Search NASA⌕ Search

SEARCH · Search NASA

Results for “checking”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 415 records · Page 23

Using LDPC Code Constraints to Aid Recovery of Symbol Timing

A method of utilizing information available in the constraints imposed by a low-density parity-check (LDPC) code has been proposed as a means of aiding the recovery of symbol timing in the reception of a binary-phase-shift-keying (BPSK) signal representing such a code in the presence of noise, timing error, and/or Doppler shift between the transmitter and the receiver. This method and the receiver architecture in which it would be implemented belong to a class of timing-recovery methods and corresponding receiver architectures characterized as pilotless in that they do not require transmission and reception of pilot signals. Acquisition and tracking of a signal of the type described above have traditionally been performed upstream of, and independently of, decoding and have typically involved utilization of a phase-locked loop (PLL). However, the LDPC decoding process, which is iterative, provides information that can be fed back to the timing-recovery receiver circuits to improve performance significantly over that attainable in the absence of such feedback. Prior methods of coupling LDPC decoding with timing recovery had focused on the use of output code words produced as the iterations progress. In contrast, in the present method, one exploits the information available from the metrics computed for the constraint nodes of an LDPC code during the decoding process. In addition, the method involves the use of a waveform model that captures, better than do the waveform models of the prior methods, distortions introduced by receiver timing errors and transmitter/ receiver motions. An LDPC code is commonly represented by use of a bipartite graph containing two sets of nodes. In the graph corresponding to an (n,k) code, the n variable nodes correspond to the code word symbols and the n-k constraint nodes represent the constraints that the code places on the variable nodes in order for them to form a valid code word. The decoding procedure involves iterative computation of values associated with these nodes. A constraint node represents a parity-check equation using a set of variable nodes as inputs. A valid decoded code word is obtained if all parity-check equations are satisfied. After each iteration, the metrics associated with each constraint node can be evaluated to determine the status of the associated parity check. Heretofore, normally, these metrics would be utilized only within the LDPC decoding process to assess whether or not variable nodes had converged to a codeword. In the present method, it is recognized that these metrics can be used to determine accuracy of the timing estimates used in acquiring the sampled data that constitute the input to the LDPC decoder. In fact, the number of constraints that are satisfied exhibits a peak near the optimal timing estimate. Coarse timing estimation (or first-stage estimation as described below) is found via a parametric search for this peak. The present method calls for a two-stage receiver architecture illustrated in the figure. The first stage would correct large time delays and frequency offsets; the second stage would track random walks and correct residual time and frequency offsets. In the first stage, constraint-node feedback from the LDPC decoder would be employed in a search algorithm in which the searches would be performed in successively narrower windows to find the correct time delay and/or frequency offset. The second stage would include a conventional first-order PLL with a decision-aided timing-error detector that would utilize, as its decision aid, decoded symbols from the LDPC decoder. The method has been tested by means of computational simulations in cases involving various timing and frequency errors. The results of the simulations ined in the ideal case of perfect timing in the receiver.

