Search NASA⌕ Search

SEARCH · Search NASA

Results for “Risk Based Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Sea-Ice Effects on the Alaskan Wave Climate

This study investigates the uncertainty of wave resource assessments due to sea ice in the nearshore region of Alaska using an innovative approach of combining remotely sensed data and a third-generation phase-averaged wave model. Modeling analysis focused on winter months, when high wave energy is present along with sea ice. This study includes recommendations to improve the accuracy of wave resource assessments and optimize marine and hydrokinetic device siting with consideration of sea-ice effects. Additional recommendations, based on preliminary sea-ice information in Cook Inlet, Alaska, are provided for a trajectory analysis of drifting sea ice and a collision risk assessment of sea ice and tidal turbines. The outcome of this project will provide valuable information about the level of sea-ice impact on the accuracy of wave resource assessments in the Alaska nearshore region, and of sea-ice collision risk with MHK devices and ocean observation systems during winter months when sea ice is present.

16 TIDAL AND WAVE POWER↗

Space shuttle natural environment analysis

Five major tasks are briefly outlined: development of detailed wind profile measurements for Kennedy Space Center (KSC) and Vandenberg Air Force Base (VAFB): development of software to construct meteorological data tapes for use in the STS Post Ascent Analysis; development of storage, access, and utilization codes for Global Cloud Cover data; development of software and meteorological data bases to establish launch delay risks at KSC and VAFB; and development of the meteorological tower 301 climatological data base at VAFB.

Batts, Wade↗

A Tabletop Tool for Modeling Life Support Systems

This paper describes the development plan for a comprehensive research and diagnostic tool for aspects of advanced life support systems in space-based laboratories. Specifically it aims to build a high fidelity tabletop model that can be used for the purpose of risk mitigation, failure mode analysis, contamination tracking, and testing reliability. We envision a comprehensive approach involving experimental work coupled with numerical simulation to develop this diagnostic tool. It envisions a 10% scale transparent model of a space platform such as the International Space Station that operates with water or a specific matched index of refraction liquid as the working fluid. This allows the scaling of a 10 ft x 10 ft x 10 ft room with air flow to 1 ft x 1 ft x 1 ft tabletop model with water/liquid flow. Dynamic similitude for this length scale dictates model velocities to be 67% of full-scale and thereby the time scale of the model to represent 15% of the full- scale system; meaning identical processes in the model are completed in 15% of the full- scale time. The use of an index matching fluid (fluid that matches the refractive index of cast acrylic, the model material) allows making the entire model (with complex internal geometry) transparent and hence conducive to non-intrusive optical diagnostics. So using such a system one can test environment control parameters such as core flows (axial flows), cross flows (from registers and diffusers), potential problem areas such as flow short circuits, inadequate oxygen content, build up of other gases beyond desirable levels, test mixing processes within the system at local nodes or compartments and assess the overall system performance. The system allows quantitative measurements of contaminants introduced in the system and allows testing and optimizing the tracking process and removal of contaminants. The envisaged system will be modular and hence flexible for quick configuration change and subsequent testing. The data and inferences from the tests will allow for improvements in the development and design of next generation life support systems and configurations.

Ramachandran, N.↗

Space Laboratory on a Table Top: A Next Generative ECLSS design and diagnostic tool

This paper describes the development plan for a comprehensive research and diagnostic tool for aspects of advanced life support systems in space-based laboratories. Specifically it aims to build a high fidelity tabletop model that can be used for the purpose of risk mitigation, failure mode analysis, contamination tracking, and testing reliability. We envision a comprehensive approach involving experimental work coupled with numerical simulation to develop this diagnostic tool. It envisions a 10% scale transparent model of a space platform such as the International Space Station that operates with water or a specific matched index of refraction liquid as the working fluid. This allows the scaling of a 10 ft x 10 ft x 10 ft room with air flow to 1 ft x 1 ft x 1 ft tabletop model with water/liquid flow. Dynamic similitude for this length scale dictates model velocities to be 67% of full-scale and thereby the time scale of the model to represent 15% of the full- scale system; meaning identical processes in the model are completed in 15% of the full- scale-time. The use of an index matching fluid (fluid that matches the refractive index of cast acrylic, the model material) allows making the entire model (with complex internal geometry) transparent and hence conducive to non-intrusive optical diagnostics. So using such a system one can test environment control parameters such as core flows (axial flows), cross flows (from registers and diffusers), potential problem areas such as flow short circuits, inadequate oxygen content, build up of other gases beyond desirable levels, test mixing processes within the system at local nodes or compartments and assess the overall system performance. The system allows quantitative measurements of contaminants introduced in the system and allows testing and optimizing the tracking process and removal of contaminants. The envisaged system will be modular and hence flexible for quick configuration change and subsequent testing. The data and inferences from the tests will allow for improvements in the development and design of next generation life support systems and configurations. Preliminary experimental and modeling work in this area will be presented. This involves testing of a single inlet-exit model with detailed 3-D flow visualization and quantitative diagnostics and computational modeling of the system.

