Search NASA⌕ Search

SEARCH · Search NASA

Results for “Mechanism requirements”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 415 records · Page 23

Wide-Field Hubble Space Telescope Observations of the Globular Cluster System in NGC 1399*

We present a comprehensive high spatial resolution imaging study of globular clusters (GCs) in NGC 1399, thecentral giant elliptical cD galaxy in the Fornax galaxy cluster, conducted with the Advanced Camera for Surveys(ACS) aboard theHubble Space Telescope(HST).Using a novel technique to construct drizzled point-spreadfunction libraries for HSTACS data, we accurately determine the fidelity of GC structural parameter measurementsfrom detailed artificial star cluster experiments and show the superior robustness of the GC half-light radius,rh,compared with other GC structural parameters, such as King core and tidal radius. The measurement ofrhfor themajor fraction of the NGC 1399 GC system reveals a trend of increasingrhversus galactocentric distance,Rgal,out to about 10 kpc and a flat relation beyond. This trend is very similar for blue and red GCs, which are found tohave a mean size ratio ofrh,redrh,blue0.820.11 at all galactocentric radii from the core regions of the galaxyout to40 kpc. This suggests that the size difference between blue and red GCs is due to internal mechanismsrelated to the evolution of their constituent stellar populations. Modeling the mass density profile of NGC 1399shows that additional external dynamical mechanisms are required to limit the GC size in the galaxy halo regionstorh2 pc. We suggest that this may be realized by an exotic GC orbit distribution function, an extended darkmatter halo, andor tidal stress induced by the increased stochasticity in the dwarf halo substructure at largergalactocentric distances. We compare our results with the GCrhdistribution functions in various galaxies and findthat the fraction of extended GCs withrh5 pc is systematically larger in late-type galaxies compared with GCsystems in early-type galaxies. This is likely due to the dynamically more violent evolution of early-type galaxies.We match our GCrhmeasurements with radial velocity data from the literature and split the resulting sample at themedianrhvalue into compact and extended GCs. We find that compact GCs show a significantly smaller line-of-sight velocity dispersion,cmp22525 km s1, than their extended counterparts,ext31721 km s1.Considering the weaker statistical correlation in the GCrhcolor and the GCrhRgalrelations, the more significantGC sizedynamics relation appears to be astrophysically more relevant and hints at the dominant influence of theGC orbit distribution function on the evolution of GC structural parameters.

Hubble↗

Operation of an ADR Using Helium Exchange Gas as a Substitute for a Failed Heat Switch

The Soft X-ray Spectrometer (SXS) is one of four instruments on the Japanese Astro-H mission, which is currently planned for launch in late 2015. The SXS will perform imaging spectroscopy in the soft X-ray band (0.3-12 keV) using a 6 6 pixel array of microcalorimeters cooled to 50 mK. The detectors are cooled by a 3-stage adiabatic demagnetization refrigerator (ADR) that rejects heat to either a superfluid helium tank (at 1.2 K) or to a 4.5 K Joule-Thomson (JT) cryocooler. Four gas-gap heat switches are used in the assembly to manage heat flow between the ADR stages and the heat sinks. The engineering model (EM) ADR was assembled and performance tested at NASA/GSFC in November 2011, and subsequently installed in the EM dewar at Sumitomo Heavy Industries, Japan. During the first cooldown in July 2012, a failure of the heat switch that linked the two colder stages of the ADR to the helium tank was observed. Operation of the ADR requires some mechanism for thermally linking the salt pills to the heat sink, and then thermally isolating them. With the failed heat switch unable to perform this function, an alternate plan was devised which used carefully controlled amounts of exchange gas in the dewar's guard vacuum to facilitate heat exchange. The process was successfully demonstrated in November 2012, allowing the ADR to cool the detectors to 50 mK for hold times in excess of 10 h. This paper describes the exchange-gas-assisted recycling process, and the strategies used to avoid helium contamination of the detectors at low temperature.

