Wikipedia

1961 Goldsboro B-52 crash

The 1961 Goldsboro B-52 crash was an accident that occurred near Goldsboro, North Carolina, United States, on 24 January 1961. A Boeing B-52 Stratofortress carrying two 3.8-megaton Mark 39 nuclear bombs broke up in mid-air, dropping its nuclear payload in the process. The pilot in command, Walter Scott Tulloch, ordered the crew to eject at 9,000 ft (2,700 m). Five crewmen successfully ejected or bailed out of the aircraft and landed safely; another ejected, but did not survive the landing, and two died in the crash.[1] Information declassified since 2013 has shown that one of the bombs was judged by nuclear weapons engineers at the time to have been only one safety switch away from detonation, and that it was "credible" to imagine conditions under which it could have detonated.[2][3]

1961 Goldsboro B-52 crash
One of the Mk 39 nuclear weapons at Goldsboro, largely intact, with its parachute still attached
Accident
Date24 January 1961
SummaryStructural failure
SiteFaro, Nahunta Township, Wayne County, 12 miles (19 km) north of Goldsboro, North Carolina
35°29′34.23″N 77°51′31.39″W / 35.4928417°N 77.8587194°W / 35.4928417; -77.8587194
Aircraft
Aircraft typeB-52G
OperatorStrategic Air Command, United States Air Force
Registration58-0187
Flight originSeymour Johnson Air Force Base
DestinationSeymour Johnson Air Force Base
Crew8
Fatalities3
Survivors5

Accident

edit
 
 
Accident scene
 
Seymour Johnson AFB
class=notpageimage|
North Carolina

The aircraft, a B-52G, was based at Seymour Johnson Air Force Base in Goldsboro, and part of the Strategic Air Command's airborne alert mission known as "Cover All" (a predecessor to Operation Chrome Dome), which involved a continuous flow of staggered, nuclear-armed bombers on a "ladder" route into the Canadian Arctic and back.[4][a]

Around midnight on 23–24 January 1961, the bomber had a rendezvous with a tanker for aerial refueling. During the hook-up, the tanker crew advised the B-52 aircraft commander, Major Walter Scott Tulloch, that his B-52 had a fuel leak in the right wing. The refueling was aborted, and ground control was notified of the problem. The B-52 was directed to assume a holding pattern off the coast until the majority of fuel was consumed. However, when it reached its assigned position, the pilot reported that the leak had worsened and that 37,000 pounds (17,000 kg) of fuel had been lost in three minutes. The aircraft was immediately directed to return and land at Seymour Johnson Air Force Base.[7]

As the aircraft descended through 10,000 feet (3,000 m) on its approach to the airfield, the pilots were no longer able to keep it in stable descent and lost control. An entire wing of the aircraft apparently was lost. The pilot in command ordered the crew to abandon the aircraft, which they did at 9,000 feet (2,700 m). Five men landed safely after ejecting or bailing out through a hatch, one did not survive his parachute landing, and two died in the crash.[1][7] The third pilot of the bomber, Lt. Adam Mattocks, is the only person known to have successfully bailed out of the top hatch of a B-52 without an ejection seat.[8] The crew's final view of the aircraft was in an intact state with its payload of two Mark 39 thermonuclear bombs still on board, each with yields of 3.8 megatons.[b] Sometime between the crew ejecting and the aircraft crashing, the two bombs separated from the aircraft.[7]

The pilotless aircraft broke up in the air shortly after the crew ejected. Witnesses reported seeing two flashes of red light, suggesting that fuel explosions contributed to the breakup of the plane. At 12:35 a.m. EST on January 24, the remaining pieces of the B-52 impacted with the ground. The aircraft wreckage covered a two-square-mile (5.2 km2) area of tobacco and cotton farmland at Faro, about 12 miles (19 km) north of Goldsboro. The arrangement of the aircraft pieces suggested that several pieces of the B-52 were upside down when they struck the ground.[10][11]

Explosive ordnance disposal (EOD) teams from Seymour Johnson and other bases arrived on the scene quickly, disarming the one bomb that was easily accessible. Representatives from the Albuquerque Operations Office of the U.S. Atomic Energy Commission were alerted to the accident on the morning of January 24. A team of scientists and engineers from the AEC, Sandia National Laboratories, and Los Alamos National Laboratory assembled at Kirtland Air Force Base in New Mexico. They were joined by representatives from the Department of Defense Nuclear Safety Research Directorate. They flew to Seymour Johnson AFB on a C-47 cargo plane, arriving at approximately 10:15 p.m. EST on the night of January 24.[7]

Weapons

edit

Mark 39 Mod 2 nuclear bombs

edit
 
A basic diagram of a Teller-Ulam design thermonuclear weapon. Of note are the "primary" (labeled "A") and the "secondary" (labeled "B") subcomponents. The Mark 39 Mod 2 likely had a very similar basic arrangement, along with a firing set (X-Unit) for injecting gas into the core of the "primary" and detonating it.
 