Ramachandran, N.↗

Improvements to NASA's Debris Assessment Software

NASA's Debris Assessment Software (DAS) has been substantially revised and expanded. DAS is designed to assist NASA programs in performing orbital debris assessments, as described in NASA s Guidelines and Assessment Procedures for Limiting Orbital Debris. The extensive upgrade of DAS was undertaken to reflect changes in the debris mitigation guidelines, to incorporate recommendations from DAS users, and to take advantage of recent software capabilities for greater user utility. DAS 2.0 includes an updated environment model and enhanced orbital propagators and reentry-survivability models. The ORDEM96 debris environment model has been replaced by ORDEM2000 in DAS 2.0, which is also designed to accept anticipated revisions to the environment definition. Numerous upgrades have also been applied to the assessment of human casualty potential due to reentering debris. Routines derived from the Object Reentry Survival Analysis Tool, Version 6 (ORSAT 6), determine which objects are assessed to survive reentry, and the resulting risk of human casualty is calculated directly based upon the orbital inclination and a future world population database. When evaluating reentry risks, the user may enter up to 200 unique hardware components for each launched object, in up to four nested levels. This last feature allows the software to more accurately model components that are exposed below the initial breakup altitude. The new DAS 2.0 provides an updated set of tools for users to assess their mission s compliance with the NASA Safety Standard and does so with a clear and easy-to-understand interface. The new native Microsoft Windows graphical user interface (GUI) is a vast improvement over the previous DOS-based interface. In the new version, functions are more-clearly laid out, and the GUI includes the standard Windows-style Help functions. The underlying routines within the DAS code are also improved.

Opiela, J.↗

Badhwar-O'Neill 2011 Galactic Cosmic Ray Model Update and Future Improvements

The Badhwar-O'Neill Galactic Cosmic Ray (GCR) Model based on actual GCR measurements is used by deep space mission planners for the certification of microelectronic systems and the analysis of radiation health risks to astronauts in space missions. The BO GCR Model provides GCR flux in deep space (outside the earth's magnetosphere) for any given time from 1645 to present. The energy spectrum from 50 MeV/n - 20 GeV/n is provided for ions from hydrogen to uranium. This work describes the most recent version of the BO GCR model (BO'11). BO'11 determined the GCR flux at a given time applying an emperical time delay function to past sunspot activity. We describe the GCR measurement data used in the BO'11 update - modern data from BESS, PAMELA, CAPRICE, and ACE emphasized more than the older balloon data used for the previous BO model (BO'10). We look at the GCR flux for the last 24 solar minima and show how much greater the flux was for the cycle 24 minimum in 2010. The BO'11 Model uses the traditional, steady-state Fokker-Planck differential equation to account for particle transport in the heliosphere due to diffusion, convection, and adiabatic deceleration. It assumes a radially symmetrical diffusion coefficient derived from magnetic disturbances caused by sunspots carried outward by a constant solar wind. A more complex differential equation is now being tested to account for particle transport in the heliosphere in the next generation BO model. This new model is time-dependent (no longer a steady state model). In the new model, the dynamics and anti-symmetrical features of the actual heliosphere are accounted for so emperical time delay functions will no longer be required. The new model will be capable of simulating the more subtle features of modulation - such as the Sun's polarity and modulation dependence on gradient and curvature drift. This improvement is expected to significantly improve the fidelity of the BO GCR model. Preliminary results of its performance will be presented.

