Search NASA⌕ Search

SEARCH · Search NASA

Results for “Assurance Cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

North Dakota Integrated Carbon Storage Complex Feasibility Study. Final report

In spring 2017, the Energy & Environmental Research Center (EERC) initiated an effort to determine the feasibility of developing a commercial-scale CO 2 geologic storage complex able to store 50+ million tonnes (Mt) of CO 2 in central North Dakota safely, permanently, and economically. The objective was to fulfill the goals of the U.S. Department of Energy (DOE) Carbon Storage Assurance Facility Enterprise (CarbonSAFE) Initiative and address technical and nontechnical challenges specific to commercial-scale deployment of a CO2 storage project. The findings clearly show that the concept of capturing CO 2 from a lignite-fired electrical generation facility in central North Dakota and safely and permanently storing the CO 2 in the deep subsurface is indeed technically, economically, and socially feasible. This project evaluated two study areas and their respective geologic storage complexes located adjacent to separate coal-fired facilities in North Dakota: the Basin Electric Power Cooperative (BEPC)-owned Great Plains Synfuels Plant (GPSP) and the Minnkota Power Cooperative (Minnkota)-owned Milton R. Young Station (MRYS). These locations, one with CO 2 capture in place and an existing CO 2 pipeline, are bolstered by progressive North Dakota pore space ownership and long-term liability laws. These elements and a motivated team created an ideal synergistic scenario for ensuring success of the CarbonSAFE Initiative and promoting North Dakota’s statewide vision for carbon management. The project included drilling two new geologic characterization wells, integrating an existing 3-D seismic survey, creating a geologic model subsequently used for injection simulation, a risk assessment, public outreach, and generating a site development plan based on results. In addition, the performance of select National Risk Assessment Partnership tools was evaluated. The geologic characterization wells were drilled ~5600 feet deep to the Broom Creek Formation; ~350 feet of core was retrieved from each well. The core included the Broom Creek (targeted injection zone) and a portion of the overlying Opeche Shale (seal). The Flemmer-1 well, west of Beulah, North Dakota, yielded 169 feet of sandstone. The BNI-1 well located south of Center, North Dakota, yielded 124 feet of sandstone. In each case, laboratory analysis of the sandstone showed permeability in the 300–1000-mD range, with porosity of 20%–30%. The Flemmer-1 well was sited within the boundaries of an existing 3-D seismic survey. Colocating the well with the seismic survey maximized the relationship between new and legacy data and developed a first-of-its-kind interpretation of the geologic fabric of the Broom Creek. Geologic characterization data were integrated into a 5544-mi 2 geocellular model that encompassed both new wells and stratigraphy from the surface to the Amsden Formation (underlying the Broom Creek). The model was later expanded vertically to include the deeper Black Island–Deadwood interval to examine its potential viability as a storage target. The geocellular model provided the foundation for dynamic simulation of CO 2 into the Broom Creek. Results of the simulation suggest that the Broom Creek could accept the DOE target rate of 2 Mt/yr of CO 2 into as few as two wells. To bracket the expected capture from MRYS, simulations were also investigated for a 4-Mt/yr rate near MRYS. Although more wells are needed (two additional), the Broom Creek still has the storage resource to accept the CO 2 at the increased rate. A risk assessment exercise was conducted to identify and assess technical and nontechnical risks that could prevent potential candidate storage complexes within the study area from serving as commercial storage sites. The assessment identified and evaluated six technical risk categories: 1) CO 2 injectivity, 2) storage capacity, 3) lateral migration of CO 2 , 4) lateral pressure propagation, 5) vertical migration of CO 2 or formation brine, and 6) induced seismicity. Following two rounds of analysis and scoring, no risks were determined to preclude continued efforts to develop carbon capture, utilization, and storage (CCUS) in central North Dakota. The risk assessment results will be used to guide future site characterization, modeling and simulation, and monitoring activities. A specific nontechnical strategic risk based on challenges that may be realized in amalgamation of pore space resulted in vertically expanding the geologic model to incorporate the potential for stacked storage in multiple saline reservoirs. By including the Black Island–Deadwood interval (the basal sedimentary reservoir in this region), the amalgamated areal extent could be reduced by as much as 45%. Working with a smaller geographic area reduces risks and costs associated with monitoring and pore space leasing. An economic evaluation incorporating capture; transport (<5 mi); Class VI wells; permitting; and monitoring, verification, and accounting suggests implementing commercial-scale CCUS is economically attractive if the federal tax benefits of 45Q are included. This is validated by Minnkota’s continued pursuit of CO 2 capture and geologic storage at MRYS through its Project Tundra initiative, indicating that there is a business case for CCUS in central North Dakota. Currently, North Dakota is the only state with underground injection control (UIC) Class VI primacy. Built into the North Dakota Century Code is a series of regulatory requirements that guide the process to obtain a Class VI CO 2 storage facility permit. As part of this project, a site development plan was compiled to assure compliance with North Dakota’s requirements to permit a commercial-scale CO 2 storage operation and includes a prospective time line encompassing a general breakdown of activities. In total, an estimated 30 months would be needed to execute the necessary steps to attain a North Dakota CO 2 storage facility permit. Outreach was an integral part of the project and encompassed any project-related activity that had contact or exposure beyond the project team. The goals of outreach were to foster an environment from which stakeholders could make informed decisions about the project and gauge community receptiveness to a CCUS project. A consistent set of messages and outreach products were developed in conjunction with an outreach advisory board that integrated project partners and team members. To gauge public acceptability of geologically storing CO 2 , 5611 households in the project area were invited to participate in an online survey. The survey results indicate that the public attitude regarding CCUS is neutral to positive, with strong sentiment that CO 2 capture and storage may be an approach to maintain the economic vitality of the region. To achieve project objectives, critical support in the form of financial backing, engineering evaluations, site access, outreach collaboration, operations data, risk assessment/evaluation, and software access was provided by BEPC, the North Dakota Industrial Commission Lignite Research Council, ALLETE Clean Energy, BNI Energy, North American Coal Corporation, Minnkota, Prairie Public Broadcasting, Computer Modelling Group Ltd., and Schlumberger.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Mock Certification Basis for an Unmanned Rotorcraft for Precision Agricultural Spraying

