Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10

Nuclear Safety [Vol. 35, No. 2, July-December 1994]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 179 Consideration of Postaccident Consequences in the Determination of Safety Objectives for Future Nuclear Power Plants in France, D. Queniart, A. Sugier, and J. Lochard; ACCIDENT ANALYSIS: 187 Nuclear Safety Research: The Phebus FP Severe Accident Experimental Program, P. von der Hardt, A. V. Jones, C. Lecomte, and A. Tattegrain; 205 Containment Performance Analysis of the Advanced Neutron Source Reactor at the Oak Ridge National Laboratory, S. H. Kim, R. P. Taleyarkhan, and V. Georgevich; 213 Assessment of Fission Product Deposits in the Reactor Coolant System: The DEVAP Program, G. Le Marois and M. Megnin; 222 Erratum to “A Review of the Available Information on the Triggering Stage of a Steam Explosion," Vol. 35, No. 1, CONTROL AND INSTRUMENTATION: 223 Effects of Normal Aging on Calibration and Response Time of Nuclear Plant Resistance Temperature Detectors and Pressure Sensors, H. M. Hashemian; DESIGN FEATURES: 235 Defense in Depth Against the Hydrogen Risk—A European Research Program, F. Fineschi; ENVIRONMENTAL EFFECTS: 246 Technical Note: A Preliminary Analysis of the Risks to Hong Kong Resulting from Potential Accidents of Daya Bay Nuclear Power Plant, Z. Shi and X. Wei; OPERATING EXPERIENCES: 253 Reactor Shutdown Experience, Compiled by J. W. Cletcher; SPECIAL SECTION ON TMI-2 VESSEL INVESTIGATION PROJECT: 256 Three Mile Island—New Findings 15 Years After the Accident A. M. Rubin and E. Beckjord; 269 Relocation of Molten Material to the TMI-2 Lower Head, J. R. Wolf, D. W. Akers, and L. A. Neimark; 280 Insight Into the TMI-2 Core Material Relocation Through Examination of Instrument Tube Nozzles, L. A. Neimark; 288 Physical and Radiochemical Examinations of Debris from the TMI-2 Lower Head, D. W. Akers and B. K. Schuetz; 301 Results of Metallographic Examinations and Mechanical Tests of Pressure Vessel Samples from the TMI-2 Lower Head, D. R. Diercks and G. E. Korth; 313 Margin-to-Failure Calculations for the TMI-2 Vessel, J. Rempe, L. Stickler, S. Chavez, G. Thinnes, R. Witt, and M. Corradini; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 328 1993 Accident Sequence Precursor (ASP) Program Results, L. N. Vanden Heuvel, J. W. Cletcher, D. A. Copinger, J. W. Minarick, B. W. Dolan, and P. D. O’Reilley; RECENT DEVELOPMENTS: 339 Reports, Standards, and Safety Guides, D. S. Queener; 345 Proposed Rule Changes as of June 30, 1994; ANNOUNCEMENTS: 234 Thirty-First Annual Meeting of the National Council on Radiation Protection and Measurements; 356 1995 International Incineration Conference; 358 Fifth International Controls and Instrumentation Conference; 359 ANS International Topical Meeting on Safety of Operating Reactors; 359 Fifth International Conference on Nuclear Criticality Safety; 360 International Conference on Probabilistic Safety Assessment Methodology and Applications; 351 The Authors; 357 Reviewers of Nuclear Safety, Vol. 35.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Panel Session 117: Panel: Operational Excellence Through a Strong Safety Culture (R9.1)

