It failed at 2,340 metres
Our lander died 2,340 metres above the surface. It did not crash in a fireball. It did something much sadder: it worked perfectly right up until the moment one number, calculated on one afternoon by one tired person, disagreed with another number by a factor of two.
A factor of two. That is the entire distance between a historic landing and a very expensive hole in a very distant planet.
The temptation to hide
There is a strong temptation, when something fails publicly, to make the story about the tragedy. To let the failure be weather — something that happened to us.
I want to refuse that framing, because what actually happened is far more interesting. What happened is that a hypothesis died cleanly.
What a clean death gives you
In science, most ideas are wrong. That is not a crisis, it is the operating condition. The precious thing is not being right often — it is being wrong in a way that leaves you knowing more than you did before.
Our failure was clean. It told us, precisely, which link in the chain was weak, on which day, under which conditions. That information is now in the hands of every team designing the next descent. In a very real sense, the lander succeeded at its most important job: it eliminated a wrong answer, permanently, for everyone.
Let people grieve the instrument
One more thing, and it is the part nobody puts in press releases.
We built that machine for six years. People skipped birthdays for it. Someone learned to weld for it. When it stopped transmitting, the room went completely silent for eleven seconds — I timed it.
We let that silence happen. We did not immediately start the retro. And I think that mattered, because teams that are not allowed to grieve a failure start hiding the small ones, and the small hidden ones are how the big ones get built.
The ask
So: when something of yours fails, ask two questions. What did this eliminate? And who needs to be allowed to feel bad about it for a few quiet seconds before we get back to work?