Safe and robust GC (II) safety mode, if activated, maintains the spacecraft near a safety reference for all time. The algorithm utilizes separate feedforward and feedback components. In standard mode, the feedforward guidance solutions come from a way-point generation algorithm that uses a discrete linear-time-varying dynamics model. This approach provides a convex formulation of the problem (solvable onboard as a second-order cone program) that includes control and state constraints; the safety-mode availability adds a constraint in this standard-mode formulation as well. The feedback guarantees standard-mode resolvability to update the guidance prole in a robust, model-predictive manner. In safety mode, an oine-designed feedforward policy with the added feedback maintains the spacecraft in a hovering state in the proximity of its position at safety-mode activation time; this provides robustness to unexpected stateconstraint changes such as unexpected ground proximity during landing operations. A simulation demonstrating both the standard and safety modes is provided for a spacecraft autonomous-descent scenario toward a small asteroid with an uncertain gravity model and errors in the surface altitude constraint.