REVIEW 3 major objections 4 minor 24 references
Fault-tolerant Model Predictive Control for Spacecraft
T0 review · 3 major / 4 minor · reviewed 2026-08-15 · deepseek-v4-flash
Pith's one-line read A spacecraft with multiple failed thrusters can still track a reference trajectory by steering a virtual orbit center, provided one torque-free bias input remains available.
desk verdict Clever orbit-based FTC idea and solid experiments, but the printed error dynamics have a feedforward inconsistency that hits the stability proof; needs fixing before I'd trust Theorem 1. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The load-bearing object is the orbit transformation (4), $c = p_r + R^T r_\diamond$, together with the centripetal balance condition (5), $f = m \omega_d^2 r_\diamond$. These two equations rewrite the faulty spacecraft as a fully controllable orbit system (7) in which the bias input $u_v$ no longer acts as a disturbance: because $u_v \in \mathrm{Int}(U_r)$, the shifted input set satisfies $0 \in \mathrm{Int}(U)$, so the orbit error dynamics (10) are controllable. The second mechanism is the terminal pair: the feedback-linearizing terminal controller (14) cancels the nonlinear term $f(e_\omega)$ and reduces the position error to the double integrator (15a), stabilized by an offline-computed explicit MPC law (an explicit MPC is a parametric quadratic program solved offline into a piecewise-affine feedback law), with the terminal set sized through the convex program (22).
What would settle it
Give a spacecraft whose failure pattern satisfies all of Assumptions 1–3, then solve the terminal-set sizing problem (22) numerically; if the constraints are infeasible for every $\hat{u}_{\max}$ and $e_{\max}$, or if a closed-loop simulation of the proposed MPC loses feasibility or fails to converge after a finite number of steps, the claimed stability certificate is disproved.
Extended reading notes
Core claim
On the paper's own terms, the discovery is that underactuation from actuator failures does not have to be treated as a tracking obstruction: it can be absorbed into the geometry of a periodic orbit. Given Assumption 1, the authors fix a body-frame vector $r_\diamond = [0, r, 0]^T$ and choose an orbit angular velocity $\omega_d$ so that the bias input satisfies $f = m \omega_d^2 r_\diamond$ (5); the orbit center $c = p_r + R^T r_\diamond$ (4) then has error dynamics (10) that are controllable because $0 \in \mathrm{Int}(U)$. They build a terminal set $T = \hat{X}_f \times E$ and terminal cost $l_T$ using a feedback-linearizing terminal controller (14) whose linear position part is an explicit MPC law, and prove in Theorem 1 that the closed-loop orbit error $e_{k+1} = \phi(e_k, \mu_k^{MPC})$ is asymptotically stable while (13) remains recursively feasible. Theorem 2 converts this into the spacecraft-level guarantee $\|p_r(t) - \chi_{[1:3]}(t)\| \le r_s$ with $r_s \ge r + \beta$ as $t \to \infty$.
Load-bearing premise
Assumption 1, that after the known failures there exists a torque-free bias input aligned with a principal axis and strictly inside the achievable input set, is the load-bearing premise; if the only available bias lies on the boundary or carries residual torque, the orbit construction and the stability proof no longer go through.
Editorial extensions
If this is right
- If the assumptions hold, the MPC needs no runtime re-verification: recursive feasibility from $k=0$ is enough to guarantee feasibility at every later step.
- The orbit-center tracking error goes to zero asymptotically, so the damaged spacecraft settles into a bounded tube of radius $r_s \ge r + \beta$ around the reference instead of drifting away.
- The method handles trajectory tracking, not just setpoint stabilization, so the same controller can steer a faulty spacecraft along a collision-free path toward servicing or deorbiting.
- The eMPC-based terminal set is larger than the standard LQR-based terminal set, which enlarges the region of attraction and lets the designer shape it through (22).
- The controller remains valid with known (detected) failures and does not require the spacecraft to remain fully actuated.