This panel focused on the what the Department of Energy (DOE) and its contractors are doing to promote safety and excellence. The Integrated Safety Management System (ISMS) is crucial, but additional support provided by the Energy Facility Contractors Group (EFCOG), DOE, and environmental, safety, and health (ES and H) professionals in the field are equally imperative. The panelists discussed the importance of sharing lessons learned as well as are developing performance metrics to track operational and safety successes. This panel focused on current trends in building a strong operational safety culture and will include results from recent national workshops. Safety culture is the foundation of strong operational performance. Panel discussion included best practices from industry, DOE, and US NRC and also review tools being used to measure and evaluate safety culture programs. Panelists with presentations: Strong Safety Culture Promotes Operational Excellence (Kliss McNeel, Patricia Hughes); Safety Culture (Patricia Allen); DOE Safety Culture Improvement (Julie Goeckner); Supporting Safety Culture on the Front Line (Jan Preston); Interdependence of Safety Culture and Organizational Performance (Rizwan Shah)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Nuclear Safety [Vol. 33, No. 4, October-December 1992]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 499 Technical Note: Nuclear Regulatory Commission’s Examination Question Bank System, C. L Jensen and N. L. Skinner; 506 Report on the Specialists’ Meeting on Passive and Active Safety Features of Liquid-Metal Fast Breeder Reactors Organized by the International Atomic Energy Agency at Oarai Engineering Centre of Power Reactor and Nuclear Development Corporation, Japan, November 5-7,1991, S. R. Paranjpe; ACCIDENT ANALYSIS: 514 A Review of Hydrogen Production During Melt/Water Interaction in LWRs, D. F. Fletcher, B. D. Turland, and S. P. A. Lawrence; 535 A Review of the U 3 0 8 -Al Reaction as a Potential Heat Source in Research and Test Reactor Accidents, J. L. Snelgrove; CONTROL AND INSTRUMENTATION: 543 Multilevel Interfaces for Power Plant Control Rooms II: A Preliminary Design Space, K. J. Vicente; DESIGN FEATURES: 549 Twenty-Second DOE/NRC Nuclear Air Cleaning and Treatment Conference, R. R. Bellamy, D. W. Moeller, and M. W. First; 562 Book Review: Safety Assessment of Unit 5 (WWER-440/W-213) of the Greifswald Nuclear Power Station, M. H. Fontana; WASTE AND SPENT FUEL MANAGEMENT: 576 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver; OPERATING EXPERIENCES: 586 Analysis of Corrective Actions Applied to Nuclear Power Plant Operations, A. E. Cross; 593 Reactor Shutdown Experience, Compiled by J. W. Cletcher; 596 Operating U.S. Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver; 609 Non-Commercial Power Operating Experience; 614 World Nuclear Performance, Compiled by M. D. Muhlheim; RECENT DEVELOPMENTS: 623 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 635 Reports, Standards, and Safety Guides, D. S. Queener; 639 Proposed Rule Changes as of June 30, 1992; ANNOUNCEMENTS: 513 Fourth International Conference on Nuclear Fuel Reprocessing and Waste Management RECOD '94; 585 International Topical Meeting on Advanced Reactors Safety; 622 International Workshop on Implementation of ALARA at Nuclear Power Plants; 648 Short Course on Nuclear Criticality Safety; 648 8th Topical Meeting on Problems in Reactor Physics MEPhi-VOLGA-93; 643 The Authors; 646 Reviewers of Nuclear Safety, Vol. 33

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

The Impact of Variability in Patient Exposure During Premarket Clinical Development on Postmarket Safety Outcomes

We characterized the size of the premarket safety population for 278 small-molecule new molecular entities (NMEs) and 61 new therapeutic biologics (NTBs) approved by the US Food and Drug Administration (FDA) between October 1, 2002, and December 31, 2014, evaluating the relationship of premarket safety population size to regulatory characteristics and postmarket safety outcomes. The median size of the safety population was 1,044, and was lower for NTBs than NMEs (median: 920 vs. 1,138, P = 0.04), orphan products than nonorphan products (393 vs. 1,606, P < 0.001), and for products with fast-track designation (617 vs. 1,455, P < 0.001), priority review (630 vs. 1,735, P < 0.001), and accelerated approval (475 vs. 1,164, P < 0.001), than products without that designation. The median number of postmarket safety label updates and issues added to the label were higher with larger premarket exposure among nonorphan products, but not among orphan products. Products with accelerated approval using a surrogate end point had a higher median number of safety issues added to the label than those with full approval, but this did not vary with the size of the safety population; fast-track and priority review were not associated with the number of safety issues added to the label. Here, a smaller safety population size was associated with a longer time to first safety outcome for nonorphan products but not orphan products. For orphan and nonorphan products combined, smaller premarket safety population size is not associated with the number or timing of postmarket safety outcomes, regardless of expedited program participation.