Jones, Christopher↗

Automatic Testcase Generation for Flight Software

The TacSat3 project is applying Integrated Systems Health Management (ISHM) technologies to an Air Force spacecraft for operational evaluation in space. The experiment will demonstrate the effectiveness and cost of ISHM and vehicle systems management (VSM) technologies through onboard operation for extended periods. We present two approaches to automatic testcase generation for ISHM: 1) A blackbox approach that views the system as a blackbox, and uses a grammar-based specification of the system's inputs to automatically generate *all* inputs that satisfy the specifications (up to prespecified limits); these inputs are then used to exercise the system. 2) A whitebox approach that performs analysis and testcase generation directly on a representation of the internal behaviour of the system under test. The enabling technologies for both these approaches are model checking and symbolic execution, as implemented in the Ames' Java PathFinder (JPF) tool suite. Model checking is an automated technique for software verification. Unlike simulation and testing which check only some of the system executions and therefore may miss errors, model checking exhaustively explores all possible executions. Symbolic execution evaluates programs with symbolic rather than concrete values and represents variable values as symbolic expressions. We are applying the blackbox approach to generating input scripts for the Spacecraft Command Language (SCL) from Interface and Control Systems. SCL is an embedded interpreter for controlling spacecraft systems. TacSat3 will be using SCL as the controller for its ISHM systems. We translated the SCL grammar into a program that outputs scripts conforming to the grammars. Running JPF on this program generates all legal input scripts up to a prespecified size. Script generation can also be targeted to specific parts of the grammar of interest to the developers. These scripts are then fed to the SCL Executive. ICS's in-house coverage tools will be run to measure code coverage. Because the scripts exercise all parts of the grammar, we expect them to provide high code coverage. This blackbox approach is suitable for systems for which we do not have access to the source code. We are applying whitebox test generation to the Spacecraft Health INference Engine (SHINE) that is part of the ISHM system. In TacSat3, SHINE will execute an on-board knowledge base for fault detection and diagnosis. SHINE converts its knowledge base into optimized C code which runs onboard TacSat3. SHINE can translate its rules into an intermediate representation (Java) suitable for analysis with JPF. JPF will analyze SHINE's Java output using symbolic execution, producing testcases that can provide either complete or directed coverage of the code. Automatically generated test suites can provide full code coverage and be quickly regenerated when code changes. Because our tools analyze executable code, they fully cover the delivered code, not just models of the code. This approach also provides a way to generate tests that exercise specific sections of code under specific preconditions. This capability gives us more focused testing of specific sections of code.

Bushnell, David Henry↗

Constructing LDPC Codes from Loop-Free Encoding Modules

A method of constructing certain low-density parity-check (LDPC) codes by use of relatively simple loop-free coding modules has been developed. The subclasses of LDPC codes to which the method applies includes accumulate-repeat-accumulate (ARA) codes, accumulate-repeat-check-accumulate codes, and the codes described in Accumulate-Repeat-Accumulate-Accumulate Codes (NPO-41305), NASA Tech Briefs, Vol. 31, No. 9 (September 2007), page 90. All of the affected codes can be characterized as serial/parallel (hybrid) concatenations of such relatively simple modules as accumulators, repetition codes, differentiators, and punctured single-parity check codes. These are error-correcting codes suitable for use in a variety of wireless data-communication systems that include noisy channels. These codes can also be characterized as hybrid turbolike codes that have projected graph or protograph representations (for example see figure); these characteristics make it possible to design high-speed iterative decoders that utilize belief-propagation algorithms. The present method comprises two related submethods for constructing LDPC codes from simple loop-free modules with circulant permutations. The first submethod is an iterative encoding method based on the erasure-decoding algorithm. The computations required by this method are well organized because they involve a parity-check matrix having a block-circulant structure. The second submethod involves the use of block-circulant generator matrices. The encoders of this method are very similar to those of recursive convolutional codes. Some encoders according to this second submethod have been implemented in a small field-programmable gate array that operates at a speed of 100 megasymbols per second. By use of density evolution (a computational- simulation technique for analyzing performances of LDPC codes), it has been shown through some examples that as the block size goes to infinity, low iterative decoding thresholds close to channel capacity limits can be achieved for the codes of the type in question having low maximum variable node degrees. The decoding thresholds in these examples are lower than those of the best-known unstructured irregular LDPC codes constrained to have the same maximum node degrees. Furthermore, the present method enables the construction of codes of any desired rate with thresholds that stay uniformly close to their respective channel capacity thresholds.

Divsalar, Dariush↗

Model Checker for Java Programs

Java Pathfinder (JPF) is a verification and testing environment for Java that integrates model checking, program analysis, and testing. JPF consists of a custom-made Java Virtual Machine (JVM) that interprets bytecode, combined with a search interface to allow the complete behavior of a Java program to be analyzed, including interleavings of concurrent programs. JPF is implemented in Java, and its architecture is highly modular to support rapid prototyping of new features. JPF is an explicit-state model checker, because it enumerates all visited states and, therefore, suffers from the state-explosion problem inherent in analyzing large programs. It is suited to analyzing programs less than 10kLOC, but has been successfully applied to finding errors in concurrent programs up to 100kLOC. When an error is found, a trace from the initial state to the error is produced to guide the debugging. JPF works at the bytecode level, meaning that all of Java can be model-checked. By default, the software checks for all runtime errors (uncaught exceptions), assertions violations (supports Java s assert), and deadlocks. JPF uses garbage collection and symmetry reductions of the heap during model checking to reduce state-explosion, as well as dynamic partial order reductions to lower the number of interleavings analyzed. JPF is capable of symbolic execution of Java programs, including symbolic execution of complex data such as linked lists and trees. JPF is extensible as it allows for the creation of listeners that can subscribe to events during searches. The creation of dedicated code to be executed in place of regular classes is supported and allows users to easily handle native calls and to improve the efficiency of the analysis.