Reading between the lines
- The same orbit-compensation idea should transfer to any vehicle with a persistent unidirectional thrust bias, such as a rotorcraft with a stuck propeller, as long as the reduced error dynamics remain controllable; the paper itself only demonstrates spacecraft cases.
- Assumption 1 is a polytope-containment condition, so a designer could precompute all failure sets that admit a torque-free interior force and switch the controller on only for those, making the fault-tolerant property testable offline.
- If the bias force magnitude drifts during operation (for example through mass loss), the balance condition (5) is violated; an adaptive variant that re-computes $r$ and $\omega_d$ online would be a natural extension.
- Because the position bound is $r_s \ge r + \beta$, choosing the orbit radius $r$ is a direct trade-off between input feasibility and tracking accuracy: larger orbits ease feasibility but widen the guaranteed tube.
Signed reviews
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. This paper proposes a model predictive controller for a spacecraft with known thruster failures. The key idea is to exploit Assumption 1, the existence of a torque-free force vector inside the input set, to place the spacecraft on a small circular orbit, and then to control the orbit center rather than the spacecraft position directly. The controller solves MPC problem (13) for the orbit error dynamics (10) using a terminal set built from an explicit MPC of a double integrator and a linear angular-rate feedback. The authors claim recursive feasibility and asymptotic stability of the orbit error (Theorem 1) and a bounded positional tracking error with radius r_s >= r + beta (Theorem 2). Numerical 2D experiments on the ATMOS platform and a 3D simulation illustrate the approach.
Significance. If the main theorem were correct, this would be a meaningful advance over prior work: it handles coupled translational and rotational dynamics under multiple thruster failures with input constraints, avoids the small zero terminal set of earlier underactuated MPC designs, and provides larger terminal sets via explicit MPC. The open-source implementation and ATMOS experiments are concrete strengths. However, the central algebraic derivation connecting the error dynamics to the MPC and terminal controller is currently inconsistent, and the proof of Theorem 2 contains an unjustified monotonicity claim. The contribution is therefore promising but not yet established as written.
major comments (3)
- [Section III-B, Eq. (10a) and (13b)] The error dynamics and the MPC/terminal control law are algebraically inconsistent. Equation (10a) defines the second block of phi(e,u) as \tilde{R}^T (f(e_omega) + M u) - M u_ref, while constraint (13b) evaluates this map at u = u_o,s + \tilde{R}_s u_s^ref, and the terminal controller (14) contains the same + \tilde{R} u_ref term. Substitution yields the extra term (\tilde{R}^T M \tilde{R} - M) u_ref in the velocity-error update. Since M in (8) does not commute with \tilde{R} = diag(R, I_3) for a generic attitude, this term is nonzero: at e=0 and u_o=0, the one-step prediction is nonzero whenever u_ref is nonzero, so the origin is not an equilibrium of the closed-loop error dynamics. The cancellations leading to the linear dynamics (15), the terminal invariance (19), and the Lyapunov decrease in Proposition 1 and Theorem 1 all rely on the erroneous cancellation. This is the central load-bearing step and must be corrected; a local notational fix is not sufficient.
- [Section IV-D, proof of Theorem 2] The proof asserts that \|c_{k+1} - \chi_{k+1,[1:3]}\| < \|c_k - \chi_{k,[1:3]}\| on the strength of Theorem 1. Theorem 1 proves asymptotic stability of the full error vector e_k = (e_p,k, e_omega,k); it does not imply that the position component e_p,k,[1:3] decreases monotonically. The eventual bound \|p_r(t) - \chi_{[1:3]}(t)\| <= r_s can be obtained by a limsup argument from e_p,k -> 0 and Assumption 4, so the step should be replaced rather than assumed. As written, the proof is logically invalid.
