Launch Licensing Academy

Getting a License

Subpart B is the heart of the application. The FAA issues a license (§420.17) when seven determinations are satisfied: complete information (§420.15), a completed environmental review (NEPA), a launch site location that passes review (§§420.19–420.29), completed agreements (§420.31), a showing that the operator will meet its Subpart D obligations, a compliant explosive site plan, and no jeopardy to U.S. foreign policy or national security.

The launch site location review

The core safety showing (§420.19): at least one type of launch vehicle can fly safely from each launch point, meaning collective public risk does not exceed an expected casualty (E_c) of 1 × 10⁻⁴. If several orbital weight classes are proposed, only the heaviest must be shown safe.

*From a launch point at 28° latitude. Classes are set by payload to LEO, not gross lift-off weight.

Boundary distance (§420.21)

The distance from any launch point to the closest site boundary must be at least the debris dispersion radius of the largest vehicle proposed:

Corridors, risk, and the decision tree (§§420.23–420.25)

• Define a flight corridor per vehicle type: Appendix A or B for guided vehicles, Appendix D for unguided suborbital. Guided orbital corridors run to 5,000 nm downrange (or until the IIP leaves Earth), containing debris with ballistic coefficient ≥ 3 lb/ft².
• If the corridor contains a populated area, run a risk analysis (Appendix C or D). The FAA will not approve the location if E_c exceeds 1 × 10⁻⁴.
• If a populated area falls inside the OEZ: show times when the public is not present, or hold an evacuation agreement (§420.27(j)), the hook Yuma relies on.

Other Subpart B items

• §420.15: corporations must disclose any foreign ownership of 10% or more. Applicants at existing federal-range launch points get relief if the same vehicle type/class has launched safely there.
• §420.29: unproven launch vehicles require a clear and convincing equivalent-safety demonstration.
• §420.31: agreements with the local Coast Guard district (Notice to Mariners) and the FAA ATC office (Notice to Airmen, airspace closures).

Holding a License

Once granted, the license authorizes offering the site to launch operators, per launch point, for the vehicle type and weight class in the application. It confers no property or exclusive right in airspace or outer space, and it never excuses compliance with other laws.

License mechanics (Subpart C)

• Transfer (§420.45): only the FAA may transfer a license; the transferee applies under Part 413 and must satisfy §§420.15/420.17.
• Modification (§420.47): required whenever operations would depart from the license or make a materially relevant application representation no longer accurate; the FAA may also modify on its own initiative.
• Compliance monitoring (§420.49): federal observers get access to activities of the licensee and its customers, contractors, and subcontractors.

Day-to-day responsibilities (Subpart D)

• Public access (§420.53): prevent unauthorized access via security personnel, surveillance, or barriers; brief every entrant on safety rules (valid one year); provide emergency warning signals.
• Scheduling (§420.55): procedures so one customer's operations can't create mishap potential for another's by proximity in time or place.
• Notifications (§420.57): tell launch operators of site limitations; maintain the Coast Guard and ATC agreements; give local officials and all adjacent landowners the flight schedule at least 2 days before flight.
• Mishap plan (§420.59): report, respond to, and investigate mishap events (per §401.7 definitions), with a plan meeting §450.173(b)–(f), including participation in launch mishap investigations.
• Records (§420.61): 3-year retention; mishap-related records held until the federal investigation closes and the FAA releases them.

Lightning protection (§420.71)

Explosive hazard facilities need a lightning protection system (air terminal, down conductor, earth electrode system) plus bonding of metallic bodies (fences/rail within 6 ft), and surge protection. Exemptions: a lightning warning system that lets you stop work and withdraw the public in time, or explosives that cannot be initiated by lightning. Inspect visually semiannually; test continuity and grounding annually.

Flight Corridors

A flight corridor answers one question: where could hazardous debris land? Appendix A builds one with no wind data and no trajectory: pure table lookups by vehicle class. Appendix B narrows the corridor using local meteorology and an actual trajectory, which is why an applicant failing risk analysis with an A corridor gets a second chance with B.

The overflight exclusion zone (OEZ)

The OEZ is the no-public zone around the launch point: two half-circles of radius D_max joined by cross-range lines, its downrange chord placed D_OEZ downrange. Inside it, the individual risk criterion (1×10⁻⁴) would be exceeded for even one person in the open, so it must be clear of the public during flight.