60 APPLIED LIFE SCIENCES↗

Nuclear Safety [Vol. 30, No. 1, January-March 1989]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 1 International Conference on Thermal Reactor Safety: NUCSAFE 88 by A. P. Malinauskas and J. G. Pruett; ACCIDENT ANALYSIS: 18 Chernobyl Today: State of Research by A. Yu. Gagarinskii; CONTROL AND INSTRUMENTATION: 23 Problems Associated with Routine In-Plant Radioactive Effluent Monitoring Systems at U.S. Light-Water Reactors by Barry G. Wahlig, David M. Walker, Mahmoud R. Ghavi, and John M. Palms; DESIGN FEATURES: 34 Twentieth DOE/NRC Nuclear Air-Cleaning Conference by R. R. Bellamy, D. W. Moeller, and M. W. First, 46 Design Options for the Core Support Structure for Liquid-Metal-Cooled Reactor Plants by J. P. Burelbach, W. J. Kann, J. G. Saiveau, and R. W. Seidensticker; ENVIRONMENTAL EFFECTS: 53 The Radiological Consequences of the Chernobyl Accident by L. V. Konstantinov and A. J. González; WASTE AND SPENT FUEL MANAGEMENT: 70 Activities Related to Waste Management Compiled by E. G. Silver; OPERATING EXPERIENCES: 80 Fuel Performance Annual Report for 1986 by W. J. Bailey, 103 Safety Considerations Related to 12-Hour Shift Schedules by S. Gould, 105 Reactor Shutdown Experience Compiled by J. W. Cletcher, 108 Operating U.S. Power Reactors Compiled by E. G. Silver; RECENT DEVELOPMENTS: 130 General Administrative Activities Compiled by E. G. Silver, 140 Reports, Standards, and Safety Guides by D. S. Queener, 145 Status of Power-Reactor Licensing Activities Compiled by E. G. Silver, 153 Proposed Rule Changes as of Sept. 30, 1988; ANNOUNCEMENTS: 69 Northwestern University Short Course on Radiation Safety, 79 International Seminar on Fission Product Transport Processes in Reactor Accidents, 129 Harvard School of Public Health Offers Short Courses, 152 MIT Offers Summer Short Courses on Reactor Safety and Nodal Analysis, 152 Seminar on Use of PCs in Probabilistic Safety Analysis, 157 The Authors, 160 Indexes to Nuclear Safety, Volume 29.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Implementing Software Safety in the NASA Environment

Until recently, NASA did not consider allowing computers total control of flight systems. Human operators, via hardware, have constituted the ultimate safety control. In an attempt to reduce costs, NASA has come to rely more and more heavily on computers and software to control space missions. (For example. software is now planned to control most of the operational functions of the International Space Station.) Thus the need for systematic software safety programs has become crucial for mission success. Concurrent engineering principles dictate that safety should be designed into software up front, not tested into the software after the fact. 'Cost of Quality' studies have statistics and metrics to prove the value of building quality and safety into the development cycle. Unfortunately, most software engineers are not familiar with designing for safety, and most safety engineers are not software experts. Software written to specifications which have not been safety analyzed is a major source of computer related accidents. Safer software is achieved step by step throughout the system and software life cycle. It is a process that includes requirements definition, hazard analyses, formal software inspections, safety analyses, testing, and maintenance. The greatest emphasis is placed on clearly and completely defining system and software requirements, including safety and reliability requirements. Unfortunately, development and review of requirements are the weakest link in the process. While some of the more academic methods, e.g. mathematical models, may help bring about safer software, this paper proposes the use of currently approved software methodologies, and sound software and assurance practices to show how, to a large degree, safety can be designed into software from the start. NASA's approach today is to first conduct a preliminary system hazard analysis (PHA) during the concept and planning phase of a project. This determines the overall hazard potential of the system to be built. Shortly thereafter, as the system requirements are being defined, the second iteration of hazard analyses takes place, the systems hazard analysis (SHA). During the systems requirements phase, decisions are made as to what functions of the system will be the responsibility of software. This is the most critical time to affect the safety of the software. From this point, software safety analyses as well as software engineering practices are the main focus for assuring safe software. While many of the steps proposed in this paper seem like just sound engineering practices, they are the best technical and most cost effective means to assure safe software within a safe system.

Wetherholt, Martha S.↗

A Taxonomy of Fallacies in System Safety Arguments

Safety cases are gaining acceptance as assurance vehicles for safety-related systems. A safety case documents the evidence and argument that a system is safe to operate; however, logical fallacies in the underlying argument may undermine a system s safety claims. Removing these fallacies is essential to reduce the risk of safety-related system failure. We present a taxonomy of common fallacies in safety arguments that is intended to assist safety professionals in avoiding and detecting fallacious reasoning in the arguments they develop and review. The taxonomy derives from a survey of general argument fallacies and a separate survey of fallacies in real-world safety arguments. Our taxonomy is specific to safety argumentation, and it is targeted at professionals who work with safety arguments but may lack formal training in logic or argumentation. We discuss the rationale for the selection and categorization of fallacies in the taxonomy. In addition to its applications to the development and review of safety cases, our taxonomy could also support the analysis of system failures and promote the development of more robust safety case patterns.