- [Section III-A, Eq. (7)] The orbit dynamics derivation uses the identity d/dt R^T = R^T omega^times, which is not consistent with the standard quaternion kinematics in (1). With R the rotation from body to global frame, \dot{R} = R omega^times and hence \dot{R}^T = -omega^times R^T, not R^T omega^times. This changes the sign of the R^T omega^times r_diamonds term in the definition of v and of the cross-coupling terms in (7). Unless a nonstandard convention is explicitly introduced and consistently used in the quaternion kinematics, the claimed cancellation in (5) and the controllability statement following (7) need to be re-derived. Please state the convention and redo the derivation.
minor comments (4)
- [Assumption 2] The phrase 'u_k^ref in N' should read u_k^ref in U_chi subset R^6; the surrounding notation 'u^k_ref,k in N' is also garbled.
- [Figure 3 and Section V] The text says the blue terminal set corresponds to the proposed controller (14) and the red one replaces the eMPC part with an LQR, while the figure caption says 'Red: Linear controller. Cyan: eMPC controller.' Please reconcile the color descriptions.
- [Section V, 2D implementation] The statement 'Qe = I5x5' is unclear because the full error state is nine-dimensional; since this is a simplified planar model, the dimensions of all matrices in the 2D implementation should be stated explicitly.
- [Section IV-B, Eq. (22)] The optimization problem (22) contains malformed expressions, in particular the term with subscript 2 and the terms 'm u_max' and 'sqrt(f_max)' that are not consistent with (18)-(21). Please provide a readable and correct statement of the constraints.
Circularity Check
No significant circularity: the MPC stability proof is self-contained from Assumptions 1–4; self-citations are illustrative or provide an assumed bound, and the 'by construction' terminal ingredients are standard MPC design.
full rationale
The claimed stability and tracking results are derived through a standard MPC terminal-ingredient argument, not by re-using the target result. Assumption 1 guarantees 0 ∈ Int(U), making the orbit dynamics (7) controllable; the orbit transformation (4)–(5) is an explicit coordinate change rather than a renamed version of the conclusion. The terminal controller (14) is deliberately chosen to cancel f(eω) and reduce (10a) to the linear double-integrator dynamics (15), and the terminal set T = X̂f × E and terminal cost (24) are constructed from the feasibility set and parametric cost of the eMPC problem (16), following external references [13,16]. Recursive feasibility and asymptotic stability are then obtained from the standard theorem [24, Thm. 5.13], with Lemma 1 relying on the standard recursive-feasibility property of eMPC; none of these steps presupposes Theorem 1 or Theorem 2. The self-citations are not load-bearing: [15] is one way to compute an inter-sample bound that Assumption 4 already assumes; [19] documents the experimental platform; [22] supplies the comparison figure in Fig. 3. No fitted parameter is renamed as a prediction, and no uniqueness claim is imported from the authors' prior work. The skeptical algebraic concern about (10a) versus (13b)—that the reference feedforward should enter as R̃ᵀM R̃ u_ref rather than M u_ref unless the torque component of u_ref vanishes—is a correctness/consistency issue for the model, not circularity: it does not make the stability conclusion equivalent to its own inputs by construction. The paper is also tested against open-source code, Gazebo simulation, and ATMOS experiments, providing external demonstration beyond the analytical claims.