Appendix A corridor geometry

The corridor is a seven-sided polygon, symmetric about the flight azimuth, drawn from three width lines: CF at 10 nm, DE at 100 nm (end of the “launch area”), and, for orbital vehicles, HI at 5,000 nm downrange. A guided suborbital corridor ends instead in a final-stage impact dispersion area with radius R = 0.05 × apogee, centered at impact range D = 0.4 × apogee (apogee < 100 km) or 0.7 × apogee (≥ 100 km).

Appendix B: the refined method

• Launch area: for every trajectory point up to 50,000 ft, debris drift = fall time × maximum mean wind (GGUAS statistical winds, 15 pressure levels, 360 azimuths, 1–12 months of data), with a fixed ballistic coefficient of 3 lb/ft². Circles of dispersion radius are enveloped to form the boundary.
• Downrange area: simulate a 4-second malfunction turn at each trajectory point, with turn angle θ = |F_n| × 45° shrinking as the vehicle flies downrange; compute the resulting IIPs by an iterative Keplerian solution (up to 5 passes, ±1 ft tolerance) and connect them.
• Corridor ends at 5,000 nm or where the IIP leaves the Earth's surface.

Risk Analysis

If a corridor or impact dispersion area contains people, you must show the expected casualties stay below the line. The whole analysis reduces to one formula applied to every populated area, then summed:

• P_i: probability of impact on the populated area (bivariate normal over downrange/crossrange sectors).
• A_c: effective casualty area from lookup tables (C-3 guided, D-1 unguided), by IIP range band.
• A_k, N_k: the populated area's landmass and population. Census block-group data within 100 nm; 1°×1° grid beyond.

The constants that matter

• Appendix A corridor: crossrange offsets measured from the corridor centerline; downrange exposure uses the IIP range-rate step table (0.75 nm/s under 75 nm … 154.95 nm/s at 4,501–5,250 nm) with constant C = 643 s.
• Appendix B corridor: crossrange measured from the nominal IIP ground trace; downrange exposure uses dwell time: P_i ∝ (P_f/t) × t_d.
• A populated area bisected by the centerline is split into left and right pieces analyzed separately.
• Conservative shortcuts are allowed (e.g. assume P_x = P_y = 1.0) if you show they overestimate E_c.

Effective casualty area (Table C-3, mi²)

Appendix D: unguided suborbital vehicles

• OEZ is simply a 1,600-ft-radius circle at the launch point.
• Per stage: impact range D = apogee × 0.4 (<100 km) or × 0.7 (≥100 km); same factors for the dispersion radius.
• Apogee data must come from actual flights launched at 84° elevation.
• P_s = 0.98; A_c from Table D-1 (9×10⁻³ mi² inside 49 nm, down to 3.6×10⁻⁶ mi² beyond 1,750 nm).
• If E_c > 1×10⁻⁴ and no set of dispersion areas can fix it, the site fails the location review.

Explosive Siting

The explosive site plan keeps blast hazards separated from the public and from each other. Every explosive hazard facility gets quantity-distance (QD) separations keyed to net explosive weight (NEW), via Appendix E tables E-1 through E-8. Federal-range licensees complying with the range's explosive safety rules are exempt.

The three distances

• Public area distance: to any public area, including the launch site boundary.
• Public traffic route distance: to highways/railroads; for Division 1.1 it is 60% of the public area distance.
• Intraline distance: between facilities of a single customer. Facilities of different customers must instead be separated by the greater public area distance.

Division 1.1 (detonating) vs 1.3 (deflagrating)

Energetic liquids

• TNT equivalence (Table E-5): LO2/LH2 = the larger of 8·W^2/3 or 14% of weight. LO2/RP-1 at a launch pad = 20% up to 500,000 lb + 10% above.
• Densities (Table E-6) convert gallons → pounds (LH2 0.59 lb/gal; LO2 9.5; RP-1 6.8; hydrazine 8.4).
• Hydrogen peroxide >91% (Table E-7): one distance for everything, 24·W^1/3 above 10,000 lb; tanks closer than 10% of the largest tank's distance aggregate.
• LH2 / bulk hydrazine (Table E-8): distance to incompatible liquids steps 600 → 1,200 → 1,800 ft at 10,000 and 100,000 lb; distance to compatible liquids stays small (35–310 ft).
• Co-location with solids (§420.69): add propellant explosive equivalent to the 1.1 NEW, or run a maximum credible event (MCE) analysis; if no simultaneous explosion is credible, distances may be based on the MCE.