Adiabatic demagnetization↗

On the Connection Between Microbursts and Nonlinear Electronic Structures in Planetary Radiation Belts

Using a dynamical-system approach, we have investigated the efficiency of large-amplitude whistler waves for causing microburst precipitation in planetary radiation belts by modeling the microburst energy and particle fluxes produced as a result of nonlinear wave-particle interactions. We show that wave parameters, consistent with large amplitude oblique whistlers, can commonly generate microbursts of electrons with hundreds of keV-energies as a result of Landau trapping. Relativistic microbursts (greater than 1 MeV) can also be generated by a similar mechanism, but require waves with large propagation angles Theta (sub k)B greater than 50 degrees and phase-speeds v(sub phi) greater than or equal to c/9. Using our result for precipitating density and energy fluxes, we argue that holes in the distribution function of electrons near the magnetic mirror point can result in the generation of double layers and electron solitary holes consistent in scales (of the order of Debye lengths) to nonlinear structures observed in the radiation belts by the Van Allen Probes. Our results indicate a relationship between nonlinear electrostatic and electromagnetic structures in the dynamics of planetary radiation belts and their role in the cyclical production of energetic electrons (E greater than or equal to 100 keV) on kinetic timescales, which is much faster than previously inferred.

plasmas↗

Modeling Principles Using the Relation Between Lagrange Multipliers and Bond Graphs

Final document is attached. Modeling dynamic systems by bond graphs has become state of the art technology since hundreds of researchers around the world have incorporated the technology in many fields of engineering and science. The legacy of its invertor Prof. Henry Paynter at MIT in 1959 is now a fundamental and practical technique to understand reality by building computer models. This paper addresses a particular aspect of this technology when modeling of mechanical systems require relaxation of constraints by means of Lagrange principles. Lagrange's equations are a useful means of describing and solving systems with kinematic constraints. Lagrange multipliers are variables used in equations to find the extremes of multivariate functions. Here we explore the relation of Lagrange multipliers to solve modeling difficulties of a space vehicle with equations with dependent derivatives. Lagrange multipliers were used in conjunction with bond graphs to simulate a system where joints of kinematic linkages produce dependent derivatives. NASA's Morpheus Project lunar lander was used as a case study. The Morpheus Project is a terrestrial test vehicle designed to fly the terminal descent trajectory of a lunar lander to advance the Autonomous Landing Hazard Avoidance Technology (ALHAT). An objective of this study is to apply the modeling approach herein to capture the dynamic movement of the lander as the propellant is sloshed and consumed. This paper expands further the analysis presented by (Granda, J J. Nguyen, L, Carlson, T, Sahragard-Monfared, G., Fornalski, E., Brocker 2016). Using an automated approach bond graph models of state space equations were generated using the Computer Aided Modeling Program (CAMPG). Integral causality models and derivative causality models were considered in order to find the simpler solution for the mathematical dependencies produced in modeling this vehicle.

Granda, Jose J.↗

High-Performance Computing Optimization for Aladyn – Adaptive Neural Network Molecular Dynamics Mini-Application

This report provides a description and performance evaluation of the optimization techniques for high performance computing (HPC) implementation of the open source Computational Materials mini-application Aladyn (https://github.com/nasa/aladyn). Aladyn is a basic molecular dynamics code written in FORTRAN 2003, which is designed to demonstrate the use of adaptive neural networks (ANNs) in atomistic simulations. The role of ANNs is to efficiently reproduce the very complex energy landscape resulting from the atomic interactions in materials with the accuracy of the more expensive quantum mechanics-based calculations. The ANN is trained on a large set of atomic structures calculated using the density functional theory (DFT) method. While achieving orders of magnitude faster computational performance than DFT, the ANN-based approach was still very computationally demanding compared to the conventional approach of using empirically fitted energy functions. After its initial development, Aladyn was evaluated and optimized by experts at the NASA Advanced Supercomputing (NAS) division to exploit modern supercomputer architectures. The code has been optimized for execution on multicore central processing units (CPUs), including Intel® Skylake microarchitecture, and on graphic accelerators, such as Nvidia® V100 graphic processing units (GPUs), using Open Multi-Processing (OpenMP) and Open Accelerators (OpenACC) programming interfaces. The optimization achieved a speedup of 4.7 times the baseline version on CPU performance and an additional 2.4 times on CPU+GPU performance. Atomistic computer simulations are a fundamental tool in materials research to model material properties form physics-based first principles. Atomic interaction, governed by Quantum Mechanics (QM) require sophisticated and highly computationally demanding mathematical models to calculate [1]. Classical methods use approximate functional forms, empirically fitted through a set of variable parameters to emulate atomic energies as direct functions of atomic coordinates [2]. While empirical potentials are computationally much simpler, allowing simulations of large-scale systems of up to a trillion (1012) atoms [3], they are substantially less accurate compared to quantum calculations and applicable only to very specific atomic configurations or predefined crystallographic phases. A recently suggested approach is to use heuristic machine learning methods [4], such as those based on Adaptive Neural Networks (ANNs) to predict atomic energies, after being trained on a sufficiently large database of QM-calculated structures [5,6]. This approach reduces significantly the computational complexity, allowing for simulations of orders of magnitude larger systems compared to QM-based methods without compromising accuracy. Still, compared to classical methods using empirical energy functions, ANN methods remain two- to three orders of magnitude more computationally demanding. Hence, the computational cost of simulations, together with the need for extensive training of ANNs, still makes the practical implementation of ANN-based methods quite challenging. The purpose of the Aladyn mini-application software [7], available as open source at https://github.com/nasa/aladyn, is to be a testbed for exploring possible optimization strategies to develop highly scalable parallel algorithms for ANN-based atomistic simulations. Aladyn is aimed at utilizing the architecture of the high-end modern highperformance computing (HPC) hardware based on multicore central processing units (CPUs) equipped with graphic processing unit (GPU) accelerators. Specifically, the goal is to optimize the performance on a single HPC compute node, before implementing scaling to multi-node parallelization using message passing interface (MPI). At the same time, the open source code of Aladyn can serve as a training model for students and professors in academia.