Greenwell, William S.↗

2006 NASA Range Safety Annual Report

Throughout 2006, Range Safety was involved in a number of exciting and challenging activities and events, from developing, implementing, and supporting Range Safety policies and procedures-such as the Space Shuttle Launch and Landing Plans, the Range Safety Variance Process, and the Expendable Launch Vehicle Safety Program procedures-to evaluating new technologies. Range Safety training development is almost complete with the last course scheduled to go on line in mid-2007. Range Safety representatives took part in a number of panels and councils, including the newly formed Launch Constellation Range Safety Panel, the Range Commanders Council and its subgroups, the Space Shuttle Range Safety Panel, and the unmanned aircraft systems working group. Space based range safety demonstration and certification (formerly STARS) and the autonomous flight safety system were successfully tested. The enhanced flight termination system will be tested in early 2007 and the joint advanced range safety system mission analysis software tool is nearing operational status. New technologies being evaluated included a processor for real-time compensation in long range imaging, automated range surveillance using radio interferometry, and a space based range command and telemetry processor. Next year holds great promise as we continue ensuring safety while pursuing our quest beyond the Moon to Mars.

TenHaken, Ron↗

Addressing Unison and Uniqueness of Reliability and Safety for Better Integration

For a long time, both in theory and in practice, safety and reliability have not been clearly differentiated, which leads to confusion, inefficiency, and sometime counter-productive practices in executing each of these two disciplines. It is imperative to address the uniqueness and the unison of these two disciplines to help both disciplines become more effective and to promote a better integration of the two for enhancing safety and reliability in our products as an overall objective. There are two purposes of this paper. First, it will investigate the uniqueness and unison of each discipline and discuss the interrelationship between the two for awareness and clarification. Second, after clearly understanding the unique roles and interrelationship between the two in a product design and development life cycle, we offer suggestions to enhance the disciplines with distinguished and focused roles, to better integrate the two, and to improve unique sets of skills and tools of reliability and safety processes. From the uniqueness aspect, the paper identifies and discusses the respective uniqueness of reliability and safety from their roles, accountability, nature of requirements, technical scopes, detailed technical approaches, and analysis boundaries. It is misleading to equate unreliable to unsafe, since a safety hazard may or may not be related to the component, sub-system, or system functions, which are primarily what reliability addresses. Similarly, failing-to-function may or may not lead to hazard events. Examples will be given in the paper from aerospace, defense, and consumer products to illustrate the uniqueness and differences between reliability and safety. From the unison aspect, the paper discusses what the commonalities between reliability and safety are, and how these two disciplines are linked, integrated, and supplemented with each other to accomplish the customer requirements and product goals. In addition to understanding the uniqueness in reliability and safety, a better understanding of unison and commonalities will further help in understanding the interaction between reliability and safety. This paper discusses the unison and uniqueness of reliability and safety. It presents some suggestions for better integration of the two disciplines in terms of technical approaches, tools, techniques, and skills to enhance the role of reliability and safety in supporting a product design and development life cycle. The paper also discusses eliminating the redundant effort and minimizing the overlap of reliability and safety analyses for an efficient implementation of the two disciplines.

Huang, Zhaofeng↗

Safety Characteristics in System Application of Software for Human Rated Exploration Missions for the 8th IAASS Conference

NASA and its industry and international partners are embarking on a bold and inspiring development effort to design and build an exploration class space system. The space system is made up of the Orion system, the Space Launch System (SLS) and the Ground Systems Development and Operations (GSDO) system. All are highly coupled together and dependent on each other for the combined safety of the space system. A key area of system safety focus needs to be in the ground and flight application software system (GFAS). In the development, certification and operations of GFAS, there are a series of safety characteristics that define the approach to ensure mission success. This paper will explore and examine the safety characteristics of the GFAS development. The GFAS system integrates the flight software packages of the Orion and SLS with the ground systems and launch countdown sequencers through the 'agile' software development process. A unique approach is needed to develop the GFAS project capabilities within this agile process. NASA has defined the software development process through a set of standards. The standards were written during the infancy of the so-called industry 'agile development' movement and must be tailored to adapt to the highly integrated environment of human exploration systems. Safety of the space systems and the eventual crew on board is paramount during the preparation of the exploration flight systems. A series of software safety characteristics have been incorporated into the development and certification efforts to ensure readiness for use and compatibility with the space systems. Three underlining factors in the exploration architecture require the GFAS system to be unique in its approach to ensure safety for the space systems, both the flight as well as the ground systems. The first are the missions themselves, which are exploration in nature, and go far beyond the comfort of low Earth orbit operations. The second is the current exploration system will launch only one mission per year even less during its developmental phases. Finally, the third is the partnered approach through the use of many different prime contractors, including commercial and international partners, to design and build the exploration systems. These three factors make the challenges to meet the mission preparations and the safety expectations extremely difficult to implement. As NASA leads a team of partners in the exploration beyond earth's influence, it is a safety imperative that the application software used to test, checkout, prepare and launch the exploration systems put safety of the hardware and mission first. Software safety characteristics are built into the design and development process to enable the human rated systems to begin their missions safely and successfully. Exploration missions beyond Earth are inherently risky, however, with solid safety approaches in both hardware and software, the boldness of these missions can be realized for all on the home planet.

