ECSS-Q-70. RFAs are submitted to EADS Astrium and ESA for approval.

82b All critical materials, mechanical parts and processes shall be evaluated and validated/qualified, with the resulting acceptance/use with deviation identified in the DML, DMPL and DPL documentation. The validation/qualification reports are to be approved by EADS Astrium and ESA.



82c The validation or qualification of all critical materials, mechanical parts or processes shall be completed and accepted by EADS Astrium before the materials, mechanical parts or processes are used on either Qualification or Flight Model hardware.

8.3 Technical Requirements for Selection of Materials

83a The selection, evaluation and validation of materials for the Swarm flight H/W, flight spares, QM´s, EQM´s etc. shall be conducted in accordance with the general technical requirements of ECSS-Q-70. The requirements of this section replace clause 3.1.1 of ECSS-Q-70.

83b The data provided in ECSS-Q-70-71 can be used for the selection of materials for applications comparable to the Swarm mission environment and life cycle.

Materials not listed in ECSS-70-71 and selected for use on the basis of prior space use by the subcontractor must have been used in a directly comparable application with identical environmental and lifetime requirements.

Materials specified for use without previous space use or materials with previous space use in non-relevant applications shall be validated to demonstrate full compliance with the requirements of ECSS-Q-70, Section 8.3 of this document and the Swarm equipment requirements. The validation shall be documented and referenced in the DML.

8.3.1 Vacuum

831a

The general acceptance criteria for materials used for this mission shall be as follows:

Recovered Mass Loss (RML) <1.00%

Collected Volatile Condensable Material (CVCM) <0.10%

Where the contamination and cleanliness analysis (see §4.5.8) highlights a requirement for more stringent out gassing controls i.e. materials in the vicinity of optical surfaces, then the maximum values above will be modified to suit the specific requirements. This shall be addressed on a case-by-case basis as and when the contamination and cleanliness analysis indicates a potential problem.

831b Materials which do not meet the requirements in 831a shall be submitted to RfD/RfW processing. With the RfD/RfW a clear justification for the need to use such materials shall be provided together with a risk assessment related to the equipment performance and reliability.

The RfD/RfW is subject to EADS Astrium and ESA approval.

831c Materials, for which no relevant out-gassing data are available, or that have shown batch variability, shall be subjected to an out gassing test as per ECSS-Q-70-02 or ASTM E595-90. In all instances, a test reference from an ESA or NASA approved source must be provided to assure the accuracy of the data and the same cure/processing conditions must apply to both the samples.

8.3.2 Prohibited Materials

832a The use of:

- pure mercury,



- cadmium,

- pure electrodeposited or hot dipped tin plated surface coatings,

- zinc

- PVC

is prohibited.

These materials cannot be used under any circumstances.

8.3.3 Restricted Materials

833a The use of:

- beryllium-oxide,

- low alloy steels,

- carcinogens,

- friable materials,

- radioactive materials,

- magnetic materials (hard & soft magnetic)

is restricted.

Where the use of any of these materials cannot be avoided, the material’s use shall be evaluated on a case-by-case basis through the use of the RFA procedure, with the agreement of EADS Astrium. The justification for use shall be documented and referenced in the DML.

833b Silicone based and aromatic based materials shall be avoided. Silicone based adhesives may only be used with prior agreement of EADS Astrium and ESA.

8.3.4 Thermal Cycling

834a Tests to assess the effect of thermal cycling on the performance of the materials used shall be conducted in accordance with ECSS-Q-70-04. The number of cycles and the temperature extremes shall be selected, with agreement of EADS Astrium, to accurately reflect the predicted space environment. [This is to ensure that the effect of CTE differences over the space environment temperature range does not cause degradation of materials or structures i.e. bonded joints during in-orbit service.] This must also cover ground test exposure prior and up to launch.

8.3.5 Atomic Oxygen (ATOX)

835a The effects of atomic oxygen on the outer surfaces of the spacecraft shall be assessed on the basis of the orbit parameters and mission duration. It shall be demonstrated, either by test or by the presentation of previous test reports that all thermal control materials subject to an ATOX environment shall conform as minimum to End Of Life (EOL) thermo-optical requirements. All other materials exposed to atomic oxygen should be either selected to be resistant to attack or protected to avoid in-orbit degradation of the material’s performance

The ATOX environment for the Swarm mission is defined in the Equipment Requirements Specification [AD 3]



8.3.6 Meteoritic/Debris Environment

836a deleted

8.3.7 Electrochemical Compatibility

837a Where the design requires dissimilar metals to be in contact, the choice of the pair of metallic materials used shall take into account ECSS-Q-70-71 or MSFC-SPEC-250 data. The maximum allowable EMF for the couple is to be 0.5V in controlled environments and 0.25V in uncontrolled environments (no temperature or humidity controls).

8.3.8 Corrosion

838a Aluminium surfaces shall be treated for corrosion protection with an approved chemical conversion coating, anodic treatment or surface primer.

838b Mechanical parts made of stainless steel shall be passivated when used in fracture critical applications.

838c Where non-corrosion resistant steels are specified, an approved surface coating shall be applied to the material surface. This requirement shall apply to GSE as well as flight equipment.

838d For all other materials, their ability to perform satisfactorily with respect to corrosion resistance in the untreated state over the life cycle of the mission (manufacture, storage, transportation and launch) shall be supported by acceptable data i.e. MSFC-HDBK-527. Otherwise appropriate surface treatments shall be applied and qualified for use on Swarm.