Diagram of the external features of a Mark 39 nuclear bomb, with the warhead compartment labeled as "A" and the parachute pack labeled as "B". The location of the access panel for the Arm/Safe Switch is indicated at the rear of the bomb, before the parachute pack. On the top of the parachute pack is the compartment from which the arming rods would be withdrawn. On the nose would be written: "REJECT IF DENTED OR DEFORMED".
 
The "normal trajectory sequence" for the use of a Mark 39 Mod 2 nuclear bomb, indicating the arming sequence under normal (non-accident) nuclear weapons use conditions.
 
An image of the MC-772 Arm/Safe Switch of the same kind used in the Mk 39 Mod 2 nuclear bombs involved in the 1961 Goldsboro accident.

The two bombs involved in the Goldsboro accident were Mark 39 Mod 2 thermonuclear weapons with a maximum predicted yield of 3.8 megatons of TNT equivalent. Like all Teller-Ulam design thermonuclear weapons, its warhead consisted of two distinct parts ("stages"), the "primary" (a mostly-fission weapon which initiates the detonation) and the "secondary" (the portion of the weapon that, under the influence of the energy released by the "primary," undergoes a nuclear fusion reaction and also produces additional nuclear fission reactions). In the case of the Mark 39 Mod 2, the "primary" was also boosted, meaning that at the moment of detonation a gaseous mix of deuterium and tritium was injected into its core, which would generate fusion reactions at the moment of detonation, producing neutrons that would increase the efficiency of the "primary". The pit of the primary was entirely composed of enriched uranium ("all-oralloy"), with no plutonium, and was a sealed-pit, meaning that it was fully-assembled at all times. The Mark 39 Mod 2 warhead was itself enclosed in a gravity bomb casing which had a compartment containing a drogue parachute that both allowed the aircraft dropping it to move to a safe distance, and allowed it to be detonated on the surface by a contact fuze without risk of the weapon breaking on contact with the ground. The weight of the assembled bomb was between 9,000 and 10,000 pounds (4,100 and 4,500 kg).[12]

Immediately after the Goldsboro accident, technicians from Sandia National Laboratories, the national laboratory which had the primary responsibility of nuclear warhead safety engineering, subjected the recovered weapons to careful analysis to determine how close they were to a possible nuclear detonation. Various accounts of their conclusions have circulated over the years, with some emphasizing the closeness of the detonation, and some emphasizing the success of the various safety features of the nuclear warheads. To make sense of their analysis and the controversies, it is first necessary to understand what the normal firing sequence of a Mark 39 Mod 2 used in combat conditions would be.

The Mark 39 bombs would be suspended in the two bomb bays of the B-52 plane carrying it, one in front of other. "Arming rods" were extended out of each weapon, and held in place with "safing pins." Prior to normal use, the "safing pins" would need to be pulled out of the bomb, which could be done by the crew by means of a lanyard that was connected to them. Additionally, prior to dropping the bomb, the pilot would need to operate a switch inside the cockpit (the T-380 Readiness Switch) that would operate the MC-722 Arm/Safe Switch inside the Mark 39 bomb itself. The Arm/Safe Switch was a low-voltage, solenoid-operated electro-mechanical switch that was kept in the "Safe" position until a deliberate choice was made to cause a nuclear detonation, but could be switched from "Safe" to "Arm" by a 28-volt electrical signal.[13][14][15] The Mark 39 Mod 2 could only be detonated as a "contact" burst (and not an airburst).[16] The bomb bay had a solenoid-operated lock system which would deploy the parachute automatically upon release if operated, using an MC-834 Explosive Actuator, as opposed to a free-fall release.

