1961 Goldsboro B-52 crash

Coordinates: 35°29′34.23″N 77°51′31.39″W / 35.4928417°N 77.8587194°W / 35.4928417; -77.8587194
From Wikipedia, the free encyclopedia

1961 Goldsboro B-52 crash
One of the Mk 39 nuclear weapons at Goldsboro, largely intact, with its parachute still attached
Accident
Date24 January 1961
SummaryStructural failure
SiteFaro, Nahunta Township, Wayne County, 12 miles (19 km) north of Goldsboro, North Carolina
35°29′34.23″N 77°51′31.39″W / 35.4928417°N 77.8587194°W / 35.4928417; -77.8587194
Aircraft
Aircraft typeB-52G
OperatorStrategic Air Command, United States Air Force
Registration58-0187
Flight originSeymour Johnson Air Force Base
DestinationSeymour Johnson Air Force Base
Crew8
Fatalities3
Survivors5

The 1961 Goldsboro B-52 crash was an accident that occurred near Goldsboro, North Carolina, United States, on 24 January 1961. A Boeing B-52 Stratofortress carrying two 3.8-megaton Mark 39 nuclear bombs broke up in mid-air, dropping its nuclear payload in the process. The pilot in command, Walter Scott Tulloch, ordered the crew to eject at 9,000 ft (2,700 m). Five crewmen successfully ejected or bailed out of the aircraft and landed safely; another ejected, but did not survive the landing, and two died in the crash.[1] Information declassified since 2013 has showed that one of the bombs was judged by nuclear weapons engineers at the time to have been only one safety switch away from detonation, and that it was "credible" to imagine conditions under which it could have detonated. [2][3]

Accident[edit]

1961 Goldsboro B-52 crash is located in North Carolina
Accident scene
Accident scene
Seymour Johnson AFB
Seymour Johnson AFB
North Carolina

The aircraft, a B-52G, was based at Seymour Johnson Air Force Base in Goldsboro, and part of the Strategic Air Command's airborne alert mission known as "Cover All" (a predecessor to Operation Chrome Dome), which involved a continuous flow of staggered, nuclear-armed bombers on a "ladder" route into the Canadian Arctic and back.[4][5]

Around midnight on 23–24 January 1961, the bomber had a rendezvous with a tanker for aerial refueling. During the hook-up, the tanker crew advised the B-52 aircraft commander, Major Walter Scott Tulloch (grandfather of actress Elizabeth Tulloch), that his B-52 had a fuel leak in the right wing. The refueling was aborted, and ground control was notified of the problem. The B-52 was directed to assume a holding pattern off the coast until the majority of fuel was consumed. However, when it reached its assigned position, the pilot reported that the leak had worsened and that 37,000 pounds (17,000 kg) of fuel had been lost in three minutes. The aircraft was immediately directed to return and land at Seymour Johnson Air Force Base.[6]

As the aircraft descended through 10,000 feet (3,000 m) on its approach to the airfield, the pilots were no longer able to keep it in stable descent and lost control. An entire wing of the aircraft apparently was lost. The pilot in command ordered the crew to abandon the aircraft, which they did at 9,000 feet (2,700 m). Five men landed safely after ejecting or bailing out through a hatch, one did not survive his parachute landing, and two died in the crash.[1][6] The third pilot of the bomber, Lt. Adam Mattocks, is the only person known to have successfully bailed out of the top hatch of a B-52 without an ejection seat.[7] The crew's final view of the aircraft was in an intact state with its payload of two Mark 39 thermonuclear bombs still on board, each with yields of 3.8 megatons.[8] Sometime between the crew ejecting and the aircraft crashing, the two bombs separated from the aircraft.[6]

The pilotless aircraft broke up in the air shortly after the crew ejected. Witnesses reported seeing two flashes of red light, suggesting that fuel explosions contributed to the breakup of the plane. At 12:35 a.m. EST on January 24, the remaining pieces of the B-52 impacted with the ground. The aircraft wreckage covered a two-square-mile (5.2 km2) area of tobacco and cotton farmland at Faro, about 12 miles (19 km) north of Goldsboro. The arrangement of the aircraft pieces suggested that several pieces of the B-52 were upside down when they struck the ground.[9][10]

