NASA Inspector General Reviews Moon Lander Risk Management

On March 10, 2026, NASA's Office of Inspector General released one of its most consequential audits in years — a 60-plus page report titled "To the Moon and Back: NASA's Management of the Artemis Human Landing System Contracts" that lays bare serious safety risks, testing shortfalls, and unresolved technical disputes threatening America's return to the lunar surface [1]. The findings arrive at a pivotal moment: Artemis II, the first crewed mission in the program, is poised to launch as soon as April 1, 2026, while the first crewed lunar landing has been pushed back to no earlier than 2028 [2][3].

The report (IG-26-004) paints a picture of a program that has controlled costs surprisingly well but may be cutting corners where it matters most — crew safety [4].

The Stakes: No Rescue, No Backup

Perhaps the most sobering finding in the OIG report is one that echoes the Apollo era: if Artemis astronauts encounter a life-threatening emergency on the lunar surface or in transit, NASA has no capability to rescue them [1][5].

"Without a rescue capability for the Artemis missions, the crew will be lost should the HLS become disabled on the lunar surface or be unable to dock with the awaiting Orion or Gateway in lunar orbit," the report states bluntly [5].

This is not a new constraint — Apollo astronauts faced similar realities more than half a century ago. But the OIG argues that the commercial nature of the Artemis landers, built by SpaceX and Blue Origin under fixed-price contracts, introduces new variables that demand more rigorous risk management than NASA has so far demonstrated [1][4].

Two Landers, Two Sets of Problems

SpaceX's Starship HLS: A 14-Story Gamble

SpaceX's Starship Human Landing System towers 171 feet above the lunar surface — the equivalent of a 14-story building, compared to the Apollo Lunar Module's modest 23 feet [4][6]. This extraordinary scale introduces risks unprecedented in human spaceflight.

The OIG identifies the lander's external elevator as a "top risk" for the entire HLS program. Astronauts must ride this elevator approximately 115 feet from the crew cabin to the lunar surface. "Currently there is no other method for the crew to enter the vehicle from the lunar surface in the event of an elevator failure," the report warns [4][1]. If the elevator breaks while astronauts are on the surface, they would be stranded with no way back to the crew cabin.

The lander's towering height also raises concerns about stability. The OIG notes that "there is a risk that [Starship's] momentum will continue after landing, causing it to tip over" [6]. NASA requires landing tilt not to exceed 8 degrees, but slopes at the Moon's South Pole — the targeted landing region — can reach 20 degrees in some areas [1].

Then there is the unprecedented challenge of orbital refueling. Before a single Starship HLS can journey to the Moon, SpaceX must first launch more than 11 other Starship vehicles into Earth orbit to serve as refueling tankers. One of those Starships will function as a propellant storage depot requiring more than 10 tanker flights to fill [1]. The OIG found that "some of the cryogenic technologies and capabilities SpaceX is developing will not be adequately mature ahead of the Artemis III mission," pointing to propellant boil-off in the vacuum of space as a still-unresolved technical problem [7].

Blue Origin's Blue Moon: Smaller but Not Without Risk

Blue Origin's Blue Moon Mark 2 lander stands at a more manageable 53 feet — still more than double the Apollo module's height — and uses a ladder or stair system rather than an elevator for crew access [4][6]. While this reduces some of the extreme risks associated with Starship, the OIG found its own set of concerns.

Blue Origin was still working to address shortfalls identified during a 2024 preliminary design review, with nearly 50% of design review action items still open more than a year later as of August 2025 [7]. The lander is approximately eight months behind its initial development schedule [7].

Both landers face challenges with cryogenic fluid management — the handling of super-cold propellants in the harsh environment of space — which the OIG flagged as a major shared risk [7].

The Manual Control Dispute

One of the most striking revelations in the report is an active disagreement between NASA and SpaceX over whether Starship HLS meets the agency's requirement for manual crew control [4][8].

NASA's human-rating standards require that crew vehicles include the option of manual control — not just autonomous operation — during all phases of flight. This is considered a cornerstone of crew safety: if automated systems fail, astronauts must be able to take the stick and fly the vehicle themselves [8].

"Despite the provider's stated acknowledgment and commitment to meeting this requirement, NASA's tracking of SpaceX's manual control risk indicates a worsening trend," the OIG report states [8]. SpaceX's design philosophy emphasizes automation, and the report suggests the company may ultimately request a waiver of the manual control requirement to meet its schedule [8].

The OIG draws a pointed comparison to SpaceX's Crew Dragon program. NASA granted SpaceX a manual control waiver for Dragon, but that decision came after years of operational experience with the uncrewed cargo variant. No such track record exists for Starship — the vehicle has not yet achieved a fully successful orbital mission [6][8]. By contrast, Boeing's Starliner includes manual control capability, a feature that proved critical when astronauts used it to counter failed thrusters during its crewed test flight [8].

"Test Like You Fly" — Except When You Don't

The OIG's report takes NASA to task for not adhering to its own "test like you fly" doctrine — the principle that test conditions should mirror operational conditions as closely as possible [4][5].