Once the bomb cleared the bomb bay and the arming rods were retracted, they would trigger the MC-845 Bisch generator they were connected to. This was a single-pulse generator that began the overall firing sequence. The Bisch generator would send an initiation signal to the MC-640 low-voltage thermal battery pack, as well as the MC-543 Timer. The timer would begin to count down. The retraction of the arming rods would also close valves sealing a reference chamber in the MC-832 Differential Pressure Switch, a barometric fuze for detecting the bomb's altitude.[13]

After the weapon had fallen a required vertical distance, the differential pressure switch would close contacts which passed battery current through the MC-772 Arm/Safe Switch and from there to the MC-788 High Voltage Safing System, which is armed by continual current being applied to it.[17] Upon receiving this current, the MC-788 would then connect the (not yet-charged) high-voltage thermal battery to the X-Unit, the electrical device that provides a high voltage signal to the detonators used in the "primary" stage of the weapon.[c] After the timing circuit completed its countdown of 42 seconds, it would then deliver initiation power to the MC-641 High Voltage Thermal Battery pack. This would begin to generate its full voltage of 2500 volts within one to two seconds, which would be applied directly to the trigger circuit and, through the MC-788 High Voltage Safing System, to the capacitor bank of the X-Unit. Once the bomb impacted the ground, a crush switch on the nose of the bomb (the MC-787 Trigger Circuit) would be closed and trigger the X-Unit to discharge its capacitors and initiate the high-explosive system in the "primary" stage of the weapon.[13][20]

At some point in the above sequence, not indicated in declassified documents (possibly because of its classified nature), "squibs" on the Los Alamos Laboratory 1A Valve Mechanism would fire and cause the gas from the boost reservoir to be injected into the "primary" of the bomb.[13][d]

By the time of the Goldsboro accident, the MC-722 Arm/Safe switch had been replaced in some Mark 39 Mod 2 units with another switch, the MC-1288 Arm/Safe switch, which also restricted the charging of the low-voltage thermal battery if the switch was in the "Safe" position. This was done to ensure additional safety for the weapons, and would remove the need for safing pins in the pullout rods. This modification (designated as Alt 197) had been approved in January 1960, but had not been performed on either of the bombs involved in the Goldsboro accident.[22][e]

For a parachute delivery, the Mark 39 would need to be released between 3,500 feet (1,100 m) and 5,700 feet (1,700 m) above the target. For a free-fall delivery, it would need to be released at least 35,000 feet (11,000 m) above the target, or else it would hit the ground prior to the timer circuit completing its countdown and the X-Unit being charged.[24]

The two Mark 39 Mod 2 nuclear bombs involved in the Goldsboro crash had distinctly different outcomes. Official reports identified them as weapon no. 1 (or bomb no. 1) and weapon no. 2 (or bomb no. 2), with the first's parachute having deployed and the second having crashed into the ground in free-fall without any decrease in its speed. Weapon no. 2 was kept in the forward bomb bay of the aircraft, while weapon no. 1 was in the aft bomb bay.[25]

Weapon No. 1: Serial No. 434909 (parachute)

edit
 
Weapon No. 1 as it was discovered by the EOD team after the accident.
 
The "probable trajectory sequence" of Weapon No. 1 in the Goldsboro Accident.

Weapon no. 1, identified as serial number 434909 (and kept in the aft bomb bay), was flung out of the aircraft at an altitude of around 9,000 feet (2,700 m) above the ground. It apparently twisted from its rack in a way that caused the "safing pins" on its arming rods to pull out longitudinally and without any sign of damage, despite not having been pulled from the crew compartment. Once it left its rack, the bomb dropped in such a way that its arming rods were pulled out in much the same manner as an intentional drop sequence would be. This caused its MC-845 Bisch generator to be actuated, initiating the MC-640 low-voltage thermal battery pack and the MC-543 timer. The explosive actuators triggered the deployment of the bomb's parachute as in normal functioning.[11][26]

The MC-832 Differential Pressure Switch operated as normal, and passed the battery current to the MC-722 Arm/Safe switch. This switch was found by the initial explosive ordnance disposal (EOD) team on the scene to be in the "Safe" position,[27] and did not pass its current on further. The MC-543 safe-separation timer ran its full length (42 seconds), and initiated the MC-641 High-Voltage Thermal Battery Pack. Upon impact with the ground, the crush-switch closed, which would under normal circumstances fire the weapon. But as the MC-722 Arm/Safe Switch had not activated the MC-788 High-Voltage Safing Switch, the X-Unit was not charged, and no detonation occurred. The "squibs" that would inject the boost gas into the weapon did not release and the tritium reservoir was found intact.[28]

