The ground-side coordinator that dispatches sorties, deconflicts pads, holds emergency reserves, and maximises water throughput to station — one console commanding the entire 45-tanker constellation.
Each tanker flies its own safety-critical flight software — autonomous flight, fault detection, and safing all live on the vehicle. The Fleet Commander is the ground-side brain: it never flies a ship, it orchestrates the fleet.
It talks to all 45 vehicles over the same CCSDS-over-UDP link an individual operator console uses — every tanker is an independent command and telemetry endpoint. The coordinator aggregates per-vehicle telemetry into fleet-wide situational awareness at 1 Hz and issues a small, well-defined command vocabulary back to each ship.
Frames below are screen captures of the coordinator in operation — a live tanker fleet under auto-dispatch, with telemetry refreshing at 1 Hz.
Selects which vehicle flies the next sortie from state-of-charge, thermal state, maintenance status and position — maximising water delivered per unit time.
Guarantees one vehicle per pad across six LUNET surface sites and six station berths, with a FIFO berthing queue when station capacity is saturated.
Holds one to two highest-charge vehicles in emergency reserve per the fleet spec — excluded from routine water duty, ready for emergency tasking.
Plans suborbital hops between LUNET nodes to reposition the fleet where the next demand is, without a return to station between legs.
When a vehicle goes SAFE or ABORT, its pending sortie is reassigned and its pad freed — the fleet heals around the loss without operator intervention.
Aggregates 45 telemetry streams into fleet-wide situational awareness and drives the conveyor of sorties that keeps water flowing to station.