Search NASA⌕ Search

SEARCH · Search NASA

Results for “criticality accident”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Impacts of LEU+ and ATF on Fresh Fuel Storage Criticality Safety

The use of increased fuel enrichment, which is still in the realm of low-enriched uranium (LEU) fuel, has been of interest to commercial light water reactor operators as part of the next iteration in fuel cycle technological advances and research and development. Using increased enrichment fuel, or high-assay LEU (HALEU), in power plants has clear benefits for being able to load cores with additional power-producing fuel. Although HALEU enrichments can range up to 20%, the more guarded approach of investigating enrichments above current fuels within 10% enrichment is referred to as LEU plus (LEU+) to reflect the less drastic change in operating conditions and requirements and similarity to current fuel cycles. Of additional interest and increasing maturity is the incorporation of accident-tolerant fuel (ATF) concepts, which are also applicable to the current fleet. This class of technologies involves changes such as cladding (e.g., chromium coating or FeCrAl) and fuel composition (e.g., chromia dopant) alterations to demonstrate improved fuel performance under accident scenarios. The ability to properly store fuel before and after residence time in the reactor is crucial to plant operation. Typically, this is done in either a new fuel vault (NFV) or spent fuel pool (SFP). Storing, loading, and unloading dozens of fuel assemblies within the same general area provides opportunities for obvious criticality concerns. These concerns are addressed with regulations to the subcriticality margin that the NFV and SFP must maintain in certain conditions. Adopting LEU+ fuel results in inherent reactivity increases, which are extremely relevant for safe fuel storage. Therefore, a clear understanding of the effects of LEU+ fuel and ATF on criticality safety margins to regulatory limits is required, as well as an understanding of the degree of absorber crediting under normal and accident conditions.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Columbia Crew Survival Investigation Report

NASA commissioned the Columbia Accident Investigation Board (CAIB) to conduct a thorough review of both the technical and the organizational causes of the loss of the Space Shuttle Columbia and her crew on February 1, 2003. The accident investigation that followed determined that a large piece of insulating foam from Columbia s external tank (ET) had come off during ascent and struck the leading edge of the left wing, causing critical damage. The damage was undetected during the mission. The CAIB's findings and recommendations were published in 2003 and are available on the web at http://caib.nasa.gov/. NASA responded to the CAIB findings and recommendations with the Space Shuttle Return to Flight Implementation Plan. Significant enhancements were made to NASA's organizational structure, technical rigor, and understanding of the flight environment. The ET was redesigned to reduce foam shedding and eliminate critical debris. In 2005, NASA succeeded in returning the space shuttle to flight. In 2010, the space shuttle will complete its mission of assembling the International Space Station and will be retired to make way for the next generation of human space flight vehicles: the Constellation Program. The Space Shuttle Program recognized the importance of capturing the lessons learned from the loss of Columbia and her crew to benefit future human exploration, particularly future vehicle design. The program commissioned the Spacecraft Crew Survival Integrated Investigation Team (SCSIIT). The SCSIIT was asked to perform a comprehensive analysis of the accident, focusing on factors and events affecting crew survival, and to develop recommendations for improving crew survival for all future human space flight vehicles. To do this, the SCSIIT investigated all elements of crew survival, including the design features, equipment, training, and procedures intended to protect the crew. This report documents the SCSIIT findings, conclusions, and recommendations.

Source record↗

Credible Criticality Safety Margin in the 30B Package with LEU+ UF 6 and Hypothetical Water Ingress

