Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 397 records · Page 22

The role of AI in detecting and mitigating human errors in safety-critical industries: A review

For safety-critical industries, human error (HE) presents continual risks to system productivity, reliability and safety. Artificial intelligence (AI) and machine learning (ML) methods have emerged as promising approaches to understand, categorize and mitigate the risk of HE in safety-critical industries. Furthermore, this review offers an examination of the current landscape regarding the utilization of AI/ML with regards to HE in safety-critical industries, categorizing literature into descriptive modeling, predictive modeling, prescriptive modeling, and generative modeling techniques. Additionally, the review aims to provide insights regarding themes in literature, challenges, and future research directions. Findings of the review suggest that AI/ML methods can prove useful in addressing the HE problem across safety-critical industries.

42 ENGINEERING↗

Comparative Analysis of Standard and Advanced USL Methodologies for Nuclear Criticality Safety

The American National Standards Institute/American Nuclear Society national standards 8.1 and 8.24 provide guidance on the requirements and recommendations for establishing confidence in the results of the computerized models used to support operation with fissionable materials. By design, the guidance is not prescriptive, leaving freedom to the analysts to determine how the various sources of uncertainties are to be statistically aggregated. Due to the involved use of statistics entangled with heuristic recipes, the resulting safety margins are often difficult to interpret. Also, these technical margins are augmented by additional administrative margins, which are required to ensure compliance with safety standards or regulations, eliminating the incentive to understand their differences. With the new resurgent wave of advanced nuclear systems, e.g., advanced reactors, fuel cycles, and fuel concepts, focused on economizing operation, there is a strong need to develop a clear understanding of the uncertainties and their consolidation methods to reduce them in manners that can be scientifically defended. In response, the current studies compare the analyses behind four notable methodologies for upper subcriticality limit estimation that have been documented in the nuclear criticality safety literature: the parametric, nonparametric, Whisper, and TSURFER methodologies. Specifically, the work offers a deep dive into the various assumptions of the noted methodologies, their adequacies, and their limitations to provide guidance on developing confidence for the emergent nuclear systems that are expected to be challenged by the scarcity of experimental data. Here, to limit the scope, the current work focuses on the application of these methodologies to criticality safety experiments, where the goal is to calculate a bias, a bias uncertainty, and a tolerance limit for k eff in support of determining an upper subcriticality limit for nuclear criticality safety.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Unique safety features and licensing requirements of the NuScale small modular reactor

Small modular reactors (SMR) offer a novel approach to the construction and operation of nuclear power plants. The NuScale VOYGR™ plant uses a simplified SMR design that is based on proven light-water reactor technology with substantial improvements in nuclear safety. It consists of a 250 MWt reactor core housed with other primary system components in an integral reactor pressure vessel surrounded by a steel containment vessel, all of which is immersed in a large pool of water that also serves as the ultimate heat sink. At the core of the NuScale safety case are three primary safety systems: the decay heat removal system, the emergency core cooling system, and the containment. The ability of the NuScale Power Module (NPM) passive safety systems to remove core decay heat for an unlimited duration is demonstrated through analysis of a beyond-design-basis extended loss of AC power with no replenishment of water to the ultimate heat sink or operator actions. The NuScale methodology to evaluate an indefinite loss of AC power uses the proprietary NRELAP5 systems analysis computer code. Analysis results show that the reactor coolant system liquid level above the core is maintained and that containment pressure remains below the vessel design pressure. Once full passive air cooling is established, containment pressure and temperature will decrease over time with decreasing core decay heat. NuScale received standard design approval in September 2020 and design certification in January 2023 for its 50 MWe NPM configured as a 12 module plant. NuScale is currently seeking standard design approval to increase its core power to 250 MWt, nominally 77 MWe per module, in a 6-module plant (VOYGR™-6) configuration. The high-level safety of NuScale’s SMR technology is foundational to a new standard of nuclear power plant resilience.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Towards a Formal Basis for Modular Safety Cases