Measuring (§420.70)

Straight lines; over or around large terrain features, whichever is shorter. Measure from the closest hazard source: container, building, or the positive cut-off point in piping. The governing distance is always the one for the quantity requiring the greater separation.

The Yuma “Very Small” Class

Part 420's corridor tables recognize only four orbital classes, and the smallest (“Small,” ≤4,400 lb to LEO) is sized around a vehicle like Falcon 1 or Firefly Alpha. The Yuma Spaceport targets vehicles lofting <500 kg to LEO, a market the current Small class overshoots by 4× to 19×, producing what the paper argues are overly conservative risk analyses. The proposal: add a “Very Small” size class to the Part 420 table-lookup methodology.

Vehicles in the target market

The argument, piece by piece

• Boundary distance (§420.21): the four table values trend with payload class; linear extrapolation gives a “very small” value of 6,315 ft (vs 7,300 ft for Small). The paper notes the FAA never published the derivation, and that D_max is driven by a 10-second flight-termination failure, where fragment velocity is nearly flat versus vehicle mass.
• OEZ (Appendix A): extrapolating the small→medium slope yields proposed D_max = 1.04 nm and D_OEZ = 3.22 nm (vs 1.20 / 3.30 for Small). Per §420.27(j), the OEZ need not sit wholly inside the site boundary; the operator just needs evacuation of the public (or proof of absence) during launch.
• Corridor widths: because widths (CF/DE/HI) are set by IIP lateral termination lines, not vehicle size, the paper proposes VS widths equal to the Small class: CF 39.45, DE 117.87, HI 1,763.27 nm.
• Casualty areas (Appendix C): no change to the P_i/E_c equations, but the A_c table needs a VS column, left TBD pending FAA documentation of how the existing values were derived (they're ~150× larger than inert-debris casualty areas, likely reflecting intact-impact explosions).

The flight corridor method's assumptions

• Downrange risk is dominated by falling debris from midair breakup.
• The downrange axis follows the IIP trace along the launch azimuth; crossrange impact probability is Gaussian, bounded at ±3σ.
• Downrange impact probability is set by IIP dwell time over each population center; casualty expectation scales with the casualty-area-to-population-area ratio.
• No debris propagation is modeled: casualty area and crossrange width must come from external sources (e.g. high-fidelity historical data).

Part 450 at a Glance

Where Part 420 licenses the place, 14 CFR Part 450 licenses the mission: it is the vehicle operator license for launch, reentry, or both, in a single consolidated part (the 2020 Streamlined Launch and Reentry Licensing rule). One license can cover one or many launches or reentries using the same vehicle or family of vehicles.

When does “launch” begin and end?

• Begins (U.S. site): when hazardous pre-flight operations that could threaten the public commence, such as propellant pressurization or loading, or work on a fueled vehicle. A safe, dormant vehicle between launches is excluded.
• Begins (non-U.S. site): at ignition or first movement that initiates flight, whichever is earlier.
• Ends (orbital, no reentry): the latest of the operator's last exercise of control over the vehicle, component impact or landing, or restoration of the site to a safe condition.
• Ends (orbital with reentry): after deployment of all payloads, or completion of the first steady-state orbit if there is no deployment.
• Ends (suborbital with reentry): at apogee.

License mechanics

• Issuance (§450.5): requires every approval and determination in the part; the licensee is bound by its own application representations.
• Duration (§450.7): whatever period the Administrator finds necessary, capped at 5 years.
• Transfer (§450.11): only the FAA transfers a license; either party may ask but both must agree, and the transferee applies under Part 413.
• Modification (§450.9): the FAA may add or change terms at any time.
• Rights not conferred (§450.13): no proprietary, property, or exclusive right in a Federal launch or reentry site.

Getting a Vehicle Operator License

A Part 450 application assembles five elements: a policy approval, a favorable payload determination (if applicable), a safety approval, a completed environmental review, and information for the maximum probable loss (financial responsibility) analysis. The three approvals can be sought separately or together, and prior submissions can be incorporated by reference.