The commercial nuclear industry is pursuing advancements in fuel and reactor design that increase the uranium enrichment above 5 wt. % 235 U. These advancements will necessitate the ability to transport bulk quantities of UF 6 at increased enrichments. Currently, the 30B cylinder is the primary container used by the industry for UF 6 storage and transportation and has a long history of successful shipments. This container can support up to 2,277 kg of UF 6 at a maximum enrichment of 5 wt. % 235 U. Previous evaluations have assessed the potential impact of criticality safety for 30B transport at higher enrichments but assumed moderator intrusion would not require evaluation. Although current regulations allow for the exception of moderator intrusion for UF 6 packages through the design and quality control of the package content, this exception is limited to enrichments up to 5 wt. % 235 U. Thus, an investigation of moderator intrusion into a 30B cylinder should be performed. Moderator intrusion into a 30B cylinder is a unique condition for criticality safety evaluation in transportation because of the violent chemical reactions that occur between UF 6 and H 2 O. The resulting intrusion is strongly dependent on the breach size, breach location, breach interface solid/ullage of the UF 6 content, the UF 6 distribution (which is temperature dependent), and temperature/pressure conditions which are dynamic in accident conditions. Additionally, the complexity of the HF-UO 2 F 2 -H 2 O interface that occurs during the event can influence the potential solubility of uranium in the system, as well as influence the amount of UF 6 reaction with H 2 O. With the operating experience from Orano Federal Services LLC, the UF 6 chemical expertise from Oak Ridge National Laboratory (ORNL), and the criticality safety expertise from ORNL, this paper evaluates the neutronic conditions (i.e., k eff ) that apply the understood chemistry and experimental conditions that occur during moderator intrusion of a breached 30B cylinder under postulated accidents. This report examines the historical evaluations of UF 6 transport and expands these evaluations for the enrichments expected for nuclear industry advancement. These simulations primarily feature a homogeneous mixture of UF 6 and H 2 O as an infinite media system and as a sphere with water reflection given an impurity limit of 0.5 wt. % UF 6 . This report demonstrates that this H/U limit is valid up to 8 wt. % enrichment for both H 2 O and HF as the moderating mixture. The water-reflected homogeneous mixed spheres evaluated demonstrate the amount of safety margin applied by restricting the 30B cylinder impurity limit to 0.5 wt. %. Additionally, this report evaluates moderator ingress scenarios of a 30B cylinder. The 30B cylinder simulations vary the cylinder orientation, the mass of UF 6 in the system, the mass of H 2 O in the system, and how much H 2 O has reacted with UF 6 . The moderator ingress of a 30B cylinder was evaluated for the water-reflected homogeneous mixed spheres to demonstrate the amount of safety margin applied by restricting the 30B cylinder impurity limit to 0.5 wt. %. These simulations are standard practice and are independent of the UF 6 -H 2 O reaction. This work also explored more complex simulations that layer the H 2 O over the UF 6 , which incorporates the amount of reacted UF 6 as a separate layer and considers solubility limits of UO 2 F 2 in H 2 O as it is produced. This approach is intended to simulate the postulated event of a large hairline crack occurring on a submerged cylinder. Finally, this work considers the potential of H 2 O mixing into the UF 6 solid heterogeneously using a sponge-like model. The water ingress into the UF 6 is treated as random size spheres, and the reaction products form into a layer over the spheres.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Cyber Safety and Security for Reduced Crew Operations (RCO)

NASA and the Aviation Industry is looking into reduced crew operations (RCO) that would cut today's required two-person flight crews down to a single pilot with support from ground-based crews. Shared responsibility across air and ground personnel will require highly reliable and secure data communication and supporting automation, which will be safety-critical for passenger and cargo aircraft. This paper looks at the different types and degrees of authority delegation given from the air to the ground and the ramifications of each, including the safety and security hazards introduced, the mitigation mechanisms for these hazards, and other demands on an RCO system architecture which would be highly invasive into (almost) all safety-critical avionics. The adjacent fields of unmanned aerial systems and autonomous ground vehicles are viewed to find problems that RCO may face and related aviation accident scenarios are described. The paper explores possible data communication architectures to meet stringent performance and information security (INFOSEC) requirements of RCO. Subsequently, potential challenges for RCO data communication authentication, encryption and non-repudiation are identified.

Communications↗

Cyber Safety and Security for Reduced Crew Operations (RCO)

NASA and the Aviation Industry is looking into reduced crew operations (RCO) that would cut today's required two-person flight crews down to a single pilot with support from ground-based crews. Shared responsibility across air and ground personnel will require highly reliable and secure data communication and supporting automation, which will be safety-critical for passenger and cargo aircraft. This paper looks at the different types and degrees of authority delegation given from the air to the ground and the ramifications of each, including the safety and security hazards introduced, the mitigation mechanisms for these hazards, and other demands on an RCO system architecture which would be highly invasive into (almost) all safety-critical avionics. The adjacent fields of unmanned aerial systems and autonomous ground vehicles are viewed to find problems that RCO may face and related aviation accident scenarios are described. The paper explores possible data communication architectures to meet stringent performance and information security (INFOSEC) requirements of RCO. Subsequently, potential challenges for RCO data communication authentication, encryption and non-repudiation are identified. The approach includes a comprehensive safety-hazard analysis of the RCO system to determine top level INFOSEC requirements for RCO and proposes an option for effective RCO implementation. This paper concludes with questioning the economic viability of RCO in light of the expense of overcoming the operational safety and security hazards it would introduce.