The weapon was found in an upright position, with its parachute hanging on adjacent trees, about one mile (1.6 km) behind where the main wreckage of the aircraft impacted.[29] On January 24, the EOD team from Wright-Patterson Air Force Base disassembled and "safed" the weapon (by disconnecting the tritium reservoir from the primary), and returned it to Seymour Johnson AFB. The weapon was described as having only sustained "negligible damage", with only a broken nose plate, and its nose buried about 18 inches (460 mm) in the dirt. Approximately one pint of JP-4 jet fuel was found in the bomb case.[30]

There have been differing interpretations offered as to how close this particular weapon was to having a nuclear detonation. An initial report by Sandia in February 1961 concluded that weapon no. 1 "underwent a normal release sequence in which the parachute opened and the components of the weapon which were given an opportunity to actuate by the pulling of the Bisch rods did behave in the manner expected. Full operation of this weapon was prevented by the MC-772 Arm/Safe Switch, the primary safing device."[31] Other measures meant to provide additional safing, such as the "safing pins," failed.

Parker F. Jones, a supervisor at Sandia, concluded in a reassessment of the accident in 1969 that "one simple, dynamo-technology, low voltage switch stood between the United States and a major catastrophe" He further suggested that it would be "credible" to imagine that in the process of such an accident, an electrical short could cause the Arm/Safe Switch to switch into the "Arm" mode, which, had it happened during the Goldsboro accident, could have resulted in a multi-megaton detonation.[32] A Sandia study on the US nuclear weapons safety program by R.N. Brodie written in 1987 noted that the ready/safe switches of the sort used in this era of weapon design, which required only a 28-volt direct current to operate, had been observed many times to inadvertently be set to "arm" when a stray current was applied to the system. "Since any 28-volt DC source could cause the motor to run, how could one argue that in severe environments 28 volts DC would never be applied to that wire, which might be tens of feet long?" He concluded that "if [weapon no. 1] in the Goldsboro accident had experienced inadvertent operation of its ready-safe switch prior to breakup of the aircraft, a nuclear detonation would have resulted."[33]

Bill Stevens, a nuclear weapon safety engineer at Sandia, gave the following assessment in an internal documentary film produced by Sandia in 2010: "Some people can say, 'hey, the bomb worked exactly like designed.' Others can say, 'all but one switch operated, and that one switch prevented the nuclear detonation.'"[34]

Charlie Burks, another nuclear weapons systems engineer for Sandia, also added: "Unfortunately, there have been thirty-some incidents where the ready/safe switch was operated inadvertently. We're fortunate that the weapons involved at Goldsboro were not suffering from that same malady."[35]

Weapon No. 2: Serial No. 359943 (free-fall)

edit
 
The "probable trajectory sequence" of Weapon No. 2 in the Goldsboro Accident.
 
EOD personnel work to recover the buried Mk. 39 thermonuclear bomb that fell into a Faro, North Carolina, field in 1961.
 
Air Force personnel working in an underground pit to recover parts of the MK-39 nuclear bomb
 
The battered MC-722 Arm/Safe Switch from Weapon No. 2 in the Goldsboro B-52 accident, 1961.

Weapon no. 2 (kept in the forward bomb bay) separated from the B-52 later than weapon no. 1, when it was between 5,000 feet (1,500 m) and 2,000 feet (610 m) above the ground. It was discovered about 500 yards (460 m) away from the crew compartment and wing sections of the aircraft wreckage, along the line of flight.[29] As with weapon no. 1, its "safing pins" were pulled, allowing its arming rods to withdraw. As before, this initiated the MC-845 Bisch generator, which activated the low-voltage thermal batteries and started the MC-543 Timer. However, because the weapon had been released at such a low altitude, and its parachute had not opened, it collided with the ground at high speed. Its timer circuit had run only 12 to 15 seconds when it impacted, and consequently, the high-voltage thermal battery did not activate. For unknown reasons, its parachute did not deploy, despite the parachute deployment mechanism having been activated.[36][37] As the impact of the weapon had resulted in a crater of significant size – five feet (1.5 m) deep and nine feet (2.7 m) in diameter – it was initially assumed that the high-explosives in the weapon's "primary" stage had detonated. However, it was later confirmed that there had not been any HE detonation of this or the other weapon, and there had been no contamination of the site with fissile material.[38]

The EOD team found that the bomb had apparently left the airplane still attached to its rack, and that its timer circuit could not start until it had left its rack. (The rack was found a mile east of the bomb itself.) The bomb had become deeply buried in mud, and it required three days of excavation to recover its MC-772 Arm/Safe Switch. In 2013, Lt. Jack ReVelle, an EOD officer on the scene, recalled the moment: "Until my death I will never forget hearing my sergeant say, 'Lieutenant, we found the arm/safe switch.' And I said, 'Great.' He said, 'Not great. It's on arm.'"[39] Another EOD officer recalled: "The arm safety switch was on, armed and functioning."[40]