838e The application processes must be identified in the DPL and are subject to the technical requirements for approval and use of processes detailed in this document.

838f All surface coatings and treatments applied must be identified in the DML and are subject to the technical requirements for selection of materials detailed in this document.

8.3.9 Stress Corrosion

839a Metallic materials used in structural applications shall have a high resistance to Stress Corrosion Cracking (SCC) and shall be chosen from Table 1 of ECSS-Q-70-36..

839b Metallic materials and welds that are not listed in ECSS-Q-70-36 or whose SCC resistance is unknown shall be tested and categorized according to the requirements of ECSS-Q-70-37.

839c SCC evaluation shall be initiated through the submission of an SCC evaluation form, as detailed in Annex A of ECSS-Q-70-36. This requirement shall apply to GSE as well as flight components, flight spares and QM´s.

839d Where a metal listed in either Table 2 or 3 of ECSS-Q-70-36 is specified for use, it must be



subject to the SCC Evaluation form procedure prior to incorporation into qualification or flight model hardware.

8.3.10 Fluid Compatibility

8310a Materials that will be in contact with an identified fluid shall be compatible with that fluid. If compatibility data are not available, then testing shall be performed according NHB 8060-1, test number 15.

8.3.11 UV Radiation

8311a Where applicable, materials shall be evaluated for UV/particle radiation to ESA PSS-01-706. The specific radiation environment for the Swarm mission is defined in [AD 7]

8.3.12 Allowable Stress

8312a Allowable stresses for metallic materials shall be derived from MIL-HDBK-5. Other sources shall be subject to approval.

8312b Composite structure allowable stresses shall conservatively allow for degradation due to moisture, temperature and process variables.

8312c The material justification shall prove hardware structural integrity during storage, ground testing and on-orbit life.

8312d For non-metallic materials, the determination of allowable stresses shall be documented and referenced in the strength summary.

8.3.13 Limited Life Time

8313a Materials with limited lifetime characteristics shall be subject to lot/batch acceptance tests, and shall have the date of manufacture and shelf-life expiration date marked on each lot/batch.

8313b Storage conditions must be controlled to avoid degradation of the material. Storage conditions and shelf life should be stated in the procurement specification.

8313c Subcontractors shall provide systems that meet the requirements of ECSS-Q-70-22 for monitoring and controlling the time which limited life materials are exposed to normal working conditions i.e. ambient temperature rather than refrigerator or freezer conditions.

8.3.14 Magnetic Materials

8314a The use of mechanical parts or materials, that are magnetic shall not be used.

In exceptional cases, where magnetic parts cannot be avoided the use shall be justified though out the RfD/RfW process.



8314b Measures like verification activities shall be performed in case the impact on the magnetic field is not known or considered by the MPCB as mission performance critical.

8.3.15 Electrostatic Discharge Protection

8315a Materials used in areas sensitive to electrostatic discharge shall be selected to ensure that the maximum potential difference between any two points on the spacecraft is within the limits of the ESD/EMC specification for the mission. These are defined by [AD 3].

8.3.16 Hydrogen Embrittlement

8316a Metallic materials, in particular high strength steels and titanium/titanium alloys, which will be exposed to a hydrogen rich atmosphere during service or subject to processes capable of introducing hydrogen or hydrogen related features (metal hydrides) into the metal, shall be evaluated to determine susceptibility to embrittlement. Where a material is considered susceptible, the material and/or the processes to which the material is subject shall be optimized to completely eliminate the risk of embrittlement.

8.4 Mechanical Parts

The selection, evaluation and qualification of mechanical parts for SWARM equipments shall be conducted in accordance with the general technical requirements of ECSS-Q-70. This chapter is a supplement to clause 4.1 of ECSS-Q-70.

84a The Subcontractor shall maximize the use of existing ESA specifications

84b All mechanical parts shall be selected on the basis of previous space use in an identical application. Where a part does not have prior space use or was used in an alternative application, the part shall be deemed critical, as defined in section 8.2 of this document, and will be subject to the RFA procedure. The part shall be subject to an evaluation and qualification process and the approval for use reference in the DMPL.

84c Where a mechanical part is not controlled by an ECSS specification, current and fully configured specifications applicable to the relevant subcontractor should be used to ensure full control over the procurement and performance of the mechanical part. All specifications shall be referenced in the DMPL.

84d All materials that comprise a mechanical part must be individually assessed in accordance with the requirements of this document and listed on the DML. If required, they are to be evaluated through the submission of a RFA.



8.5 Procurement of Materials and Mechanical Parts

85a The controls and requirements applicable to the procurement of Materials and Mechanical Parts shall take into account the specific application for which those items were qualified and their proposed use.

85b Controls shall range from fully configured Procurement Specifications to Manufacturers’ Data Sheets, depending on the application. The level of control shall be determined by careful assessment of the following factors:

• The application in which the Material or Mechanical Part was qualified and is now being considered for use.

• The extent of receipt inspection test data.

• In-process Quality Control tests.

• Heritage of the Material and Mechanical Part in the wider Space Industry.

Where fully configured Procurement Specifications are not used, a justification shall be included in the entry on the Declared Materials List and this justification will be reviewed as part of the Design Review Process.

8.5.1 Materials and Mechanical Parts for Structural Applications

851a All Materials and Mechanical Parts designated for structural applications shall be procured to a fully configured procurement specification with the technical content and delivery conditions, including inspection and certification, agreed by both the supplier and procuring body.

