Skip to content
AeroSystems
AEAIP knowledge · Reviews

Spacecraft review gates: from Mission Concept Review to Mission Readiness Review

In short

An engineering review gate is a planned decision point where a review board examines the evidence and decides whether a programme is ready to proceed. Each review has entrance criteria (what must exist before it is held) and success criteria (what must be shown to pass).

Review names, order and criteria differ between organisations and frameworks. The sequence on this page is an illustrative GAMYAA model for a satellite, not a mandated lifecycle.

01

What happens at a review gate

A review is not a presentation; it is an assessment of evidence against criteria agreed in advance. A typical gate follows the same pattern:

  1. Entrance criteria are checked: the required documents, analyses and results exist at the right revision.
  2. Reviewers examine the material and raise review items or actions.
  3. The board assesses the success criteria and the open items.
  4. A decision is recorded: proceed, proceed with conditions, or not ready (with a delta review). Conditions and actions are tracked to closure.

The hard part is the first step. Assembling an evidence package that is complete, current and consistent with the configuration under review can take weeks, and it is exactly where stale evidence slips through.

02

Why review gates must be configurable

There is no single universal spacecraft lifecycle. NASA defines life-cycle reviews and their entrance and success criteria in its own systems-engineering requirements; ECSS project phasing defines a different review set, including qualification and acceptance reviews. Commercial and small-satellite programmes often combine or rename reviews; customers may add their own.

AEAIP's Configurable Assurance Gates are designed so that each programme defines:

  • review names and their order
  • entrance criteria and success criteria
  • the evidence required, by requirement set and subsystem
  • who sits on the board and who can accept conditions or risk

The eleven gates below are the illustrative sequence used in the Interactive Assurance Demo. Not every gate is mandatory under NASA, ISRO or ECSS practice, and the sequence is not presented as “the NASA lifecycle”.

03

Gate by gate

For each review: its purpose, the questions it asks, the evidence it typically examines, the readiness question in one line, and what AEAIP would evaluate. Educational and high-level; a programme's own criteria always govern.

  1. MCR — Mission Concept Review

    Gate 01 · Concept

    Confirms that the mission need is understood and agreed, that the objectives are clear, and that at least one concept can plausibly meet them within the known cost, schedule and technical constraints.

    Typical questions

    • Is the mission need stated clearly enough that stakeholders agree on it?
    • Is at least one concept feasible, and were credible alternatives compared?
    • Have the driving requirements and the largest risks been identified?

    Typical evidence

    • Mission need and stakeholder expectations
    • Draft concept of operations
    • Alternative concepts and trade studies
    • Preliminary mission objectives and success criteria
    • Feasibility analyses and an initial risk list

    What AEAIP would evaluate

    • Stakeholder needs captured as traceable nodes rather than slideware
    • Trade studies linked to the objectives they informed
    • Driving risks recorded with an owner

    ReadinessIs the concept credible enough to commit to formulation?

  2. SRR — System Requirements Review

    Gate 02 · Requirements

    Confirms that the system requirements are complete enough, consistent, traceable to stakeholder needs and verifiable, so that architecture and design work can begin against a sound baseline.

    Typical questions

    • Does every system requirement trace to a stakeholder need or a stated constraint?
    • Is every requirement verifiable, with a planned verification method?
    • Are external interfaces and constraints identified, such as launch, ground and regulatory needs?

    Typical evidence

    • System requirements with rationale
    • Traceability to mission objectives and stakeholder needs
    • Planned verification method per requirement
    • External interface requirements
    • List of open items still to be determined or confirmed

    What AEAIP would evaluate

    • Requirements with no parent need or no rationale
    • Requirements with no planned verification method
    • Open to-be-determined items, each with an owner and a closure date

    ReadinessAre the requirements a baseline the team can design to?

  3. SDR — System Definition Review

    Gate 03 · Definition

    Confirms that the proposed architecture can satisfy the system requirements, and that requirements have been allocated and derived down to subsystems with defined interfaces. Some frameworks call this a Mission Definition Review.

    Typical questions

    • Does the architecture satisfy the system requirements?
    • Has every system requirement been allocated, and are derived requirements justified?
    • Are the major internal interfaces defined, and are technology risks understood?

