WIA-SPACE-009 protects astronauts and spacecraft from space radiation in every phase of a mission. Its stated scope runs from Low Earth Orbit (LEO) operations through lunar surface activity and Mars expeditions. It also covers extravehicular activity (EVA) and emergency radiation events. The standard spans the physics of the sources, health-effect and risk criteria, passive and active shielding, monitoring, operational procedures, medical countermeasures, and mission planning. It is therefore a single chain from environment to dose to decision, not a collection of unrelated rules.
The standard is organised into four phases, and each one answers a different practical question.
| Phase | Question it answers | Typical content |
|---|---|---|
| 1: Data Format | How is radiation information recorded? | Source, dose-record, risk-criterion, LET-spectrum, dosimeter and mission-budget envelopes |
| 2: API Interface | How do systems exchange it? | Missions, dose-records, dosimeters, SPE-alerts, telemetry and audit endpoints |
| 3: Protocol | What must people and hardware do? | Shielding design, SPE shelter, real-time monitoring, medical countermeasures, verification, deviation handling |
| 4: Integration | How does it fit the wider ecosystem? | NASA, NCRP, ICRP, ECSS and ISO/IEC 17025 alignment, post-mission health monitoring, quality assurance |
The standard cites established references rather than re-deriving them. Applicable documents include ICRP publications on radiation protection, NASA STD-3001 (the Space Flight Human System Standard), ISO 15390 on galactic cosmic rays, and the NCRP reports on space radiation. Where a quantity needs a definition, such as effective dose or tissue weighting, the standard points to ICRP 103 instead of inventing its own.
On Earth, the atmosphere and the geomagnetic field absorb or deflect most incoming particles. A crew in orbit, and even more a crew beyond the magnetosphere, loses much of that protection. Three families of radiation reach them: galactic cosmic rays, solar particle events, and particles trapped in the Van Allen belts. Each differs in energy, timing and the shielding it demands, which is why the standard treats them as separate source categories.
The foundation of the standard is the ALARA principle, keeping exposure As Low As Reasonably Achievable. It is applied through three levers that run through every later section.
ALARA works inside hard limits. The standard adopts the NASA career limits, expressed as a 3% Risk of Exposure-Induced Death (REID). The limits depend on age and sex.
| Age at exposure | Female (mSv) | Male (mSv) |
|---|---|---|
| 25 | 600 | 800 |
| 35 | 900 | 1,000 |
| 45 | 1,100 | 1,200 |
Short-term limits sit alongside them: 250 mSv over 30 days and 500 mSv per year. Organ-specific limits cover the eye lens, at 2,000 mSv over a career to prevent cataracts, and the skin, at 6,000 mSv over 30 days to prevent acute skin damage. The limit structure shows how the standard thinks. Career risk, acute risk and organ risk are separate problems, so each gets its own number.
The standard characterises each source by composition, energy range, time behaviour and risk level.
| Source | Composition and energy | Time behaviour | Concern |
|---|---|---|---|
| Galactic cosmic rays (GCR) | About 85% protons, 14% helium, 1% HZE particles; hundreds of MeV to hundreds of GeV | Continuous; modulated by the solar cycle (30-50% variation) | High for missions longer than 6 months; meters of shielding needed for complete protection |
| Solar particle events (SPE) | More than 90% protons; tens to hundreds of MeV | Hours to days; correlated with the solar cycle | Very high during events; acute radiation syndrome possible; warning from 10 minutes to several hours |
| Trapped radiation | Inner belt: protons (10 to hundreds of MeV), 1,000-6,000 km. Outer belt: electrons (0.1-10 MeV), 13,000-60,000 km | Inner belt very stable; outer belt highly variable | Dominant for LEO operations |
The South Atlantic Anomaly (SAA), near 30°S, 60°W, is where the inner belt dips closest to Earth. It contributes 70-80% of the dose to ISS astronauts, and the station passes through it 5-6 times per day. HZE particles are the heavy, highly ionising component of GCR, which is why shielding them is so hard. Heavy ions fragment on impact and shed secondary particles, which is the reason the standard prefers low-Z materials.
Phase 1 turns this physics into a record format. The radiation-source envelope groups sources by physical mechanism, with secondary radiation (neutrons and spallation products) and gamma-ray bursts added to the three primary categories. The envelope carries four things:
Referenced models include AE-9/AP-9 for trapped radiation and HZETRN 2015 for transport and secondary radiation. Because the temporal envelope differs by source type, a system that consumes these records can tell a slow background from a sudden storm.
The health concerns the standard addresses are cancer risk, DNA damage (including double-strand breaks, DSB), central nervous system effects, cardiovascular effects and cataracts. Acute radiation syndrome (ARS) is the short-term hazard during a large SPE. Many of these effects are only partly understood at low dose rates, which is why long-term low-dose effects and individual radiosensitivity appear among the research priorities.