The procurement specification shall define the critical material properties, requirements, test methods and acceptance criteria, including sampling frequency and test sample definition to ensure consistent performance in the material’s specific application.

This requirement shall ensure that Materials and Mechanical Parts are traceable to a defined standard and are of a consistent performance with respect to the critical parameters required by the intended application.

Note: 1. Catalogue numbers, manufacturers data sheets, material designations and specifications, which only define material composition, are not considered Procurement Specifications for structural applications.

2. If configured drawings are used as a means of Material or Mechanical Part procurement, then the same details that would be in the procurement specification (defined above) shall be included on the design drawings.

8.5.2 Materials and Mechanical Parts for Non-Structural Applications

852a For non structural applications, the method of procurement shall be considered together with the amount of in-house test data generated since the Material, or Mechanical Part was originally qualified.

If there is in-house receipt inspection and / or in-process Quality Control test data available for a Material or Mechanical Part, and such testing is on-going, then Procurement against the data specified in Manufacturers’ Data Sheets will provide an acceptable level of control to ensure that qualification status is maintained.



Note: 1. In the case of adhesives, receipt inspection data and in-process Quality Control data is to include mechanical tests. A simple review of paperwork, quantity checks and physical appearance inspection shall not suffice.

8.5.3 Films and Tapes

A third procurement option, where manufacturers’ Data Sheets can be used as a means of procurement, applies to materials which are used in the same basic condition as they were at the time of delivery, and which are widely used throughout the Space Industry.

For this category, the increased risk associated with not using a formal procurement specification is minimized by the widespread use of the material across the Space Industry, the consistent nature of the product and the limited extent of further in-house processing.

853a For films and tapes used in the manufacture of MLI the following factors are to be considered:

• Procurement from a recognised Space Industry supplier

• The use of a recognised Space Industry material. i.e. ECSS-Q-70-71 listed.

• Whether or not the Material and/or Mechanical Part is used by other companies for the manufacture of space hardware.

An essential part of this process shall be that certificates of conformance shall reference the specification / data sheet against which it was procured and be issued against performance values specified in the relevant specification / data sheet and not against the Material and Mechanical Part designation.

8.5.4 Procurement of Materials with Limited Shelf Life

854a For materials with a limited shelf life, packaging, shipping and storage conditions shall be specified to ensure the material does not degrade during shipping or storage. The shelf life, optimum storage and working conditions shall be defined by the procurement specification.

8.5.5 Procurement of Printed Circuit Boards

854a All Printed Circuit Boards (PCB’s) shall be manufactured from materials that have been procured to a current procurement specification.

854b The manufacturer of the PCBs shall hold a current approval for the manufacture of Space Qualified PCBs according ESA Standards. Equivalent standards from MIL may be accepted pending compliance review.

8.6 Processes

8.6.1 General The selection, evaluation and validation of processes for the Swarm shall be conducted in accordance with the general technical requirements of ECSS-Q-70. This chapter is a supplement to clause 5.2 of ECSS-Q-70.

851a The Subcontractor shall maximize the use of existing ESA specifications



851b All processes shall be selected on the basis of previous space use. Any critical process, as defined by section 8.2 of this document, shall be subject to a RFA and evaluated to demonstrate a capability to meet the Swarm requirements with an acceptable margin. The evaluation shall be documented and reference in the DPL.

851c Where a process is not controlled by an ECSS specification, current and fully configured specifications applicable to the relevant subcontractor should be used to ensure process control. All specifications should be referenced in the DPL

851d In particular, the following specifications shall be used for the appropriate processes:

ECSS-Q-70-07 Verification and approval of automatic machine wave soldering.

ECSS-Q-70-08 The Manual Soldering of High-Reliability Electrical Connections

ECSS-Q-70-10 Qualification of Printed Circuit Boards

ECSS-Q-70-11 Procurement of Printed Circuit Boards

ECSS-Q-70-18 The preparation, assembly and mounting of RF coaxial cables

ECSS-Q-70-25 The application of black coating Aeroglaze Z306

ECSS-Q-70-26 The crimping of high reliability electrical connections

ECSS-Q-70-28 The repair and modification of PCB and solder joints for space use

ECSS-Q-70-30 The wire wrapping of high reliability electrical connections

ECSS-Q-70-33 The application of thermal control coating PSG120FD

ECSS-Q-70-34 The application of black electrically conductive coating Aeroglaze H322

ECSS-Q-70-35 The application of black electrically conductive coating Aeroglaze HL300

ECSS-Q-70-38 High-reliability soldering for surface-mount and mixed-technology PCB

PSS-01-605 The capability approval programme for the hermetic thin-film hybrid microcircuits

PSS-01-606 The capability approval programme for hermetic thick-film hybrid microcircuits

PSS-01-703 Black anodising of aluminium using inorganic dyes

Where a subcontractor/supplier uses other specifications for the specific activities listed above they shall provide a statement that the alternative process complies with the requirements of the above documents.

Process Specification Number Activity

8.6.2 Mounting of EEE Parts

752a According to ECSS-Q-70 and chapter 8 of this document, the Subcontractor shall be able to demonstrate the adequacy and the qualification status of his mounting and assembly rules with respect to the use of various package technologies and materials.

8.7 Traceability

86a A unique reference number or code and a lot number shall identify materials and parts.