Yamakov, Vesselin I.↗

Migration of Accreting Planets in Radiative Discs From Dynamical Torques

We present the results of hydrodynamical simulations of the orbital evolution of planets undergoing runaway gas accretion in radiative discs. We consider accreting disc models with constant mass flux through the disc, and where radiative cooling balances the effect of viscous heating and stellar irradiation. We assume that 20–30 M(sub ⨁) giant planet cores are formed in the region where viscous heating dominates and migrate outward under the action of a strong entropy-related corotation torque. In the case where gas accretion is neglected and for an α viscous stress parameter α = 2 × 10(exp -3), we find evidence for strong dynamical torques in accreting discs with accretion rates M ̇ ≳ 7 × 10(exsp -8)M(sub ⨀) yr(exp -1). Their main effect is to increase outward migration rates by a factor of ∼2 typically. In the presence of gas accretion, however, runaway outward migration is observed with the planet passing through the zero-torque radius and the transition between the viscous heating and stellar heating dominated regimes. The ability for an accreting planet to enter a fast migration regime is found to depend strongly on the planet growth rate but can occur for values of the mass flux through the disc of M ̇ ≳ 5 × 10(exp -8)M(sub ⨀) yr(exp -1).We find that an episode of runaway outward migration can cause an accreting planet formed in the 5–10 au region to temporarily orbit at star–planet separations as large as∼60–70 au. However, increase in the amplitude of the Lindblad torque associated with planet growth plus change in the streamline topology near the planet systematically cause the direction of migration to be reversed. Subsequent evolution corresponds to the planet migrating inward rapidly until it becomes massive enough to open a gap in the disc and migrate in the type II regime. Our results indicate that a planet can reach large orbital distances under the combined effect of dynamical torques and gas accretion, but an alternative mechanism is required to explain the presence of massive planets on wide orbits.

Accretion↗

Measurements of Silicosis Factors in Lunar and Martian Simulants

Simulants are geologically complex materials that are developed to represent the physical and/or compositional characteristics of a planetary surface (e.g., a naturally occurring soil or regolith). There are dozens of commercially available simulants that have been developed over the years; each simulant exhibits unique physical, chemical, and mineralogical characteristics. Simulants are derived from either natural or synthetic sources (i.e., “feedstocks”) of glass, minerals, and rocks. These feedstock components are processed by crushing, pulverizing, melting, etc., and then combined in the appropriate proportions to represent a particular site, surface, or region (e.g., Lunar Highlands Regolith). The process of creating simulants therefore requires the mechanical breakdown and reincorporation of feedstock components which may contain crystalline silica minerals such as quartz, cristobalite, and tridymite. Certain crystalline silica particles of the respirable fraction (<10 μm in diameter) are of great concern; chronic and acute exposure to these respirable crystalline silica (RCS) can lead to permanent damage and scarring of lung tissue, incurable lung diseases (i.e., silicosis), lung cancer, COPD (chronic obstructive pulmonary disease), and kidney disease. Planetary simulants are used extensively as test materials in the in scientific and engineering communities (e.g., testing of dust mitigation technologies, in-situ resource utilization, rover mobility, hardware, soft goods etc.). As such, this assessment was developed to serve as a guide for simulant users, local Safety and Occupational Health professionals, and Industrial Hygienists to evaluate the risk of silicosis across a wide variety of Lunar and Martian simulants. The goal of these works is to ensure that those working with simulant can do so safely and with an informed understanding of potential health risks.