A representative of the Atomic Energy Commission noted that after the discovery of the Arm/Safe Switch in the "Armed" position, and the arming rods having been pulled out, he and his colleagues "wondered why bomb No. 2 had been a dud." An immediate analysis showed that the Arm/Safe Switch was "electrically... neither in armed nor safe position."[41] The switch and other components were shipped to Sandia for further "post-mortem" analysis, and it was determined that while the switch's indicator drum had rotated to the "Arm" position, it had disconnected from its contacts, and was never electrically "armed." They concluded that this was damage caused by the impact shock of the bomb hitting the ground, which also damaged the switch to such an extent that the circuit could not have closed even if it were in the "Arm" position.[30][36][42]

As with weapon no. 1, the tritium reservoir in weapon no. 2 was recovered intact and without any loss of tritium. The MC-788 High Voltage Safety Switch was destroyed on impact.[21]

Weapon no. 2 had broken into pieces on its impact, and the EOD technicians spent several days attempting to recover its pieces from the deep mud. The "primary" of the weapon was recovered on January 30, six days after the accident, at a depth of some 20 feet (6.1 m) in the mud. Its high-explosives had not detonated, and some had crumbled out of the warhead sphere. By February 16, the excavation had gotten down to 70 feet (21 m), and had not located the "secondary" component of the weapon.[43]

Excavation of the second bomb was complicated by the freezing cold, a high water table, and the extreme muddiness. Pumps were used to remove water, and the sides of the crater were reinforced with plywood, but it was decided after digging down to 42 feet (13 m) to abandon the effort. The fusion "secondary" of the second weapon was never recovered.[44] The University of North Carolina at Chapel Hill subsequently determined the buried depth of the secondary component to be 180 ± 10 feet (55 ± 3 m).[45]

An analysis by Sandia in February 1961 concluded that:

Weapon No. 2, which underwent something other than normal release from the aircraft, evidenced by the fact that the parachute did not deploy, also had its arming rods extracted, and those components which were given the opportunity to act, did act in the manner expected. Full operation of this weapon was prevented by several things:

1. Impact occurred so soon after separation of the Bisch rods that the timers were not given an opportunity to run down.

2. The Arm/Safe Switch was in the "Safe" condition as the weapon left the aircraft.[31]

Another analysis by Sandia engineers in 1961 concluded that while in both weapons the MC-772 Arm/Safe Switch operated "as it was designed to do," the lanyard-controlled safing-pins "cannot be relied upon to prevent initiation of the fuzing sequence" in this kind of accident, and recommended implementing a modification to the weapons "as rapidly as possible" that would prevent the fuze power supply from activating except when live release was intended.[46]

A 1969 analysis by Sandia supervisor Parker F. Jones concluded that the Goldsboro accident illustrated that "the Mk 39 Mod 2 bomb did not possess adequate safety for the airborne alert role in the B-52."[47]

Summary table

edit

The "Official Observer's Report" of the accident summarized the condition of the two weapons' firing systems with the following table:[21]

Table of Component Behavior, Fusing and Firing Systems
Part No. Component Bomb #434909 [No. 1] Bomb #359943 [No. 2]
Arming Wires [Arming/Pullout rods] Pulled Pulled
MC-845 Pulse Generator [Bisch generator] Actuated Actuated
MC-834 Explosive Actuator Fired Fired
MC-543 Timer Run down (42 sec.) Run (12-15 sec.)
MC-832 Differential Pressure Switch [barometric altitude fuze] All contacts closed 2 contacts closed
MC-640 Low Voltage Thermal Battery Actuated Actuated
MC-772 Arm-Safe Switch Safe Safe [but visually appeared to look armed]
1-A[f] Tritium Reservoir Full [i.e. unfired] Full [i.e. unfired]
MC-641 High Voltage Thermal Battery Actuated Not actuated
MC-788 Rotary Safing Switch [High-Voltage Safing System] Not operated Destroyed
MC-730 X-Unit [Primary firing set] Not charged Not charged
MC-616 Nose crystals [Contact fuze] Crushed Crushed

To summarize the Sandia post-mortem described in detail above, for Bomb No. 1, had the Arm-Safe Switch been set to "Arm," or malfunctioned in a way that enabled the firing circuit to act as if it was armed, the bomb would have detonated with a full nuclear yield upon the contact fuze closing when it hit the ground. For Bomb No. 2, because its timer had not run out by the time it impacted the ground, it could not have detonated even if its Arm-Safe Switch had been set to "Arm", as its thermal batteries had not charged, and they would be needed to fire the weapon.