86b The Subcontractor shall ensure that it is possible, to reconstitute the material or part’s history, either individually (individual traceability) or by the manufacturing lot (lot traceability)

86c The Subcontractor shall ensure that the full traceability of materials and parts is maintained and recorded throughout the build and test programme of the spacecraft.

8.8 Proprietary Materials, Parts and Processes

87a Where materials, parts or processes are considered proprietary by the Subcontractor and/or supplier, EADS Astrium will respect the right of the third party to withhold certain details. However, sufficient information must be made available to EADS Astrium to allow a full evaluation of the Material, Part or Process with respect to the mission environment and lifetime requirements and to allow a full risk assessment to be carried out. The level of information exchange will be defined on a case-by-case basis dependant on the sensitivity of the requested information

8.9 Configuration Management

88a The Subcontractor shall implement a configuration system to control process change for his own processes and for the processes of his Lower Tier Subcontractors. These changes shall be submitted for approval through the PA reporting. In this case, EADS Astrium can organize a Material and Processes Control Board to analyze impacts of the process change on the qualification status of the process.

8.10 Materials, Parts and Processes List

89a The Subcontractor shall provide the following lists:

- Declared Material List (DML)

- Declared Mechanical Part List (DMPL)

- Declared Process List (DPL)

- Material & Process Critical Item List (CIL) as part of the general CIL

The Declared lists shall cover all Materials, Mechanical Parts and Processes used in the Flight unit/equipment, including those used at lower tier Subcontractor level, and each entry in the Materials, Mechanical Parts List shall contain the relevant procurement details.

89b The Subcontractor shall provide a 'Justification for Use' to demonstrate how the each ‘entry’ in the Declared list is Validated/Qualified for the specific Swarm application

Note: References to MAPTIS or ECSS-Q-70-71 listings WILL NOT be considered as Justification for Use.

Previous flight programmes where the Material, Mechanical Part or Process has been used for the same application, or a qualification test reference, under the same, or worse, environmental conditions is required as justification for use on Swarm.

89c The preparation and content of DML, DMPL and DPL documentation shall comply with ESA ECSS-Q-70A. The format and field definition for DML, DMPL and DPL documents is presented in Annex 3 Tables 1, 2 and 3.



89d Each document type (DML, DMPL and DPL) shall be submitted electronically in a format to be agreed with EADS Astrium.

8.11 Specific Requirements for Pyrotechnic Devices

The selection, procurement and application of pyrotechnic devices shall conform to the requirements of ECSS-E-30 Part 6A. All devices selected for use on the spacecraft must be subject to the qualification, acceptance and verification testing of this specification. In particular, the following requirements must be adhered to:

810a All devices must be qualified against the Swarm requirements in accordance with ECSS-E-30 Part 6A. This shall also include demonstration by test prior to launch.

810b All devices must be subject to lot acceptance testing upon receipt.

810c Prime and redundant devices must not be taken and installed from the same lot. Both lots must be subject to acceptance testing.

810d The pyrotechnic device sub-system must be subject to an end-to-end test prior to launch.



9 SOFTWARE PRODUCT ASSURANCE

9a All software requirements are defined by Applicable Document [AD 6]



10 GROUND SUPPORT EQUIPMENT

10.1 General

101a These requirements cover the design concerning to human and operational safety and hazard-reduction, human interface and technological requirements related to selection of materials or parts interfacing with flight hardware.

101b Quality assurance activities shall be applied to the following elements:

- Safety provisions including assurance that the flight hardware will not be exposed to potentially hazardous conditions during handling or testing.

- Reliability and safety of the interface with flight hardware by FMECA

- Configuration control

- Non-Conformance control

- Handling and Storage control

- Identification/marking

- Quality Assurance of materials and parts where contact is made to flight hardware

- Quality Assurance of software

10.2 Design and Manufacturing

102a GSE shall meet design requirements related to safety

102b No failure shall propagate towards flight equipment

102c Materials and parts interfacing materials shall not degrade flight equipment

102d GSE shall be designed and assessed in compliance with EU harmonized standards (EN Standards)

10.3 Procurement

Procurement of hardware or software shall be made in accordance with the following rules:

103a Procurement documentation (specifications or drawings) shall comply with the requirements placed on subcontractors,

101c The product liability requirements of § 6.6 shall be applied



103b Procurement sources shall be recognised as having the capability to perform the task to be subcontracted through a capability evaluation audit.

103c No hardware or software specifically developed for the GSE shall be delivered without EADS Astrium formal authorisation after inspection of hardware and after review of test results for hardware or/and software.

10.4 Parts and Materials

104a Parts and materials for GSE shall be consistent with safety requirements for these equipment and shall have practicable weight and be fully suitable for the intended use.

104b GSE equipment in contact with flight hardware shall have the same cleanliness levels than the flight H/W.

104c The outgassing requirements of ECSS-Q-70-71 shall be met where necessary

10.5 Safety Requirements for GSE

The general safety requirements for GSE are the followings:

105a GSE shall be designed avoiding sharp corners and edges.

