As the Orion spacecraft Integrity swings behind the far side of the moon this morning, the four-person crew of Artemis II is entering the most hazardous phase of their historic 10-day journey. While the mission has been hailed as a triumph for NASA and its international partners, the “free-return” trajectory that will sling the capsule back toward Earth on April 10 brings with it a gauntlet of specific, life-threatening dangers.

From the relentless bombardment of deep-space radiation to a controversial heat shield design that has never been tested with humans at these speeds, the path home is anything but certain.

The Radiation Gauntlet

Now that Integrity has officially entered the moon’s “sphere of influence”, the crew—Commander Reid Wiseman, Victor Glover, Christina Koch, and Jeremy Hansen—is fully exposed to the harsh environment of deep space. Unlike astronauts on the International Space Station, who are shielded by Earth’s magnetic field, the Artemis II crew is facing roughly three times the daily radiation dose.

The most immediate threat is a Solar Particle Event (SPE). With the Sun currently near the peak of its activity cycle, a sudden solar flare could send clouds of charged particles hurtling toward the capsule within hours. To survive such an event, the crew has been trained to retreat into storage lockers under the capsule floor and construct a “pillow fort” using stowage bags to increase the density of their shielding.

The Heat Shield Gamble

The single greatest technical concern for mission controllers remains the Orion’s massive Avcoat heat shield. During the uncrewed Artemis I test flight in 2022, the shield experienced “charring” and lost chunks of material in an unexpected manner.

Because the heat shield for Integrity was already installed before those results were fully understood, NASA engineers had to develop a workaround rather than a replacement. The crew will attempt a steeper, more precise reentry path to manage the 2,700°C temperatures—half as hot as the surface of the Sun—that the capsule will endure as it hits the atmosphere at 40,000 km/h.

Mechanical Vulnerabilities and “Simple” Failures

Even “down-to-earth” systems have posed risks. Earlier in the flight, the crew had to perform emergency repairs on a faulty waste-management system. While seemingly minor, a failure in life support or waste management can quickly become a mission-ending hazard in the cramped quarters of the Orion capsule.

Additionally, flight controllers are closely monitoring a minor glitch in the helium pressurization system within the service module. While the mission is currently using a backup system, any further degradation of the propulsion hardware could complicate the critical course corrections needed for a safe splashdown.

The Critical Return

As Integrity begins its long trek back from the lunar far side, the margin for error narrows. The final “priority one” objective is the safe deployment of the capsule’s 11-parachute sequence. If the parachutes fail to deploy at the correct altitude or sequence, the high-speed descent into the Pacific Ocean would be fatal.

For now, the crew remains in high spirits, having recently celebrated their proximity to the lunar surface. But as they prepare for the high-stakes reentry on April 10, the “Integrity” of their namesake craft will face its ultimate test.

The Orion spacecraft Integrity is designed with a “redundancy at every possible level” philosophy to ensure crew safety during its 10-day mission. Rather than a single number of “backup systems,” the craft utilizes multiple layers of hot, warm, and cold redundancies across all critical functions. 

Key Redundant Systems 

Flight Computers: Orion features four identical primary flight computers that run in parallel (“hot redundancy”), meaning each can operate the craft independently. If all four fail, a fifth backup computer (“warm redundancy”) with different software is ready to take over.

Propulsion: The main engine is supported by eight auxiliary engines that can perform all necessary maneuvers if theprimary engine fails. Additionally, 24 smaller thrusters provide attitude control.

Power: The spacecraft has four independent solar array wings. It can continue to operate safely with only three, or even two, wings functional.

Life Support: The Environmental Control and Life Support Systems (ECLSS) have built-in backups for cabin pressure, oxygen, and CO2 removal. In a worst-case scenario, the crew’s Orion Crew Survival System (OCSS) suits can keep them alive for up to six days.

Navigation & Communication: The craft uses triple-redundant navigation units. It also features an optical navigation camera that can determine Orion’s position without any communication with Earth.

Parachutes: Orion has three main parachutes but is designed to land safely with only two if one fails to deploy. 

Redundancy Categories 

NASA and Lockheed Martin categorize these backups as follows: 

Hot Redundancy: Systems operating in parallel (e.g., the four primary computers) where the first command to arrive is acted upon.

Warm Redundancy: Systems that are powered on but not active, ready to take over with no boot-up time (e.g., the fifth backup computer).

Cold Redundancy: Systems that are powered off and require manual activation after a failure.