Aircraft Communication↗

Recent progresses on thermal–hydraulics evaluations of accident tolerant fuel cladding materials

Thermal–hydraulics (T-H) experiments have been on the progress to evaluate boiling heat transfer characteristics of accident tolerant fuel (ATF) candidates for further supporting the core-loading of these advanced ATF concepts in light water reactors (LWRs). Here this study covers recent experimental studies of ATF claddings and summarizes some significant results. Recent T-H experimental results of ATF cladding candidates demonstrated that the material thermal–physical properties have pronounced effects on critical heat flux (CHF). Such effects have not been well resolved in the current physics-governing models. These effects of cladding materials on CHF could be potentially rationalized by the material-conjugated boiling heat transfer, where the material-dominated heat conduction competes with the flow boiling-dominated heat convection. As progressively increasing the mass flux and/or liquid subcooling, CHF differences between different materials gradually decrease, which is in agreement with the recent T-H experimental results of ATF claddings. This is because the dominance of heat convection over heat conduction is primarily improved by liquid subcooling and/or mass flow rate. It is noteworthy that surface oxidization of claddings may have unknown impacts on T-H performances because the formation of oxide layers on cladding surfaces introduces variations of material thermal–physical properties and then changes the surface morphological features, which results in some difficulties in evaluating the thermal safety margins of ATF claddings.

36 MATERIALS SCIENCE↗

Water Security: Trends, Capabilities, and Research Directions to Secure Water Infrastructure

Water and wastewater sector is target rich and resource poor ~153k water utilities, serve 80% of US population ~16k publicly-owned wastewater systems in the US serve 75% of the population Need scalable solutions to fit small and medium to large systems Federal attention to critical infrastructure continues to grow – particularly in the water sector Increase in water sector incidents and threats for large scale disruption – particularly by nation-state actors and their proxies EPA is the SRMA DHS CISA focuses on critical infrastructure protection across sectors They must work together to secure WWW systems Research capabilities to enable secure water systems Current and future threats Resilience – natural disasters, accidents, cyber-physical attacks

99 - GENERAL AND MISCELLANEOUS↗

Experiment Logistics for an International Blind Intercomparison Exercise for Nuclear Accident Dosimetry at Godiva-IV

This document is the Experimental Set-up and Design (CED-3A) Report for IER-538, “Full Dosimetry Exercise Around Godiva Reactors” The report discusses the structure of the exercise consisting of two critical excursions, identifying the participating laboratories and their points of contact. The report also includes details of all dosimetry each laboratory will submit to be placed in proximity to Godiva-IV on aluminum plates or BOMAB phantoms. Each laboratory list the counting and spectroscopy equipment to be utilized at the LLNL NAD Laboratory in Mercury. The exercise is tentatively scheduled for one week in fiscal year 2022.

61 RADIATION PROTECTION AND DOSIMETRY↗

Work Practice Simulation of Complex Human-Automation Systems in Safety Critical Situations: The Brahms Generalized berlingen Model