Visser, Willem↗

Decision Engines for Software Analysis Using Satisfiability Modulo Theories Solvers

The area of software analysis, testing and verification is now undergoing a revolution thanks to the use of automated and scalable support for logical methods. A well-recognized premise is that at the core of software analysis engines is invariably a component using logical formulas for describing states and transformations between system states. The process of using this information for discovering and checking program properties (including such important properties as safety and security) amounts to automatic theorem proving. In particular, theorem provers that directly support common software constructs offer a compelling basis. Such provers are commonly called satisfiability modulo theories (SMT) solvers. Z3 is a state-of-the-art SMT solver. It is developed at Microsoft Research. It can be used to check the satisfiability of logical formulas over one or more theories such as arithmetic, bit-vectors, lists, records and arrays. The talk describes some of the technology behind modern SMT solvers, including the solver Z3. Z3 is currently mainly targeted at solving problems that arise in software analysis and verification. It has been applied to various contexts, such as systems for dynamic symbolic simulation (Pex, SAGE, Vigilante), for program verification and extended static checking (Spec#/Boggie, VCC, HAVOC), for software model checking (Yogi, SLAM), model-based design (FORMULA), security protocol code (F7), program run-time analysis and invariant generation (VS3). We will describe how it integrates support for a variety of theories that arise naturally in the context of the applications. There are several new promising avenues and the talk will touch on some of these and the challenges related to SMT solvers. Proceedings

Bjorner, Nikolaj↗

Hexagonal Pixels and Indexing Scheme for Binary Images

A scheme for resampling binaryimage data from a rectangular grid to a regular hexagonal grid and an associated tree-structured pixel-indexing scheme keyed to the level of resolution have been devised. This scheme could be utilized in conjunction with appropriate image-data-processing algorithms to enable automated retrieval and/or recognition of images. For some purposes, this scheme is superior to a prior scheme that relies on rectangular pixels: one example of such a purpose is recognition of fingerprints, which can be approximated more closely by use of line segments along hexagonal axes than by line segments along rectangular axes. This scheme could also be combined with algorithms for query-image-based retrieval of images via the Internet. A binary image on a rectangular grid is generated by raster scanning or by sampling on a stationary grid of rectangular pixels. In either case, each pixel (each cell in the rectangular grid) is denoted as either bright or dark, depending on whether the light level in the pixel is above or below a prescribed threshold. The binary data on such an image are stored in a matrix form that lends itself readily to searches of line segments aligned with either or both of the perpendicular coordinate axes. The first step in resampling onto a regular hexagonal grid is to make the resolution of the hexagonal grid fine enough to capture all the binaryimage detail from the rectangular grid. In practice, this amounts to choosing a hexagonal-cell width equal to or less than a third of the rectangular- cell width. Once the data have been resampled onto the hexagonal grid, the image can readily be checked for line segments aligned with the hexagonal coordinate axes, which typically lie at angles of 30deg, 90deg, and 150deg with respect to say, the horizontal rectangular coordinate axis. Optionally, one can then rotate the rectangular image by 90deg, then again sample onto the hexagonal grid and check for line segments at angles of 0deg, 60deg, and 120deg to the original horizontal coordinate axis. The net result is that one has checked for line segments at angular intervals of 30deg. For even finer angular resolution, one could, for example, then rotate the rectangular-grid image +/-45deg before sampling to perform checking for line segments at angular intervals of 15deg.