This technical report presents the results of a case study using a hazard-based approach to develop preliminary design and performance criteria for an unmanned agricultural rotorcraft requiring airworthiness certification. This case study is one of the first in the public domain to examine design and performance criteria for an unmanned aircraft system (UAS) in tandem with its concept of operations. The case study results are intended to support development of airworthiness standards that could form a minimum safety baseline for midsize unmanned rotorcraft performing precision agricultural spraying operations under beyond visual line-of-sight conditions in a rural environment. This study investigates the applicability of current methods, processes, and standards for assuring airworthiness of conventionally piloted (manned) aircraft to assuring the airworthiness of UAS. The study started with the development of a detailed concept of operations for precision agricultural spraying with an unmanned rotorcraft (pp. 5-18). The concept of operations in conjunction with a specimen unmanned rotorcraft were used to develop an operational context and a list of relevant hazards (p. 22). Minimum design and performance requirements necessary to mitigate the hazards provide the foundation of a proposed (or mock) type certification basis. A type certification basis specifies the applicable standards an applicant must show compliance with to receive regulatory approval. A detailed analysis of the current airworthiness regulations for normal-category rotorcraft (14 Code of Federal Regulations, Part 27) was performed. Each Part 27 regulation was evaluated to determine whether it mitigated one of the relevant hazards for the specimen UAS. Those regulations that did were included in the initial core of the type certification basis (pp. 26-31) as written or with some simple modifications. Those regulations that did not mitigate a recognized hazard were excluded from the certification basis. The remaining regulations were applicable in intent, but the text could not be easily tailored. Those regulations were addressed in separate issue papers. Exploiting established regulations avoids the difficult task of generating and interpreting novel requirements, through the use of acceptable, standardized language. The rationale for the disposition of the regulations was assessed and captured (pp. 58-115). The core basis was then augmented by generating additional requirements (pp. 38-47) to mitigate hazards for an unmanned sprayer that are not covered in Part 27.