    Typical evidence

    • System architecture and functional and physical decomposition
    • Allocated and derived requirements
    • Interface definitions between subsystems
    • Mass, power, data and link budgets with margins
    • Technology readiness assessments and an updated risk list

    What AEAIP would evaluate

    • System requirements that are not yet allocated to any subsystem
    • Budgets and margins linked to the analyses that produced them
    • Interfaces without an owner on both sides

    ReadinessIs the architecture ready to be designed in detail?

  4. PDR — Preliminary Design Review

    Gate 04 · Preliminary design

    Shows that the preliminary design meets the requirements with acceptable risk and adequate margin, that interfaces and verification plans are defined well enough, and that the project can proceed to detailed design.

    Typical questions

    • Does the preliminary design meet every requirement with adequate margin?
    • Is there a verification approach for every requirement?
    • Are long-lead items, heritage assumptions and key risks under control?

    Typical evidence

    • Preliminary design and the analyses that support it
    • Subsystem specifications and preliminary interface control documents
    • Draft verification plan or verification matrix
    • Heritage and similarity assessments
    • Preliminary safety, reliability and failure-mode analyses

    What AEAIP would evaluate

    • Requirements with no design response yet
    • Analyses that were run on an earlier design revision
    • Verification-plan coverage, requirement by requirement

    ReadinessCan we commit to detailed design?

  5. CDR — Critical Design Review

    Gate 05 · Detailed design

    Shows that the detailed design is complete and mature, meets the requirements with adequate margin, and is ready for fabrication, assembly, integration and verification.

    Typical questions

    • Is the design complete enough to build, under configuration control?
    • Do the detailed analyses close against the requirements?
    • Are the verification and test plans, and the qualification approach, complete?

    Typical evidence

    • Released drawings, schematics and software design
    • Final structural, thermal, power and link analyses
    • Baselined interface control documents
    • Verification, test and qualification plans
    • Parts, materials and processes lists; updated hazard and failure-mode analyses

    What AEAIP would evaluate

    • Whether each analysis matches the released design revision
    • Requirements without a planned verification event
    • Open design issues and their effect on the build-to baseline

    ReadinessCan we build it, and will we be able to prove it?

  6. SIR — System Integration Review

    Gate 06 · Integration

    Confirms that the components and subsystems to be integrated are complete and accepted, and that the facilities, support equipment, procedures and people for integration are ready.

    Typical questions

    • Are the items to be integrated complete, accepted and in the expected configuration?
    • Are integration procedures, ground support equipment and facilities ready?
    • Are interface verification results available for what will be connected?

    Typical evidence

    • Component and subsystem acceptance data
    • Integration plan, procedures and ground support equipment readiness
    • Interface verification results (fit checks, electrical interface tests)
    • As-built configuration of each incoming item
    • Open nonconformances and waivers against incoming items

    What AEAIP would evaluate

    • As-built against as-designed configuration for each item
    • Open NCRs on items about to be integrated
    • Interface evidence for every connection in the integration sequence

    ReadinessCan integration start without avoidable rework?

  7. TRR — Test Readiness Review

    Gate 07 · Test

    Confirms that the test article, facility, procedures, instrumentation, people and data systems are ready to start a formal verification test, so that the test produces valid, traceable evidence. A programme may hold a TRR for each major test.

    Typical questions

    • Is the test article in the configuration the evidence must represent?
    • Are the procedures approved and traced to the requirements they verify?
    • Are prerequisite tests complete and open anomalies dispositioned?
    • Are pass/fail criteria, calibration, data capture and safety controls in place?

    Typical evidence

    • Approved test plan and test procedure
    • Requirement-to-test mapping
    • Test article configuration and pedigree
    • Facility and instrumentation calibration records
    • Prerequisite test results and open anomaly, NCR and waiver dispositions
    • Hazard controls and the test safety plan

    What AEAIP would evaluate

    • Configuration match between the test article and the configuration under review
    • Procedure revision approved and linked to its requirements
    • Open issues, dependencies and the requirements the test is expected to close

    ReadinessWill this test produce evidence that counts?