O'Neill, Pat M.↗

TPS Certification by Analysis: Model-Driven Characterization of Properties and Failure in Woven Thermal Protection Systems

Woven, ablative thermal protection system (TPS) materials provide a robust option for aggressive (re)entries and thus have been baselined for the upcoming Mars Sample Return (MSR) mission’s Earth Entry System (EES). The reliability requirements for MSR-EES necessitate understanding of material property variability, which could be significant given the complex structure and anisotropic nature of properties in TPS weaves, as well as the response to potential impact with micrometeoroids or orbital debris during the EES re-entry. The TPS Certification by Analysis effort within the Entry Systems Modeling project seeks to provide computational models and analyses that support the certification against such material-based risks. For the present talk, focus will be given to the characterization of baseline woven TPS material properties and mechanical failure limits, which entails (1) use of computational techniques (e.g., machine learning) to interpret computed tomography images of the weave to generate representative structural models and (2) application of multiscale material modeling approaches to characterize thermomechanical and failure properties.

Justin B. Haskins↗

Safety Analysis for the Versatile Test Reactor Conceptual Design

Safety analysis simulations have been carried out using the SAS4A/SASSYS-1 safety analysis code system to update the baseline set of results for the Versatile Test Reactor conceptual design. Results from a previous revision of this work provided input for the Conceptual Safety Design Report summarizing the overall safety basis for the VTR. This work will also support future analyses that will be required for Chapter 13, “Accident Analysis,” of a preliminary safety analysis report. A number of transients have been evaluated based on categories of postulated accident sequences suggested for consideration in NUREG-1537. Ultimately, the full spectrum of event initiators and subsequent accident sequences will be defined through a probabilistic risk assessment of the plant design following the implementation of the Licensing Modernization Project guidelines as described in the VTR Safety Design Strategy. Since that process is ongoing, the present analysis addresses several transients that are expected to be bounding accident scenarios that represent the three key ways to perturb a reactor: through changes to the core inlet temperature, mass flow rate, or reactivity. These correspond to a loss of heat sink (LOHS), loss of flow (LOF) or station blackout (SBO), and transient overpower (TOP), respectively. Both Protected and Unprotected versions of these transients have been evaluated, along with additional transients that include transient overpower with one stuck rod, pump coast-down failures, seismic events, and overcooling events. At the current stage of design, transient simulation results for the Versatile Test Reactor indicate that large safety margins exist for many event initiators. However, several “enabling” assumptions have been made, in terms of both design features and design limits, in order to perform the analyses; and these assumptions will need to be revised as the design matures. In addition, a larger spectrum of events needs to be evaluated as part of the on-going probabilistic risk assessment process.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Statistical characterization of experimental magnetized liner inertial fusion stagnation images using deep-learning-based fuel–background segmentation

Significant variety is observed in spherical crystal x-ray imager (SCXI) data for the stagnated fuel–liner system created in Magnetized Liner Inertial Fusion (MagLIF) experiments conducted at the Sandia National Laboratories Z-facility. As a result, image analysis tasks involving, e.g., region-of-interest selection (i.e. segmentation), background subtraction and image registration have generally required tedious manual treatment leading to increased risk of irreproducibility, lack of uncertainty quantification and smaller-scale studies using only a fraction of available data. We present a convolutional neural network (CNN)-based pipeline to automate much of the image processing workflow. This tool enabled batch preprocessing of an ensemble of N scans = 139 SCXI images across N exp = 67 different experiments for subsequent study. The pipeline begins by segmenting images into the stagnated fuel and background using a CNN trained on synthetic images generated from a geometric model of a physical three-dimensional plasma. The resulting segmentation allows for a rules-based registration. Our approach flexibly handles rarely occurring artifacts through minimal user input and avoids the need for extensive hand labelling and augmentation of our experimental dataset that would be needed to train an end-to-end pipeline. Here we also fit background pixels using low-degree polynomials, and perform a statistical assessment of the background and noise properties over the entire image database. Our results provide a guide for choices made in statistical inference models using stagnation image data and can be applied in the generation of synthetic datasets with realistic choices of noise statistics and background models used for machine learning tasks in MagLIF data analysis. We anticipate that the method may be readily extended to automate other MagLIF stagnation imaging applications.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Modeling and Analysis of the Transport and Disposal of Beryllium Moderator Blocks and Greater than Class C (GTCC) Waste