Hayhurst, Kelly J.↗

Variability in Surface BRDF at Different Spatial Scales (30 m-500 m) Over a Mixed Agricultural Landscape as Retrieved from Airborne and Satellite Spectral Measurements

Over the past decade, the role of multiangle remote sensing has been central to the development of algorithms for the retrieval of global land surface properties including models of the bidirectional reflectance distribution function (BRDF), albedo, land cover/dynamics, burned area extent, as well as other key surface biophysical quantities represented by the anisotropic reflectance characteristics of vegetation. In this study, a new retrieval strategy for fine-to-moderate resolution multiangle observations was developed, based on the operational sequence used to retrieve the Moderate Resolution Imaging Spectroradiometer (MODIS) Collection 5 reflectance and BRDF/albedo products. The algorithm makes use of a semiempirical kernel-driven bidirectional reflectance model to provide estimates of intrinsic albedo (i.e., directional-hemispherical reflectance and bihemispherical reflectance), model parameters describing the BRDF, and extensive quality assurance information. The new retrieval strategy was applied to NASA's Cloud Absorption Radiometer (CAR) data acquired during the 2007 Cloud and Land Surface Interaction Campaign (CLASIC) over the well-instrumented Atmospheric Radiation Measurement Program (ARM) Southern Great Plains (SGP) Cloud and Radiation Testbed (CART) site in Oklahoma, USA. For the case analyzed, we obtained approx.1.6 million individual surface bidirectional reflectance factor (BRF) retrievals, from nadir to 75 off-nadir, and at spatial resolutions ranging from 3 m - 500 m. This unique dataset was used to examine the interaction of the spatial and angular characteristics of a mixed agricultural landscape; and provided the basis for detailed assessments of: (1) the use of a priori knowledge in kernel-driven BRDF model inversions; (2) the interaction between surface reflectance anisotropy and instrument spatial resolution; and (3) the uncertain ties that arise when sub-pixel differences in the BRDF are aggregated to a moderate resolution satellite pixel. Results offer empirical evidence concerning the influence of scale and spatial heterogeneity in kernel-driven BRDF models; providing potential new insights into the behavior and characteristics of different surface radiative properties related to land/use cover change and vegetation structure.

Roman, Miguel O.↗

Variability in Surface BRDF at Different Spatial Scales (30m-500m) Over a Mixed Agricultural Landscape as Retrieved from Airborne and Satellite Spectral Measurements

Over the past decade, the role of multiangle 1 remote sensing has been central to the development of algorithms for the retrieval of global land surface properties including models of the bidirectional reflectance distribution function (BRDF), albedo, land cover/dynamics, burned area extent, as well as other key surface biophysical quantities represented by the anisotropic reflectance characteristics of vegetation. In this study, a new retrieval strategy for fine-to-moderate resolution multiangle observations was developed, based on the operational sequence used to retrieve the Moderate Resolution Imaging Spectroradiometer (MODIS) Collection 5 reflectance and BRDF/albedo products. The algorithm makes use of a semiempirical kernel-driven bidirectional reflectance model to provide estimates of intrinsic albedo (i.e., directional-hemispherical reflectance and bihemispherical reflectance), model parameters describing the BRDF, and extensive quality assurance information. The new retrieval strategy was applied to NASA's Cloud Absorption Radiometer (CAR) data acquired during the 2007 Cloud and Land Surface Interaction Campaign (CLASIC) over the well-instrumented Atmospheric Radiation Measurement Program (ARM) Southern Great Plains (SGP) Cloud and Radiation Testbed (CART) site in Oklahoma, USA. For the case analyzed, we obtained approx.1.6 million individual surface bidirectional reflectance factor (BRF) retrievals, from nadir to 75deg off-nadir, and at spatial resolutions ranging from 3 m - 500 m. This unique dataset was used to examine the interaction of the spatial and angular 18 characteristics of a mixed agricultural landscape; and provided the basis for detailed assessments of: (1) the use of a priori knowledge in kernel-driven BRDF model inversions; (2) the interaction between surface reflectance anisotropy and instrument spatial resolution; and (3) the uncertainties that arise when sub-pixel differences in the BRDF are aggregated to a moderate resolution satellite pixel. Results offer empirical evidence concerning the influence of scale and spatial heterogeneity in kernel-driven BRDF models; providing potential new insights into the behavior and characteristics of different surface radiative properties related to land/use cover change and vegetation structure.