  8. SAR — System Acceptance Review

    Gate 08 · Acceptance

    Confirms that the system has been built and verified, meets its requirements or has approved exceptions, and is ready to be accepted by the customer or shipped for launch.

    Typical questions

    • Is verification closed for every requirement, or is each exception approved?
    • Does the as-built configuration match the configuration that was verified?
    • Is the acceptance data package complete?

    Typical evidence

    • Verification closure records for every requirement
    • Acceptance test results
    • As-built configuration and configuration audit results
    • Acceptance data package
    • Approved waivers and deviations; open item list

    What AEAIP would evaluate

    • Verification closure state across the whole requirement set
    • Evidence validity against the as-built configuration
    • Approval state of every waiver and deviation

    ReadinessCan ownership transfer with full knowledge of what is proven?

  9. ORR — Operational Readiness Review

    Gate 09 · Operations preparation

    Confirms that the system, ground segment, procedures, documentation and people are ready to operate the mission, including contingency response.

    Typical questions

    • Have operations procedures been validated in end-to-end tests and rehearsals?
    • Are the ground segment and command-and-control links ready, including their security?
    • Are contingency procedures and anomaly response defined and practised?

    Typical evidence

    • Operations procedures and flight rules
    • End-to-end tests between flight and ground systems
    • Mission simulations and rehearsals
    • Operator training records
    • Ground segment verification and security assessments; contingency plans

    What AEAIP would evaluate

    • Validation evidence for each operations procedure
    • Ground segment and security evidence, including remediation retests
    • Open operations items carried from earlier gates

    ReadinessCan people operate the system safely and effectively?

  10. FRR — Flight Readiness Review

    Gate 10 · Flight preparation

    Examines the tests, analyses, demonstrations and audits that support flight, to determine whether the flight system is ready for a safe and successful launch, including its launch vehicle and range interfaces.

    Typical questions

    • Is the flight configuration the configuration that was verified?
    • Are launch vehicle and launch site interfaces verified?
    • Is every open anomaly and waiver dispositioned, with residual risk accepted by the right authority?

    Typical evidence

    • Launch vehicle interface verification
    • Final verification closure
    • Final flight software configuration
    • Open anomalies and waivers with risk acceptance
    • Launch site processing records and safety approvals

    What AEAIP would evaluate

    • Final configuration compared with the verified configuration
    • Evidence invalidated by late changes
    • Residual risk and the authority that accepted it

    ReadinessIs the remaining risk known, accepted by the right authority and acceptable for flight?

  11. MRR — Mission Readiness Review

    Gate 11 · Mission

    In this GAMYAA model, the final integrated look across the flight system, launch, ground segment and operations, to confirm that the mission as a whole is ready to proceed. Some programmes combine this with the FRR or use launch readiness reviews instead.

    Typical questions

    • Are flight, ground and operations readiness all confirmed, with no unresolved conflicts?
    • Are mission-level risks accepted by the responsible authority?
    • Are go/no-go criteria for launch and early operations defined?

    Typical evidence

    • FRR and ORR outcomes and their conditions
    • Mission-level risk acceptance
    • Launch and early operations plan
    • Readiness of external partners such as launch provider and ground stations
    • Applicable regulatory authorisations and frequency coordination

    What AEAIP would evaluate

    • Conditions carried forward from every earlier gate
    • Status of authorisations and external dependencies
    • One consolidated, explainable readiness position for the board

    ReadinessIs the whole mission, not only the spacecraft, ready?

04

PDR and CDR: what is the difference?

PDR compared with CDR
PDRCDR
Design maturityPreliminary: the approach is defined and credibleDetailed: the design is complete enough to build
Main questionShould we commit to detailed design?Should we commit to fabrication and verification?
BaselineAllocated requirements and preliminary designBuild-to (detailed) design under configuration control
AnalysesPreliminary, showing feasibility and marginFinal, against the released design revision
VerificationApproach and plan defined per requirementDetailed plans and procedures ready to execute
Typical risk focusFeasibility, margins, long-lead items, technologyProducibility, testability, open design issues

A common failure between the two: analyses presented at CDR were run on an earlier design revision. In AEAIP terms, the analysis evidence is At Risk because its configuration no longer matches the design being reviewed.