Safety assurance using argument-based safety cases is an accepted best-practice in many safety-critical sectors. Goal Structuring Notation (GSN), which is widely used for presenting safety arguments graphically, provides a notion of modular arguments to support the goal of incremental certification. Despite the efforts at standardization, GSN remains an informal notation whereas the GSN standard contains appreciable ambiguity especially concerning modular extensions. This, in turn, presents challenges when developing tools and methods to intelligently manipulate modular GSN arguments. This paper develops the elements of a theory of modular safety cases, leveraging our previous work on formalizing GSN arguments. Using example argument structures we highlight some ambiguities arising through the existing guidance, present the intuition underlying the theory, clarify syntax, and address modular arguments, contracts, well-formedness and well-scopedness of modules. Based on this theory, we have a preliminary implementation of modular arguments in our toolset, AdvoCATE.

Safety↗

Real-Time Safety Monitoring and Prediction for the National Airspace System

As new operational paradigms and additional aircraft are being introduced into the National Airspace System (NAS), maintaining safety in such a rapidly growing environment becomes more challenging. It is therefore desirable to have both an overview of the current safety of the airspace at different levels of granularity, as well an understanding of how the state of the safety will evolve into the future given the anticipated flight plans, weather forecasts, predicted health of assets in the airspace, and so on. To this end, we have developed a Real-Time Safety Monitoring (RTSM) that first, estimates the state of the NAS using the dynamic models. Then, given the state estimate and a probability distribution of future inputs to the NAS, the framework predicts the evolution of the NAS, i.e., the future state, and analyzes these future states to predict the occurrence of unsafe events. The entire probability distribution of airspace safety metrics is computed, not just point estimates, without significant assumptions regarding the distribution type and or parameters. We demonstrate our overall approach by predicting the occurrence of some unsafe events and show how these predictions evolve in time as flight operations progress.

National Airspace System↗

In Silico Versus In Situ: The Challenging Landscape of Nuclear Criticality Safety Training

Nuclear criticality safety grew out of the ranks of experimentalists studying the physics of chain-reacting systems at critical experiment facilities. Consequently, critical experiment facilities provide the best forum for conducting training in nuclear criticality safety. As the nuclear renaissance gains traction, there is an increased demand to train personnel in nuclear criticality safety (NCS). Strides have been made in both on-line and virtual reality based NCS training. While these are perhaps a necessary component of NCS training, hands-on training at critical experiments facilities remains the most effective means of developing competency for fissionable material handlers, managers of fissionable material operations, criticality safety analysts, and experimentalists. This paper explores the challenges of developing and maintaining workforce competency in nuclear criticality safety to support safe and efficient fissionable material operations.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Panel Session 132: Risk-Informed Approach for Decision Making in WM, D and D and SNF Management: Reasonable Assurance for Safety

Mr. Larry Camper organized a panel of experts to discuss approaches to better make risk-informed decisions in waste management, decommissioning, and the management of Spent Nuclear Fuel (SNF). The audience heard the perspectives from four panelists that addressed issues ranging from the technical basis used to make risk-informed decisions to for developing cleanup criteria and promulgating regulations and safety standards both domestically and abroad. A summary of each of the presentations given by the panelists is provided herein. This WMS BOD featured panel focused on the Risk-Informed Approach for Decision Making in WM, D and D and SNF Management and the Reasonable Assurance for Safety. The panelists addressed and discussed with the audience different approaches used for decision-making, summarizing ongoing probabilistic vs. deterministic approaches, including IAEA graded approach, and discussed policies/approaches to achieve reasonable assurance for safety rather than using absolute assurance. Panelists with presentations: Risk-Informed Decision Making - More than a Motto? (Paul Black); NRC Staff Perspective on Risk-Informed Approach and Reasonable Safety Assurance in D and D and LLW (Rateb (Boby) Abu Eid); Risk-Informed Decision-Making and Illustrative National Academies Studies (Charles Ferguson); IAEA's Revised Safety Guidance on Remediation (Michelle Roberts); NDA Radioactive Waste Strategy - A Risk Informed Approach (James McKinney)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Multicomponent gas mixture parametric CFD study of condensation heat transfer in small modular reactor system safety