Roman, Miguel O.↗

An In-time Aviation Safety Management System (IASMS) Concept of Operations for Vertiport Design and Operations

The National Airspace System is foreseen to undergo revolutionary change with Urban Air Mobility (UAM) and its use of vertiports to transport passengers and cargo. To assure safety with UAM and more broadly with Advanced Air Mobility (AAM), the National Academies recommended an In-time Aviation Safety Management System (IASMS) that is extensible to the design and operation of vertiports. Vertiport designs will scale in several dimensions including physical size and infrastructure depending upon location and in the Services, Functions, and Capabilities required for assuring safety with increasingly complex vertiport designs and operations. These operations will be enabled by evolving technologies including electric vertical takeoff and landing (eVTOL) aircraft for passenger-and cargo-carrying commercial transportation. Within this construct, safety hazards and risk mitigations involving predictive data analytics and modeling will be used. Use cases and future challenges are examined to guide maturation of the IASMS ConOps for vertiports.

K Ellis↗

Development of chip passivated monolithic complementary MISFET circuits with beam leads

The results are presented of a program to demonstrate the processes for fabricating complementary MISFET beam-leaded circuits, which, potentially, are comparable in quality to available bipolar beam-lead chips that use silicon nitride passivation in conjunction with a platinum-titanium-gold metal system. Materials and techniques, different from the bipolar case, were used in order to be more compatible with the special requirements of fully passivated complementary MISFET devices. Two types of circuits were designed and fabricated, a D-flip-flop and a three-input NOR/NAND gate. Fifty beam-leaded chips of each type were constructed. A quality and reliability assurance program was performed to identify failure mechanisms. Sample tests and inspections (including destructive) were developed to measure the physical characteristics of the circuits.

Ragonese, L. J.↗

Predictive sufficiency and the use of stored internal state

In all embedded computing systems, some delay exists between sensing and acting. By choosing an action based on sensed data, a system is essentially predicting that there will be no significant changes in the world during this delay. However, the dynamic and uncertain nature of the real world can make these predictions incorrect, and thus, a system may execute inappropriate actions. Making systems more reactive by decreasing the gap between sensing and action leaves less time for predictions to err, but still provides no principled assurance that they will be correct. Using the concept of predictive sufficiency described in this paper, a system can prove that its predictions are valid, and that it will never execute inappropriate actions. In the context of our CIRCA system, we also show how predictive sufficiency allows a system to guarantee worst-case response times to changes in its environment. Using predictive sufficiency, CIRCA is able to build real-time reactive control plans which provide a sound basis for performance guarantees that are unavailable with other reactive systems.