The transition from the current air traffic system to the next generation air traffic system will require the introduction of new automated systems, including transferring some functions from air traffic controllers to on­-board automation. This report describes a new design verification and validation (V&V) methodology for assessing aviation safety. The approach involves a detailed computer simulation of work practices that includes people interacting with flight-critical systems. The research is part of an effort to develop new modeling and verification methodologies that can assess the safety of flight-critical systems, system configurations, and operational concepts. The 2002 Ueberlingen mid-air collision was chosen for analysis and modeling because one of the main causes of the accident was one crew's response to a conflict between the instructions of the air traffic controller and the instructions of TCAS, an automated Traffic Alert and Collision Avoidance System on-board warning system. It thus furnishes an example of the problem of authority versus autonomy. It provides a starting point for exploring authority/autonomy conflict in the larger system of organization, tools, and practices in which the participants' moment-by-moment actions take place. We have developed a general air traffic system model (not a specific simulation of Überlingen events), called the Brahms Generalized Ueberlingen Model (Brahms-GUeM). Brahms is a multi-agent simulation system that models people, tools, facilities/vehicles, and geography to simulate the current air transportation system as a collection of distributed, interactive subsystems (e.g., airports, air-traffic control towers and personnel, aircraft, automated flight systems and air-traffic tools, instruments, crew). Brahms-GUeM can be configured in different ways, called scenarios, such that anomalous events that contributed to the Überlingen accident can be modeled as functioning according to requirements or in an anomalous condition, as occurred during the accident. Brahms-GUeM thus implicitly defines a class of scenarios, which include as an instance what occurred at Überlingen. Brahms-GUeM is a modeling framework enabling "what if" analysis of alternative work system configurations and thus facilitating design of alternative operations concepts. It enables subsequent adaption (reusing simulation components) for modeling and simulating NextGen scenarios. This project demonstrates that BRAHMS provides the capacity to model the complexity of air transportation systems, going beyond idealized and simple flights to include for example the interaction of pilots and ATCOs. The research shows clearly that verification and validation must include the entire work system, on the one hand to check that mechanisms exist to handle failures of communication and alerting subsystems and/or failures of people to notice, comprehend, or communicate problematic (unsafe) situations; but also to understand how people must use their own judgment in relating fallible systems like TCAS to other sources of information and thus to evaluate how the unreliability of automation affects system safety. The simulation shows in particular that distributed agents (people and automated systems) acting without knowledge of each others' actions can create a complex, dynamic system whose interactive behavior is unexpected and is changing too quickly to comprehend and control.

complex systems↗

Microreactor Core Transportation Cask Model Description for Criticality Safety Validation Basis Assessment (Rev. 1)

Criticality safety analyses are completed on transportation casks used for microreactor whole core shipment to provide examples of models and analyses to industry, regulators, and nuclear community at large to be used in verification and validation analyses of similar applications. The microreactors considered are based on a Gas-Cooled Microreactor (GCMR) and a Heat-Pipe Microreactor (HPMR), both utilize HALEU fuel in the form of TRISO particles and various other design options considered in industry microreactor designs. Variant design options of GCMR and HPMR were also investigated to provide a wider application range for each technology. Criticality safety analyses for the GCMR and HPMR packages were performed using the CSAS6 sequence of SCALE 6.3.2 with the ENDF/B-VII.1-based continuous energy neutron libraries. Different scenarios were investigated, including normal operation and water flooded conditions to represent nominal and hypothetical accident scenarios. Sensitivity and similarity analyses are also performed using the TSUNAMI sequence of SCALE 6.3.2, and the similarity analysis uses all the experiments from the ICSBEP Handbook with Intermediate and mixed Enriched Uranium (IEU) and Low Enriched Uranium (LEU) systems, together with additional experiments that are sponsored by the DNCSH program. Many experiments were found marginally similar to the GCMR and HPMR models, with similarity index (ck) values greater than 0.8 but less than 0.9. Among all the experiments analyzed, no case has a ck value greater than 0.9, indicating that additional critical experiments might be needed to further validate the criticality safety models for microreactors transport packages.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Advanced Autonomous Welding for Refabrication and Follow-On Testing of Previously Irradiated Nuclear Fuel

The performance of follow-on experiments using irradiated nuclear fuel at any point in its lifecycle is a critical step in understanding phenomena and behavior. Transient experiments with high-burnup fuel can deepen the understanding of fuel fragmentation, relocations, and dispersal under loss-of-coolant accidents. An advanced autonomous welding process to refabricate commercial fuel rods inside a hot cell was created and tested to enable flexible experiment approaches on fuels irradiated in commercial and test reactors. Irradiated light water reactor fuel test pins from experiments performed at the Advanced Test Reactor (ATR) at Idaho National Laboratory were used to demonstrate the refabrication process. The welding process was found to be sensitive to welding parameters but flexible such that multiple passes could be performed on the same location until a hermetic weld was obtained. The refabrication of rodlets and successful welds was also found to be sensitive to the preparation of the irradiated cladding and endcaps. Thorough defueling of the fuel at the weld location and proper sizing of the endcaps and backing material mitigated these issues. The use of strategically located heat sinks in contact with the cladding and endcap materials also increased welding and refabrication success. For this work, the test pins were sectioned to remove the original endcaps and fuel was removed from both ends of each rodlet. The reassembly of the rodlets was then completed in four steps, which included the press fitting of new endcaps, the circumferential welding of rodlet endcaps to the cladding, rodlet pressurization in a pressure chamber, and seal welding the rodlet under pressure. The integrity of the refabricated rodlets was then verified via helium leak checking inside a vacuum chamber. The advanced welding system is capable of refabricating rodlets up to 380 mm in length, and repressurizing them up to 15 500 kPa. The refabricated lengths of the rodlets used in this work ranged from 149 to 165 mm and the refabricated fuel stack heights ranged from 70.4 to 79.8 mm. Here, the rodlets were pressurized with argon to an average pressure of 3617 kPa, and the average leak rate after refabrication was 6.7 • 10 -8 cm 3 • s -1 .