Assumptions & free parameters
free parameters (4)
- orbit radius r (or orbit angular velocity omega_d) =
r = 0.47 m (2D), 0.58 m (3D); omega_d = 0.5/0.6 rad/s
- terminal set scaling parameters emax, uhat_max =
computed from optimization (22); numerical values not reported
- gain K = diag(kappa1, kappa2, kappa3) =
K = 0.1 (2D), K = I (3D)
- MPC weights Qe, Qu, Qhat_e, Qhat_u and horizons N, Nhat =
listed in Section V
assumptions (7)
- domain assumption Assumption 1: there exists uv = [f^T 0_{1x3}]^T in Int(Ur) with f aligned with a principal axis
- domain assumption Assumption 2: reference trajectory is piecewise constant over the sampling period, generated by G, with u_ref in U_chi subset Ur setminus uv
- domain assumption Assumption 3: G(y1,y2) = [Gbar[1:10](y1, tilde R(y1,[7:10]) y2); omega_des^0]
- domain assumption Assumption 4: there exists beta > 0 with ||c(t)-c_k|| <= beta for t in [t_k, t_{k+1})
- domain assumption Assumption 5: Qe = diag(Qhat_e, Qe_omega)
- standard math MPC stability criterion [24, Thm 5.13, Rem. 5.17] using standard terminal cost and terminal set conditions
- standard math Lyapunov equation solution P exists for the linear dynamics (15b) with cost Qe_omega + 2 ||Qbar_u||_2 K^T K
Cite this review
Pith. "Pith review of Fault-tolerant Model Predictive Control for Spacecraft." pith.science (2026). https://pith.science/paper/XBWXJPLN
@misc{pith2026250902527,
author = {Pith},
title = {Pith review of: Fault-tolerant Model Predictive Control for Spacecraft},
year = {2026},
howpublished = {\url{https://pith.science/paper/XBWXJPLN}},
note = {Machine review of arXiv:2509.02527}
}
read the original abstract
Given the cost and critical functions of satellite constellations, ensuring mission longevity and safe decommissioning is essential for space sustainability. This article presents a Model Predictive Control for spacecraft trajectory and setpoint stabilization under multiple actuation failures. The proposed solution allows us to efficiently control the faulty spacecraft enabling safe navigation towards servicing or collision-free trajectories. The proposed scheme ensures closed-loop asymptotic stability and is shown to be recursively feasible. We demonstrate its efficacy through open-source numerical results and realistic experiments using the ATMOS platform.
Figures
Reference graph
Works this paper leans on
-
[7]
Autonomous thruster failure recovery on underactuated spacecraft using model predictive control
C. M. Pong, A. Saenz Otero, and D. W. Miller. “Autonomous thruster failure recovery on underactuated spacecraft using model predictive control”. In: Guidance and Control 2011: Proceedings of the 34th Annual AAS Rocky Mountain Section Guidance and Control Conference 141 (Feb. 2011), pp. 107–126. ISSN : 0065-3438
work page 2011
-
[1]
A Survey on Active Fault-Tolerant Control Systems
A. Abbaspour et al. “A Survey on Active Fault-Tolerant Control Systems”. In: Electronics 9.9 (2020). ISSN : 2079-9292
work page 2020
-
[2]
Review and comparison of active space debris capturing and removal methods
M. Shan, J. Guo, and E. Gill. “Review and comparison of active space debris capturing and removal methods”. In: Progress in Aerospace Sciences 80 (2016), pp. 18–32. ISSN : 0376-0421
work page 2016
-
[3]
P. Crouch. “Spacecraft attitude control and stabilization: Applica- tions of geometric control theory to rigid body models”. In: IEEE Transactions on Automatic Control 29.4 (1984), pp. 321–331
work page 1984
-
[4]
Detumbling and reorienting underactuated rigid spacecraft
V . Coverstone-Carroll. “Detumbling and reorienting underactuated rigid spacecraft”. In: Journal of Guidance, Control, and Dynamics 19.3 (1996), pp. 708–710
work page 1996
-
[5]
D. Casagrande, A. Astolfi, and T. Parisini. “Global asymptotic stabilization of the attitude and the angular rates of an underactu- ated non-symmetric rigid body”. In: Automatica 44.7 (July 2008), pp. 1781–1789. ISSN : 0005-1098
work page 2008
-
[6]
Quaternion feedback regulator for large angle maneuvers of underactuated spacecraft