Musliner, David J.↗

Residual strength of thin panels with cracks

The previous design philosophies involving safe life, fail-safe and damage tolerance concepts become inadequate for assuring the safety of aging aircraft structures. For example, the failure mechanism for the Aloha Airline accident involved the coalescence of undetected small cracks at the rivet holes causing a section of the fuselage to peel open during flight. Therefore, the fuselage structure should be designed to have sufficient residual strength under worst case crack configurations and in-flight load conditions. Residual strength is interpreted as the maximum load carrying capacity prior to unstable crack growth. Internal pressure and bending moment constitute the two major components of the external loads on the fuselage section during flight. Although the stiffeners in the form of stringers, frames and tear straps sustain part of the external loads, the significant portion of the load is taken up by the skin. In the presence of a large crack in the skin, the crack lips bulge out with considerable yielding; thus, the geometric and material nonlinearities must be included in the analysis for predicting residual strength. Also, these nonlinearities do not permit the decoupling of in-plane and out-of-plane bending deformations. The failure criterion combining the concepts of absorbed specific energy and strain energy density addresses the aforementioned concerns. The critical absorbed specific energy (local toughness) for the material is determined from the global specimen response and deformation geometry based on the uniaxial tensile test data and detailed finite element modeling of the specimen response. The use of the local toughness and stress-strain response at the continuum level eliminates the size effect. With this critical parameter and stress-strain response, the finite element analysis of the component by using STAGS along with the application of this failure criterion provides the stable crack growth calculations for residual strength predictions.

Madenci, Erdogan↗

Structural Dynamics Modeling of HIRENASD in Support of the Aeroelastic Prediction Workshop

An Aeroelastic Prediction Workshop (AePW) was held in April 2012 using three aeroelasticity case study wind tunnel tests for assessing the capabilities of various codes in making aeroelasticity predictions. One of these case studies was known as the HIRENASD model that was tested in the European Transonic Wind Tunnel (ETW). This paper summarizes the development of a standardized enhanced analytical HIRENASD structural model for use in the AePW effort. The modifications to the HIRENASD finite element model were validated by comparing modal frequencies, evaluating modal assurance criteria, comparing leading edge, trailing edge and twist of the wing with experiment and by performing steady and unsteady CFD analyses for one of the test conditions on the same grid, and identical processing of results.

Wieseman, Carol↗

Supporting Crew Autonomy in Deep Space Exploration: Preliminary Onboard Capability Requirements and Proposed Research Questions. Technical Report of the Autonomous Crew Operations Technical Interchange Meeting