Radioactive waste in the United states is categorized based on its source, radioactivity, and security risk. The categorization method employed by the Nuclear Regulatory Committee (NRC) for low-level radioactive waste is not currently applied to any waste generated by the Department of Energy (DOE) or disposed of in DOE facilities. As a result, there is a large volume of DOE-generated waste with characteristics similar to the NRC’s “Greater than Class C” (GTCC) waste category which presently do not have a path for long-term disposal. Much of this waste cannot undergo the standard commercial disposition process due to it being categorized as Transuranic (TRU) waste under DOE guidelines, due to elevated concentrations of key fission products. Possible solutions to this dilemma are explored in the Environmental Impact Statement for the “Disposal of Greater-Than-Class-C Low Level Radioactive Wave” (EIS-0375). This paper analyzes several EIS possible paths for disposal for this “orphaned” waste. One example that highlights this categorization issue is the spent beryllium cladding that has been extracted from the Advanced Test Reactor (ATR) at Idaho National Laboratory (INL) throughout its operational lifetime. These beryllium blocks surround the reactor’s main chambers and components and serve as neutron moderators. This paper will use this particular waste form to analyze the economic and technological viability of transporting and storing this material under the storage and transportation criteria of the Waste isolation Pilot Plant (WIPP), which was deemed the most feasible disposition path according to the EIS. The example of this waste form used in this paper that highlights this categorization issue is the spent beryllium cladding extracted from Idaho National Laboratory’s (INL) Advanced Test Reactor (ATR). These beryllium blocks surround the reactor’s components and serve as neutron moderators, and thus have accumulated high concentration of high-activity transuranic isotopes. This paper analyzed the viability of transporting and storing this material under the storage and transportation criteria of the five primary disposition paths covered in EIS-0375. An array of calculations was carried out to assess the viability of the various disposition paths for the beryllium shipments as well as other waste shipments that fall within the GTCC category. Modeling with MCNP 6.2 was conducted to determine whether the beryllium blocks could be safely stored and transported within a 72-B cask; the standard shipping container for remote-handled, transuranic waste, while also meeting regulatory limits at various disposition paths. A cost analysis of the transportation and long-term disposal paths mentioned in the EIS was also carried out using available data and information from similar waste shipments. Lastly, a geochemical analysis of the various geological repository discussed in the EIS was also carried out using the Geochemists Workbench Release 14. Long-term disposal of the beryllium blocks at the Waste Isolation Pilot Plant (WIPP) proved to be the most cost-effective long-term disposition option of the ones considered in the EIS. A dose rate calculation at both contact and remote-handling distances indicate that the analyzed beryllium shipments should not exceed the exposure limits at any of the considered locations. Greater-than-class-C waste has been left in a regulatory state of limbo for years, resulting in backlogs of inventory across several research sites in the United States. Due to its high activity and presence of transuranic isotopes, it is imperative to ensure that it remains inaccessible and sequestered both in its short-term interim as well as a long-term geologic time scale. The information and assessments done in the paper could potentially serve as a reference for any future shipments of this waste form at the WIPP facility as well as other disposition paths that may be considered in the future.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Arcjet Testing of Woven Carbon Cloth for Use on Adaptive Deployable Entry Placement Technology