J. S. Hall, M. Romano, and R. Cristi. “Quaternion feedback regulator for large angle maneuvers of underactuated spacecraft”. In: Proceed- ings of the 2010 American Control Conference. 2010, pp. 2867–2872
work page 2010
-
[8]
Finite-time fault-tolerant attitude stabilization for spacecraft with actuator saturation
Q. Shen et al. “Finite-time fault-tolerant attitude stabilization for spacecraft with actuator saturation”. In: IEEE Transactions on Aerospace and Electronic Systems 51.3 (2015), pp. 2390–2405
work page 2015
Show all 24 references
-
[9]
Active fault-tolerant control system design for space- craft attitude maneuvers with actuator saturation and faults
Q. Shen et al. “Active fault-tolerant control system design for space- craft attitude maneuvers with actuator saturation and faults”. In:IEEE Transactions on Industrial Electronics 66.5 (2018), pp. 3763–3772
2018
-
[10]
Adaptive fault-tolerant control of spacecraft attitude dynamics with actuator failures
Y . Han, J. D. Biggs, and N. Cui. “Adaptive fault-tolerant control of spacecraft attitude dynamics with actuator failures”. In: Journal of Guidance, Control, and Dynamics 38.10 (2015), pp. 2033–2042
2015
-
[11]
Stability and control of a quadro- copter despite the complete loss of one, two, or three propellers
M. W. Mueller and R. D’Andrea. “Stability and control of a quadro- copter despite the complete loss of one, two, or three propellers”. In: 2014 IEEE International Conference on Robotics and Automation (ICRA). IEEE, May 2014
2014
-
[12]
Nonlinear MPC for Quadrotor Fault-Tolerant Control
F. Nan et al. “Nonlinear MPC for Quadrotor Fault-Tolerant Control”. In: IEEE Robotics and Automation Letters 7.2 (Apr. 2022), pp. 5047–
2022
-
[13]
A survey on explicit model predictive control
A. Alessio and A. Bemporad. “A survey on explicit model predictive control”. In: Nonlinear Model Predictive Control: Towards New Challenging Applications (2009), pp. 345–369
2009
-
[14]
H. K. Khalil. Nonlinear systems. V ol. 3
-
[15]
Corridor MPC: Towards optimal and safe trajectory tracking
P. Roque et al. “Corridor MPC: Towards optimal and safe trajectory tracking”. In: 2022 American Control Conference (ACC) . IEEE. 2022, pp. 2025–2032
2022
-
[16]
J. B. Rawlings, D. Q. Mayne, M. Diehl, et al. Model predictive control: theory, computation, and design. V ol. 2. Nob Hill Publishing Madison, WI, 2017
2017
-
[17]
Decomposition of polytopes using inner parallel bodies
E. Linke and E. Saor ´ın G ´omez. “Decomposition of polytopes using inner parallel bodies”. In: Monatshefte f¨ur Mathematik 176.4 (2015), pp. 575–588
2015
-
[18]
S. P. Boyd and L. Vandenberghe. Convex optimization. eng. Cam- bridge: Cambridge University Press, 2004. ISBN : 0-521-83378-7
2004
-
[19]
Towards Open-Source and Modular Space Systems with ATMOS
P. Roque et al. “Towards Open-Source and Modular Space Systems with ATMOS”. In: (2025). arXiv: 2501.16973 [cs.RO]
2025 arXiv
-
[20]
CasADi: a software framework for nonlinear optimization and optimal control
J. A. Andersson et al. “CasADi: a software framework for nonlinear optimization and optimal control”. In: Mathematical Programming Computation 11 (2019), pp. 1–36
2019
-
[21]
Marcucchi
T. Marcucchi. github.com/TobiaMarcucci/pympc. 2024
2024
-
[22]
Failsafe Control for Space Robotic Systems: Model Predictive Control under Actuator Failures
R. St ¨ockner. “Failsafe Control for Space Robotic Systems: Model Predictive Control under Actuator Failures”. MA thesis. KTH Royal Institute of Technology, Oct. 2024
2024
-
[23]
T. W. Hungerford. Algebra. V ol. 73. Springer Science & Business Media, 2012
2012
-
[24]
Gr ¨une et al
L. Gr ¨une et al. Nonlinear model predictive control . Springer, 2017. VII. A PPENDIX : PROOFS Proof of Lemma 1. Equation (19a) follows directly by con- struction from (23), (14) and the definition of the Minkowski sum. Next, we show the validity of (19b). Given ek∈T , (19a) g...
2017
Reviewed August 15, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.