Safety is always the primary concern for designing and analyzing nuclear reactor systems. The requirements for the safety margin for advanced small modular reactor (SMR) systems are targeted even higher than the conventional commercial large-scale nuclear reactors incorporating the passive and inherent safety systems. The SMR systems are designed with the condensation passive containment cooling system (PCCS), which plays a critical role in removing reactor heat during a steam release accident case. However, the presence of non-condensable gas (NCG), like air, reduces the heat transfer performance. This physics phenomenon becomes multifactorial for nuclear reactor containment during a fuel failure accident case that releases hydrogen gas. Besides, the mixture component of steam-air-hydrogen varies in reactor accident cases, which need simulation and validation keeping parameters of importance. Reviews showed that previous studies for SMR’s PCCCS did not cover the condensation heat transfer (CHT) in the presence of multicomponent NCG mixture parametric computational fluid dynamics (CFD) simulation and validation, making a research gap in the SMR design safety. A comprehensive CHT parametric CFD study was performed for SMR PCCS to fill this research gap. This study used experimental data as simulation 3D physics domain inlet and outlet boundary conditions. However, the wall boundary conditions were constant temperature, curve-fit, and annular coolant for verifying the turbulence models. Parametric simulations were performed, verified, and optimized for steam-NCGs mixtures. The multicomponent gases, multiphase mixtures, and fluid film condensation models were applied with associated turbulence models. The results of the parametric study were evaluated for realistic reactor conditions. Results showed that parametric study provided critical insight about the dependency of multicomponent gas mixture parameters that supports reactor safety design, analysis, and licensing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Hazard analysis for identifying common cause failures of digital safety systems using a redundancy-guided systems-theoretic approach

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection, digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. Here, this paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the causal factors of potential single points of failure in the design of digital safety systems in advanced plant designs.

42 ENGINEERING↗

Safety perceptions of solid-state lithium metal batteries

Safety concerns hamper the wide application of lithium-ion batteries (LIBs) in the fields of electric vehicles and stationary energy storage. As the blame of the battery thermal runway was widely cast on the flowable, volatile, and flammable nature of liquid organic electrolytes, solid-state lithium batteries with solid and nonflammable electrolytes are highly praised for potentially better safety characteristics. Furthermore, solid-state lithium metal batteries (SS-LMBs) may become an ultimate solution for safe, high-energy density batteries. Whether SS-LMBs are safe enough to meet emerging demands remains unclear, as recent publications have presented serious safety concerns at both the material and device levels. In conclusion, this review summarizes recent investigations into SS-LMB safety, and systematic analysis and discussion are provided in this discussion of the safety concerns of SS-LMBs.

25 ENERGY STORAGE↗

Nuclear safety Enhanced: A Deep dive into current and future RAVEN applications

As the horizon of nuclear energy expands with the advent of small modular reactors, IV generation reactors, and fusion reactors, there is a growing perspective that the licensing process could benefit from a more comprehensive approach. Moving beyond traditional deterministic and PRA analysis might pave the way for a novel safety analysis paradigm propelled by the increasing computational power at our disposal. This paper explores different methodologies that can improve the outcomes of nuclear safety analysis. These range from uncertainty quantification techniques, aimed at enhancing the precision of safety margins, to deploying dynamic event trees by driving system code simulations, capturing the potential evolutions of severe accidents. These methodologies introduce innovative dimensions to safety analysis, considering the consequences of postulated events and the dynamics of accident sequences. However, they also bring forth challenges, especially in managing the complexity and sheer volume of potential scenarios. The paper touches upon some strategies to counter these challenges, emphasizing the importance of adaptability and continuous evolution in the face of emerging nuclear safety concerns. Additionally, the paper sheds light on the need for advanced tools to apply these methodologies. Among these tools is RAVEN, an open-source software designed for parametric and probabilistic analyses. Its core components, including distribution, sampler, and reduced order model, enable various applications, from risk assessment and mitigation to dynamic learning and plant control logic simulations.