Legacy

edit

Secretary of Defense Robert S. McNamara, in a Top Secret January 1963 meeting with representatives from the Departments of Defense and State, as well as the White House, used the Goldsboro accident to argue against the delegation of authority to use nuclear weapons to SACEUR, citing the possibility of accidental nuclear war. According to declassified meeting notes, McNamara "went on to describe crashes of US aircraft, one in North Carolina and one in Texas[g], where, by the slightest margin of chance, literally the failure of two wires to cross, a nuclear explosion was averted. He concluded that despite our best efforts, the possibility of an accidental nuclear explosion still existed."[50]

Consequences to Mark 39 bomb design

edit

A safety modification to Mark 39 Mod 2 weapons known as Alt 197 had been approved in January 1960, but not yet applied to all deployed weapons prior to the Goldsboro accident, and was not applied to the weapons involved in the accident. Alt 197 replaced the MC-722 Arm/Safe switch with the MC-1288 Arm/Safe switch, with the main change being that the latter would prevent the charging of the low-voltage thermal battery when the Arm/Safe switch was in the "Safe" position, and as such would make sure that no electrical current was available anywhere within the bomb to power additional switches or hardware, legitimately or not.[22] After the accident, all other Mark 39 Mod 2 weapons without the modification were taken off of deployment status ("red-lined") until the modification could be applied to the remaining inventory of the weapons.[51][e]

Consequences to B-52 design

edit

Wet wings with integral fuel tanks considerably increased the fuel capacity of B-52G and H models, but were found to be experiencing 60% more stress during flight than did the wings of older models. Wings and other areas susceptible to fatigue were modified in 1964 under Boeing engineering change proposal ECP 1050. This was followed by a fuselage skin and longeron replacement (ECP 1185) in 1966, and the B-52 Stability Augmentation and Flight Control program (ECP 1195) in 1967.[52]

Easement

edit
 
Road marker in Eureka, NC, commemorating the 1961 B-52 crash.

In 1962, The United States Army Corps of Engineers purchased a 400-foot (120 m) diameter circular easement over the buried second bomb.[53][54] The site of the easement, at 35°29′34″N 77°51′31″W / 35.49278°N 77.85861°W / 35.49278; -77.85861, is clearly visible as a circle of trees in the middle of a plowed field on Google Earth.

Road marker

edit

In July 2012, the State of North Carolina erected a historical road marker in the town of Eureka, 3 miles (4.8 km) north of the crash site, commemorating the crash under the title "Nuclear Mishap".[55]