capability↗

Nonlinear control of the minimum safety factor in tokamaks by optimal allocation of spatially moving electron cyclotron current drive

The minimum value of the safety factor profile is related to the magnetohydrodynamic (MHD) stability of the plasma confined in a tokamak. Therefore, active control of the minimum safety factor may mitigate MHD instabilities that can degrade or even terminate plasma confinement. Typically, in most tokamak scenarios, the minimum safety factor evolves spatially with time, i.e., the location at which the safety factor achieves the minimum value changes with time. In addition to the inherent nonlinearities in the minimum safety factor evolution, its spatial variation makes the control design challenging. In particular, complexity in control design may arise from the need for time-dependent nonlinear models that account for spatial variation of the minimum safety factor. Furthermore, the minimum safety factor may drift to locations where the actuator authority is low. The problem of minimum safety factor control with target location tracking and moving electron cyclotron current drive (ECCD) is addressed in this work. A nonlinear time-dependent model that incorporates the spatial variation of the minimum safety factor is presented. A nonlinear controller based on optimal feedback linearization is developed to track a target minimum safety factor. The proposed controller treats the ECCD position as a controllable variable. In other words, the controller prescribes the ECCD position (in addition to the non-inductive powers) in real time based on an optimal criterion that is defined a priori. This work also presents the steps necessary to integrate the minimum safety factor controller with a total energy controller to achieve multiple control objectives simultaneously. In conclusion, the proposed integrated control algorithm is tested using nonlinear simulations in the Control Oriented Transport SIMulator (COTSIM) for a DIII-D tokamak scenario.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Nuclear Safety [Vol. 32, No. 4, October-December 1991]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 477 Report on the International Symposium on the Use of Probabilistic Safety Assessment for Operational Safety—PSA '91, S. Chakraborty and M. Khatib-Rahbar; 488 Good Relationships Are Pivotal in Nuclear Data Bases, A. S. Heger and B. V. Koen; 494 Technical Note: The Interagency Nuclear Safety Review Panel's Evaluation of the Ulysses Space Mission, J. A. Sholtis, Jr., D. A. Huff, L. B. Gray, N. P. Klug, and R. O. Winchester; ACCIDENT ANALYSIS: 502 The Severe Accident Analysis Program for the Savannah River Nuclear Production Reactors, M. L. Hyder; CONTROL AND INSTRUMENTATION: 511 A Framework for Selecting Suitable Control Technologies for Nuclear Power Plant Systems, R. A. Kisner; DESIGN FEATURES: 521 Containments for Gas-Cooled Power Reactors History and Status, P.W. Williams; ENVIRONMENTAL EFFECTS: 537 Indoor Radon: A Natural Risk, N. H. Harley and J.H. Harley; On the Importance of the Atmospheric Parameters in the Fission Products Distribution of a Severe Reactor Accident, M. C. Barla and A. R. Bayulken; Book Review: Health Effects of Exposure to Low Levels of Ionizing Radiation BEIR V, C. R. Richmond; WASTE AND SPENT FUEL MANAGEMENT: 555 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver OPERATING EXPERIENCES: 567 Effects of Component Aging on the Westhinghouse Control Rod Drive System, K. Sullivan and W. Gunther; 577 Reactor Shutdown Experience, Compiled by J. W. Cletcher, 580 Selected Safety-Related Events, Compiled by G. A. Murphy; 582 Operating U 8 Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver, RECENT DEVELOPMENTS: 596 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 610 Reports, Standards, and Safety Guides, D. S. Queener; 614 Proposed Rule Changes as of June 30, 1991; ANNOUNCEMENTS: 520 Workshop on PC PRAISE: A Probabilistic Fracture Mechanics Personal Computer Code for Nuclear Power Plant Piping Reliability Assessment; 536 Fifth Workshop on Nuclear Power Plant Containment Integrity; 624 New OECD "International Information System on Occupational Exposure (ISOE)"; 625 Harvard School of Public Health Announces Short Courses; 625 Eighth Power Plant Dynamics, Control and Testing Symposium; 626 Second Training Course on Off-Site Emergency Planning and Response for Nuclear Accidents; 618 The Authors; 622 Reviewers of Nuclear Safety, Vol 32.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Model-Driven Development of Safety Architectures

