The operating scenario
Ground contact is intermittent and a command arrives well after it was issued. Meanwhile, onboard actions may be operating within a previously delegated scope. Communications reachability and command authority need separate treatment.
The proposed authority boundary
Establish whether the local authority and evidence permit the received command or delegated action at the decision point. The design scope includes the intended asset, permitted activity, validity and assumptions about local time and state.
What the partner evaluates
- A delayed command is evaluated against its applicable validity conditions.
- Pre-planned onboard actions stay within their delegated authority.
- Clock uncertainty, restart and persistent-state conditions are exercised.
- Recovery does not treat a restored link as blanket permission for queued commands.
Platform responsibilities
A disconnected spacecraft cannot immediately discover a new revocation issued on the ground. The mission must define how validity and contingency policies handle this limit. Radiation tolerance, flight hardware, timing and mission qualification require separate evaluation.
An application and evaluation scenario. No radiation qualification or in-orbit demonstration is claimed.