See also

edit

Notes

edit
  1. ^ An internal SAC history for 1961 noted that, "From a modest beginning in September 1958, with one bomb wing launching a combat ready B-52 every six hours, SAC's airborne alert indoctrination program had increased to 11 wings launching a total of 12 sorties per day by late 1962." The "Cover All" (as the internal SAC documents refer to it) operation doubled the previous number of sorties, bringing it up to 12 per day, flying on a "ladder" route "resembling giant north-south loops stretching from the US north into the Canadian Arctic," and began on 15 January 1961. Problems emerged in this arrangement, however, as simply adding more flights to the same route would make it crowded and "jeopardize flight safety," and if the of flights climbed to 1/16th of the total force it would constitute a "safety hazard." As a result, a new "bomber stream airborne alert concept known as 'Chrome Dome'", which used two routes (one circumnavigating Canada, the other on a route from the Atlantic and Mediterranean), was developed. While it was pending approval, three other airborne alert "indoctrination training" operations were implemented after "Cover All" ended on 31 March 1961: "Clear Road" (1 April–30 June), "Keen Axe" (1 July–30 September), and "Wire Brush" (1 October–5 November). "Chrome Dome" began on 6 November.[5][6]
  2. ^ Following an early account of the accident by Ralph Lapp in 1962, many sources over the years the claim that the bombs at Goldsboro had yields of 24 megatons. This is now known to not be true. Lapp or his source may have gotten the weapons involved in the accident confused with the 23–25 megaton B41 nuclear bomb. (Lapp's account also incorrectly states there was a single bomb involved in the accident.) The exact weapon models involved in the accident were classified for many years, as were most details of the accident, leading to many seemingly contradictory accounts.[9]
  3. ^ The MC-788 High Voltage Safing System was a switch that "would prevent high voltage from reaching the X-unit so that if a fire or extreme heat ignited the high-voltage batteries, no harm would result." It was not, in other words, an independent Arm/Safe switch separate from the MC-772; the MC-722 would pass the 28-volt signal of the low-voltage batteries to the MC-788, which would close its connections and allow the high-voltage batteries to pass their 2500-volt signal to the X-Unit. "When the bomb fell a distance to provide sufficient differential pressure to close the differential-pressure-switch contacts, the circuit was completed through the arming/safing switch [MC-722] to the energizing coils of the safing rotary switch [MC-788]. This latter switch then moved to the armed position, the ground was removed from the X-unit, and the circuit from the high-voltage thermal battery pack to the X-unit was completed."[18] Another more general explanation of this system is in a later review of safety innovations at Sandia at this time: "Motor-driven safing switches incorporated into bombs, called 'ready-safe' switches, were operated by the pilot moving a control knob in the cockpit. Switches capable of holding off in excess of 2500 volts were required for those systems... which had incorporated high voltage, thermally activated batteries. Systems which used low voltage power sources and some type of voltage step-up technique could use low voltage switches for the safing switch. Both high and low voltage safing switches had motor-driven contacts that would close when a 28-volt signal was applied."[19]
  4. ^ The ordering of events in some of the documents seems to indicate that the triggering of the boost gas would have been done by a line which was enabled by the arming of the MC-722 Arm/Safe switch. For example, the table included in Speer's observer report, which is ordered to show "subsequent progress of the fusing/firing sequence," notes the status of the tritium reservoirs after the status of the Arm/Safe Switch, and before the status of the High Voltage Thermal Battery (triggered by the timer).[21] Neither of the weapons at Goldsboro had their tritium reservoir "squibs" actuated, despite Weapon No. 1's timer having run down and successfully triggered its High Voltage Thermal Battery. This occasioned no obvious comment in the post-mortem accounts, suggesting this was as expected, which would be the case if the tritium reservoirs were only dischargeable if the Arm/Safe switch was set to "arm".
  5. ^ a b In another B-52 crash a few weeks later, in Yuba City, the weapons involved did have Alt 197 applied to them, but the low-voltage thermal batteries were nonetheless activated in one of the weapons despite the MC-1288 Arm/Safe switches being in the "Safe" position. According to the Defense Atomic Support Agency, "post-mortem analysis indicates a probable cause of the activation of the low voltage thermal batteries of the one weapon was a cable short which permitted the energy from the MC-845 Bisch Generator to bypass the MC-1288 Arm/Safe Switch. It is suspected that the MC-845 pulse resulted from the mechanical shock sustained upon impact and was passed to the MC-640 [thermal batteries] through one of the possible random short circuits."[23]
  6. ^ Another document lists the "Reservoir type" of the weapons involved in this accident as "2A-12" and "2A-22755".[48]
  7. ^ McNamara's reference to a Texas "Broken Arrow" may refer to the November 4, 1958, an accident in which a B-47 with a Mark 39 Mod 1 (sealed pit) weapon on board crashed and exploded shortly after takeoff (for a training mission) from Dyess Air Force Base, near Abilene, Texas. The high-explosives in the weapon's primary detonated, dispersing depleted uranium, highly enriched uranium, and lead. The US Air Force has released no information about other "Broken Arrow" incidents with sealed-pit weapons taking place in Texas prior to 1963.[49]