105b All movable equipment shall have locking brake devices

105c GSE interface compatibility shall be proven before use on the flight or flight spare hardware

105d Lifting equipment shall be designed in accordance with the applicable European directives (see also chapter 6.6)

105e Lifting equipment shall be proof-loaded with 2x working load, where the working load is assumed to encompass any worst loading condition

105f Pressurised components shall be proof loaded with a proof pressure of 2x working pressure

105g Any lifting device, which may pass over the satellite, shall provide particle and oil shield protection

105h All propellant GSE shall be certified prior to usage

105i MGSE shall provide a ground to the satellite via the mounting interface



105j EGSE equipment shall in no way be able to endanger the satellite system and/or operating personnel

105k Fail-safe design shall be built-in (safe output levels in case of failure)

105l EGSE shall be manufactured and assembled to the good workmanship standards for ground based electronic Instrumentation and engineering practice of satellite testing

105m EGSE connectors for signal and power shall not be interchangeable

105n The electrical design shall be such that no electrical ground loops with respect to satellite interfaces are created

10.6 Maintainability Requirements for GSE

The following maintainability are applicable:

106a Components requiring scheduled maintenance shall be identified

106b Maintenance procedures, material and manpower shall be available for the operational lifetime.

106c Components requiring scheduled maintenance shall be easily accessible

10.7 Acceptance

107a After performance and acceptance testing a TRB/DRB with EADS Astrium invitation shall be held in order to verify that:

- Test results have been reviewed and found satisfactory.

- Non-conformances have been identified and resolved.

- End Item documentation has been prepared and conforms to agreed standard.

- The Declaration of Conformity (DoC) is complete and signed and part of the data package

- GSE is "CE" marked to indicate that they are compliant with applicable EU New approach directives (98/34/EC and 98/48/EC), irrespective of destination

107b The content of the EIDP shall be agreed between the subcontravtor and EADS Astrium



11 CONFIGURATION MANAGEMENT

11a The Configuration Control and Management Requirements AD 6 shall apply



12 PRODUCT ASSURANCE DOCUMENT REQUIREMENTS

12.1 PA plan

121a The PA plan shall describe the overall PA programme including reliability, quality, safety, parts, materials and software.

It shall include:

- Statement of policy

- Product Assurance Organization

- Schedule

- Documentation

- Reporting

- A KIP/MIP (Key Inspection Point/Mandatory Inspection Point) programme where criteria for KIP’s (to be attended by Subcontractor QA) and MIP’s (to be attended by Subcontractor QA and EADS Astrium) shall be defined.

- Cleanliness and Contamination Control

- Critical Items Control Programme

- Sizing of PA effort based on ranking list of critical items and characteristics

- Audit planning

- Reliability inputs/planning

- Safety inputs/planning

- Component Control Plan (if not a self standing document)

- Software PA plan (if not a self standing document)

- Compliance matrix against this set of requirements

- Information Flow plan including:

Task Definition

Activity Network

Data Exchange

12.2 EIDP

12.2.1 General

1221a Complete copy of the EIDP’s shall be submitted to EADS Astrium at least 10 working days prior to the Delivery Review (final updates may be given at the review).

The EIDP content is subject to EADS Astrium approval.

12.2.2 Content

1222a The EIDP is a collection of the data related to the manufacturing, assembly, integration and



test of a deliverable configuration item. It shall constitute the basis to support the acceptance of the product. One copy shall always accompany the hardware or software.

The following subjects in the form of documents shall constitute the EIDP: 1. Content of EIDP

2. Certificate of conformity with reference and statement

3. CE certificate of compliance

4. Open item register (Open works, differed works, loose items, temporary items)

5. Operational constraints, Operating and Maintenance operations/procedures, User manual

6. Specific instructions (Packaging, handling, storage, safety, cleanliness and shipping operations/procedures)

7. Delivery Review Board minutes

8. Deliverable items List

9. List of Spare items

10. Configuration status (as built, as design, reconciliation, list and status of Request for Deviations)

11. Change Requests status list

12. Non-conformances (major + minor) status list

13. Copies of NCR/NRB reports for major non-conformances

14. Request for Waivers status list

15. Copies of Waiver Requests

16. Test results and status (summary report and as run procedures)

17. Calibration curves and data

18. Contamination status (Cleanliness Certificate)

19. Proof load certificate

20. Limited life items (subject to wear out)

21. Top Assembly and Interface drawings

22. Log Book (*)

23. Copies of KIP & MIP reports

24. List of Red and Green Tag items including status at delivery

25. List of lower tiers EIDP’s and log book (if applicable)

26. Qualification status list (QSL)

27. Hardware and Software maintenance manual (for GSE)

28. Maintenance plan (for Software)

29. Verification Control Document (VCD)

30. Final Critical Items List (CIL)

31. Photographs of all flight hardware (down to board level for electronics)

32. Shipping documents

(*) A logbook shall be delivered with each end item identifying the chronological sequence of operations, including tests, performed on the product, starting at least from the beginning of the first acceptance test sequence.

12.2.3 Other PA Documents

1223a In addition above document requirements, Lists, Plans, Reports; etc as required by the individual chapters of this PA Requirements for subcontractor document shall be established



and maintained.



ANNEX 1a

EEE PARTS SCREENING REQUIREMENTS FOR

NON-REDUNDANT APPLICATION



EEE PART FAMILY QUALITY LEVEL COMMENTS

ESCC MIL CECC/ other

Cables & wires, low frequency ESCC 3901 level B

MIL-DTL-27500

MIL-W-22759

- Tests done in ESCC chart II, not included in MIL group A, have to be done on MIL parts.

- A & B test to be applied if Ag thickness < 2 µm on non MIL qualified wires

Cables, coaxial

ESCC 3902 level B MIL-C-17

- Tests done in ESCC chart II, not included in MIL group A, have to be done on MIL parts.