The three reviews

• Policy (§450.41): denied only if the proposal would jeopardize U.S. national security (DoD consulted), foreign policy or international obligations (State consulted). Corporations disclose foreign ownership of 10% or more; the application includes the full flight profile: azimuths, trajectories, ground tracks, IIPs, and orbital parameters with lifetimes.
• Payload (§450.43): favorable unless the payload would jeopardize public safety, property, national security, or foreign policy. The FAA does not review payloads regulated by the FCC or Department of Commerce, or U.S. Government payloads. Class-of-payload reviews are allowed, but each individual payload is verified before flight; payload owners may seek determinations independently.
• Safety (§450.45): the core showing that launch or reentry will not jeopardize public health, safety, or property; satisfying Subpart C is the substance. Safety services or property provided by a Federal range under contract are accepted without further demonstration.

Flexibility mechanisms

• Incremental review (§450.33): the safety application may be submitted in modules, if the applicant flags the intent before applying and the Administrator agrees the modules can be reviewed independently in workable order.
• Means of compliance (§450.35): five areas require an FAA-accepted means of compliance before the application can even be accepted: flight safety analysis methods (§450.115), flight toxic hazards (§450.139), highly reliable flight safety systems (§450.145), lightning hazard mitigation (§450.163), and ground toxic hazards (§450.187). Anyone may propose one, independent of any application.
• Equivalent level of safety (§450.37): any requirement can be met by a clear and convincing alternative demonstration, except the core §450.101 safety criteria (paragraphs (a), (b), (c)(1), (c)(3), (d), (e)(1), (g)).
• Safety element approvals (§450.39): vehicles, systems, processes, or personnel already approved under Part 414 are not re-evaluated when used within scope.

Safety Criteria & Hazard Control

§450.101 is the quantitative heart of Part 450, and it is broader than Part 420's single E_c line: it sets collective and individual risk limits for the public and for neighboring operations personnel, plus aircraft and critical-asset protection. The same numbers apply per launch and per reentry.

• High consequence event protection (§450.101(c)): three options: use flight abort per §450.108, keep every reasonably foreseeable failure mode at or below 1 × 10⁻³ conditional expected casualties (CE_c), or demonstrate vehicle reliability as agreed with the Administrator.
• Disposal: must meet the reentry risk criteria or target broad ocean areas. Analyses must rest on accurate data and statistically valid methods, benchmarked conservatively against observed mishaps and tests (§450.101(g)).

The four hazard control strategies (§450.107)

• Flight abort (§450.108): tiered by consequence. If any failure mode could exceed 1 × 10⁻² CE_c in uncontrolled areas, the flight safety system must be the highly reliable kind (§450.145); between 10⁻³ and 10⁻², a §450.143 system suffices. Flight safety limits must prevent CE_c above 10⁻², and abort rules trigger on limit violations, degraded FSS capability, or invalid tracking data.
• Flight hazard analysis (§450.109): the catch-all, mandatory when the other three can't adequately mitigate. Standard: likelihood of a hazardous condition causing death or serious injury must be extremely remote, with mitigations verified by analysis, test, demonstration, or inspection.
• Physical containment (§450.110): the vehicle simply lacks the energy for hazards to escape a defined flight hazard area, kept clear of the public and critical assets.
• Wind weighting (§450.111): unguided suborbital vehicles only; launcher azimuth and elevation adjusted for wind, with inherent vehicle stability required.

Flight Safety Analysis & Systems

The flight safety analysis (FSA) chain runs from trajectory modeling through debris, population, and risk, ending in the systems that enforce safety in flight. Coverage: orbital launch from liftoff through orbital insertion and all component impacts; reentry and disposal from deorbit initiation through final impact (§450.113).

The analysis chain

• Trajectory, normal flight (§450.117): a nominal trajectory plus variability and uncertainty trajectory sets; the final analysis uses a six-degree-of-freedom model with outputs at least once per second, under worst-case allowable atmospheric conditions.
• Trajectory, malfunction flight (§450.119): establishes deviation capability for every foreseeable malfunction, including failure of the flight safety system itself; for abort users it defines the limits of a useful mission.
• Debris (§450.121): characterizes hazardous debris for every foreseeable breakup cause and intact impact, with statistically valid impact probability distributions.
• Population exposure (§450.123): geographic and temporal distribution of people, including sheltering by structure and vehicle type.
• Probability of failure (§450.131): vehicles with fewer than two flights lean on similar vehicles' histories; with two or more, their own outcomes must be used in a statistically valid way. Default assumption: a constant conditional failure rate per phase.