Citations

edit
  1. ^ a b Sedgwick 2008.
  2. ^ "Goldsboro revisited: account of hydrogen bomb near-disaster over North Carolina – declassified document". Guardian News. 20 September 2013. Retrieved 21 June 2020.
  3. ^ Burr, William (18 November 2022). "New Declassifications on Nuclear Weapons Safety and Security". National Security Archive.
  4. ^ Defense Atomic Support Agency 1966, p. 36-37. "Accident #3" on page 36 of the report is clearly (despite redactions) the Goldsboro accident, and associates it with a "Project Coverall operation."
  5. ^ "History of Strategic Air Command July–December 1961 (Historical Study no. 88, Volume I)". 1962. pp. 79–82.
  6. ^ "History of Headquarters Strategic Air Command 1961 (SAC Historical Study no. 89)" (PDF). 1962. pp. 60–61, 180–181.
  7. ^ a b c d Bickelman 1961, p. 3.
  8. ^ Yancy 1961.
  9. ^ Lapp, Ralph (1992). Kill and Overkill: The Strategy of Annihilation. Basic Books. p. 127.
  10. ^ AF Form 14 Report of Aircraft Accident (Report). 24 January 1961.
  11. ^ a b Speer 1961, p. 2 (PDF p. 83).
  12. ^ Hansen, Chuck (2007). Swords of Armageddon, version 2. Vol. V. Chukela Publications. pp. 14, 354–359.
  13. ^ a b c d de Montmollin & Hoagland 1961, p. 6.
  14. ^ Sandia National Laboratories 2010, at 24:30: "And that one safety device was the pre-arming switch which was operated normally by a 28 volt signal."
  15. ^ Sandia National Laboratories 1968, p. 18.
  16. ^ Carpenter, C.L. (18 February 1960). "Expedited Procedures in Designing and Producing a Major MOD Kit". Sandia National Lab (DOE OpenNet).
  17. ^ de Montmollin & Hoagland 1961, pp. 8–9.
  18. ^ Sandia National Laboratories 1968, p. 11, 18.
  19. ^ Brodie 1987, p. 10.
  20. ^ Sandia National Laboratories 1968, pp. 18–19.
  21. ^ a b c Speer 1961, p. i (PDF p. 81).
  22. ^ a b de Montmollin & Hoagland 1961, p. 9.
  23. ^ Defense Atomic Support Agency 1966, p. 41.
  24. ^ Sandia National Laboratories 1968, p. 19.
  25. ^ Speer 1961, p. 1 (PDF p. 82).
  26. ^ de Montmollin & Hoagland 1961, p. 5.
  27. ^ "The Man Who Disabled Two Hydrogen Bombs Dropped in North Carolina". storycorps.org. Retrieved 8 November 2020.
  28. ^ de Montmollin & Hoagland 1961, p. 10.
  29. ^ a b Bickelman 1961, p. 5.
  30. ^ a b Speer 1961, p. 3 (PDF p. 84).
  31. ^ a b Bickelman 1961, p. 8.
  32. ^ Jones 1969, p. 2: "If a short to an 'arm' line occurred in a mid-air breakup, a postulate that seems credible, the Mk 39 Mod 2 could have given a nuclear blast".
  33. ^ Brodie 1987, pp. 15–16.
  34. ^ Sandia National Laboratories 2010, at 24:38.
  35. ^ Sandia National Laboratories 2010, at 24:51.
  36. ^ a b Bickelman 1961, p. 6.
  37. ^ de Montmollin & Hoagland 1961, pp. 11, 14–15.
  38. ^ Bickelman 1961, pp. 1, 3–4.
  39. ^ Tuttle 2013.
  40. ^ Atchison 2017.
  41. ^ Speer 1961, pp. 5–6 (PDF pp. 86–87).
  42. ^ de Montmollin & Hoagland 1961, p. 4.
  43. ^ Speer 1961, p. 4 (PDF p. 85).
  44. ^ Department of Defense/Department of Energy 1996, PDF p. 389).
  45. ^ Hardy 2005, p. [page needed].
  46. ^ de Montmollin & Hoagland 1961, p. 19.
  47. ^ Jones 1969, p. 2.
  48. ^ Mound Laboratory (1 January 1964). "Weapon Systems Accidents". DOE OpenNet.
  49. ^ Sullivan – Arrowhead Federal Services JV (December 2011). "Non-Time Critical Removal Actions Uranium and Lead Contaminated Soil Report, B-47 Crash Site, Abilene, TX" (PDF).
  50. ^ "Memorandum of Conversation: State-Defense Meeting of Group I, II, and IV Papers". National Security Archive. 26 January 1963.
  51. ^ Stevens, William L. (September 2001). "The Origins and Evolution of S2C at Sandia National Laboratories (SAND99-1308)". Sandia National Laboratories (via the National Security Archive). p. 54.
  52. ^ Knaack 1988, pp. 276–277.
  53. ^ Deed Book 581, Wayne County (NC) Courthouse. 1962. pp. 89–91.
  54. ^ "Davis Family Easement". Ibiblio.org. 18 November 2000. Retrieved 12 September 2014.
  55. ^ Shaffer 2012.

General and cited references

edit

Further reading

edit
edit
Retrieved from "https://en.wiki.x.io/w/index.php?title=1961_Goldsboro_B-52_crash&oldid=1251288201"