Johnson, Gordon G.↗

Symbolic Analysis of Concurrent Programs with Polymorphism

The current trend of multi-core and multi-processor computing is causing a paradigm shift from inherently sequential to highly concurrent and parallel applications. Certain thread interleavings, data input values, or combinations of both often cause errors in the system. Systematic verification techniques such as explicit state model checking and symbolic execution are extensively used to detect errors in such systems [7, 9]. Explicit state model checking enumerates possible thread schedules and input data values of a program in order to check for errors [3, 9]. To partially mitigate the state space explosion from data input values, symbolic execution techniques substitute data input values with symbolic values [5, 7, 6]. Explicit state model checking and symbolic execution techniques used in conjunction with exhaustive search techniques such as depth-first search are unable to detect errors in medium to large-sized concurrent programs because the number of behaviors caused by data and thread non-determinism is extremely large. We present an overview of abstraction-guided symbolic execution for concurrent programs that detects errors manifested by a combination of thread schedules and data values [8]. The technique generates a set of key program locations relevant in testing the reachability of the target locations. The symbolic execution is then guided along these locations in an attempt to generate a feasible execution path to the error state. This allows the execution to focus in parts of the behavior space more likely to contain an error.

Rungta, Neha Shyam↗

CryoCart Restoration and Vacuum Pipe Construction

Propulsion systems that utilize hypergolic propellants have been used to power space vehicles since the beginning of the space program. Liquid methane and oxygen propulsion systems have emerged as an alternative and have proven to be more environmentally friendly. The incorporation of liquid methane/liquid oxygen (LOX) into the propulsion system has demonstrated an increase in engine performance, as well as a reduction in the volume, size and complexity of the system. Consequently, reducing the total mass of the vehicle which is a crucial aspect that is considered when planning space missions to both the Moon and Mars [1]. Project Morpheus has made significant advancements in liquid oxygen/liquid methane propulsion system technologies by incorporating a LOX/methane propulsion system to a vertical test bed. The vehicle consisted of a 5,000 lb main engine and four 20 lb remote control system (RCS) engines that utilize liquid methane/LOX as its propellant [1]. The vehicle completed successful flight testing at Kennedy Space Center in 2014 which marked the completion of the Morpheus project. Subsequent projects utilizing Morpheus' vertical test bed have been developed to make further advancements. One of the subsequent projects consisted of the addition of a smaller 2,000 lb main engine and a cold helium heat exchanger which would make it possible for a pressurant tank systems to be send to Mars or the Moon by significantly decreasing the overall mass and volume of the pressurant tank. The hot fire tests of the integrated system with the smaller main engine and cold helium heat exchanger were successful at sea level, but further studies are being conducted to better understand how the vertical test bed will behave under thermal-vacuum conditions. For this reason, the integrated vehicle will be taken to Plum Brook to be tested in a chamber capable of simulating these conditions. To ensure that the vehicle will function properly under vacuum conditions, testing will be first completed at the component level. During this process, the igniter of the main engine and the RCS thrusters will be tested under a vacuum. To complete the testing of the components, the test setup first needed to be finalized. The CryoCart is being used to feed the propellants to the test article. The CryoCart is a movable test set-up that was developed in 2009 to provide a mobile platform for testing oxygen/methane systems with hot-fire capability up to 100 lbf. The CryoCart consists of three different systems: Oxygen, Methane, and liquid Nitrogen. The Oxygen and Methane systems are placed into two different carts while the liquid nitrogen system is mainly located in the methane cart. Over the years, the CryoCart has been utilized for different projects and has undergone deterioration. For this reason, a new phase has been developed to rebuild it to working conditions once again. During my internship, I was aiding in the construction and restoration of the CryoCart. In the initial stages of the process, I updated the fluid and electrical schematics for the oxygen, methane, and test article systems. The original CryoCart consisted of an electrical panel that utilized electromechanical relays and a terminal to drive the igniter power and signal, as well as the main fuel and oxygen valves. This electrical panel connected to the CryoCart through various wire harnesses that could be found exiting from the CryoCart. First, it was determined how these harnesses connected to the electromechanical relays so that they worked correctly. Once the electrical system was understood, an alternative for the electromechanical relays and the Molex connectors used throughout the system was sought since these components can often prove to be unreliable. Solid State relays and MIL connectors were purchased to serve as replacements. Upon arrival of the parts, crimping and wiring was completed to install the new solid state relays and MIL connectors. During the replacement of the relays and connectors, system checks of the electrical system were ran to ensure that the system was working correctly. While completing system checks, the pressure transducers that were not functioning properly were also replaced and any issue with the wiring or signal was addressed. Once the electrical components were replaced, the restoration of the fluid system began. Parts of the tubing in the CryoCart had to be rebuild and often consisted of sizing, cutting, bending, filing, and sanding the tubing to prepare it to be flared. Many components had to be proof-tested to bring their certifications up to date, and several components had to be replaced. Various flex hoses, valves, and fittings were send to the Clean Lab because they were new, dirty, or had gone through proof-testing. Once they arrived from the cleaning lab they had to be put back to the system and leak checks and functional tests were conducted. In the Nitrogen system, the copper tubing located in the Oxygen cart was rebuild and Aerogel insulation was added to this section. A new gaseous nitrogen system was added to the CryoCart to purge the vacuum tube which will serve as the test chamber. Once the CryoCart was completed, construction of parts of the vacuum tube began. A flange was manufactured with welded fittings to hold the line of the vacuum pump as well as some extra fittings which will serve as extra inlets used to introduce fluid lines to the vacuum tube. Stress analysis was ran in this flange to ensure that it would not fail under vacuum conditions. The fluid lines leading from the air side of the vacuum to the test article were also constructed and added to the mount that had already been manufactured. Three different sets of tubing were constructed to accommodate the seven different RCS thruster and the main engine igniter that are going to be tested. Full electrical system checks were completed to ensure that all the wire harnesses and valves were functioning. Upon the completion of the CryoCart and the vacuum tube, hot fire testing for the RCS thrusters and the main engine igniter are going to begin. During this time any issues encountered with the engines or igniter will be addressed to ensure that the components function under vacuum conditions. After successful completion of testing, the vertical test bed, Morpheus, will be rebuilt and prepared to be sent to Plum Brook. In Plum Brook, the vehicle will be tested in the thermal-vacuum chamber to demonstrate that integrated lox-methane propulsion system operation in space-like conditions. This internship has allowed me the opportunity to gain valuable hands on experience and to develop skills that will aid in my education as well as in the workforce, while at the same time helping me determine that I would like to further pursue a career in propulsion engineering.

