What it is
AAS3P-11, Safety and Suitability for Service Assessment Testing for Surface and Underwater Launched Munitions, is a NATO Allied Publication in the AAS3P series. Nations record their agreement to use it through STANAG 4758. It sits beneath AAS3P-1, which gives the general Safety and Suitability for Service (S3) discussion and defines what "safe for use" means; AAS3P-11 is the munition-type-specific companion that applies that framework to missiles, rockets, torpedoes and sea mines launched from ship, submarine or land-based platforms, whether the launch station is manned or unmanned.
Edition A, Version 1 (February 2017) is effective upon receipt. The document's own stated purpose is to guide personnel planning and implementing S3 assessment testing so that evidence is collected across a munition's life cycle. It is explicitly not a vehicle for assessing effectiveness, reliability or performance, except where a shortfall in either would itself represent a direct safety hazard, it does not define In-Service Surveillance or stockpile reliability testing, for which it points to STANAG 4675, and it does not address nuclear munitions.
The two S3 test programme approaches
The document sets out two overall shapes for an S3 test programme, described as Analytical and Empirical approaches. The Analytical approach evaluates a munition's condition following sequential environmental testing through component-level operating tests and breakdown analysis, and the document associates it with larger, more complex munition systems such as those launched from ships, submarines or remotely from land. The Empirical approach relies more heavily on complete-round firing tests and a reduced breakdown analysis, and the document associates it with smaller, less complex systems on manned launch platforms. Both combine sequential environmental testing, firing and component-level operating tests, and a set of non-sequential tests and assessments that run alongside the main sequence rather than within it.
Several of those non-sequential items, munition hazard classification, insensitive munitions assessment, munition software system safety assessment, electromagnetic environmental effects, demilitarisation and disposal assessment, fuze safety and explosive material qualification among them, are governed by other STANAGs and Allied Publications that this document points to rather than describing itself.
Planning, tailoring and the safety data package
Planning an S3 programme starts from three sources of evidence beyond the tests this document sets out: a review of existing design and test data, a Safety Assessment Report submitted by the munition developer identifying hazards and mitigations before testing begins, and a weapon danger area analysis carried out before any live firing. The Life Cycle Environmental Profile, the storage, transport and deployment environments a specific munition is expected to meet, is what the environmental test flows are built and tailored against, drawing on AECTP-100's tables of factors.
Tailoring runs throughout: eliminating a test, reducing a sample quantity, or reducing a severity is permitted where the rationale is documented, but any deviation from the recommended programme needs the relevant National Authority's approval before testing starts, not after. The results of the whole programme are compiled into a Munition Safety Data Package, which the document says is "for use by the appropriate S3 approving authority in determining the overall S3" of the munition.
Inspection levels and the Breakdown Test
Three inspection levels run through the sequential test flow: an initial baseline inspection recording the munition's physical condition against its build standard, a basic visual and built-in-test inspection, and an intermediate inspection that adds radiography and other non-destructive methods. The most invasive level, Breakdown Test and Critical Analysis, disassembles the munition for inspection and assessment of its energetic and structural materials, and the document is explicit that these procedures "must only be conducted by suitably qualified and experienced personnel." A reduced form of this analysis is available in the Empirical test flow, where confidence in the munition's safety margin is built instead through additional firing tests.
What it does not cover
AAS3P-11 is testing methodology, not a certification scheme. It names no accredited body and describes no third-party audit against it: acceptance runs through the National S3 Authority(ies) or other appropriate Authorities, who approve tailoring and deviations and who, together with "the appropriate S3 approving authority", review the finished safety data package. It does not cover the physical performance or reliability of a munition beyond what bears on safety, it does not define in-service surveillance or stockpile reliability testing, and it does not address nuclear munitions. The environmental and mechanical test methods it calls on live in the AECTP-100 through AECTP-500 series, covered under STANAG 4370; the safety sub-assessments it points to but does not itself describe include hazard classification under STANAG 4123, insensitive munitions under STANAG 4439 and AOP-39, software safety under AOP-52, fuze safety under STANAG 4187 and AOP-20, and demilitarisation and disposal assessment under STANAG 4518.