We describe the use of model-driven development for safety assurance of a pioneering NASA flight operation involving a fleet of small unmanned aircraft systems (sUAS) flying beyond visual line of sight. The central idea is to develop a safety architecture that provides the basis for risk assessment and visualization within a safety case, the formal justification of acceptable safety required by the aviation regulatory authority. A safety architecture is composed from a collection of bow tie diagrams (BTDs), a practical approach to manage safety risk by linking the identified hazards to the appropriate mitigation measures. The safety justification for a given unmanned aircraft system (UAS) operation can have many related BTDs. In practice, however, each BTD is independently developed, which poses challenges with respect to incremental development, maintaining consistency across different safety artifacts when changes occur, and in extracting and presenting stakeholder specific information relevant for decision making. We show how a safety architecture reconciles the various BTDs of a system, and, collectively, provide an overarching picture of system safety, by considering them as views of a unified model. We also show how it enables model-driven development of BTDs, replete with validations, transformations, and a range of views. Our approach, which we have implemented in our toolset, AdvoCATE, is illustrated with a running example drawn from a real UAS safety case. The models and some of the innovations described here were instrumental in successfully obtaining regulatory flight approval.

Safety case↗

Nuclear Safety [Vol. 36, No. 1, January-June 1995]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. THE CHORNOBYL ACCIDENT: 1 The Chornobyl Accident Revisited, Part II: The State of the Nuclear Fuel Located Within the Chornobyl Sarcophagus, A A. Borovoi and A. R. Sich; GENERAL SAFETY CONSIDERATIONS: 33 Nuclear Power Safety in Central and Eastern Europe, R. Wilson; 46 Safety of Nuclear Power Reactors in the Former Eastern European Countries, S. Chakraborty; 53 Technical Note: On the Definition of Common-Cause Failures, H. Paula; ACCIDENT ANALYSIS: 58 Modeling and Analysis of Core-Debris Recriticality During Hypothetical Severe Accidents in the Advanced Neutron Source Reactor, S.-H. Kim, V. Georgevich, D. B. Simpson, C. O. Slater, and R. P. Taleyarkhan; 68 Ignitability of Hydrogen/Oxygen/Diluent Mixtures in the Presence of Hot Surfaces, R. K. Kumar and G. W. Koroll; 94 Coupled RELAP5 and CONTAIN Accident Analysis Using PVM, K. A. Smith, A. J. Baratta, and G. E. Robinson; CONTROL AND INSTRUMENTATION: 109 Application of Fuzzy Logic in Nuclear Reactor Control Part I: An Assessment of State-of-the-Art, A. S. Heger, N. K. Alang-Rashid, and M. Jamshidi; DESIGN FEATURES: 122 Twenty-Third DOE/NRC Nuclear Air-Cleaning and Treatment Conference, R. R. Bellamy, J. J. Hayes, and M. W. First; ENVIRONMENTAL EFFECTS: 135 Atmospheric Dispersion and the Radiological Consequences of Normal Airborne Effluents from a Nuclear Power Plant, D. Fang, C. Z. Sun, and L. Yang; 142 Calculation of Distribution Coefficients for Radionuclides in Soils and Sediments, I. Puigdomenech and U. Bergstrom: OPERATING EXPERIENCES: 155 Reactor Shutdown Experience, Compiled by J. W. Cletcher; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 158 Operating Experience Feedback Report—Reliability of Safety-Related Steam Turbine-Driven Standby Pumps Used in U.S. Commercial Nuclear Power Plants, J. R. Boardman; 166 Turbine Building Hazards, H. L Ornstein; RECENT DEVELOPMENTS: 169 Reports, Standards, and Safety Guides, D. S. Queener; 175 Proposed Rule Changes as of Dec. 31,1994; ANNOUNCEMENTS: 32 Harvard School of Public Health In-Place Filter Testing Workshop; 134 International Conference on Advances in the Operational Safety of Nuclear Power Plants; 193 30th Tennessee Industries Week; 193 DOE Technical Standards Program 1995 Workshop; 194 Multiphase Flow Experiments and Instrumentation; 180 The Authors; 185 Indexes to Nuclear Safety, Volumes 34 and 35.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA System-Wide Safety Wildland Firefighting Operations Workshop Report