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Circadian rhythms, sleep, and performance in space

Maintaining optimal alertness and neurobehavioral functioning during space operations is critical to enable the National Aeronautics and Space Administration's (NASA's) vision "to extend humanity's reach to the Moon, Mars and beyond" to become a reality. Field data have demonstrated that sleep times and performance of crewmembers can be compromised by extended duty days, irregular work schedules, high workload, and varying environmental factors. This paper documents evidence of significant sleep loss and disruption of circadian rhythms in astronauts and associated performance decrements during several space missions, which demonstrates the need to develop effective countermeasures. Both sleep and circadian disruptions have been identified in the Behavioral Health and Performance (BH&P) area and the Advanced Human Support Technology (AHST) area of NASA's Bioastronautics Critical Path Roadmap. Such disruptions could have serious consequences on the effectiveness, health, and safety of astronaut crews, thus reducing the safety margin and increasing the chances of an accident or incident. These decrements oftentimes can be difficult to detect and counter effectively in restrictive operational environments. NASA is focusing research on the development of optimal sleep/wake schedules and countermeasure timing and application to help mitigate the cumulative effects of sleep and circadian disruption and enhance operational performance. Investing research in humans is one of NASA's building blocks that will allow for both short- and long-duration space missions and help NASA in developing approaches to manage and overcome the human limitations of space travel. In addition to reviewing the current state of knowledge concerning sleep and circadian disruptions during space operations, this paper provides an overview of NASA's broad research goals. Also, NASA-funded research, designed to evaluate the relationships between sleep quality, circadian rhythm stability, and performance proficiency in both ground-based simulations and space mission studies, as described in the 2003 NASA Task Book, will be reviewed.

Review↗

Recovery of Space Shuttle Columbia and Return to Flight of Space Shuttle Discovery

NASA has come a long way in our journey to reduce the risks of operating the Spse Shuttle system. The External Tank bipod Thermal Protection System has been redesigned to eliminate the proximate cause of the Columbia accident. In all areas, we have applied the collective knowledge and capabilities of our Nation to comply with the Columbia Accident Investigation Board recommendations and to raise the bar beyond that. We have taken prudent technical action on potential threats to review and verify the material condition of all critical areas where failure could result in catastrophic loss of the crew and vehicle. We are satisfied that critical systems and elements should operate as intended-safely and reliably. While we will never eliminate all the risks from our human space flight programs, we have eliminated those we can and reduced, controlled, and/or mitigated others. The remaining identified risks will be evaluated for acceptance. Our risk reduction approach has its roots in the system safety engineering hierarchy for hazard abatement long employed in aerospace systems engineering. The components of the hierarchy are, in order of precedence, to: design/redesign; eliminate the hazard/risk; reduce the hazard/risk; and control the hazard/risk and/or mitigate the consequence of the remaining hazard/risk through warning devices, special procedures/capabilities, and/or training. This proven approach to risk reduction has been applied to potential hazards and risks in all critical areas of the Space Shuttle and has guided us through the technical challenges, failures, and successes present in return to flight endeavors. This approach provides the structured deliberation process required to verify and form the foundation for accepting any residual risk across the entire Space Shuttle Program by NASA leadership.

