No Hand for the Logbook

An Unscheduled Watch

Eli: Shortly after midnight on September 26th, 1983, Lieutenant Colonel Stanislav Petrov is on watch in a bunker called Serpukhov-15, somewhere between 60 and 100 kilometers from Moscow. He's 44, an officer of the Soviet Air Defence Forces, and he isn't meant to be there tonight. He's filling in for a sick colleague. That makes him the duty officer, with about 100 people under him on the night shift, and the one who has to assess any warning and report it up the chain. And that's when the alarm bells go off.

Mara: A secret bunker, then, whose whole job is to see a nuclear attack coming. The listener who wrote in asks who Stanislav Petrov was, the Soviet officer who decided a nuclear missile alarm was false in 1983. Today's angle is the engineer's dilemma between algorithmic protocol and human judgment.

Eli: And Petrov knew that bunker from the inside. He'd helped design and install it.

Mara: And it was a frightened month. On September 1st, 1983, Soviet forces shot down Korean Air Lines Flight 007. All 269 people aboard were killed. Five days later Moscow admitted it, saying its pilots hadn't known the plane was civilian.

Eli: Petrov came out of that military world himself. Born in Vladivostok in 1939, son of a Second World War fighter pilot, he followed his father into service and studied at the Kiev Higher Engineering Radio-Technical College. By 1983 he was a signal processing engineer, not a typical watch stander.

Mara: And the leadership he served was braced for a surprise. Since 1981, Soviet leaders and the KGB had run Operation RYaN, a worldwide spying effort to catch any sign that the West was preparing a nuclear first strike. Bruce Blair, a Cold War nuclear strategy expert, said the whole Soviet system “was geared to expect an attack and to retaliate very quickly to it.” Whether that engineer turns out to be an officer who bent protocol or the safeguard the protocol needed is still an open question, Eli, and the sirens are about to start.

Red Screen in the Bunker

Eli: Officers watch electronic maps pulsate and lights flash. Petrov told the BBC's Russian Service in 2013: “The siren howled, but I just sat there for a few seconds, staring at the big, back-lit, red screen with the word ‘launch’ on it.” The system was reporting one American missile launch. Then four more. And it rated those reports at its highest reliability.

Mara: One account calls that word an automatic order to prepare for retaliation, not a warning.

Eli: The room froze. “For 15 seconds, we were in a state of shock. We needed to understand, what’s next?” Petrov recalled. Other accounts have his team on the edge of panic. Petrov said he shouted orders to keep it from spiralling.

Mara: The alert had cleared what Petrov called “28 or 29 security levels.”

Eli: So every check inside the machine said attack, and whatever Petrov did next would have to come from somewhere other than that screen.

Five Missiles and Clean Radar

Mara: As Petrov said later, a real American first strike, one meant to disarm the Soviet Union, would need hundreds of missiles launched together from silos and submarines. To him, five was a strange way to start a war.

Eli: Whatever the checkpoints said.

Mara: Then he looked at the ground radars. Their data feeds showed clean skies, zero incoming targets. There's a catch, though. Those radars only see a missile once it climbs above the horizon, over the curve of the Earth, so they'd pick up a launch from America late, not at liftoff.

Eli: So the quiet radar couldn't clear the alarm. It just couldn't confirm it.

Mara: Which left his own judgment of the machine. The system was new, and in his professional view, not proven in real operating conditions. And all the while he was juggling a telephone and an intercom, with no third hand, he said later, for the log entries he was supposed to make. “My cozy armchair felt like a red-hot frying pan and my legs went limp,” he recalled. “That’s how nervous I was.” And machines like that had fooled both sides: in 1979, an exercise tape mistakenly run on a computer at NORAD, the American warning command, produced a false warning and alert actions.

Eli: The Soviet leader wrote secretly to the American president that it was “fraught with a tremendous danger.” And he added: “I think you will agree with me that there should be no errors in such matters.”

Mara: Petrov's reasons were stacking up: too few missiles, a radar that hadn't seen anything, a system he didn't trust. Against them sat a screen that had passed every check it had.

The Twenty-Three-Minute Wait

Eli: For about five minutes, Petrov tried to read the cascade of warnings. “I had a funny feeling in my gut,” he recalled. He put the odds at 50-50. Then he dialed the duty officer at military headquarters and reported that the system was generating a false alarm, caused by a defect. He said later he was never certain.

Mara: Protocol said pass any confirmed warning straight up. Launch decisions sat higher than him.

Eli: Then came the wait. “Twenty-three minutes later I realised that nothing had happened,” he said. “If there had been a real strike, then I would already know about it. It was such a relief.”

Mara: Twenty-three minutes of nothing, and still nobody knew why the satellites saw five missiles.

Eli: An engineer had just overruled the country's newest warning system on a gut feeling, Mara, and his own army still had to decide what that made him.