On March 9-11, 2022, NASA’s System-Wide Safety Wildland Firefighting Operations Workshop engaged the broader wildland firefighting management ecosystem in a safety-oriented discussion via a virtual platform. This enabled a better understanding of how NASA and community expertise can be leveraged in the safe development of current and future firefighting systems and operations. The goals of the workshop were to: (1) identify and prioritize the top safety-oriented risks, gaps in capabilities, and emerging technologies to enhance wildland firefighting for both near-term and far-term concepts, with a specific focus on aviation operations and (2) engage the stakeholder community in defining emergent safety-oriented scope, roles, responsibilities, and procedures for agents undergoing increasingly complex wildland firefighting operations in information-rich, but uncertain environments. Workshop participants were solicited from wildland firefighting stakeholders across government, industry, and academia. All levels of government were engaged, as NASA sought attendees from federal, state, local, and tribal government agencies. Industry participants from traditional wildland firefighting domains such as data visualization and equipment manufacturers were invited, and corporate attendees from novel application domains such as aerial robotics and autonomous systems were present as well. The top three findings were as follows: (1) Enhancing situation awareness is a safety priority, especially in the use of aerial assets; (2) Timely access to information along with data fusion and integrated displays will enhance safety-critical decision-making both inside and outside aviation contexts; and (3) Tailorable standards and common operating pictures in the field will enhance inter-agency cooperation in the wildland firefighting lifecycle and enable the optimal use of limited resources such as aerial assets. The workshop helped inform NASA of the relevant safety-related wildland firefighting concerns and aided the broader ecosystem in understanding the potential safety-oriented role NASA might play in this community. Increased engagement with crucial governmental stakeholders (e.g., U.S. Forest Service, CAL FIRE, etc.) along with industry partners in cutting- edge information -centric domains is a fundamental next step. Additionally, the workshop findings will help define the first of a series of operationally challenging demonstrations, held in concert with strategic ecosystem partners, known as the Safety Demonstrator Series for NASA’s System-Wide Safety project. The first demonstration is set in the wildland firefighting application domain and will: (1) examine high risk operational scenarios to reduce their overall risk via services, functions or capabilities that act as risk mitigators (or transfer that risk to automated systems better able to tolerate it) and (2) explore novel tools and technologies that will enhance safety margins by enabling non-traditional or neoteric operational paradigms.

wildland firefighting↗

Nuclear Safety [Vol. 32, No. 4, October-December 1991]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 477 Report on the International Symposium on the Use of Probabilistic Safety Assessment for Operational Safety—PSA '91, S. Chakraborty and M. Khatib-Rahbar; 488 Good Relationships Are Pivotal in Nuclear Data Bases, A. S. Heger and B. V. Koen; 494 Technical Note: The Interagency Nuclear Safety Review Panel's Evaluation of the Ulysses Space Mission, J. A. Sholtis, Jr., D. A. Huff, L. B. Gray, N. P. Klug, and R. O. Winchester; ACCIDENT ANALYSIS: 502 The Severe Accident Analysis Program for the Savannah River Nuclear Production Reactors, M. L. Hyder; CONTROL AND INSTRUMENTATION: 511 A Framework for Selecting Suitable Control Technologies for Nuclear Power Plant Systems, R. A. Kisner; DESIGN FEATURES: 521 Containments for Gas-Cooled Power Reactors History and Status, P.W. Williams; ENVIRONMENTAL EFFECTS: 537 Indoor Radon: A Natural Risk, N. H. Harley and J.H. Harley; On the Importance of the Atmospheric Parameters in the Fission Products Distribution of a Severe Reactor Accident, M. C. Barla and A. R. Bayulken; Book Review: Health Effects of Exposure to Low Levels of Ionizing Radiation BEIR V, C. R. Richmond; WASTE AND SPENT FUEL MANAGEMENT: 555 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver OPERATING EXPERIENCES: 567 Effects of Component Aging on the Westhinghouse Control Rod Drive System, K. Sullivan and W. Gunther; 577 Reactor Shutdown Experience, Compiled by J. W. Cletcher, 580 Selected Safety-Related Events, Compiled by G. A. Murphy; 582 Operating U 8 Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver, RECENT DEVELOPMENTS: 596 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 610 Reports, Standards, and Safety Guides, D. S. Queener; 614 Proposed Rule Changes as of June 30, 1991; ANNOUNCEMENTS: 520 Workshop on PC PRAISE: A Probabilistic Fracture Mechanics Personal Computer Code for Nuclear Power Plant Piping Reliability Assessment; 536 Fifth Workshop on Nuclear Power Plant Containment Integrity; 624 New OECD "International Information System on Occupational Exposure (ISOE)"; 625 Harvard School of Public Health Announces Short Courses; 625 Eighth Power Plant Dynamics, Control and Testing Symposium; 626 Second Training Course on Off-Site Emergency Planning and Response for Nuclear Accidents; 618 The Authors; 622 Reviewers of Nuclear Safety, Vol 32.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Nuclear Safety [Vol. 36, No. 2, July-December 1995]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. THE CHORNOBYL ACCIDENT: 195 The Chornobyl Accident Revisited, Part III: Chernobyl Source Term Release Dynamics and Reconstruction of Events During the Active Phase, A. R. Sich; GENERAL SAFETY CONSIDERATIONS: 218 Second ANS Workshop on the Safety of Soviet-Designed Nuclear Power Plants, R. A. Bari; 234 Elements of a Nuclear Criticality Safety Program, C. M. Hopper; 243 Rickover, Excellence, and Criticality Safety Programs, R. E. Wilson; ACCIDENT ANALYSIS: 249 Transient Analysis of the PIUS Advanced Reactor Design with the TRAC-PF1/MOD2 Code, B. E. Boyack, J. L Steiner, S. C. Harmony, H. J. Stumpf, and J. F. Lime; 278 The Hierarchy-By-Interval Approach to Identifying Important Models that Need Improvement in Severe-Accident Simulation Codes, T. J. Heames, M. Khatib-Rahbar, J. E. Kelly, R. P. Jenks-Johnson, and Y.-S. Chen; 290 RELAP5/MOD3 Code Coupling Model, R. P. Martin; 299 Missiles Caused by Severe Pressurized-Water Reactor Accidents, R. Krieg; DESIGN FEATURES: 310 Validation of COMMIX with Westinghouse AP-600 PCCS Test Data, J. G. Sun, T. H. Chien, J. Ding, and W T. Sha; ENVIRONMENTAL EFFECTS: 321 Spent Nuclear Fuel Characterization for a Bounding Reference Assembly for the Receiving Basin for Off-Site Fuel, S. D. Kahook, R. L. Garrett, L. R. Canas, and M J. Beckum; OPERATING EXPERIENCES: 332 Reactor Shutdown Experience, Compiled by J. W. Cletcher; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 335 Reactor Coolant System Blowdown at Wolf Creek on September 17, 1994, J. V. Kauffman and S. L. Israel; RECENT DEVELOPMENTS: 344 Reports, Standards, and Safety Guides, D. S. Oueener; 349 Proposed Rule Changes as of June 30, 1995; ANNOUNCEMENTS: 320 Symposium on Acceptability of Risk From Radiation—Application to Manned Space Flight; 320 24th DOE/NRC Nuclear Air Cleaning and Treatment Conference; 361 Radiation Biology and Radiation Protection— Modern Developments and Tendencies in Radiation Biology; 362 1997 IEEE Sixth Conference on Human Factors and Power Plants; 354 The Authors; 360 Reviewers of Nuclear Safety, Vol. 36.