97 - MATHEMATICS AND COMPUTING↗

Semiglobal Safety-Filtered Extremum Seeking With Unknown CBFs

We introduce a safe extremum-seeking (Safe ES) algorithm which achieves the minimization of an unknown objective function while ensuring that an unknown, yet measured, control barrier function (CBF) remains above an arbitrarily small negative value for all time. In other words, “practical safety” is maintained during the entire period of convergence to the constrained extremum. Our design is based on quadratic program (QP) CBF style filters for safety, which is applied in an average and estimated sense. Using nonsmooth analysis tools, we guarantee semiglobal practical asymptotic (SPA) stability of the global constrained optimum, practical convergence to the safe set if starting in a condition violating the CBF, and practical safety for all time—semiglobally—if starting in safe set. The safety result of the paper is analogous with modern notions of SPA stability, guaranteeing that, for any small violation of safety, there exist design coefficients which guarantee that such a small violation is not exceeded. The paper outlines a set of sufficient conditions on the barrier and objective functions, and by way of a Lyapunov argument, we demonstrate that nonconvex constrained optimization problems can be solved. We present these results in the setting of a static map and a dynamical system. A simulation example illustrates the results.

97 MATHEMATICS AND COMPUTING↗

Explorative Visualization for Traffic Safety using Adaptive Study Areas

The pressing need to improve traffic safety has become a societal concern in many cities around the world. Many traffic accidents are not occurring as stand-alone events but as consequences of other road incidents and hazards. To capture the traffic safety indications from a holistic aspect, this paper presents a suite of visualization techniques to explore large traffic safety datasets collected from different sources using adaptive study areas which include the whole region (Hamilton County, Ohio, U.S.) as well as smaller sub-areas. In the present study, these data source include (1) Hamilton County’s 911 emergency response data, which includes traffic incidents as well as other types of incidents throughout the county, and (2) Tennessee crash data, which contains only vehicle crashes with more detail on the circumstances of each crash. We find that both abstract and spatial visualization techniques are used to derive a better understanding of traffic safety patterns for different traffic participants in various urban environments. In addition to the entire region of Hamilton County, safety is examined on the highways, in the downtown area, and in a shopping district east of the city center. It is possible to characterize incidents in the different areas, gain a better understanding of common incident patterns, and identify outliers in the data. Finally, a textured tile calendar is presented to compare spatiotemporal patterns.

99 GENERAL AND MISCELLANEOUS↗

VADER: A Tool for Criticality Safety Validation

The purpose of criticality safety is to prevent any inadvertent criticality from occurring during the handling or storage of fissile material. Calculations are frequently used to demonstrate that a sufficient subcritical margin exists. Validation is a key aspect of the evaluation process, establishing the suitability, accuracy, and associated uncertainty of the computational method and data to be used for the intended application. The validation process is performed by comparing the results of critical experiments with the calculated results from models of the experiments using the computational method to be validated. Laboratory critical experiments are controlled systems that achieve a k eff of approximately 1 in order to investigate the parameters at which such a critical condition is achieved. The validation parameters that are traditionally applied to safety analysis calculations are the bias and the bias uncertainty . The bias is the deviation of the average k eff of the validation suite from unity. The bias uncertainty accounts for the statistical uncertainty in the bias based on the standard deviation, sample size, and distribution of k eff values of the validation suite. The values of bias and bias uncertainty ensure that the systems predicted to be subcritical by the computational method will indeed be subcritical. The bias and bias uncertainty are often combined to determine an upper subcritical limit (USL) or computational margin that can then be applied to safety analysis calculations. Many methods have been developed by different organizations to calculate the bias and bias uncertainty for various types of criticality analyses. Each of these methods typically requires that the validity of various underpinning statistical assumptions be confirmed to demonstrate that the method is appropriate for the analysis of a given validation suite. An example of the validation decision making flow is shown in Fig.1. As shown in Fig. 1, the analyst performing the validation fits a trend line to the data and performs a test to determine if the trend was a statistically better representation of the data than if it were treated as an uncorrelated sample. If the trend line is a better representation of the data, then the analyst uses any one of a number of trending techniques to determine the bias and bias uncertainty. If a trend is not an appropriate representation of the data, then the analyst proceeds to perform a normality assessment for the data. If the normal assumption can be shown to be acceptable, then the analyst calculates the bias and bias uncertainty with the parametric technique. If the assumption of normality cannot be justified, then the nonparametric technique is used. Once the decision flow has been followed and the appropriate technique has been selected, the bias and bias uncertainty is typically combined with an administrative margin to determine a USL below which calculated values of k eff for safety analysis models can be considered subcritical. The calculations used in each decision are often performed with spreadsheets or with small programs available at various sites performing criticality analyses. Expertise in understanding and interpreting the results must be maintained to perform these calculations. This can often be an error-prone process. Oak Ridge National Laboratory (ORNL) is currently developing the Validation and Data Evaluation Resource (VADER) to simplify and automate the criticality safety validation process and to provide a software quality assurance pedigree to the calculational methods used. This paper discusses the use of the Fulcrum user interface with VADER, the anticipated initial capabilities of VADER to perform validation analyses, and the output from the code.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Preliminary Thermal-hydraulics and Selected Safety Analysis for Holos-Quad Reactor Design