Explosive ordnance disposal (EOD) teams from Seymour Johnson and other bases arrived on the scene quickly, disarming the one bomb that was easily accessible. Representatives from the Albuquerque Operations Office of the U.S. Atomic Energy Commission were alerted to the accident on the morning of January 24. A team of scientists and engineers from the AEC, Sandia National Laboratories, and Los Alamos National Laboratory assembled at Kirtland Air Force Base in New Mexico. They were joined by representatives from the Department of Defense Nuclear Safety Research Directorate. They flew to Seymour Johnson AFB on a C-47 cargo plane, arriving at approximately 10:15 p.m. EST on the night of January 24. [6]

The weapons[edit]

Mark 39 Mod 2 nuclear bombs[edit]

Diagram of the external features of a Mark 39 nuclear bomb. The location of the access panel for the MC-772 Arm/Safe Switch is indicated. On the nose would be written: "REJECT IF DENTED OR DEFORMED".
A basic diagram of a Teller-Ulam design thermonuclear weapon. Of note are the "primary" (labeled "A") and the "secondary" (labeled "B") subcomponents.
The "normal trajectory sequence" for the use of a Mark 39 Mod 2 nuclear bomb, indicating the arming sequence under normal (non-accident) nuclear weapons use conditions.

The two bombs involved in the Goldsboro accident were Mark 39 Mod 2 thermonuclear weapons with a maximum predicted yield of 3.8 megatons of TNT equivalent. Like all Teller-Ulam design thermonuclear weapons, its warhead consisted of two distinct parts ("stages"), the "primary" (a mostly-fission weapon which initiates the detonation) and the "secondary" (the portion of the weapon that, under the influence of the energy released by the "primary," undergoes a nuclear fusion reaction and also produces additional nuclear fission reactions). In the case of the Mark 39 Mod 2, the "primary" was also boosted, meaning that at the moment of detonation a gaseous mix of deuterium and tritium was injected into its core, which would generate fusion reactions at the moment of detonation, producing neutrons that would increase the efficiency of the "primary". The pit of the primary was entirely composed of enriched uranium ("all-oralloy"), with no plutonium, and was a sealed-pit, meaning that it was fully-assembled at all times. The Mark 39 Mod 2 warhead was itself enclosed in a gravity bomb casing which had a compartment containing a drogue parachute that both allowed the aircraft dropping it to move to a safe distance, and allowed it to be detonated on the surface by a contact fuze without risk of the weapon breaking on contact with the ground. The weight of the assembled bomb was between 9,000 and 10,000 pounds (4,100 and 4,500 kg).[11]

Immediately after the Goldsboro accident, technicians from Sandia National Laboratories, the national laboratory which has the primary responsibility of nuclear warhead safety engineering, subjected the recovered weapons to careful analysis to determine how close they were to a possible nuclear detonation. Various accounts of their conclusions have circulated over the years, with some emphasizing the closeness of the detonation, and some emphasizing the success of the various safety features of the nuclear warheads. To make sense of their analysis and the controversies, it is first necessary to understand what the normal firing sequence of a Mark 39 Mod 2 used in combat conditions would be.

The Mark 39 would be suspended in the bomb bay of the B-52 plane carrying it. "Arming rods" were extended out of the weapon, and the action of dropping the bomb would cause these rods to retract into the bomb and begin the firing sequence. Prior to this, "safing pins" would need to be removed from the rods by pulling a lanyard, accessible from the crew compartment, longitudinally. Additionally, prior dropping the bomb, the pilot would need to operate a switch inside the cockpit (the T-380 Readiness Switch) that would operate the MC-722 Arm/Safe Switch inside the Mark 39 bomb itself. The Arm/Safe Switch was a low-voltage, solenoid-operated electro-mechanical switch that was kept in the "Safe" position until a deliberate choice was made to cause a nuclear detonation, but could be switched from "Safe" to "Arm" by a 28-volt electrical signal.[12][13] The pilot would also use a T-249 Aircraft Monitor and Control Unit to tell the bomb whether it was to be detonated as an airburst or a surface burst.[14] The bomb bay also had a solenoid-operated lock system which would deploy the parachute automatically upon release if operated, using an MC-834 Explosive Actuator, as opposed to a free-fall release.