Rudolphi, Michael U.↗

Hydrothermal corrosion of laser printed SiC fibers under extreme environment

We report SiC/SiC fiber composites are proposed cladding materials to improve the accident tolerance of commercial light water nuclear reactor fuel. To evaluate their viability, understanding the kinetics of corrosion under irradiation and high-temperature, high-pressure aqueous environment is critical. In the present work, the microstructure and mechanical properties of novel SiC fibers manufactured by Laser Chemical Vapor Deposition (LCVD) are introduced. The LCVD technology has control over microstructure and stoichiometry while allowing for high purity manufacturing, all key qualities needed in search of an optimum SiC fiber for nuclear energy applications. The isolated hydrothermal corrosion of commercially available carbon-rich Hi-Nicalon Type-S fibers is compared to the LCVD stoichiometric and LCVD silicon-rich fibers. Autoclave testing was carried out at 310°C and 14 MPa in the absence of irradiation. In a separate study, the effect of gamma irradiation on the fibers in the room-temperature environment was analyzed. It was observed from the experiments that the dissolution of the fibers was highly dependent on the stoichiometric ratio, fiber surface morphology and thermal pre-treatment of fibers. Contrary to previous findings, fiber dissolution was also visible under low-temperature gamma irradiation in aqueous environment with LCVD fibers showing lower dissolution.

36 MATERIALS SCIENCE↗

An Approach for Defining IASMS Services, Functions, and Capabilities

Assuring safety in the NAS with the inclusion of new entrants, such as Advanced Air Mobility (AAM), will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using autonomous vehicles. The focus of the In-time Aviation Safety Management System (IASMS) is to overcome AAM’s safety assurance challenges. The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs) designed to manage operational risks, identify unknown risks, and inform system designs. This paper describes an approach for defining SFCs based on technology trends in research, assessment of known and unknown risks in voluntary safety reports, and causal and contributing factors in aviation accidents and incidents. This approach would identify potential SFCs that further expand the Monitor, Assess, and Mitigate (M-A-M) functionality that represents the enabling framework of the IASMS. Safety implications that will result from integration of AAM in the transformation of the National Airspace System (NAS) were addressed in National Academies committees reports on AAM and IASMS. Development of a ConOps for IASMS was a top recommendation and can be represented as a reframing of safety assurance that builds on real-time alerting such as the Traffic Alert and Collision Avoidance System, and adds the more encompassing in-time temporal parameter in recognition of the different timelines for collecting and assessing safety data for risk mitigations. For example, mining for safety trends from data sources such as the Aviation Safety Information Analysis and Sharing system occurs over a longer time period. Research on AAM operations poses that SFCs can be designed to monitor the safety margin appropriate for AAM including with regards to the distance between current flight parameters and nominal ideal conditions. These in-time comparisons will become more complex as the density of operations increases at least in certain areas and can include planned and actual 4D trajectory, and in-time comparisons having implications on conflict modeling and prediction including expected and actual departure time, fix/waypoint crossing times, and arrival time. These comparisons would be integrated as part of SFCs that redefine and inform new safety margin. An increased safety margin improves management of operational risks while reducing the potential for anomalies. An increased safety margin also has implications for operator confidence in the certainty of its operations and trust in automation. Technology trends in research could be used to refine existing SFCs and define needs for additional SFCs that provide safety improvements to the design and operation of vehicles, airspace design, and operator performance requirements. NASA is developing innovative approaches to safeguard against major accidents and incidents that have occurred in the NAS and those anticipated with the inclusion of envisioned AAM operations. The innovations use operational performance data to monitor, detect, and predict flight variations exceeding safe nominal patterns, such as would be caused by navigational error, severe weather complications, or hijacking of UAS controls. These innovative approaches have high potential to prevent accidents and incidents in the new AAM era. It is anticipated that elements of the innovations will evolve into SFCs for the IASMS. Voluntary safety reports can be monitored to identify anomalies related to design or operational performance risks. Reports could be periodically monitored and assessed for specific topics. Reports might serve as weak signals or precursors indicative of emergent risk such as when combined with other safety information. The architecture could include SFCs that are based on voluntary safety reports recognizing the periodic temporal nature of data analysis. As previously mentioned, aviation accidents with their causal and contributing precursors can inform the need for SFCs in the IASMS. Accidents and incidents at San Francisco International Airport such as Asiana 214 and Air Canada 759 illustrate how combinations of different factors lead to increased risk. These types of precursors and different factors have implications on the types of SFCs that could be needed to monitor and manage different sources and types of design and operational risk. Continuing to assure the safety of AAM as designs and operations gain in complexity can be accompanied by defining SFCs that also increase in complexity. These SFCs can leverage information from findings and recommendations synthesized across on-going research, voluntary safety reports, and accident and incident reports. These SFCs can serve to refine accuracy of algorithms and resolve limitations with current practices. The IASMS architecture represents the framework for the SFCs and their critical role in safety assurance.