This paper describes arcjet testing and analysis that has successfully demonstrated the viability of three dimensional woven carbon cloth for dual use in the Adaptive Deployable Entry Placement Technology (ADEPT). ADEPT is an umbrella-like entry system that is folded for stowage in the launch vehicle s shroud and deployed in space prior to reaching the atmospheric interface. A key feature of the ADEPT concept is its lower ballistic coefficient for delivery of a given payload than those for conventional, rigid body entry systems. The benefits that accrue from the lower ballistic coefficient include factor of ten reductions of deceleration forces and entry heating. The former enables consideration of new classes of scientific instruments for solar system exploration while the latter enables the design of a more efficient thermal protection system. The carbon cloth now base lined for ADEPT has a dual use in that it serves as ADEPT s thermal protection system and as the "skin" that transfers aerodynamic deceleration loads to its umbrella-like substructure. The arcjet testing described in this paper was conducted for some of the higher heating conditions for a future Venus mission using the ADEPT concept, thereby showing that the carbon cloth can perform in a relevant entry environment. The ADEPT project considered the carbon cloth to be mission enabling and was carrying it as a major risk during Fiscal Year 2012. The testing and analysis reported here played a major role in retiring that risk and is highly significant to the success and possible adoption of ADEPT for future NASA missions. Finally, this paper also describes a preliminary engineering level code, based on the arcjet data, that can be used to estimate cloth thickness for future missions using ADEPT and to predict carbon cloth performance in future arcjet tests.

Arnold, James O.↗

A Hybrid Energy System Workflow for Energy Portfolio Optimization

This manuscript develops a workflow, driven by data analytics algorithms, to support the optimization of the economic performance of an Integrated Energy System. The goal is to determine the optimum mix of capacities from a set of different energy producers (e.g., nuclear, gas, wind and solar). A stochastic-based optimizer is employed, based on Gaussian Process Modeling, which requires numerous samples for its training. Each sample represents a time series describing the demand, load, or other operational and economic profiles for various types of energy producers. These samples are synthetically generated using a reduced order modeling algorithm that reads a limited set of historical data, such as demand and load data from past years. Numerous data analysis methods are employed to construct the reduced order models, including, for example, the Auto Regressive Moving Average, Fourier series decomposition, and the peak detection algorithm. All these algorithms are designed to detrend the data and extract features that can be employed to generate synthetic time histories that preserve the statistical properties of the original limited historical data. The optimization cost function is based on an economic model that assesses the effective cost of energy based on two figures of merit: the specific cash flow stream for each energy producer and the total Net Present Value. An initial guess for the optimal capacities is obtained using the screening curve method. The results of the Gaussian Process model-based optimization are assessed using an exhaustive Monte Carlo search, with the results indicating reasonable optimization results. The workflow has been implemented inside the Idaho National Laboratory’s Risk Analysis and Virtual Environment (RAVEN) framework. The main contribution of this study addresses several challenges in the current optimization methods of the energy portfolios in IES: First, the feasibility of generating the synthetic time series of the periodic peak data; Second, the computational burden of the conventional stochastic optimization of the energy portfolio, associated with the need for repeated executions of system models; Third, the inadequacies of previous studies in terms of the comparisons of the impact of the economic parameters. The proposed workflow can provide a scientifically defendable strategy to support decision-making in the electricity market and to help energy distributors develop a better understanding of the performance of integrated energy systems.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

HydroSAR: A Cloud-based SAR Data Analysis Service to Monitor Hydrological Disasters and their Impact on Population and Agriculture

Weather-related hazards are ubiquitous around the world including: 1) hurricane storm surges, 2) rapid snowmelt and heavy rainfall, 3) severe weather leading to flash floods, and 4) seasonal freeze and thaw of rivers that may lead to ice jams. Each of these hazards affects human settlements and has the potential to impact agricultural productivity. In each setting, end-users in disaster management need access to data processing tools helpful in mapping past and current disasters. Analysis of past events supports risk mitigation by understanding what has already occurred and how to alleviate those impacts in the future. Having capabilities to generate the same products in a response setting means that lessons learned from risk analysis will carry forward to event response. Synthetic aperture radar (SAR) data are particularly useful for these activities due to their all-weather 24/7 monitoring capabilities. In this effort we present HydroSAR, a cloud-based SAR data analysis service for the mapping of meteorological and hydrological disasters as well as their impact on population and agriculture. As part of this project we have developed a series of SAR-based value added products for the monitoring of surface hydrology (image time series, change detection, flood extent, flood depth) and the assessment of impacts on population (flood depth) and agriculture (active agriculture, inundated agriculture, flood duration). We also developed a cloud-based platform for generating these products over affected areas and are working with end-users to integrate derived product into decision-making workflows The paper will briefly introduce the SAR-based products that were developed for this effort. We describe the cloud-based production pipeline that was built to automatically generate these products in near-real time over extended regions. The integration of SAR-based information into hazard preparation and response activities is described for a number of recent disasters including the 2019 forest fires in Alaska, 2019 flooding in the U.S. Midwest, the 2020 U.S. severe weather easter outbreak, 2020 tropical storm Christobal, 2020 cyclone Amphan, 2020, Alaska Spring breakup flooding, and the 2020 flood season in Eastern India, Bangladesh, and Nepal.