- A & B test to be applied if Ag thickness < 2 µm on non MIL qualified wires

Capacitors, chip, ceramic ESCC 3009 level C

MIL-PRF-55681 EFR level R min

MIL-PRF-123 See note 1

Capacitors, molded, ceramic

ESCC 3001 level C

MIL-PRF-123

MIL-PRF-20

EFR level R min

MIL-C-39014

EFR level R min

See note 1

Capacitors, glass

(CYR type)

MIL-PRF-23269

EFR level R min Lifetest 1000H /125°C/ 1.5 Ur

is mandatory on each lot.

Capacitors, mica ESCC 3007 level C

MIL-PRF-87164 EFR level R min

Capacitors, chip, tantalum

(TAJ, T495, CWR11, )

ESCC 3011 level C

ESCC 3012 level C

MIL-PRF-55365

WFR level C min All capacitors shall be surge

current tested.

Capacitors, non-solid tantalum, electrolytic (CLR79)

ESCC 3003 level C

MIL-PRF-39006

WFR level C min

39006 / 22, 25, 30, 31 and "H" designated devices are recommended

Capacitors, solid tantalum, electrolytic (CSR type)

ESCC 3002 level C

MIL-PRF-39003

WFR level C min Only CSR 21 and CSR 33

shall be surge current tested.

Capacitors, super metallized plastic film, (CRH type)

ESCC 3006 level C MIL-PRF-83421

EFR level R min




ESCC MIL CECC/ other MIL

Capacitors, super metallized plastic film, (CHS type)


Capacitors, variable ESCC 3010 level C MIL-DTL-14400 Not recommended for new design

Connectors, circular and rectangular, non filter contacts

ESCC 3401, level B

MIL-DTL-24308 (rect.)

MIL-DTL-38999

(circ) Class G or H

GSFC-311-P

Connectors, circular and rectangular, filter contacts

ESCC 3405 level B Standard space

FR 165 type

Lifetest 1000H /125°C/ 1.5 Ur is mandatory on each ceramic lot.

Connectors, coaxial RF ESCC 3402 level B MIL-PRF-39012

Crystals resonators

ESCC 3501 level B MIL-PRF-3098

Crystals shall be built using a cultured premium Q swept material

Diodes, low frequency ESCC 5000 level B

MIL-PRF-19500, JANS

PIND test (see note 2).

Diodes, high frequency ESCC 5010 level B

MIL-PRF-19500, JANS


Minimum burn-in duration shall be 240h.

Filters, EMI ESCC 3008 level B

MIL-PRF-28861,

Level S

Fuses (Wire link) MIL-PRF-23419 Take care of specific derating rules to define the range.

Burn in is mandatory on each lot .

Fuses (CERMET) MIL-PRF-23419

Heaters ESCC 4009 level C GSFC-S-311-P79

Hybrids PSS-01-608 level B MIL-PRF-38534 class K

Inductors, coils, (molded ) ESCC 3201 level C

MIL-PRF-39010 ,

EFR level R min

MIL-STD-981

Equiv Class S

Inductors, coils (non molded)

ESCC 3201 level C MIL-STD-981

Equiv Class S





Integrated circuits ESCC 9000 level B

MIL-PRF-38535, Class V or level S


Microwave passive parts (isolators, power dividers)

ESCC 3202 level B

MIL-PRF-23971

Microwave passive parts (coupler coaxial)


Microwave passive parts (attenuators, loads)

ESCC 3403 level C MIL-PRF-39030 (loads)

MIL-DTL-3933 (attenuators)

Oscillators (hybrids) MIL-PRF-55310 (class 2) Class S

Resistors, fixed, film,

High precision (RNC, RLR, MB x xxxx type, except RNC90)

ESCC 4001 level C

MIL-PRF-55182

EFR level R min

MIL-PRF-39017

EFR level R min

CECC 40101

ER level E7 min

Resistors, high precision, fixed, metal foil (RNC90)

ESCC 4001 level C MIL-PRF-55182/9

EFR level R min

100 Kohm max allowed is also applicable to MIL parts

Resistors, network, thick film


Resistors, current sensing (RLV type)

MIL-PRF-49465

Resistors, power, fixed, wire wound (RWR type)


EFR level R min

Resistors, power, fixed, wire wound, chassis mounted (RER type)


EFR level R min

Resistors, precision, fixed, wire wound (RBR type)

MIL-PRF-39005

EFR level R min

Not recommended for new design

Resistors, fixed, film, high voltage (RHV type)

MIL-PRF-49462

Resistors, fixed, thick and thin film chip

ESCC 4001 level C

MIL-PRF-55342

EFR level R min

CECC 40401

level E7 min





Relays, electromagnetic, latching and non-latching

ESCC 3601/3602,

Level B

Surface Acoustic Waves (SAW) filters

ESCC 3502 level B

Solar cells ESA PSS-01-604

Switches, thermostatic ESCC 3702 level B MIL-PRF-24236

Switches, non RF ESCC 3701 level B MIL-PRF-8805

Thermistors ESCC 4006 level B MIL-PRF-23648 GSFC-S-311-P18

Transformers ESCC 3201 level C MIL-STD-981

Equiv Class S

Transistors, low frequency

ESCC 5000 level B

MIL-PRF-19500, JANS

- PIND test (see note 2).