Risk products and their thresholds

• Flight hazard areas (§450.133): water, land, and airspace regions; 97% containment of casualty-capable normal-flight debris; vessel hazard areas where impact probability exceeds 1 × 10⁻⁵; contour sets at 10⁻⁵/10⁻⁶ (casualty), 10⁻⁵/10⁻⁶ (vessels), 10⁻⁶/10⁻⁷ (aircraft); planned impacts carry probability 1.
• Debris risk (§450.135): demonstrates §450.101 compliance; reports the top ten population centers, everything contributing ≥1% of the collective criteria, and centers exceeding 10% of the individual criteria.
• Far-field overpressure (§450.137): distant window breakage from blast waves, considered even below 1.0 psi peak overpressure, with weather and terrain focusing effects.
• Toxic hazards (§450.139): containment (evacuation or weather constraints) or a risk assessment against §450.101; kerosene-based fuels exempt unless the FAA says otherwise.

The systems that enforce it

• Computing systems (§450.141): criticality-graded software safety; safety-critical items need verification by a test team independent of the developers, and nobody may approve their own work.
• Safety-critical systems (§450.143): no credible fault may raise public risk beyond nominal; qualification beyond predicted environments, acceptance with margin, and lifecycle monitoring of actual flight environments.
• Highly reliable FSS (§450.145): where §450.108(b)(1) demands it, both the onboard and ground portions must demonstrate 0.999 reliability at 95% confidence through design, analysis, and test.

Operations, Ground Safety & License Terms

The back half of Subpart C governs how a licensed campaign actually runs, and Subpart D sets the standing obligations. The deadlines here are the most quiz-worthy numbers in the part.

Running the operation

• Agreements (§450.147): written, in effect before licensing: site use, Notices to Mariners (Coast Guard), Notices to Airmen (FAA ATO), and mishap response with local responders.
• Rest rules (§450.151): the FAA prescribes no hour limits; the operator must define its own numeric rules for shift length and maximum extension, consecutive work days, minimum rest (including immediately before the countdown shift), and a deviation approval process.
• Communications and readiness (§§450.155–450.157): defined hold/resume, go/no-go, and abort authority; every safety-critical channel recorded; readiness assessment includes the mishap plan itself.
• Flight commit criteria (§450.165): seven areas, including hazard-area surveillance, weather (with lightning), collision-avoidance closures, and FAA confirmation that critical-asset risk is met.
• Tracking (§450.167): real-time position and velocity sufficient to predict impact points for every stage and component.

Collision avoidance (§450.169)

Screening applies above 150 km altitude (below it, no COLA needed); orbital ascent screened a minimum of 3 hours from liftoff. Request the screen ≥7 days out (15 for first-timers), obtain it no later than 3 hours before the window, re-request ≥12 hours before a delayed window.

End of launch and mishaps

• Orbital debris mitigation (§450.171): no post-separation recontact with the payload, no fragmentation from stored energy; passivation means depleting fuel, opening fuel valves, venting pressure, permanently discharging batteries, and eliminating remaining energy sources.
• Mishap plan (§450.173): notify the FAA Washington Operations Center immediately for a fatality or serious injury, within 24 hours otherwise; written preliminary report in 5 days. Preventive measures precede the next flight.
• Test-induced damage (§450.175): pre-coordinated test damage is not a mishap if it stays in scope with no serious injury, third-party damage, or debris beyond the planned hazard area.
• Ground safety (§§450.179–450.189): ground hazard analysis with "extremely remote" (public injury) and "remote" (third-party property) standards; exclusive-use sites follow Part 420's explosive siting; Federal sites with ground-safety agreements are exempt from §§450.181–450.189.

Standing obligations (Subpart D)

• The licensee, not the FAA, bears responsibility for public safety (§450.201), and must give the FAA a countdown console and a line to the mission director (§450.209).
• Flight safety analyses are frozen in the final 30 days before flight unless an approved change process exists (§450.213).
• Registration data per orbital object: international designator, launch date and site, function, and the four orbital parameters (nodal period, inclination, apogee, perigee) (§450.217).
• Financial responsibility follows Part 440; human spaceflight follows Part 460 (§§450.205–450.207).