The key step between physics and health is the dose record. Different radiation types damage tissue to different degrees, so a bare absorbed dose is not enough. The Phase 1 dose-record envelope therefore carries a chain of quantities:
| Element | Basis stated in the standard |
|---|---|
| Dose identifier | UUID v7 (RFC 9562) |
| Crew-member reference | Privacy-compliant identifier (HIPAA and NASA Privacy Act) |
| Instrument reference | Link to the dosimeter envelope |
| Absorbed dose | Gray (Gy), per ICRU 33 |
| Equivalent dose | Sievert (Sv), using ICRP 103 radiation weighting factors wR |
| Effective dose | Sv, using ICRP 103 tissue weighting factors wT |
| Organ-dose breakdown | High-wT organs: lungs, colon, stomach, breast, gonads, red marrow, thyroid |
| Uncertainty | Measurement-uncertainty envelope per ISO/IEC Guide 98-3 |
| Audit | Tied to the mission operator (NASA, ESA, JAXA, CSA, Roscosmos, CNSA) |
Requiring uncertainty alongside the dose value matters in practice. A career limit set at a 3% REID level is only meaningful if the reader knows how well the underlying number is known. The LET spectrum feeds the quality-factor determination, so the dosimeter must report it as well as the dose.
The ARS thresholds in the protocol also scale with dose. G-CSF is considered above 2 Gy, prophylactic antibiotics above 1 Gy, and early return of the crew is considered for severe cases above 4 Gy. Risk assessment ends only at the end of the crew member's life. Post-mission monitoring continues with annual examinations, enhanced cancer screening, cardiovascular and cognitive evaluation, and cataract screening, all feeding a lifetime database used for correlation analysis and epidemiological study.
Shielding is specified in areal density (g/cm²) rather than in meters or inches, because what matters is how much mass a particle must traverse. The standard sets three habitat tiers:
The material priority is hydrogen-rich materials first, then multi-layer structures, then low-Z materials to limit secondary radiation. Hydrogen nuclei have a mass close to that of the incoming protons and so slow them without producing many heavy fragments. The material table shows the trade-offs.
| Material | Density (g/cm³) | Hydrogen content | Application |
|---|---|---|---|
| Polyethylene | 0.92 | 14% | Dedicated shielding layers |
| Water | 1.0 | 11% | Multi-purpose: life support and shielding |
| Aluminum | 2.7 | 0% | Structural baseline |
| Boron composite | 1.8-2.5 | Varies | Neutron capture |
Water is an attractive case because the crew must carry it anyway, so the shielding mass is effectively free. Electromagnetic deflection (active shielding) is described as under development, and compact active shielding for deep space vehicles sits on the long-term roadmap.
The storm shelter is the most important single design element against SPE. It requires 20-40 g/cm² effective thickness, capacity for all crew, at least 72 hours of self-sufficiency, a central location with maximum shielding, and access from anywhere within 15 minutes. Life support inside covers oxygen, CO₂ removal, temperature control, food and water, waste management and communications.
The EVA suit is the weak point. Current EMU shielding is only about 0.1-0.2 g/cm². The enhancement targets are 0.5 g/cm² over the torso for critical organs, a polycarbonate helmet with hydrogen gel, and polyethylene fiber weave in flexible joints.
The shielding design connects to the data layer. When a mission is registered, the platform resolves the shielding-configuration envelope against the spacecraft's design data. It then computes the mission radiation budget with the operator's chosen HZETRN configuration. The budget carries an explicit confidence percentile, an explicit worst-case SPE assumption and an explicit GCR solar-modulation assumption, and downstream consumers must use these assumptions consistently.
Monitoring combines three layers. Personal dosimeters include passive TLD units (at least two per crew member), OSL as a backup, weekly read-out at minimum and a read-out after the mission. Active dosimeters add real-time dose and dose-rate display, an alarm at 2x background, logging at no coarser than 1-hour resolution, and wireless transmission to the health monitoring system. Fixed area monitors in every habitable module measure continuous dose rate and alert automatically when a threshold is exceeded. Environmental monitors track the external environment (particle flux and energy spectrum) and provide real-time SPE detection.
Data management sets timing rules: transmission at least every 24 hours, emergency alerts immediately, a daily ground dose assessment, and crew notification within 1 hour of analysis. Dosimeters need NIST-traceable calibration at least annually, with energy response verified across the spectrum and certificates kept on file.
Phase 2 exposes this through a REST-style surface with a real-time stream:
POST /space-radiation/v1/missions # register mission
POST /space-radiation/v1/dose-records # submit dose
GET /space-radiation/v1/dose-records/crew/{cid} # crew dose history
POST /space-radiation/v1/dosimeters # register dosimeter
GET /space-radiation/v1/dosimeters/{id}/state # dosimeter state
POST /space-radiation/v1/spe-alerts # SPE alert ingest
WS /space-radiation/v1/state/stream # real-time stream
GET /space-radiation/v1/audit/{id} # audit trail
The behaviour behind these endpoints reflects the monitoring problem:
out-of-calibration state with a warning event when its calibration date passes, and records position changes as immutable events. State retrieval returns the latest dose rate, cumulative dose since deployment, and health data such as battery, buffer fill and last contact for active units.Merging duplicate alerts into one normalised message addresses a real risk. If several forecasters fire at once, a crew confronted with conflicting warnings loses time.
