Now we know:
Space Shuttle Challenger broke apart 73 seconds after launch on January 28, 1986, killing all seven crew members. The cause was an O-ring failure in cold weather - a known risk that engineers had warned about and management overrode.
In January 1986, Christa McAuliffe was still weeks away from becoming the first teacher in space. NASA's Teacher in Space program had selected her from 11,000 applicants, and schools across the country had made plans to watch the launch live. The Space Shuttle was nine years into regular operation, with 24 successful missions. The agency had developed such confidence in the program's reliability that mission delays, there had been several for Challenger, were treated as minor operational inconveniences rather than signs of systemic risk.
Challenger launched on January 28, 1986, at 11:38 AM Eastern time. Temperatures at Kennedy Space Center had dropped to 18 degrees Fahrenheit the night before, the coldest launch conditions in the shuttle program's history. Roger Boisjoly and other engineers at Morton Thiokol, the manufacturer of the solid rocket boosters, had sent urgent warnings the previous evening. The O-rings that sealed joints in the boosters had shown a documented performance history correlated with cold temperatures; they had not been designed or tested for conditions below 53 degrees. Management overrode the objection. The launch proceeded.
Seventy-three seconds after liftoff, Challenger broke apart over the Atlantic Ocean. All seven crew members died. The Rogers Commission investigation found that the O-ring failure was the immediate cause, but that the deeper cause was a management culture at NASA that had normalized known risks. Engineers who raised concerns were required to prove the boosters were unsafe rather than to prove they were safe. The threshold had been inverted.
The accident happened while students across the country watched live in classrooms that had gathered specifically because of McAuliffe. The event was pedagogically devastating in ways beyond the loss of life: it demonstrated that institutional confidence could be structurally disconnected from engineering reality, and that the gap between what an organization says about its safety record and what its own engineers believe can be lethal.