Communication delays are a critical challenge posed by long duration deep space exploration. Space missions historically have relied on an ever-present Mission Control Center (MCC) to direct operations in near real-time. As unanticipated anomalies that defeat fault detection and resolution systems do arise, the lack of real-time communication will significantly weaken what the MCC support represents: a reliable safety net for the flight crew through its deep and diverse areas of expertise and investigative resources. As a consequence, future space vehicles and habitats need to be equipped with capabilities to support the flight crew to operate with little or no ground support. Considerations must be given to vehicle and mission designs that will fortify the traditionally ground-centered safety net and forge new support systems, when communication delays exist. In August 2018, NASA’s Human Research Program, through its Human Factors and Behavioral Performance Element, convened a Technical Interchange Meeting (TIM) on Autonomous Crew Operations at NASA Ames Research Center. The goal of the meeting was to gather input from NASA centers, industry, academia, and branches of the Department of Defense (DoD) to address how intelligent technologies can be applied to augment onboard capabilities to support crew anomaly response. The TIM featured 24 presentations by 29 speakers and hosted a total of 59 attendees, including 43 from 5 NASA centers (Ames, Johnson, Langley, Marshall, and Jet Propulsion Lab) and 4 from the DoD (3 from Army Research Lab and 1 from Naval Postgraduate School), with remaining attendees from academia (e.g., UC Davis, CMU) and industry (e.g., IBM, Siemens). Discussions were centered around three themes: standards and guidelines, lessons learned in analog environments, and technologies. To help provide a framework for discussion, a concept matrix describing anomaly response processes was created prior to the TIM (Figure 1, page 6). The matrix captures the steps involved (monitoring and detection, diagnosis, solution development and evaluation, solution implementation and verification, resolution documentation) as well as the resources and capabilities required to support these steps (data, knowledge, analysis, synthesis, resource management). A wallpaper size printout of the matrix was utilized at the TIM to solicit attendee inputs along the three themes; the activity garnered 108 submissions of ideas. Overall, what emerged from TIM discussions was a picture of mismatch between crew anomaly response needs and support that can be provided by existing intelligent technologies. The needs are broad, spanning multiple steps and processes/resources, with many of which lacking support from existing technologies, such as knowledge management throughout the steps of problem solving (especially in resolution documentation) and manpower management. The solutions provided by existing intelligent technologies are specific to the steps/processes that they are designed to support and constrained to solving only problems similar to those that have occurred before. What is lacking from technologies is typically made up by humans, specifically their complex critical thinking, creative problem solving, and domain expertise. In the end, the TIM highlighted the pressing need to support responses to onboard anomalies during autonomous crew operations, particularly those that have eluded the system tests, inspection, and other assurance processes. Such anomalies can potentially threaten crew and vehicle safety, as well as significantly impact overall operations with additional workload. These fairly rare events are difficult to anticipate and prepare for, given the state-of-the-art in intelligent technologies. This is true even for anomalies that stem from “unknown knowns”—cases in which there is sufficient external information to characterize the problem but the overall pattern fails to be recognized by the problem solver, or in which the internal knowledge needed to solve a problem is held tacitly and potentially accessible by the problem solver but not articulated. It follows that the ability to tackle anomalies lies not only with the availability of relevant information and knowledge but also their accessibility in times of need. To that end, we propose research questions along the following three broad themes: • How intelligent technologies can help make relevant knowledge and information available? • How intelligent technologies can help make relevant knowledge and information accessible? • How intelligent technologies can help support the crew operating as a team in anomaly response processes?

autonomous crew operations↗

Verification and Validation of PARET/ANL (V.7.6)

This report documents the software testing which has been performed for the PARET/ANL version 7.6 software. The capabilities addressed in this testing were selected based on the use of the software for analysis work under the Research and Test Reactors Department quality assurance program. The verification and validation have been performed and documented to address the steady-state capabilities of the software, as described in Chapter 2, and the transient capabilities, as described in Chapter 3. Testing based on the comparison between PARET/ANL calculations and analytical solutions, hand calculations, or another code calculations of the test cases confirms that all the identified capabilities of the software were implemented correctly.

97 MATHEMATICS AND COMPUTING↗

An Automated Method for Identifying Inconsistencies within Diagrammatic Software Requirements Specifications

The development of large-scale, composite software in a geographically distributed environment is an evolutionary process. Often, in such evolving systems, striving for consistency is complicated by many factors, because development participants have various locations, skills, responsibilities, roles, opinions, languages, terminology and different degrees of abstraction they employ. This naturally leads to many partial specifications or viewpoints. These multiple views on the system being developed usually overlap. From another aspect, these multiple views give rise to the potential for inconsistency. Existing CASE tools do not efficiently manage inconsistencies in distributed development environment for a large-scale project. Based on the ViewPoints framework the WHERE (Web-Based Hypertext Environment for requirements Evolution) toolkit aims to tackle inconsistency management issues within geographically distributed software development projects. Consequently, WHERE project helps make more robust software and support software assurance process. The long term goal of WHERE tools aims to the inconsistency analysis and management in requirements specifications. A framework based on Graph Grammar theory and TCMJAVA toolkit is proposed to detect inconsistencies among viewpoints. This systematic approach uses three basic operations (UNION, DIFFERENCE, INTERSECTION) to study the static behaviors of graphic and tabular notations. From these operations, subgraphs Query, Selection, Merge, Replacement operations can be derived. This approach uses graph PRODUCTIONS (rewriting rules) to study the dynamic transformations of graphs. We discuss the feasibility of implementation these operations. Also, We present the process of porting original TCM (Toolkit for Conceptual Modeling) project from C++ to Java programming language in this thesis. A scenario based on NASA International Space Station Specification is discussed to show the applicability of our approach. Finally, conclusion and future work about inconsistency management issues in WHERE project will be summarized.