Transistors, High frequency, (bipolar and GaAs)

ESCC 5010 level B

MIL-PRF-19500, JANS


- HTRB and burn-in may be mixed according to part

Technology.

Opto-couplers ESCC 5000 level B MIL-PRF-19500, JANS


Note 1 :

For ceramic capacitors procured through ESA or MIL specifications but in an extended, non qualified, range of values or not belonging to ESA QPL or MIL QML/QPL, the humidity, steady state, low voltage test (cf ESCC 3009, section 5.2.2) is mandatory if U rated < 50V and C > 1µF

Note 2 :

Particle Inducted Noise Detection (PIND) test is applicable to all cavity packages of active components, except non-metal packaged diodes.

- For semiconductor devices the JANS criteria is applicable per MIL-PRF-19500.

The lot shall be submitted to 100 % PIND testing according to test condition A (per method 2052 of MIL-STD-750).

- For integrated circuits the Class level S criteria is applicable per MIL-PRF-38535.

The lot shall be submitted to 100 % PIND testing according to test condition A (per method 2020 of MIL-STD-883).



ANNEX 1B

EEE PARTS SCREENING REQUIREMENTS FOR

REDUNDANT APPLICATION




ESA/SCC MIL CECC/ other MIL (see note 2)

Cables & wires, low frequency

ESCC 3901 level B MIL-DTL-27500

MIL-W-22759

Cables, coaxial ESCC 3902 level B MIL-C-17

Capacitors, chip, ceramic

ESCC 3009 level C MIL-PRF-55681 EFRL R min

CCQ guaranteed

and preferably CECC qualified

CECC quality level limited to monochip > 25V.

Capacitors, molded, ceramic

ESCC 3001 level C

MIL-PRF-20

EFRL R min

MIL-PRF-39014

EFRL R min

CCQ guaranteed


CECC quality level limited to monochip > 25V.

Capacitors, glass

(CYR type)

ESCC 3004 level C

MIL-PRF-23269 EFRL R min

Life test 1000H /125°C/ 1.5 U is mandatory on each lot.

Capacitors, mica ESCC 3007 level C


Capacitors, chip, tantalum

(TAJ, T495, CWR11, …)

ESCC 3011 level C

ESCC 3012 level C

MIL-PRF-55365 WFRL C min

CCQ guaranteed


All capacitors shall be surge current tested.

Capacitors, non-solid tantalum, electrolytic

(CLR 79)

ESCC 3003 level C


CCQ guaranteed


Capacitors, solid tantalum, electrolytic

(CSR type)

ESCC 3002 level C


CCQ guaranteed


Only CSR 21 and CSR 33 shall be surge current tested.

Capacitors, super metallized plastic film, (CRH type)


Capacitors, super metallized plastic film, (CHS type)


Capacitors, variable ESCC 3010 level C MIL-DTL-14400 Not recommended for new design

Connectors, circular and rectangular, non filter contacts

ESCC 3401 level B

MIL-DTL-24308 (rect.)

class M, D or K

MIL-DTL-38999 (circ) class G or H

GSFC-311-P

Connectors, circular and rectangular, filter contacts

ESCC 3405 level B MIL-DTL-24308 (rect.) class M, D or K

Life test 1000h-125°C is mandatory on each ceramic lot

Connectors, coaxial RF ESCC 3402 level B

MIL-PRF-39012 “Space equivalent” quality level may be proposed.





Crystals resonators

ESCC 3501 level C Crystal shall be built using a cultured premium Q swept material

Diodes, low frequency ESCC 5000 level C

MIL-PRF-19500, JANTXV, class J


Diodes, high frequency ESCC 5010 level C



Filters, EMI ESCC 3008 level C

MIL-PRF-28861,

EFRL R min

Fuses CERMET

MIL-PRF-23419

Heaters ESCC 4009 level C GSFC-S-311-P79

Hybrids ESA PSS-01-608 level C

MIL-PRF-38534 class H

Procured inductors, RF

molded & chip

Procured transformers

ECC 3201 level C


Integrated circuits ESCC 9000 level C

MIL-PRF-38535, class Q, class M, class T, class level B


Microwave passive parts

(isolators, power dividers)



(coupler coaxial)



(attenuators, loads)

ESCC 3403 level C MIL-PRF-39030 (loads)

MIL-DTL-3933 (attenuators)

Oscillators (hybrids)

MIL-PRF-55310

(class 2) Class S

Resistors, fixed, film,

high precision (RNC, RLR or MBx xxxx type, except RNC90)

ESCC 4001 level C

MIL-PRF-55182

EFRL R min


CECC qualified

Resistors, high precision, fixed, metal foil (RNC90)

ESCC 4001 level C MIL-PRF-55182/9 EFRL R min

CECC product is allowed.

100 Kohm max allowed is also applicable to MIL parts

Resistors, network, thick film


M part number level

CCQ guaranteed


Resistors, current sensing (RLV type)

MIL-PRF-49465 Other types are allowed, covered by other MIL specs.





Resistors, power, fixed, wire wound (RWR type)


CCQ guaranteed


Resistors, power, fixed, wire wound, chassis mounted (RER type)


CCQ guaranteed


Resistors, precision, fixed, wire wound (RBR type)


CCQ guaranteed and preferably CECC qualified

CECC values limited to SCC ones

Not recommended for new design

Resistors, fixed, film, high voltage (RHV type)

MIL-PRF-49462

Resistors, fixed, thick and thin film chip


CCQ guaranteed and preferably CECC qualified

Relays, electromagnetic, latching and non-latching

ESCC 3601/3602,

level B

MIL-PRF-39016

EFRL S

Products based on MIL-PRF-39016 are allowed with equivalent tests to SCC screening.