In-Time Aviation Safety Management System↗

Mechanical and chemical properties of PVD and cold spray Cr-coatings on Zircaloy-4

In this paper, accident-tolerant fuel (ATF) cladding materials aim to improve fuel reliability and safety during accident scenarios in water-cooled reactors. These ATF cladding should also perform comparable or better than the current zirconium alloy cladding under reactor normal operating conditions. Surface-modified Zircaloy-4 was produced by depositing a protective coating of chromium by two different coating techniques, Physical Vapor Deposition (PVD) and Cold Spray (CS). The coating thickness, structure, composition, and mechanical properties of the coated Zircaloy were assessed with advanced materials characterization techniques. Results showed a strengthening effect of the Cr-coating, along with ~83% higher hardness compared to that of the Zircaloy-4 substrate. Surface topography and surface chemistry of the Cr-coated Zircaloy-4 were assessed with contact profilometry, atomic force microscopy, contact angle goniometry, and X-ray photoelectron spectroscopy. Deposited Cr-coating significantly improved surface wettability compared to the substrate Zircaloy-4. The formation of surface oxides on the coatings by prolonged exposure to ambient air showed a further increase in the hydrophobic behavior. Surface parameters and surface chemistry after flow boiling critical heat flux tests, conducted at atmospheric pressure, evidenced a slight increase in surface roughness with notable changes in wettability associated with the formation of surface oxides.

36 MATERIALS SCIENCE↗

Real-Time Early Warning Techniques

Contemporary approaches to aerospace vehicle system monitoring rely heavily on thresholds that represent a compromise between providing warning early enough to avert a mishap while simultaneously minimizing false alarms. While this reliance on thresholds has been in place for decades and has permeated both cockpits and control rooms, we often find it insufficient when retrospectively analyzing data from an accident. To modernize and enhance flight test safety, we introduce new methods of monitoring for anomalous patterns of interaction rather than for thresholds exceedance. For systems with a well characterized baseline we show how the Inductive Monitoring System (IMS), utilized by NASA in the aftermath of the Columbia accident, might be implemented in real-time to provide earlier warning than currently employed techniques. For systems without such a baseline, we introduce new developments in statistical methods relating to critical slowing down, first applied in medicine and physics, which show promise for adaptation to flight test. Finally, the familiar resource constrained environment leads to a reliance on increased instrumentation that is challenging the limits of the current one-sensor, one-indicator threshold paradigm. Existing methods thus fail to accurately reflect the true complexity of a vehicle rich with interdependent interacting systems. We highlight these concepts in a brief summary of the 2001 Air Transat Flight 236 deadstick landing in the Azores. We then suggest control room and cockpit modifications to better display the information gleaned using these novel monitoring methods.

Javorsek, Dan↗

Enhancing Flight Test Safety with Real-Time Early Warning Techniques

Contemporary approaches to aerospace vehicle system monitoring rely heavily on thresholds that represent a compromise between providing warning early enough to avert a mishap while simultaneously minimizing false alarms. While this reliance on thresholds has been in place for decades and has permeated both cockpits and control rooms, we often find it insufficient when retrospectively analyzing data from an accident. To modernize and enhance flight test safety, we introduce new methods of monitoring for anomalous patterns of interaction rather than for thresholds exceedance. For systems with a well characterized baseline we show how the Inductive Monitoring System (IMS), utilized by NASA in the aftermath of the Columbia accident, might be implemented in real-time to provide earlier warning than currently employed techniques. For systems without such a baseline, we introduce new developments in statistical methods relating to critical slowing down, first applied in medicine and physics, which show promise for adaptation to flight test. Finally, the familiar resource constrained environment leads to a reliance on increased instrumentation that is challenging the limits of the current "one-sensor, one-indicator" threshold paradigm. Existing methods thus fail to accurately reflect the true complexity of a vehicle rich with interdependent interacting systems. We highlight these concepts in a brief summary of the 2001 Air Transat Flight 236 deadstick landing in the Azores. We then suggest control room and cockpit modifications to better display the information gleaned using these novel monitoring methods.

Javorsek, Daniel, II↗