Once the bomb cleared the bomb bay and the arming rods retract, they would trigger a MC-845 Bisch generator. This was a single-pulse generator that began the overall firing sequence. The Bisch generator would send an initiation signal to the MC-640 low-voltage thermal battery pack, as well as the MC-543 Timer. The timer would begin to count down. A pullout-valve assembly would also be triggered that would seal a reference chamber in the MC-832 Differential Pressure Switch, a barometric fuze for detecting the bomb's altitude, used for an airburst detonation setting.[12]

After the weapon had fallen a required vertical distance, the differential pressure switch would close contacts which passed battery current through the MC-772 Arm/Safe Switch and from there to the MC-788 High Voltage Safing System, which is armed by continual current being applied to it.[15] Upon receiving this current, the MC-788 would then connect the (not yet-charged) high-voltage thermal battery to the X-Unit, the electrical device that provides a high voltage signal to the detonators used in the "primary" stage of the weapon.[16] After the timing circuit completed its countdown of 42 seconds, it would then deliver initiation power to the MC-641 High Voltage Thermal Battery pack. This would begin to generate its full voltage of 2500 volts within one to two seconds, which would be applied directly to the trigger circuit and, through the MC-788 High Voltage Safing System, to the capacitor bank of the X-Unit. Once the bomb impacted the ground, a crush switch on the nose of the bomb would be closed and trigger the X-Unit to discharge its capacitors and initiate the high-explosive system in the "primary" stage of the weapon.[12][17]

At some point in the above sequence, not indicated in declassified documents (possibly because of its classified nature), "squibs" on the Los Alamos Laboratory 1A Valve Mechanism would fire and cause the gas from the boost reservoir to be injected into the "primary" of the bomb.[18]

For a parachute delivery, the Mark 39 would need to be released between 3,500 feet (1,100 m) and 5,700 feet (1,700 m) above the target. For a free-fall delivery, it would need to be released at least 35,000 feet (11,000 m) above the target, or else it would hit the ground prior to the timer circuit completing its countdown and the X-Unit being charged.[19]

The two Mark 39 Mod 2 nuclear bombs involved in the Goldsboro crash had distinctly different outcomes. Official reports identified them as weapon no. 1 (or bomb no. 1) and weapon no. 2 (or bomb no. 2), with the first's parachute having deployed and the second having crashed into the ground in free-fall without any decrease in its speed. Weapon no. 1 was kept in the forward bomb bay of the aircraft, while weapon no. 2 was in the aft bomb bay.[20]

Weapon No. 1: Serial No. 434909 (parachute)[edit]

Weapon No. 1 as it was discovered by the EOD team after the accident.
The "probable trajectory sequence" of Weapon No. 1 in the Goldsboro Accident.

Weapon no. 1, identified as serial number 434909, was flung out of the aircraft at an altitude of around 9,000 feet (2,700 m) above the ground. It apparently twisted from its rack in a way that caused the "safing pins" on its arming rods to pull out longitudinally and without any sign of damage, despite not having been pulled from the crew compartment. Once it left its rack, the bomb dropped in such a way that its arming rods were pulled out in much the same manner as an intentional drop sequence would be. This caused its MC-845 Bisch generator to be actuated, initiating the MC-640 low-voltage thermal battery pack and the MC-543 timer. The explosive actuators triggered the deployment of the bomb's parachute as in normal functioning.[10][21]

The MC-832 Differential Pressure Switch operated as normal, and passed the battery current to the MC-722 Arm/Safe switch. This switch was found by the initial explosive ordnance disposal (EOD) team on the scene to be in the "Safe" position,[22] and did not pass its current on further. The MC-543 safe-separation timer ran its full length (42 seconds), and initiated the MC-641 High-Voltage Thermal Battery Pack. Upon impact with the ground, the crush-switch closed, which would under normal circumstances fire the weapon. But as the MC-722 Arm/Safe Switch had not activated the MC-788 High-Voltage Safing Switch, the X-Unit was not charged, and no detonation occurred. The "squibs" that would inject the boost gas into the weapon did not release and the tritium reservoir was found intact.[23]

An image of the MC-772 Arm/Safe Switch of the same kind used in the Mk 39 Mod 2 nuclear bombs involved in the 1961 Goldsboro accident.

