At 102:38:26 mission elapsed time, the Apollo 11 lunar module was still over seven minutes away from landing when Neil Armstrong reported a program alarm. The code was 1202. Eagle was approximately 33,500 feet, or 10 kilometers, above the Moon, and neither Armstrong nor Buzz Aldrin was certain if the alarm necessitated an abort.
The Apollo 11 Lunar Surface Journal indicates that Houston authorized the crew to proceed 27 seconds after Armstrong’s initial alarm announcement. The quick decision was made by 26-year-old guidance officer Steve Bales, collaborating with computer expert Jack Garman and the other members of the flight-control team.
There were four additional overload alarms that followed. However, the computer did not lose its navigational state, cease control of Eagle, or trigger an abort. Its recovery software consistently eliminated unfinished tasks, restarted vital programs, and carried on with the descent.
When the alarms actually occurred
A technical memorandum crafted by the MIT Instrumentation Laboratory on August 4, 1969, outlines the clearest sequence. According to the contemporaneous alarm analysis, the first 1202 alarm occurred 316 seconds after powered descent began. Another one followed 40 seconds later, while the final three alarms were registered during the last three and a half minutes before touchdown.
The entire sequence included four 1202 alarms and one 1201 alarm. This is the reason later narratives sometimes claim the crisis began three minutes prior to landing: the last cluster did, but the initial alarm was triggered more than seven minutes before touchdown.
The meanings of 1201 and 1202
The two codes signified slightly different deficiencies within the Executive, the job-control system of the Apollo Guidance Computer. A 1201 alarm indicated that no vector-accumulator memory areas, known as VAC areas, were available. A 1202 indicated that the computer had depleted its smaller core sets.
In both instances, the response was a managed software restart. A NASA-hosted explanation by Apollo programmer Peter Adler details how the computer reinitialized itself and resumed selected programs close to the points where they had been interrupted. It restarted critical functions like engine steering and the cockpit display while discarding non-essential tasks.
This was more precise than merely “dropping low-priority tasks.” The restart cleared the Executive and Waitlist queues and utilized phase tables prepared by the programmers to restore jobs that needed to continue. Navigation, guidance, and digital-autopilot functions persisted; crew-requested displays could be requested later.
Reasons for Eagle’s computer overload
The rendezvous radar switch was set to AUTO TRACK, as specified by the crew checklist. Due to an electrical phase mismatch in the radar interface, the system generated a rapid stream of counter-increment requests. These requests consumed approximately 15 percent of the computer’s available processing time.
The landing programs were already utilizing most of the machine’s capacity. Consequently, some recurring guidance tasks had not been completed when the Executive was prompted to schedule their next cycle. The resulting backlog consumed the available core sets and VAC areas, prompting the computer to initiate its recovery routine.
Aldrin observed that one of the 1202 alarms occurred while Verb 16 Noun 68 was executing. That display provided data including velocity and range to the landing site. The request itself was not the main issue, but its extra workload could potentially overwhelm an already burdened computer, leading Houston to monitor some of that information instead.
Roles of Hamilton and Laning
Margaret Hamilton, aged 32, led the Software Engineering Division at MIT’s Instrumentation Laboratory. She oversaw the team responsible for the onboard flight software utilized by the Apollo command and lunar modules. Her documented contributions involved asynchronous software, error detection and recovery, and priority displays that could interrupt the crew’s standard readouts during emergencies.
However, the Executive operating system itself merits more specific credit. MIT’s history of the Apollo computer attributes the design of the Executive and its priority-based program management method to J. Halcombe “Hal” Laning. That operating system was vital during Apollo 11 as it safeguarded the tasks required to maintain Eagle’s flight.
Hamilton did encounter opposition at MIT and NASA, but the recorded incidents pertained to different concerns. In a 2019 Guardian interview, she recalled that managers initially dismissed a safeguard aimed at preventing an astronaut from selecting a prelaunch program during flight. Additionally, she mentioned that one supervisor feared that male employees might resist her authority when she assumed their management.
These anecdotes illustrate the resistance Hamilton occasionally encountered but do not prove that she personally enforced Laning’s priority scheduler against MIT objections. Apollo’s recovery system was a joint engineering accomplishment, with Hamilton’s leadership and Laning’s operating-system design both crucial for an accurate account.
The decision-making at Mission Control
The software was capable of recovering from the overload, but individuals still needed to determine whether its operation was safe. Bales conferred with Garman and informed the flight director that Eagle could proceed as long as the alarms were sporadic and the computer’s critical outputs remained stable.
Bales was later chosen to accept a NASA Group Achievement Award on behalf of the mission-operations team.