Lunar↗

Measurements of Silicosis Factors in Lunar and Martian Simulants

Simulants are geologically complex materials that are developed to represent the physical and/or compositional characteristics of a planetary surface (e.g., a naturally occurring soil or regolith). There are dozens of commercially available simulants that have been developed over the years; each simulant exhibits unique physical, chemical, and mineralogical characteristics. Simulants are derived from either natural or synthetic sources (i.e., “feedstocks”) of glass, minerals, and rocks. These feedstock components are processed by crushing, pulverizing, melting, etc., and then combined in the appropriate proportions to represent a particular site, surface, or region (e.g., Lunar Highlands Regolith). The process of creating simulants therefore requires the mechanical breakdown and reincorporation of feedstock components which may contain crystalline silica minerals such as quartz, cristobalite, and tridymite. Certain crystalline silica particles of the respirable fraction (<10 μm in diameter) are of great concern; chronic and acute exposure to these respirable crystalline silica (RCS) can lead to permanent damage and scarring of lung tissue, incurable lung diseases (i.e., silicosis), lung cancer, COPD (chronic obstructive pulmonary disease), and kidney disease. Planetary simulants are used extensively as test materials in the in scientific and engineering communities (e.g., testing of dust mitigation technologies, in-situ resource utilization, rover mobility, hardware, soft goods etc.). As such, this assessment was developed to serve as a guide for simulant users, local Safety and Occupational Health professionals, and Industrial Hygienists to evaluate the risk of silicosis across a wide variety of Lunar and Martian simulants. The goal of these works is to ensure that those working with simulant can do so safely and with an informed understanding of potential health risks.

Lunar↗

Electrodynamic Dust Shield (EDS) for Firefly Aerospace’s Blue Ghost Mission 1

As part of the NASA Commercial Lunar Payload Services (CLPS) program, the EDS payload is manifested as part of Firefly Aerospace’s Blue Ghost Mission 1. Dust will adversely affect the operation of most mechanical systems required by lunar missions. The EDS payload will demonstrate active lunar dust removal from glass and thermal radiator surfaces.

Alexis Hongamen↗

Density functional based methods for light harvesting molecules

The goal of the proposal was to computationally study the photoinduced charge transfer excited states of organic molecules. The systems of interest are the large organic supramolecules that have potential for photovoltaic applications. The simulation of the charge transfer excited states in large supramolecular assemblies require quantum mechanical methods that can be applied to systems with hundreds of atoms. Through this project we have implemented a perturbative delta-self-consistent field method that can easily describe the charge transfer excited states with regular density functionals without range separation. The cost of the calculations of an excited state is similar to that of the ground state. The method also allows for calculation of the energy gradients of the excited state. The developed method was applied to study a number of different supramolecular systems containing hundreds of atoms with excellent agreement with experiment. The absorption characteristics and the influence of density functional approximations were also examined. These led to several studies on the variety of organic electron donor and acceptor molecules. Apart from these developments through this project we also improved the code capabilities by implementing new meta-GGA functionals. This was a major step since the code is purely density functional and earlier the functional capabilities were limited only to generalized gradient approximations. A total of 23 peer-reviewed publications in top chemical physics journals resulted from this grant.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Compensating for Amplifier Non-Linearity in a SEL Controller

The Self-Excited Loop (SEL) architecture, used in some continuous-wave (CW) superconducting linacs, relies on a positive feedback mechanism that requires carefully defined operating limits to ensure stable operation. These limits are typically derived from amplifier calibration, which characterizes the relationship between forward power and DAC drive. However, amplifier non-linearity often prevents a simple linear fit of this characteristic, introducing errors that can compromise stability. To address this, we present a modified calibration procedure that incorporates amplifier non-linearity into the SEL framework. The approach is validated with test data from a 32 kW solid-state amplifier (SSA) and a cavity emulator developed for the Fermilab PIP-II linac.