The weapon was found in an upright position, with its parachute hanging on adjacent trees, about one mile (1.6 km) behind where the main wreckage of the aircraft impacted.[24] On January 24, the EOD team from Wright-Patterson Air Force Base disassembled and "safed" the weapon (by disconnecting the tritium reservoir from the primary), and returned it to Seymour Johnson AFB. The weapon was described as having only sustained "negligible damage."[25]

There have been differing interpretations offered as to how close this particular weapon was to having a nuclear detonation. An initial report by Sandia in February 1961 concluded that weapon no. 1 "underwent a normal release sequence in which the parachute opened and the components of the weapon which were given an opportunity to actuate by the pulling of the Bisch rods did behave in the manner expected. Full operation of this weapon was prevented by the MC-772 Arm/Safe Switch, the primary safing device."[26] Other measures meant to provide additional safing, such as the "safing pins," failed.

Parker F. Jones, a supervisor at Sandia, concluded in a reassessment of the accident in 1969 that "one simple, dynamo-technology, low voltage switch stood between the United States and a major catastrophe." He further suggested that it would be "credible" to imagine that in the process of such an accident, an electrical short could cause the Arm/Safe Switch to switch into the "Arm" mode, which, had it happened during the Goldsboro accident, could have resulted in a multi-megaton detonation.[27] A Sandia study on the US nuclear weapons safety program by R.N. Brodie written in 1987 noted that the ready/safe switches of the sort used in this era of weapon design, which required only a 28-volt direct current to operate, had been observed many times to inadvertently be set to "arm" when a stray current was applied to the system. "Since any 28-volt DC source could cause the motor to run, how could one argue that in severe environments 28 volts DC would never be applied to that wire, which might be tens of feet long?" He concluded that "if [weapon no. 1] in the Goldsboro accident had experienced inadvertent operation of its ready-safe switch prior to breakup of the aircraft, a nuclear detonation would have resulted."[28]

Bill Stevens, a nuclear weapon safety engineer at Sandia, gave the following assessment in an internal documentary film produced by Sandia in 2010: "Some people can say, 'hey, the bomb worked exactly like designed.' Others can say, 'all but one switch operated, and that one switch prevented the nuclear detonation.'"[29]

Charlie Burks, another nuclear weapons systems engineer for Sandia, also added: "Unfortunately, there have been thirty-some incidents where the ready/safe switch was operated inadvertently. We're fortunate that the weapons involved at Goldsboro were not suffering from that same malady."[30]

Weapon No. 2: Serial No. 359943 (free-fall)[edit]

The "probable trajectory sequence" of Weapon No. 2 in the Goldsboro Accident.
EOD personnel work to recover the buried Mk. 39 thermonuclear bomb that fell into a Faro, North Carolina field in 1961.
Air Force personnel working in an underground pit to recover parts of the MK-39 nuclear bomb
The battered MC-722 Arm/Safe Switch from Weapon No. 2 in the Goldsboro B-52 accident, 1961.

Weapon no. 2 separated from the B-52 later than weapon no. 1, when it was between 5,000 feet (1,500 m) and 2,000 feet (610 m) above the ground. It was discovered about 500 yards (460 m) away from the crew compartment and wing sections of the aircraft wreckage, along the line of flight [24] As with weapon no. 1, its "safing pins" were pulled, and its arming rods to withdraw. As before, this initiated the MC-845 Bisch generator, which activated the low-voltage thermal batteries and started the MC-543 Timer. However, because the weapon had been released at such a low altitude, and its parachute had not opened, it collided with the ground at around 700 miles per hour (310 m/s), which caused it to disintegrate. Its timer circuit had run only 12 to 15 seconds when it impacted, and consequently, the high-voltage thermal battery did not activate. For unknown reasons, its parachute did not deploy, despite the parachute deployment mechanism having been activated.[31][32] As the impact of the weapon had resulted in a crater of significant size – five feet (1.5 m) deep and nine feet (2.7 m) in diameter – it was initially assumed that the high-explosives in the weapon's "primary" stage had detonated. However, it was later confirmed that there had not been any HE detonation of this or the other weapon, and there had been no contamination of the site with fissile material.[33]