05

Readiness is evidence plus conditions

Most real gates do not end in a clean GO. They end in a decision with conditions: actions that must close before a specific later point, such as before the test starts or before shipment. Conditions are where programmes lose track, because they live in minutes and action lists rather than next to the evidence they qualify.

AEAIP is designed to keep each condition attached to the requirement, item and evidence it affects, and to carry it forward to the gate where it must be closed. In the demo, eight conditional items allow TRR to proceed and become blockers at SAR.

Questions

Review gate questions

What is a Test Readiness Review for a satellite?

A Test Readiness Review (TRR) is held before a formal verification test, such as system-level thermal vacuum or vibration testing, to confirm that the test article is in the right configuration, procedures are approved and traced to requirements, facilities and instrumentation are calibrated, prerequisite tests are complete, open anomalies are dispositioned and safety controls are in place. Its purpose is to ensure the test will produce valid, traceable evidence.

What is the difference between PDR and CDR?

A Preliminary Design Review (PDR) shows that the preliminary design meets the requirements with acceptable risk and margin, so the project can commit to detailed design. A Critical Design Review (CDR) shows that the detailed design is complete, analyses close against the released design, and the project is ready to build, integrate and verify.

What is a Flight Readiness Review?

A Flight Readiness Review (FRR) examines the tests, analyses, demonstrations and audits behind a flight system to determine whether it is ready for a safe and successful flight or launch, including its launch-vehicle interfaces, open anomalies, waivers and residual risk.

What does MRR mean on this site?

In GAMYAA's illustrative model, MRR means Mission Readiness Review: the final integrated readiness review across flight system, launch, ground segment and operations. Some programmes combine it with the Flight Readiness Review or use launch readiness reviews instead.

What evidence is needed before a spacecraft review?

It depends on the review and the programme's entrance criteria. In general: the documents the review assesses at the right revision, the analyses and test results that support them, the current status of requirements and their verification, open issues (NCRs, anomalies, deviations, waivers) with their dispositions, risks, and the closure of actions from the previous review.

References / Engineering Sources

Explanations on this page are original GAMYAA paraphrase. Standards are referenced, not reproduced; paid standards link to their publisher. Referencing a framework does not imply compliance with it.

  1. 01
    NPR 7123.1D, NASA Systems Engineering Processes and Requirements (opens in a new tab)

    NASA Office of the Chief Engineer

    NASA's life-cycle and technical review entrance and success criteria (for NASA programmes).

  2. 02
    NASA Systems Engineering Handbook, NASA/SP-2016-6105 Rev 2 (opens in a new tab)

    NASA

    Life-cycle phases, technical reviews and the systems-engineering process model.

  3. 03
    NASA Systems Engineering Handbook — 3.7 Project Phase D: System Assembly, Integration and Test, Launch (opens in a new tab)

    NASA

    Integration and test reviews (TRR, SAR, ORR) and preparation for flight or mission readiness.

  4. 04
    NASA Systems Engineering Handbook — 6.7 Technical Assessment (opens in a new tab)

    NASA

    How technical reviews assess progress and readiness.

  5. 05
    ECSS-M-ST-10C Rev.1, Space project management — Project planning and implementation (opens in a new tab)

    European Cooperation for Space Standardization

    ECSS project phasing and its own set of project reviews.

  6. 06
    ISO/IEC/IEEE 15288:2023, Systems and software engineering — System life cycle processes (opens in a new tab)

    ISO / IEC / IEEE

    Life-cycle process descriptions, including verification and validation processes.

  7. 07
    INCOSE Systems Engineering Handbook, 5th Edition (INCOSE-TP-2003-002-05, 2023) (opens in a new tab)

    INCOSE / Wiley

    Systems-engineering practice aligned with ISO/IEC/IEEE 15288:2023.

Published by
Gamyaa AeroSystems — Engineering Assurance Research
Last reviewed
Status
Status: Architecture

How long does your evidence package take to assemble?

Tell us how your team prepares for its next review, and where readiness questions are hardest to answer.