AOP-46 whole life assessment of munitions

What it is

The scientific basis behind a munition's service life

AOP-46 is a NATO Allied Ordnance Publication (the "AOP" on its own cover) that lays out the scientific basis for the whole life assessment (WLA) of munitions: why munitions eventually become unsafe or unsuitable for service, and the methodology used to judge how long a particular munition can be kept in service. It applies to non-nuclear munitions, and NATO's own limitations clause extends the same information to munitions being considered for exchange between NATO armed forces (clause 1.6). Confidence in a munition's assessed life comes from a combination of design assessment, environmental trials, modelling and in-service surveillance, not from any single test (clause 2.7). AOP-46 is covered by STANAG 4315, the NATO agreement that carries it, and it is explicitly complementary to AOP-15's Safety and Suitability for Service assessment (clause 1.3): the two are read together, not as alternatives.

This is Edition B, version 1, published in March 2022. Its own modification history records that the change from the previous edition was limited to wording, references and formatting, and that a further revision updating the technical content itself is already planned.

Who the document is written for

AOP-46 speaks to the people who design and technically assess munitions, and to the authorities that buy and sustain them, rather than to a compliance function. It talks about "the designer" choosing explosive materials (clause 2.1) and about a Design Authority, referred to throughout as "the DA", who is normally contracted to provide assurance of an initial service life by the time a munition enters service (Annex F). Deciding whether to extend that life later, or to accept a shorter one than hoped for, falls to the Service sponsor (Annex H).

None of this reaches a company because AOP-46 says so on its own account. It binds through the STANAG that covers it, ratified and implemented nation by nation, and it reaches a specific design authority or contractor through the terms of a programme's contract.

Before entry into service

A life assessment starts well before a munition is fielded. By the time it does, the explosive materials chosen are normally already Qualified under STANAG 4170 (clause 2.1). Before practical trials, a design assessment and hazard analysis identifies potential failure modes and hazardous conditions, using techniques the document names directly: Failure Modes and Effects Analysis, Failure Modes Effects and Criticality Analysis, and Fault Tree Analysis, the first two set out in IEC 60812 (clause 2.6, Annex B). Alongside the engineering, the actual environment the munition will see, storage, transport and operational conditions, is captured through an environmental questionnaire described in AOP-15, building what AOP-46 calls a Life Cycle Environmental Profile (clause 2.2).

How much further testing follows depends on the munition. For a simple, low-cost round with a short service life, a design assessment with little or no practical testing may be enough, backed by the volume already fielded and by defect reporting. For a complex munition with a long service life, where test assets are limited and a failure carries real hazard, AOP-46 sets out a five-phase programme running from identifying failure modes through to a reasoned judgement of the life for which the munition remains safe and suitable for service (clause 2.7). Before entry into service, that judgement is checked against whether the failure modes identified are tolerable, whether trials have shown the munition can withstand its defined conditions, and whether the build standard assessed is the one that will actually enter service (Annex F).

Staying in service

The assessment does not stop once a munition is fielded. In-service surveillance monitors the condition of munitions already in service to confirm the trials programme's assumptions still hold, usually by examining early production or worst-case examples (clause 2.10). Condition monitoring records the environment a munition actually experiences, rather than the worst case assumed at design, so the assessment can be refined against real data (clause 2.11). AOP-46 also treats controlled storage, high-quality packaging and a dual-inventory policy, keeping most of the stock in controlled conditions while a smaller number see operational or training use, as measures that extend a munition's life, provided the conditions actually experienced are recorded rather than assumed (Annex G).

Extending or ending a service life

Extending a service life means revisiting the same questions asked at entry into service: whether the failure modes and predictions from the earlier assessment still hold, whether any new failure mode has appeared, and whether the build standard in service still matches what was assessed (Annex H, with further guidance in AECTP-600). Justifying the end of a service life weighs safety against cost of ownership: whether the whole inventory or only part of it is being withdrawn, whether the original design life has been reached, and whether the evidence points to a safety failure or only to a performance limit (Annex I).

Who checks the result

There is no accreditation scheme here. AOP-46 does not describe a certification body, a notified body, or a government surveillance regime that audits a company against it. What gets evaluated is the assessment itself, produced by or for the Design Authority and accepted by the Service sponsor, judged against the evidence the same clauses describe: the design assessment and hazard analysis, the environmental profile, and, for an initial or extended service life, whether the failure modes, trials and build standard in service still match what was assessed.

What it does not cover

AOP-46 applies to non-nuclear munitions only (clause 1.6). It does not itself set out the methodology for Safety and Suitability for Service assessment, that is AOP-15's subject, described here only as complementary (clause 1.3). And it is scientific and methodological reference material, not a certification scheme: nothing in it makes an organisation "AOP-46 certified".

Standards it references

• AOP-15Binds
• STANAG 4297Background
• STANAG 4675Background
• AOP-62Background
• AOP-63Background
• AOP-64Background
• STANAG 4844Background
• AOP-4844Background
• AECTP-230Background
• AECTP-600Background
• STANAG 4170Background
• AOP-07Background
• STANAG 4147Background
• IEC 60812Background