The EOD team found that the bomb had apparently left the airplane still attached to its rack, and that its timer circuit could not start until it had left its rack. (The rack was found a mile east of the bomb itself.) The bomb had become deeply buried in mud, and it required three days of excavation to recover its MC-772 Arm/Safe Switch. In 2013, Lt. Jack ReVelle, an EOD officer on the scene, recalled the moment: "Until my death I will never forget hearing my sergeant say, 'Lieutenant, we found the arm/safe switch.' And I said, 'Great.' He said, 'Not great. It's on arm.'"[34] Another EOD officer recalled: "The arm safety switch was on, armed and functioning."[35]

A representative of the Atomic Energy Commission noted that after the discovery of the switch in the "armed" position: "At this point, we wondered why bomb No. 2 had been a dud." An immediate analysis showed that its switches were "electrically... neither in armed nor safe position."[36] The switch and other components were shipped to Sandia for further "post-mortem" analysis, and it was determined that while the switch's indicator drum had rotated to the "Arm" position, it had disconnected from its contacts, and the contacts were still in the "Safe" position. They concluded that this was damage caused by the impact shock of the bomb hitting the ground, which also damaged the switch to such an extent that the circuit could not have closed even if it were in the "Arm" position.[37][32][25]

As with weapon no. 1, the tritium reservoir in weapon no. 2 was recovered intact and without any loss of tritium. The MC-788 High Voltage Safety Switch was destroyed on impact.[38]

Weapon no. 2 had broken into pieces on its impact, and the EOD technicians spent several days attempting to recover its pieces from the deep mud. The "primary" of the weapon was recovered on January 30, six days after the accident, at a depth of some 20 feet (6.1 m) in the mud. Its high-explosives had not detonated, and some had crumbled out of the warhead sphere. By February 16, the excavation had gotten down to 70 feet (21 m), and had not located the "secondary" component of the weapon. [39]

Excavation of the second bomb, including its fusion "secondary" was eventually abandoned as a result of uncontrollable ground-water flooding. The United States Army Corps of Engineers purchased a 400-foot (120 m) diameter circular easement over the buried component.[40][41]

An analysis by Sandia in February 1961 concluded that:

Weapon No. 2, which underwent something other than normal release from the aircraft, evidenced by the fact that the parachute did not deploy, also had its arming rods extracted, and those components which were given the opportunity to act, did act in the manner expected. Full operation of this weapon was prevented by several things:

1. Impact occurred so soon after separation of the Bisch rods that the timers were not given an opportunity to run down.

2. The Arm/Safe Switch was in the "Safe" condition as the weapon left the aircraft.[26]

The site of the easement, at 35°29′34″N 77°51′31″W / 35.49278°N 77.85861°W / 35.49278; -77.85861, is clearly visible as a circle of trees in the middle of a plowed field on Google Earth. The University of North Carolina at Chapel Hill determined the buried depth of the secondary component to be 180 ± 10 feet (55 ± 3 m).[42]

Another analysis by Sandia engineers in 1961 concluded that while in both weapons the MC-772 Arm/Safe Switch operated "as it was designed to do," the lanyard-controlled safing-pins "cannot be relied upon to prevent initiation of the fuzing sequence" in this kind of accident, and recommended implementing a modification to the weapons be implemented "as rapidly as possible" that would prevent the fuze power supply from activating except when live release was intended.[43]

A 1969 analysis by Sandia supervisor Parker F. Jones concluded that the Goldsboro accident illustrated that "the Mk 39 Mod 2 bomb did not possess adequate safety for the airborne alert role in the B-52."[27]

Legacy[edit]

Road marker in Eureka, NC, commemorating the 1961 B-52 crash.

Secretary of Defense Robert S. McNamara, in a Top Secret January 1963 meeting with representatives from the Departments of Defense and State, as well as the White House, used the Goldsboro accident to argue against the delegation of authority to use nuclear weapons to SACEUR, citing the possibility of accidental nuclear war. According to declassified meeting notes, McNamara "went on to describe crashes of US aircraft, one in North Carolina and one in Texas, where, by the slightest margin of chance, literally the failure of two wires to cross, a nuclear explosion was averted. He concluded that despite our best efforts, the possibility of an accidental nuclear explosion still existed."[44]