Zhang, Zhong↗

Simulation and Analysis of Launch Teams (SALT)

A SALT effort was initiated in late 2005 with seed funding from the Office of Safety and Mission Assurance Human Factors organization. Its objectives included demonstrating human behavior and performance modeling and simulation technologies for launch team analysis, training, and evaluation. The goal of the research is to improve future NASA operations and training. The project employed an iterative approach, with the first iteration focusing on the last 70 minutes of a nominal-case Space Shuttle countdown, the second iteration focusing on aborts and launch commit criteria violations, the third iteration focusing on Ares I-X communications, and the fourth iteration focusing on Ares I-X Firing Room configurations. SALT applied new commercial off-the-shelf technologies from industry and the Department of Defense in the spaceport domain.

Source record↗

Safety & Mission Assurance (SMA) Activities in Support of Artemis I and Plans for Artemis II

The Artemis I mission in 2022 accomplished humanity’s first venture beyond Low-Earth Orbit (LEO) with a human-rated spacecraft in over fifty years. Artemis comprises several key Program elements – Multi-Purpose Crew Vehicle (MPCV) Orion Crew Module, Service Module, Launch Abort System; the Space Launch System (SLS) and the Exploration Ground System (EGS). Much of our human spaceflight experience with crewed lunar missions is captured in historical program documents, but first-hand knowledge is limited to a few spaceflight veterans. Missions to LEO have offered the opportunity of direct, near-instantaneous communications and assistance, and the ability to return to Earth within a matter of hours in case of emergency. Outward-bound missions do not have these features and will require a more autonomous and reliable spacecraft. The assessment of compliance with applicable safety requirements and adequacy of hazard controls and verifications is the responsibility of the MPCV Safety and Engineering Review Panel (MSERP), along with a Joint [NASA/ESA] Safety and Engineering Review Panel (JSERP) for the review of the European Service Module (ESM). The MSERP has two features that are relatively unique amongst NASA safety panels. First, NASA Engineering was added as a Panel co-chair, which enhanced the Engineering organization’s engagement and level of understanding of hazard analysis methodology and results. The MSERP has representation from each office, including Flight Operations Directorate (FOD) and Health and Medical Technical Authority, supporting the Orion Program in addition to the Engineering and Safety Technical Authority co-chairs. Second, the JSERP has a second set of co-chairs from ESA Engineering and ESA Product Assurance and Safety organizations, which recognizes the international arrangement as one of partnership. This paper will focus on SMA processes, activities, and plans for the Orion element and explore unique challenges associated with Artemis II as we approach the flight of the first crewed Orion vehicle.

Paul J. Collier↗

Perform Design Support with MCNP for New Measurements

This report incorporates our work carried out during our 5-month internship at LANL under an internship agreement with EAMEA (École des Applications Militaires de l’Énergie Atomique). After outlining the context in which we worked, we present our work as aid to modeling and predicting the neutronic behavior of nuclear systems, with a view to carrying out criticality experiments qualifying the MCNP code as part of innovative projects. Fourth generation reactors will enable to tackle a lot of issues such as environmental crisis, affordable energy access, and nuclear waste management. They seem to be one of the keys for a sustainable future. Most of the projects that emerge nowadays include the use of HALEU (high assay low enriched uranium) or MOX recycled fuels. Our projects are part of this dynamic and addresses concrete scientific research issues in the nuclear field. Studies of HALEU package are essential to anticipate the need, therefore the Optimus L (OPTImal Modular Universal Shipping cask technology) designed by NAC (Nuclear Assurance Corporation) international but filled with 20 % enriched uranium dioxide (UO 2 ) will be studied to support safe transportation. However, it seems there is no benchmark with a high correlation with the combination of this fuel and this package to validate MCNP simulations. As such, the study will focus on the development of new criticality safety benchmarks for this case. On the other hand, there is a great need for critical benchmarks in the intermediate energy range with MOX fuel. An IER (Integral Experiment Request) has then be requested to answer it through a partnership between French institution IRSN and U.S. Department of Energy's Nuclear Criticality Safety Program (NCSP). This experience planned for 2025 requires to gather calculated data through a MCNP model to be realized safely. Finally, a presentation of our one-week experience at the DAF as part of our discovery of criticality experiments will be introduced in Appendix 1: Week at the DAF (Device Assembly Facility)