This report presents thermal hydraulics and safety analyses of the 10 MWe Holos-Quad micro-reactor design developed by HolosGen LLC. These analyses were executed under steady-state and station black-out (SBO) transient conditions using the System Analysis Module (SAM), with a focus on ensuring peak fuel temperatures do not exceed the safety thresholds of 1,250°C for steady state normal operating conditions and 1,600°C for transient conditions. For steady-state temperature predictions, a coupled 1D fluid-to-3D solid heat conduction methodology was used. The steady-state simulations included a model of the central core region where power peaking occurs to predict the maximum steady-state fuel temperature, and a coarse-mesh full-core model to provide the initial condition for the consequent transient SBO decay heat removal simulation. The maximum fuel temperature predicted from the central core region simulations under the normal operating condition was 1,222°C, which is below the design limit 1,250°C. To simulate a SBO transient, a full core model was necessary because of the non-axial symmetric core design and heat loss from the outer core structures to the environment. To reduce the required computational costs, a novel scaled subassembly approach was used to model the full core domain. With the full core steady-state temperature distribution provided as the initial condition, the passive decay heat removal of the core was simulated with the scaled subassembly full core model under SBO transient conditions. This analysis showed that the peak fuel temperatures of the Holos-Quad core remained below their steady-state values during the transient, therefore much lower than the safety limit 1,600°C. This is mainly due to the large thermal inertia of the graphite matrix, relatively low power density, and the large surface-to-volume-ratio of the core. The preliminary analyses presented in this report confirm the inherent safety of the Holos-Quad micro-reactor thermal-hydraulics design, as the peak fuel temperatures under both normal and off-normal operational conditions remain within design and safety limits.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

NASA/Navy Benchmarking Exchange (NNBE). Volume 1. Interim Report. Navy Submarine Program Safety Assurance

The NASA/Navy Benchmarking Exchange (NNBE) was undertaken to identify practices and procedures and to share lessons learned in the Navy's submarine and NASA's human space flight programs. The NNBE focus is on safety and mission assurance policies, processes, accountability, and control measures. This report is an interim summary of activity conducted through October 2002, and it coincides with completion of the first phase of a two-phase fact-finding effort.In August 2002, a team was formed, co-chaired by senior representatives from the NASA Office of Safety and Mission Assurance and the NAVSEA 92Q Submarine Safety and Quality Assurance Division. The team closely examined the two elements of submarine safety (SUBSAFE) certification: (1) new design/construction (initial certification) and (2) maintenance and modernization (sustaining certification), with a focus on: (1) Management and Organization, (2) Safety Requirements (technical and administrative), (3) Implementation Processes, (4) Compliance Verification Processes, and (5) Certification Processes.

SUBSAFE PROGRAM↗

NASA Safety and Health (Short Form). Final rule

This final rule adopts with changes the interim rule published in the Federal Register on April 5, 2001 (65 FR 18051-18053), which amended the NASA FAR Supplement to implement a Safety and Health (Short Form) clause to address safety and occupational health in all NASA contracts above the micro-purchase threshold where the existing Safety and Health clause did not apply, and amended other safety and health clauses to be consistent with the new NASA Safety and Health (Short Form) clause.

Contract Services↗