Raman, S. [Fermilab] (ORCID:0009000735937206)↗

Influence of Shear Strength Assumptions on BISON Debonding Simulations

Accurately predicting the thermomechanical response of buffer–IPyC debonding in TRISO fuel particles requires reliable mechanical property inputs for each coating layer, particularly the normal and shear strengths that influence interlayer delamination and stress concentrations. Micro tensile testing of AGR-2 fuel particles provided experimentally measured normal strengths for the buffer, IPyC, and buffer–IPyC interface; however, shear strength was not measured. As a result, BISON simulations of interface debonding must rely on assumed shear strength values, typically estimated as 20–40% of the measured ultimate tensile strength. This study evaluates how these assumed shear strength values influence cohesive zone model (CZM) predictions of buffer–IPyC separation in AGR 2 TRISO particles. Using micro tensile data from three AGR 2 compacts (2 1 3, 5 1 3, and 6 3 3), BISON simulations were performed with multiple shear strength assumptions to quantify their effect on radial and tangential stress evolution, debonding, and gap propagation. The results show that shear strength is a high sensitivity parameter: increasing the assumed shear strength significantly alters the stress distribution at the buffer–IPyC junction, shifts the predicted debonding location, and changes the extent of partial gap formation. While normal strength controls the initiation of interface separation, shear strength strongly influences the mode mixity of the failure process and the resulting stress concentrations transmitted to the IPyC and SiC layers. These findings highlight a critical gap in current TRISO mechanical characterization. Without experimentally measured shear strength, BISON simulations must rely on approximations that introduce uncertainty into predictions of coating layer integrity and fission product barrier performance. Future fuel qualification campaigns should therefore consider measurement of shear strength at the interlayer interfaces to reduce model uncertainty and improve the fidelity of TRISO fuel performance simulations.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

ECAR-6580 Rev 0 ASME Section III, Division 5 Analysis of the MARVEL PCS and GVS Top Corner

The purpose of this Engineering Calculations and Analysis Report (ECAR) is to document the structural evaluation for part of the Microreactor Applications Research Validation and Evaluation (MARVEL) Primary Coolant System (PCS) and Guard Vessel System (GVS). For the PCS this relates specifically to the Distribution Plenum (DP), The Intermediate Heat Exchanger (IHX), and the Upper Downcomer (UD). For the GVS, this will include only the top corner that is machined into the DP Top Plate. These components will be evaluated using the 2021 version of ASME Section III, Division 5 [1] which is a design code that governs the construction of vessels, storage tanks, piping, pumps, valves, supports, core support structures and nonmetallic core components for use in high temperature reactor systems and their supporting systems. Materials at high temperature are subject to creep and fatigue mechanisms that require additional analyses that aren’t covered in ASME Section III, Division 1 rules. Division 5 contains two approaches: elastic or inelastic, however, additional Code Cases specific to Division 5, allow for an Elastic-Perfectly Plastic (EPP) approach. The components analyzed in this ECAR will use a combination of the elastic and EPP approach. Only Design and Service Levels A and B are evaluated in this ECAR. Service Level D evaluations for the entire PCS are documented in ECAR-6564, “MARVEL Project Primary Coolant System Pressure Vessel Stress Documentation” [2] and for the entire GVS are documented in ECAR-6574, “MARVEL Guard Vessel System FEA and ASME Analysis” [3]. The Design and Service Level A and B analyses for the PCS Downcomer piping and Core Barrel are documented in ANL-24/36, "Engineering Calculations and Analysis of the Core Barrel and Downcomer Piping in the MARVEL PCS” [4], and the GVS (except for the top corner) is in ECAR-6574, “MARVEL Guard Vessel System FEA and ASME Analysis.” See Section 2.0 for more detail on the analysis boundaries.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

Viking Lander antenna deployment mechanism

One of the mechanisms that is included in the configuration of the Viking Mars Lander is an antenna dish deployment mechanism which utilizes a mechanical escapement device for controlling deployment. The criteria require that the mechanism be capable of deploying the antenna under a wide range of aiding and retarding winds after landing on Mars but must limit the acceleration during deployment and latching of the antenna. Adding to the complexity of the design are the requirements for very accurate alignment after erection and heat sterilization prior to launch. This mechanism has been designed, fabricated and successfully tested to qualification test levels for usage on the Viking mission.