Sunlight on the Clouds

Mara: The investigation followed the signal back to the sky. Oko, the Soviet early-warning satellites, watched from orbit for the heat of a rocket's exhaust. That night, near the autumn equinox, a rare alignment had sunlight catching high-altitude clouds over North Dakota at an angle that, from the satellites' orbits, looked like launch plumes. The filtering software didn't screen it out. Petrov later put it this way: “It was as though a child had been playing with a vanity mirror, throwing around the sun’s reflection.”

Eli: So the alarm was real in one sense. The defect was in the satellites.

Mara: And not only there. “Almost immediately, we understood that the reason was a computer glitch,” the general who headed Soviet air and space defence was later quoted as saying. “But it was not just that. As a result of an investigation, we discovered an entire bunch of defects in the early warning system.” The main problems were in the combat software and the satellites themselves, and they weren't all fixed until 1985.

Eli: Petrov said that same general praised him at first, and promised him a reward.

Mara: No reward ever came. Instead there was questioning, and a formal reprimand, not for calling the alarm false, but for failing to properly complete the command logbook. That's the reading held by the Soviet defence ministry's investigatory commission: the fault was procedure, details missing from the log. Petrov got no punishment for declining to relay the signal directly.

Eli: The man who said he had no third hand, faulted for what he didn't write down. And Petrov's own reading is different, Mara. He said no reward came because the defects embarrassed his superiors and the scientists responsible; reward him, and they'd have had to be punished. Petrov said he was reprimanded and reassigned because the flaws found in the early-warning system embarrassed high-ranking officers and scientists.

Mara: The inquiry that faulted his log confirmed the system he doubted was full of defects.

Eli: His son remembers his father at work three days straight while a special commission investigated, not sleeping, then coming home completely exhausted. Petrov suffered a nervous breakdown. He was moved to a less sensitive post.

Mara: Early retirement followed in 1984; his wife was ill. He insisted he wasn't forced out.

Eli: He settled in a run-down apartment in Fryazino, outside Moscow. In the mid-1990s he grew potatoes on a patch of land to stretch a meagre pension, he said. In 2004 his feet were so swollen he couldn't stand for long, and his son looked after his provisions.

Mara: For years only a handful of Communist leaders knew what had happened in that bunker, while the man at its centre lived quietly on the edge of Moscow.

Obscurity in Fryazino

Eli: That silence broke in the 1990s. The retired general who'd commanded Soviet missile defence first mentioned the incident, and Petrov's part in it, in a 1993 interview, though some accounts date the disclosure to 1991 or 1998. In 2006 Petrov received an award at the United Nations from the Association of World Citizens, for “the part he played in averting a catastrophe.” Russia's mission to the UN downplayed his story. In 2013 came the Dresden Peace Prize.

Mara: Honours abroad.

Eli: And he wouldn't take the hero's role. “All that happened didn't matter to me—it was my job,” he said. “I was simply doing my job, and I was the right person at the right time, that's all.” His son said he never talked about his work, not to anyone.

Mara: He died in Fryazino in May 2017, at 77, of pneumonia. Accounts differ on the exact day, and the news only got out months later, after someone contacted his son.

Eli: What a different report would have set off was never settled in his lifetime.

Mara: There are two readings. Bruce Blair said, “The top leadership, given only a couple of minutes to decide, told that an attack had been launched, would make a decision to retaliate.” That's launch-on-warning: firing back while the incoming warheads are still in the air, before any land. That reading leans on the war scare of autumn 1983.

Eli: The other reading runs through the chain above him. Nuclear security scholar Pavel Podvig argues that while Petrov did the right thing, “there were at least three assessment and decision-making layers above the command center of the army that operated the satellites.” Retired Major General Vladimir Dvorkin said the leadership would have waited for radar confirmation anyway. And Russia's UN mission held that no launch could even be considered on data from a single system.

Mara: On top of that, an arms control expert who taught at the Soviet Air Force Academy wrote in 2019 that a launch needed encoded authorization from at least two of three portable terminals, held by the top leader, the defence minister and the chief of the general staff.

Eli: Stanislav Petrov was a 44-year-old Soviet Air Defence lieutenant colonel and engineer, a stand-in on a sick colleague's shift, whose skepticism kept a false alert from reaching high command as an attack.

Mara: Two things would sharpen the picture. One is whether declassified Politburo archives ever show if the Soviet leader of 1983 would have authorized a launch on satellite warning alone, without ground radar. The other is whether Russian Defense Ministry registers ever show his spoken report formally logged as a false alarm.

Eli: Listeners can look into the Oko early-warning system.

Mara: Follow security with us as automated alerts confront human judgment.

Eli: And that's the story. I'm Eli.

Mara: And I'm Mara. Thanks for listening, and until next time.