In July 2012, the State of North Carolina erected a historical road marker in the town of Eureka, 3 miles (4.8 km) north of the crash site, commemorating the crash under the title "Nuclear Mishap".[45]

Consequences to B-52 design[edit]

Wet wings with integral fuel tanks considerably increased the fuel capacity of B-52G and H models, but were found to be experiencing 60% more stress during flight than did the wings of older models. Wings and other areas susceptible to fatigue were modified in 1964 under Boeing engineering change proposal ECP 1050. This was followed by a fuselage skin and longeron replacement (ECP 1185) in 1966, and the B-52 Stability Augmentation and Flight Control program (ECP 1195) in 1967.[46]

See also[edit]

Citations[edit]

  1. ^ a b Sedgwick 2008.
  2. ^ "Goldsboro revisited: account of hydrogen bomb near-disaster over North Carolina – declassified document". Guardian News. 20 September 2013. Retrieved 21 June 2020.
  3. ^ Burr, William (18 November 2022). "New Declassifications on Nuclear Weapons Safety and Security". National Security Archive.
  4. ^ Defense Atomic Support Agency (1 March 1966). "Accidents and Incidents Involving Nuclear Weapons (DASA Technical Letter 20-3)" (PDF). pp. 36–37. "Accident #3" on page 36 of the report is clearly (despite redactions) the Goldsboro accident, and associates it with a "Project Coverall operation."
  5. ^ An internal SAC history for 1961 noted that, "From a modest beginning in September 1958, with one bomb wing launching a combat ready B-52 every six hours, SAC's airborne alert indoctrination program had increased to 11 wings launching a total of 12 sorties per day by late 1962." The "Cover All" (as the internal SAC documents refer to it) operation doubled the previous number of sorties, bringing it up to 12 per day, flying on a "ladder" route "resembling giant north-south loops stretching from the US north into the Canadian Arctic," and began on 15 January 1961. Problems emerged in this arrangement, however, as simply adding more flights to the same route would make it crowded and "jeopardize flight safety," and if the of flights climbed to 1/16th of the total force it would constitute a "safety hazard." As a result, a new "bomber stream airborne alert concept known as 'Chrome Dome'", which used two routes (one circumnavigating Canada, the other on a route from the Atlantic and Mediterranean), was developed. While it was pending approval, three other airborne alert "indoctrination training" operations were implemented after "Cover All" ended on 31 March 1961: "Clear Road" (1 April–30 June), "Keen Axe" (1 July–30 September), and "Wire Brush" (1 October–5 November). "Chrome Dome" began on 6 November. "History of Strategic Air Command July–December 1961 (Historical Study no. 88, Volume I)". 1962. pp. 79–82. "History of Headquarters Strategic Air Command 1961 (SAC Historical Study no. 89)" (PDF). 1962. pp. 60–61, 180–181.
  6. ^ a b c d Bickelman 1961, p. 3.
  7. ^ Yancy 1961.
  8. ^ Following an early account of the accident by Ralph Lapp in 1962, many sources over the years the claim that the bombs at Goldsboro had yields of 24 megatons. This is now known to not be true. Lapp or his source may have gotten the weapons involved in the accident confused with the 23–25 megaton B41 nuclear bomb. (Lapp's account also incorrectly states there was a single bomb involved in the accident.) The exact weapon models involved in the accident were classified for many years, as were most details of the accident, leading to many seemingly contradictory accounts. Lapp's paragraph on the incident is found in: Lapp, Ralph (1992). Kill and Overkill: The Strategy of Annihilation. Basic Books. p. 127.
  9. ^ AF Form 14 Report of Aircraft Accident (Report). 24 January 1961.
  10. ^ a b Speer 1961, p. 2 (PDF p. 83).
  11. ^ Hansen, Chuck (2007). Swords of Armageddon, version 2. Vol. V. Chukela Publications. pp. 14, 354–359.
  12. ^ a b c de Montmollin & Hoagland 1961, p. 6.
  13. ^ Sandia National Laboratories 2010, at 24:30: "And that one safety device was the pre-arming switch which was operated normally by a 28 volt signal." See also Sandia National Laboratories 1968, p. 18.