Solar cells PSS-01-604

Switches, thermostatic ESCC 3702 level C MIL-PRF-24236

Switches, non RF ESCC 3701 level C MIL-PRF-8805

Thermistors ESCC 4006 level C

MIL-PRF-23648 GSFC-S-311-P18

Transistors,

low frequency

ESCC 5000 level C



Transistors,

High frequency,

(bipolar and GaAs)

ESCC 5010 level C



- HTRB and burn-in may be

mixed according to part

technology.

Opto-couplers

ESCC 5000 level C MIL-PRF-19500, JANTXV


(1) Particle Inducted Noise Detection (PIND) test is applicable to all cavity packages of active components, except non-metal packaged diodes.

• For semiconductor devices the JANS criteria is applicable per MIL-PRF-19500.The lot shall be submitted to 100 % PIND testing according to test condition A (per method 2052 of MIL-STD-750).

• For integrated circuits the Class level S criteria is applicable per MIL-PRF-38535.The lot shall be submitted to 100 % PIND testing according to test condition A (per method 2020 of MIL-STD-883).

PIND test may be omitted based on justification provided by the subcontractor or the procurement responsible.

(2) A justification document is required for the use of parts procured through CECC standards



ANNEX 2

REQUESTED FORMAT FOR EEE PART “DCL”



The Subcontractor DCL shall identify programme, product and Subcontractor name and shall contain the following items:

AS DESIGNED

DCL

AS BUILT

DCL

Part number X X

Type or electrical function X X

Value or range of values Optional X

Tolerance (if applicable) Optional X

Description of the part X X

Manufacturer / country X X

Package X X

Procurement responsible X X

Generic procurement specification X X

Detail procurement specification (with issue and revision for non qualified or commercial parts)

X X

Variant X X

Quality level and LAT/QCI/TCI level X X

PAD reference (if applicable) X X

Comments (complementary tests,..) X X

Radiation performance data (TID, SEE) X1) X1)

Change identification for the "as built" DCL (e.g. RFW or NCR reference)

NA X

Lot Date Code NA X

Notes:

1) For standard parts, where no PAD is required


The copyright in this document is the property of EADS Astrium SAS/Ltd/GmbH and the contents may not be reproduced or revealed to third parties without prior permission of that company in writing.

ANNEX 3:

REQUESTED FORMAT FOR DECLARED MATERIAL, MECHANICAL PART AND PROCESS LIST



TABLE 1: DECLARED MATERIALS LIST FIELD DEFINITIONS

Field Name Description

Company Company code or identifier

Item No. Entry identifier: two part number with the first being the material category from PSS-01-700 and the second a running number within the category

Item Status Issue status of entry

Commercial Identification Commercial ID

Chemical Nature Chemical nature of material

Material Spec. Material specification number

Manufacturer/vendor Material manufacturer/vendor

Procurement Spec. Procurement specification

Applicable Process Details of applicable process i.e. surface treatment, mixing and curing of resins and adhesives (mix ratios, cure times and temperatures) heat treatment conditions etc.

Process Specification Process specification (s)

Thermal Treatment Thermal processing details & associated specification

Use & Location Material application and location on hardware

Rad. Radiation code from PSS-01-700

Amb. Ambiance code from PSS-01-700

Temp. Temperature code from PSS-01-700

Size Size code from PSS-01-700

CORR. General corrosion rating from PSS-01-700

SCC SCC rating from PSS-01-700/ECSS-Q-70-36

FLAM. Flammability rating from PSS-01-700/ECSS-Q-70-21 if applicable

OFFG. Offgassing rating from PSS-01-700/ECSS-Q-70-29 if applicable

OUTG. Outgassing rating from PSS-01-700/ECSS-Q-70-02 if applicable

Justification Any information required to achieve approval i.e. RFA acceptance, qualification report, waiver

EADS Astrium App. Approval status of EADS Astrium

ENDCUSTOMER App. Approval status of ENDCUSTOMER (ESA)



TABLE 2: DECLARED MECHANICAL PARTS LIST FIELD DEFINITIONS



Item No. Entry identifier: two part number with the first being the mechanical part category from PSS-01-700 and the second a running number within the category


Commercial Identification Commercial ID

Type of Part Type of part i.e. washer, valve-one way

Summary of materials Materials that comprise the part. These must also be listed in the DML.

Manufacturer/vendor Material manufacturer/vendor

Procurement Spec. Procurement specification

Elementary Functions Prime function of part

Main Characteristics Prime characteristics of part

Use & Location Material application and location on hardware

Rad. Radiation code from PSS-01-700

Amb. Ambiance code from PSS-01-700

Temp. Temperature code from PSS-01-700

Criticality Whether or not the part is considered critical






TABLE 3: DECLARED PROCESSES LIST FIELD DEFINITIONS



Item No. Entry identifier: two part number with the first being the process category from PSS-01-700 and the second a running number within the category


Process Identification Process name, title etc

Process Spec. Process specification

Manufacturer/vendor Company performing process

Process description Description of the process

Use & Location Process application and location on hardware

Elementary Functions Prime function of part

Associated DML/DMPL items Items in the DML/DMPL associated with the particular process

Criticality Whether or not the part is considered critical