05 NUCLEAR FUELS↗

Formal Safety Certification of Aerospace Software

In principle, formal methods offer many advantages for aerospace software development: they can help to achieve ultra-high reliability, and they can be used to provide evidence of the reliability claims which can then be subjected to external scrutiny. However, despite years of research and many advances in the underlying formalisms of specification, semantics, and logic, formal methods are not much used in practice. In our opinion this is related to three major shortcomings. First, the application of formal methods is still expensive because they are labor- and knowledge-intensive. Second, they are difficult to scale up to complex systems because they are based on deep mathematical insights about the behavior of the systems (t.e., they rely on the "heroic proof"). Third, the proofs can be difficult to interpret, and typically stand in isolation from the original code. In this paper, we describe a tool for formally demonstrating safety-relevant aspects of aerospace software, which largely circumvents these problems. We focus on safely properties because it has been observed that safety violations such as out-of-bounds memory accesses or use of uninitialized variables constitute the majority of the errors found in the aerospace domain. In our approach, safety means that the program will not violate a set of rules that can range for the simple memory access rules to high-level flight rules. These different safety properties are formalized as different safety policies in Hoare logic, which are then used by a verification condition generator along with the code and logical annotations in order to derive formal safety conditions; these are then proven using an automated theorem prover. Our certification system is currently integrated into a model-based code generation toolset that generates the annotations together with the code. However, this automated formal certification technology is not exclusively constrained to our code generator and could, in principle, also be integrated with other code generators such as RealTime Workshop or even applied to legacy code. Our approach circumvents the historical problems with formal methods by increasing the degree of automation on all levels. The restriction to safety policies (as opposed to arbitrary functional behavior) results in simpler proof problems that can generally be solved by fully automatic theorem proves. An automated linking mechanism between the safety conditions and the code provides some of the traceability mandated by process standards such as DO-178B. An automated explanation mechanism uses semantic markup added by the verification condition generator to produce natural-language explanations of the safety conditions and thus supports their interpretation in relation to the code. It shows an automatically generated certification browser that lets users inspect the (generated) code along with the safety conditions (including textual explanations), and uses hyperlinks to automate tracing between the two levels. Here, the explanations reflect the logical structure of the safety obligation but the mechanism can in principle be customized using different sets of domain concepts. The interface also provides some limited control over the certification process itself. Our long-term goal is a seamless integration of certification, code generation, and manual coding that results in a "certified pipeline" in which specifications are automatically transformed into executable code, together with the supporting artifacts necessary for achieving and demonstrating the high level of assurance needed in the aerospace domain.

Denney, Ewen↗