The Uncrewed Baseline at Callisto

The Moon’s manifest is dominated by production capacity because it has customers. Callisto’s is dominated by survivability because it does not — and that inversion is the whole fingerprint of the regime in one table.

First article
68 t
Spares line
12 t
Power
100 kWe
Robotic units
~40
Spares queue
3.82 yr
Confidence
Modeled

The inversion

The Jovian Baseline Inverts the Inner-System One

This is the first regime where the spares half of the redundancy argument is not merely expensive but structurally unavailable.

The minimum-viability framework has been instantiated for the Moon, Mars, Earth orbit and the asteroid belt. The Jovian instantiation differs from all four, and the difference is a single number: 3.82 years between ordering a part and receiving it. Four properties follow from that, and none of them are conventional design practice.

Failure-distribution completeness replaces redundancy depth. At a 3.82-year queue the design question is not how many spares but what fraction of the failure distribution is covered by what was brought. A system with triple redundancy on the three most likely failures and none on the fourth has bought nothing. Every outer-system baseline is sized against a fault-tree census rather than a redundancy convention.

Cannibalization becomes a first-class design property. If two of five identical units can be reduced to spares for the other three, the effective queue length is the mission duration rather than 3.82 years. That drives an architecture of many small identical units and forbids single large ones, and it is mandatory here rather than efficient.

Graceful degradation needs a defined floor. Power, thermal, communications and one instrument — a state the installation can hold indefinitely and be recovered from by an arriving vehicle. Below the floor the asset is abandoned, and the queue makes abandoned permanent.

Autonomy sits at the policy level, not the task level. At 1.2 to 1.7 hours round trip, Earth sets objectives and constraints while the installation sequences, diagnoses, reprioritizes and reports. That is roughly the supervision model a well-run remote industrial site already uses, and it has to be validated before departure because there is no path to fixing it afterward. Projected

The first article

Sixty-Eight Tons, and the Spares Line Is Three Times the Lunar Proportion

Roughly one Starship-class payload delivered to the surface after a nuclear-electric cruise stage.

First industrial Callisto installation, uncrewed prepositioning phase
ElementMassRationale
Fission plant, 100 kWe class~15–20 tSolar would need 6,630 m² for the same output; fuel is a permanent Earth import
Radiators~4 tSized for 300 K rejection; the 122 K ambient contributes under 3%
Thermal mining and water plant~8 tSized against accessible grade, which is the Phase 0 gate
Electrolysis and liquefaction~6 tThe dominant electrical load, and the reason to ship water rather than propellant
Robotic units, ~40 at 100 kg~4 t20% failure tolerance, parts commonality, cannibalization primitives
Spares and consumable stock~12 tThe largest line after power, and what distinguishes this manifest from the lunar one
Fabrication — additive, machining, polymer~6 tProcesses imported stock; structure cannot be made from Callisto material
Communications terminal and relay~3 tOne high-gain link serving the system
Landers, hoppers and system tugs~10 tIntra-system Δv is small. One should be sized to reach the Himalia group
Total, first article~68 tModeled on the same basis as the lunar and Mars manifests

The manifest is smaller than the lunar one and its spares line is three times larger in proportion. That inversion is the whole fingerprint of the regime in one table. The Moon’s manifest is dominated by production capacity because it has customers. Callisto’s is dominated by survivability because it does not. Modeled

The phases

Five Phases, Each With a Named Gate

And only the last one is gated by something that is not on the surface.

The phased program
PhaseTimingContentGate to the next phase
Precursor2030sEuropa Clipper at Jupiter April 2030; JUICE July 2031 and Ganymede orbit December 2034; Tianwen-4 Callisto orbit February 2038Accessible ice grade at the working face, measured from orbit by neutron spectrometry
Power demonstration~2040sOne fission plant landed and operated through a full Jovian year; thermal mining at kg/hr scale; uncrewed throughoutA reactor that survives 12 years unattended at 134 K
Water and propellant~2050sScale to tons per day; electrolysis; cryogenic storage, trivially easy at 134 K; first cache for intra-system tugsA depot that refuels a tug
Shielding and habitat~2050s–2060sWater jackets emplaced and filled before any crew departs; bermed habitat shells; spin ring assembled and characterized uncrewed for years85 t of shielding water in place and verified
Crewed, conditional2070s at the earliestGated by vehicle specific power rather than by anything on the surface≥200 W/kg demonstrated in flight
The one external dependency

The crewed phase is the only phase in the entire destination series gated by a technology outside the destination. Everything on Callisto’s surface can be built with fission power and current robotics. The crew cannot get there and back inside a survivable dose without a propulsion system that does not exist and is not funded. That single dependency is what makes the outer solar system an automated regime through 2075 — not distance, not cold, not radiation on the ground, and not autonomy.

Autonomy

Autonomy Here Is a Logistics Problem, Not a Control Problem

A bad command can be corrected in hours. A failed pump takes years to replace.

Round-trip light time at Jupiter is 1.17 to 1.72 hours. That eliminates teleoperation in the lunar sense and it does not eliminate human supervision — a terrestrial team can still issue tasks, receive results, change priorities and investigate anomalies. Solar conjunction adds a recurring blackout of days, but unlike the Mars launch-window problem it is routine and predictable, and systems treat temporary isolation as a normal operating state.

So the machine does not need to become a sovereign mind because Earth is 1.4 light-hours away. It needs to become a competent maintainer because Earth is 3.82 flight-years away. A system that can diagnose, reconfigure, cannibalize another machine and fabricate a replacement part is substituting for a warehouse that is physically years distant, and that is the capability the baseline is built around. Projected

The anchor also carries a local time standard. An autonomous system supervised at 1.2-hour granularity needs an internal authority for sequencing, and that authority cannot be on Earth.

Record

Provenance and Data Sources

Confidence
Modeled for the manifest and the phase timings; Building for the precursor flights already in cruise
Spares queue
3.82 years at Jupiter — 25% of a 15-year design life
Round-trip light time
1.17–1.72 hours
First article
~68 t, of which ~12 t is spares and consumable stock
Power
100 kWe fission class; solar would need 6,630 m² at 5.2 AU
Phase 0 gate
Accessible ice grade at the working face, which swings the water plant nineteenfold
Crewed gate
≥200 W/kg whole-vehicle specific power, demonstrated in flight
Reviewed
Q3 2026