Neither SpaceX's nor Blue Origin's planned uncrewed demonstration missions will include Environmental Control and Life Support Systems (ECLSS) or airlock testing [4]. SpaceX's uncrewed demo will not test the elevator under lunar conditions — the very system identified as the program's top risk [6]. Neither demonstration will require docking with Orion or the Lunar Gateway in lunar orbit, meaning the critical connection between the lander and crew transport vehicle will remain untested before astronauts' lives depend on it [6].

The OIG argues these omissions represent "missed opportunities" that undermine the risk-reduction value of the demonstrations [4].

Costs Under Control — For Now

In a notable bright spot, the OIG acknowledged that NASA has managed contract costs effectively. SpaceX's contract has grown by $253 million — approximately 6% — since its 2021 award, while Blue Origin's contract has increased by just $13 million, less than 1%, since 2023 [7].

These figures stand in stark contrast to NASA's broader Artemis cost history. Three Artemis programs — the Space Launch System rocket, the Orion spacecraft, and Exploration Ground Systems — have accrued a combined $6.8 billion in cost overruns, with Orion alone responsible for $3.2 billion in overruns [9]. The HLS program's relative fiscal discipline is a credit to NASA's use of fixed-price commercial contracts, a structure that shifts cost-overrun risk to the contractors.

Source: NASA OIG / GAO Reports

Data as of Mar 10, 2026CSV

But the OIG warns that cost control should not come at the expense of safety. The report made five formal recommendations: three addressing contract management and two focused on crew safety. The safety recommendations call on NASA to review the manual control waiver lessons from the Commercial Crew Program and to update crew survival analyses for both landers [4][8].

NASA concurred with the crew safety recommendations and partially agreed with the contract management suggestions [4].

A Restructured Timeline

The OIG report lands amid a significant restructuring of the Artemis program timeline. On February 27, 2026, NASA announced that Artemis III — originally intended as the first crewed lunar landing — would instead serve as a technology demonstration mission in low Earth orbit, testing rendezvous and docking procedures with one or both commercial landers [3].

The first crewed lunar landing has been pushed to Artemis IV, targeted for early 2028, with a second landing mission (Artemis V) planned for late that same year [3]. The restructuring effectively adds another mission to the program and delays the moment when astronaut boots touch lunar soil by at least a year from previous estimates.

Source: GDELT Project

Data as of Mar 12, 2026CSV

Meanwhile, Artemis II — the first crewed flight of SLS and Orion — remains on track for an April 2026 launch after engineers resolved a helium-flow issue discovered in February that forced the rocket to be rolled back to the Vehicle Assembly Building [2]. The 10-day mission will carry NASA astronauts Reid Wiseman, Victor Glover, and Christina Koch, along with Canadian Space Agency astronaut Jeremy Hansen, on a free-return trajectory around the Moon [2].

The Broader Context: Budget Pressures and Political Headwinds

The OIG's findings arrive as the Artemis program navigates an uncertain fiscal environment. The Trump administration's fiscal year 2026 budget proposal sought to cut NASA's budget by 24% — roughly $6 billion from the agency's $24.8 billion allocation — and would have cancelled SLS and Orion after Artemis III due to the rocket's $4 billion per-launch cost [9].

While the One Big Beautiful Bill Act, signed in July 2025, ultimately preserved funding for SLS and Orion beyond Artemis III, the episode underscored the program's political vulnerability [9]. The Government Accountability Office has separately flagged Artemis cost overruns as a systemic concern, with three Artemis projects accounting for nearly half of the cost overruns across NASA's entire portfolio of major projects [9].

The expected crew loss probability thresholds tell a story of their own. NASA targets a 1-in-40 risk of crew loss for lunar surface operations and 1-in-30 overall from launch to splashdown [1]. For comparison, Apollo astronauts faced estimated odds of approximately 1-in-10, while the Space Shuttle's actual loss rate was approximately 1-in-70 [1].

What Comes Next

The OIG's report is not a call to halt the program but rather a demand for greater rigor. The five recommendations aim to close specific gaps: improve crew survival analyses, resolve the manual control dispute with SpaceX, apply lessons from Commercial Crew waivers, and strengthen contract oversight mechanisms [4][8].

NASA has agreed to implement most of the recommendations, though the timeline for resolution remains unclear. The agency faces a delicate balancing act — it must hold its commercial partners to exacting safety standards while maintaining the schedule flexibility that fixed-price contracts are designed to provide.

The fundamental question the report raises is whether NASA has learned enough from six decades of human spaceflight — including the tragedies of Apollo 1, Challenger, and Columbia — to manage a program where the vehicles are designed and built by private companies driven by their own timelines and engineering philosophies.

With Artemis II weeks from launch and lunar landing hardware still years from certification, the answer to that question will unfold in real time. For the four astronauts who will eventually descend to the Moon's South Pole aboard one of these landers, the stakes could not be higher.