Mission planning applies ALARA before launch. Launch-window selection weighs the solar cycle, SPE probability and GCR flux predictions. Route optimisation sends the vehicle through the thinnest regions of the Van Allen belts as fast as possible, uses Earth's shadow where it can, and keeps SPE avoidance maneuvers as a contingency. Mission duration is balanced against radiation risk: faster propulsion shortens transit, surface stay time is traded against dose, and each segment draws on a dose budget.
EVA is gated by a go/no-go decision made after a 48-hour solar activity forecast review and an assessment of the current environment. The conditions for a "go" are:
During the EVA the crew uses continuous personal dosimetry and ground-based environment monitoring, and time limits are enforced. The abort criteria are an SPE warning, a dose rate above 5x background, or cumulative dose approaching the daily limit. Single EVAs are capped at 8 hours and weekly EVA time at 16 hours, and after each EVA the dosimeters are read and the cumulative dose updated.
The SPE response uses a four-level alert ladder:
| Level | Condition | Action |
|---|---|---|
| Green | Normal | Continue operations |
| Yellow | M-class flare or dose rate 2x background | Increase monitoring, review EVA |
| Orange | X-class flare or SPE predicted | Abort EVA, prepare shelter |
| Red | SPE in progress, dose rate above 10x background | Immediate shelter evacuation |
Once in the shelter, the crew follows seven steps:
Inside, the crew minimises movement to conserve energy, tracks health, and receives psychological support. The 15-minute entry target in the protocol matches the 15-minute access requirement for the shelter itself, so design and procedure reinforce each other.
The standard separates drugs by when they act. Radioprotectors are given before exposure to reduce cellular damage. Amifostine (WR-2721) is FDA-approved but has significant side effects. Antioxidants such as vitamin C, vitamin E, selenium and N-acetylcysteine are also candidates. Administration is envisaged before high-risk activities, such as an EVA during elevated risk. Mitigators are given after exposure to limit the progression of damage. The primary ones are G-CSF for bone marrow recovery, EPO for red blood cell production and TPO for platelet production.
For acute radiation syndrome the standard sets out a diagnosis-and-treatment sequence. Diagnosis combines the symptom onset time (nausea, vomiting), dose estimation from dosimeters and, if available, a lymphocyte count. Treatment proceeds as follows:
Dose estimates from the dosimeter records therefore drive medical decisions directly. This is another reason for the uncertainty envelope in the dose record. The same logic extends after landing. Within 7 days crews receive a physical examination, blood tests, chromosome aberration analysis, cognitive testing and an ophthalmological exam, along with a final dose assessment that updates the career dose.
The standard's roadmap links today's gaps to expected progress. Near-term (2025-2030) work covers advanced passive shielding materials using nanotechnology, wearable real-time dosimeters and improved SPE prediction models. Mid-term (2030-2040) work covers active electromagnetic shielding demonstrations, personalised radioprotective pharmaceuticals, and in-situ resource utilisation (ISRU) shielding from lunar regolith or Martian soil. Long-term (2040 and beyond) aims at compact active shielding for deep space vehicles, gene therapy for radiation resistance and regenerative medicine for radiation damage.
The research priorities identify what the evidence still lacks:
Priority 3 deserves attention. The current limits vary only by age and sex. If individual radiosensitivity becomes measurable, the risk-criterion envelope would need to carry personalised limits, and the rolling-total alerts in the API would then compare against a different number per crew member.
The standard ties one chain together. Source envelopes describe GCR, SPE and trapped radiation by spectrum, timing and location. Dose records convert measured quantities into absorbed, equivalent and effective dose with stated uncertainty. Risk criteria compare those doses with career, short-term and organ limits. Shielding, monitoring, operations and medicine each act on a different part of the chain. The alert ladder (Green, Yellow, Orange, Red), the 15-minute shelter entry and the 50%, 75% and 90% dose-threshold alerts all turn that chain into decisions that can be made quickly.
Formal compliance is the last layer. A mission must show a pre-mission radiation protection plan, documented shielding analysis, dosimetry system verification, crew training records and a medical preparedness assessment. Certification then runs through review by the WIA Radiation Safety Board, pre-launch inspection, in-mission monitoring and post-mission evaluation.
The chapters that follow take individual links of the chain in more depth, beginning with the radiation physics that feeds the source and dose-record envelopes. Having seen how the pieces connect, a reader can follow each topic with its place in the overall chain already in mind.