Hopper, K. H.↗

NADH-bound AIF activates the mitochondrial CHCHD4/MIA40 chaperone by a substrate-mimicry mechanism

Mitochondrial metabolism requires the chaperoned import of disulfide-stabilized proteins via CHCHD4/MIA40 and its enigmatic interaction with oxidoreductase Apoptosis-inducing factor (AIF). By crystallizing human CHCHD4’s AIF-interaction domain with an activated AIF dimer, we uncover how NADH allosterically configures AIF to anchor CHCHD4’s β-hairpin and histidine-helix motifs to the inner mitochondrial membrane. The structure further reveals a similarity between the AIF-interaction domain and recognition sequences of CHCHD4 substrates. NMR and X-ray scattering (SAXS) solution measurements, mutational analyses, and biochemistry show that the substrate-mimicking AIF-interaction domain shields CHCHD4’s redox-sensitive active site. Disrupting this shield critically activates CHCHD4 substrate affinity and chaperone activity. Regulatory-domain sequestration by NADH-activated AIF directly stimulates chaperone binding and folding, revealing how AIF mediates CHCHD4 mitochondrial import. These results establish AIF as an integral component of the metazoan disulfide relay and point to NADH-activated dimeric AIF as an organizational import center for CHCHD4 and its substrates. Importantly, AIF regulation of CHCHD4 directly links AIF’s cellular NAD(H) sensing to CHCHD4 chaperone function, suggesting a mechanism to balance tissue-specific oxidative phosphorylation (OXPHOS) capacity with NADH availability.

Brosey, Chris A↗

Requirements to Design to Code: Towards a Fully Formal Approach to Automatic Code Generation

A general-purpose method to mechanically transform system requirements into a provably equivalent model has yet to appear. Such a method represents a necessary step toward high-dependability system engineering for numerous possible application domains, including sensor networks and autonomous systems. Currently available tools and methods that start with a formal model of a system and mechanically produce a provably equivalent implementation are valuable but not sufficient. The gap that current tools and methods leave unfilled is that their formal models cannot be proven to be equivalent to the system requirements as originated by the customer. For the classes of systems whose behavior can be described as a finite (but significant) set of scenarios, we offer a method for mechanically transforming requirements (expressed in restricted natural language, or in other appropriate graphical notations) into a provably equivalent formal model that can be used as the basis for code generation and other transformations.

Hinchey, Michael G.↗

Requirements to Design to Code: Towards a Fully Formal Approach to Automatic Code Generation

A general-purpose method to mechanically transform system requirements into a provably equivalent model has yet to appear. Such a method represents a necessary step toward high-dependability system engineering for numerous possible application domains, including distributed software systems, sensor networks, robot operation, complex scripts for spacecraft integration and testing, and autonomous systems. Currently available tools and methods that start with a formal model of a system and mechanically produce a provably equivalent implementation are valuable but not sufficient. The gap that current tools and methods leave unfilled is that their formal models cannot be proven to be equivalent to the system requirements as originated by the customer. For the classes of systems whose behavior can be described as a finite (but significant) set of scenarios, we offer a method for mechanically transforming requirements (expressed in restricted natural language, or in other appropriate graphical notations) into a provably equivalent formal model that can be used as the basis for code generation and other transformations.

Hinchey, Michael G.↗

Requirements to Design to Code: Towards a Fully Formal Approach to Automatic Code Generation

A general-purpose method to mechanically transform system requirements into a provably equivalent model has yet to appear. Such a method represents a necessary step toward high-dependability system engineering for numerous possible application domains, including distributed software systems, sensor networks, robot operation, complex scripts for spacecraft integration and testing, and autonomous systems. Currently available tools and methods that start with a formal model of a: system and mechanically produce a provably equivalent implementation are valuable but not sufficient. The "gap" that current tools and methods leave unfilled is that their formal models cannot be proven to be equivalent to the system requirements as originated by the customer. For the ciasses of systems whose behavior can be described as a finite (but significant) set of scenarios, we offer a method for mechanically transforming requirements (expressed in restricted natural language, or in other appropriate graphical notations) into a provably equivalent formal model that can be used as the basis for code generation and other transformations.

Hinchey, Michael G.↗