Franz Josef Meyer↗

An Astronaut's Risk of Experiencing a Critical Impact from Lunar Ejecta During Lunar EVA

The Moon is under constant bombardment by meteoroids. When the meteoroid is large, the impact craters the surface, launching crater ejecta far from the impact potentially threatening astronauts on the lunar surface. In the early 1960’s, the ejecta impact flux was thought no more than the sporadic meteoroid flux but with speeds one to two orders of magnitude smaller. However, the Lunar Module designers realized by 1965 that meteoroid bumpers do not perform well at the smaller ejecta impact speeds. Their estimates of the Lunar Module risk of penetration by ejecta were 25 to 50% of the total risk. This was in spite of the exposure time to ejecta being only a third of that to sporadic meteoroids. The standard committee based the 1969 NASA SP-8013 lunar ejecta environment on Zook’s 1967 flux analysis and Gault, Shoemaker and Moore’s 1963 test data for impacts into solid basalt targets. However, Zook noted in his 1967 analysis, that if the lunar surface was composed of soil, that the ejected soil particles would be smaller than ejected basalt fragments and that the ejection speeds would be smaller. Both effects contribute to reducing the risk of a critical failure due to lunar ejecta. The authors revised Zook’s analysis to incorporate soil particle size distributions developed from analysis of Apollo lunar soil samples and ejected mass as a function of ejecta speed developed from coupling parameter analyses of soil impact-test data. The authors estimated EVA risk by assuming failure occurs at a critical impact energy. At these impact speeds, this might be true for suit hard and soft goods. However, these speeds are small enough that there may be significant strength effects that require new test data to modify the hypervelocity critical energy failure criterion. With these caveats, Christiansen, Cour-Palais and Freisen list the critical energy of the ISS EMU hard upper torso as 44 J and the helmet and visor as 71 J at hypervelocity. The authors then assumed that the lunar EVA suit fails at 50 J critical energy. This results in a 1,700,000 years mean time to failure using the results of this analysis and a 3,800 years mean time to failure using NASA SP-8013.

Bjorkman, Michael D.↗

Risk Analysis of Various Design Architectures for High Safety-significant Safety-related Digital Instrumentation and Control Systems of Nuclear Power Plants during Accident Scenarios

This report documents the plus-up activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2022 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades/designs. An integrated risk assessment technology for the DI&C systems was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the safety margin obtained from plant modernization, especially for the high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing advanced risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems to support system design decisions and diversity and redundancy applications, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals and deal with the expensive licensing justifications from regulatory insights, the LWRS-developed framework instructs nuclear vendors and utilities on how to effectively lower the costs associated with digital compliance and speed industry advances by: (1) defining an integrated risk-informed analysis process for DI&C upgrade, including hazard analysis, reliability analysis, and consequence analysis, (2) applying systematic and risk-informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development, licensing, and deployment of advanced DI&C technologies on nuclear power plant (NPPs). Adding diversity within system or components is the main means to eliminate and mitigate CCFs, but diversity also increases plant complexity and errors and may not address all sources of systematic failures. How to optimize the diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in HSSSR DI&C systems of NPPs and supporting relevant design optimization, the framework provides: ? An integrated best-estimate, risk-informed capability to address new technical digital issues quantitatively, accurately, and efficiently in plan modernization progress, such as software CCFs in HSSSR DI&C systems of NPPs ? A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to efficiently predict and prevent risk in the early design stage of DI&C systems ? Technical bases and risk-informed insights to assist U.S. Nuclear Regulatory Commission (NRC) and industry to address and fulfill the risk-informed alternatives for evaluation of CCFs in HSSSR DI&C systems of NPPs ? An integrated risk-informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The plus-up research and development efforts of this project in FY 2022 are focused on methodology improvement of software CCF modeling and estimation, prevention analysis, importance analysis and risk analysis of various design architectures of HSSSR DI&C systems. This work greatly enhances the capability of the LWRS-developed framework for the risk assessment and design optimization of safety-critical DI&C systems. It should be noted that all the analyses are performed for the demonstration of the LWRS-developed framework, not for the evaluation of relevant systems. Results are obtained based on very limited design information and testing data.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Light Water Sustainability Program: Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis

This report describes the interim progress for research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and elsewhere throughout the plant, along with a greater use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human-performance-related organizational and technical design issues are identified and addressed. This report describes modeling tools and techniques, based on sociotechnical system theory, to support these design goals and their application in the current research effort. The report is intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control and feedback relationships amongst the system’s technical and organizational components. Up to this point, we have employed a Causal Analysis based on STAMP (CAST) technique to examine a performance- and safety-related incident at an industry partner’s plant that involved the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. Our ongoing analysis is focused on identifying near-term process improvements and longer-term design requirements for an optimized IAE system. The latter analyses will employ a second STAMP-derived technique, System-Theoretic Process Analysis (STPA). STPA is a useful modeling tool for generating and analyzing actual or potential information control structures. Finally, we have begun modeling plantwide organizational relationships and processes. Organizational system modeling will supplement our CAST and STPA findings and provide a basis for mapping out a plantwide information control architecture. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the initiating event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. We present two preliminary information automation models. The proactive issue resolution model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system. From our results, we have generated a set of preliminary system-level requirements and safety constraints. These requirements will be further developed over the remainder of our project in collaboration with nuclear industry subject matter experts and specialists in the technical systems under consideration. Additionally, we will continue to pursue the system analyses initiated in the first part of our effort, with a particular emphasis on STPA as the main tool to identify weak or weakening control structures that affect the resilience of organizations and programs. Our intent is to broaden the scope of the analysis from an individual use case to a related set of use cases (e.g., maintenance tasks, compliance tasks) with similar human-system performance challenges. This will enable more generalized findings to refine the Proactive Issue Resolution and IAE models, as well as their system-level requirements and safety constraints. We will use organizational system modeling analyses to supplement STPA findings and model development. We conclude the report with a set of summary recommendations and an initial draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗

PacWave South SeaRAY k2 Risk Registers

The SeaRAY is a deployable power system for maritime sensors, monitoring equipment, communications, unmanned underwater vehicles, and other similar payloads. This project is to design, deliver, and test a prototype low-power WEC that lowers the total cost of ownership and provides robust, new capabilities for customers in the maritime environment. Failure Modes, Effects, and Criticality Analysis (FMECA) is conducted to systematically identify all potential failure modes and their effects on the system, and to analyze the criticality of each risk based on the likelihood of the event and the severity of the impact. Actions may then be recommended to mitigate the criticality of a risk, either by reducing the likelihood of the risk or the severity of its impact. Risk assessment is executed iteratively as an integral part of the design process. By incorporating risk assessment early in the development cycle, mitigation of risk can be achieved cost effectively. The actions recommended to mitigate risk may be subsequently executed, and as the design progresses the risk assessment is reviewed and revised. Review of the risk assessment is integrated into structured design reviews, ensuring that critical risks are comprehended and that the Project will not progress to e.g. fabrication while intolerable risks remain. The risk assessment process results in the population and maintenance of Risk Registers (RRs). Each major system (and as needed, subsystem) will have a distinct RR. This allows each system or subsystem to be assessed individually, rendering the RRs to a manageable size for review.

16 TIDAL AND WAVE POWER↗

Pressurized-Water Reactor Core Design Demonstration with Genetic Algorithm Based Multi-Objective Plant Fuel Reload Optimization Platform

LWRS M3 milestone report due September 15, 2023. This report summarizes development and demonstration activities of PRLO optimization platform built in Risk Analysis and Virtual ENviroment (RAVEN), specifically: (1) Improvement of multi-objective non-dominated sorting genetic algorithm II (NSGA-II) to handle large size of objectives and constraints, (2) Demonstration of pressurized water reactor core design with NSGA-II multi-objective optimization platform, and (3) Single-objective optimized core design including system analysis and fuel performance feedback.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