  14. ^ The difference in fuzing between a surface and contact burst was whether saturable-core transformers were placed in the firing circuit path or not. If they were, they would prevent the bomb from detonating until the contact switches were closed. Sandia National Laboratories 1968, p. 18
  15. ^ de Montmollin & Hoagland 1961, pp. 8–9.
  16. ^ The MC-788 High Voltage Safing System was a switch that "would prevent high voltage from reaching the X-unit so that if a fire or extreme heat ignited the high-voltage batteries, no harm would result." It was not, in other words, an independent Arm/Safe switch separate from the MC-772; the MC-722 would pass the 28-volt signal of the low-voltage batteries to the MC-788, which would close its connections and allow the high-voltage batteries to pass their 2500-volt signal to the X-Unit. Sandia National Laboratories 1968, p. 11. Another more general explanation of this system is in a later review of safety innovations at Sandia at this time: "Motor-driven safing switches incorporated into bombs, called 'ready-safe' switches, were operated by the pilot moving a control knob in the cockpit. Switches capable of holding off in excess of 2500 volts were required for those systems... which had incorporated high voltage, thermally activated batteries. Systems which used low voltage power sources and some type of voltage step-up technique could use low voltage switches for the safing switch. Both high and low voltage sating switches had motor-driven contacts that would close when a 28-volt signal was applied." Brodie 1987, p. 11.
  17. ^ Sandia National Laboratories 1968, pp. 18–19.
  18. ^ de Montmollin & Hoagland 1961, p. 6. The ordering of events in some of the documents seems to indicate that the triggering of the boost gas would have been done by a line which was enabled by the arming of the MC-722 Arm/Safe switch. For example, the table included in Speer's observer report, which is ordered to show "subsequent progress of the fusing/firing sequence," notes the status of the tritium reservoirs after the status of the Arm/Safe Switch, and before the status of the High Voltage Thermal Battery (triggered by the timer). Speer 1961, p. i (PDF p. 81). Neither of the weapons at Goldsboro had their tritium reservoir "squibs" actuated, despite Weapon No. 1's timer having run down and successfully triggered its High Voltage Thermal Battery. This occasioned no obvious comment in the post-mortem accounts, suggesting this was as expected, which would be the case if the tritium reservoirs were only dischargeable if the Arm/Safe switch was set to "arm".
  19. ^ Sandia National Laboratories 1968, p. 19.
  20. ^ Speer 1961, p. 1 (PDF p. 82).
  21. ^ de Montmollin & Hoagland 1961, p. 5.
  22. ^ "The Man Who Disabled Two Hydrogen Bombs Dropped in North Carolina". storycorps.org. Retrieved 8 November 2020.
  23. ^ de Montmollin & Hoagland 1961, p. 10.
  24. ^ a b Bickelman 1961, p. 5.
  25. ^ a b Speer 1961, p. 3 (PDF p. 84).
  26. ^ a b Bickelman 1961, p. 8.
  27. ^ a b Jones 1969, p. 2.
  28. ^ Brodie 1987, pp. 15–16.
  29. ^ Sandia National Laboratories 2010, at 24:38.
  30. ^ Sandia National Laboratories 2010, at 24:51.
  31. ^ de Montmollin & Hoagland 1961, pp. 14–15.
  32. ^ a b Bickelman 1961, p. 6.
  33. ^ Bickelman 1961, pp. 1, 3–4.
  34. ^ Tuttle 2013.
  35. ^ Atchison 2017.
  36. ^ Speer 1961, pp. 5–6 (PDF pp. 86–87).
  37. ^ de Montmollin & Hoagland 1961, p. 4.
  38. ^ Speer 1961, p. i (PDF p. 81).
  39. ^ Speer 1961, p. 4 (PDF p. 85).
  40. ^ Deed Book 581, Wayne County (NC) Courthouse. 1962. pp. 89–91.
  41. ^ "Davis Family Easement". Ibiblio.org. 18 November 2000. Retrieved 12 September 2014.
  42. ^ Hardy 2005, p. [page needed].
  43. ^ de Montmollin & Hoagland 1961, p. 19.
  44. ^ "Memorandum of Conversation: State-Defense Meeting of Group I, II, and IV Papers". National Security Archive. 26 January 1963.
  45. ^ Shaffer 2012.
  46. ^ Knaack 1988, pp. 276–277.


General and cited references[edit]

Further reading[edit]

External links[edit]