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

NDE in aerospace - Requirements for science, sensors and sense

The complexity of modern nondestructive evaluation (NDE) arises from four main factors: quantitative measurement science, physical models for computational analysis, realistic interfacing with engineering decisions, and direct access to management priorities. Recent advances in the four factors of NDE are addressed. Physical models of acoustic propagation are presented that have led to the development of measurement technologies advancing the ability to assure that materials and structures will perform as designed. In addition, a brief discussion is given of current research for future mission needs such as smart structures that sense their own health. Such advances permit projects to integrate design for inspection into their plans, bringing NDE into engineering and management priorities. The measurement focus is on ultrasonics with generous case examples. Problem solutions highlighted include critical stress in fasteners, residual stress in steel, NDE laminography, and solid rocket motor NDE.

Heyman, Joseph S.↗

Cyber-Informed Engineering (CIE) Guide for States

The Cyber-Informed Engineering (CIE) Guide for States provides state energy offices, public utility commissions, and partner organizations with a structured framework for integrating cyber-resilient engineering practices into energy planning, grantmaking, interconnection processes, and workforce development. As grid digitalization and the adoption of distributed energy resources accelerate, states face expanding cyber-physical risks that traditional cybersecurity measures alone cannot fully address. CIE offers a proactive, consequence-focused engineering methodology that emphasizes eliminating or mitigating high-impact failure modes through design, physical controls, and operational safeguards. The guide outlines the 12 core CIE principles, demonstrates their application through state-focused use cases—including grant evaluation rubrics, interconnection reviews, allow-list development, and training programs—and provides practical tools such as scoring frameworks, impact assessment methods, and implementation checklists. It also highlights pathways for state–utility collaboration and opportunities for technical assistance from national laboratories. By adopting CIE, states can enhance grid reliability, reduce lifecycle costs, strengthen supply-chain assurance, and foster a security-aware engineering culture that aligns with broader resilience and modernization goals. November 2025

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Cyber-Informed Engineering (CIE) Guide for States

The Cyber-Informed Engineering (CIE) Guide for States provides state energy offices, public utility commissions, and partner organizations with a structured framework for integrating cyber-resilient engineering practices into energy planning, grantmaking, interconnection processes, and workforce development. As grid digitalization and the adoption of distributed energy resources accelerate, states face expanding cyber-physical risks that traditional cybersecurity measures alone cannot fully address. CIE offers a proactive, consequence-focused engineering methodology that emphasizes eliminating or mitigating high-impact failure modes through design, physical controls, and operational safeguards. The guide outlines the 12 core CIE principles, demonstrates their application through state-focused use cases—including grant evaluation rubrics, interconnection reviews, allow-list development, and training programs—and provides practical tools such as scoring frameworks, impact assessment methods, and implementation checklists. It also highlights pathways for state–utility collaboration and opportunities for technical assistance from national laboratories. By adopting CIE, states can enhance grid reliability, reduce lifecycle costs, strengthen supply-chain assurance, and foster a security-aware engineering culture that aligns with broader resilience and modernization goals. November 2025

29 - ENERGY PLANNING, POLICY AND ECONOMY↗