Chaidez, Mariana↗

Calibration of the 11x11-Foot Transonic Wind Tunnel at NASA Ames Research Center

A static pipe calibration characterizing the streamwise static pressure distribution was conducted at the 11-By 11-Foot Transonic Wind Tunnel at NASA Ames Research Center. This data is used to determine the local Mach number within the test section and evaluate buoyancy corrections to axial force measurements. The 60 foot long, 6 inch diameter pipe contained 444 static pressure taps spanning the test section and nozzle regions of the tunnel. The forward end of the pipe extends into the settling chamber and is held by four cables mounting to the tunnel shell, and the aft end is fixed on the institutional model support system. A hydraulic cylinder at the aft end of the pipe provides tension on the system to reduce vibration and to keep the pipe as level as possible throughout the test section. The previous calibration was improved upon by using pressure scanners with greater accuracy, ensuring a uniform pressure tube length for each tap to control pneumatic lag, optically tracking any streamwise movement of the pipe, and more tightly controlling the tunnel condition set points. Typically this calibration is conducted with the pipe on tunnel centerline and 33 inches below centerline for sting-mounted models and semi-span (i.e. floor-mounted) models respectively, however schedule demands permitted only the centerline calibration. The semi-span calibration is planned to be completed in the summer of 2020. Immediately following the static pipe calibration, a shorter, 9 foot static pipe used as the calibration check standard was installed to obtain its first post-calibration pressure dataset. This short static pipe consists of 148 static pressure taps distributed along the pipe section and one total pressure tap at the end of an ogive nose. Performing the calibration test and its check standard back-to-back allows this dataset to establish a reliable baseline for future calibration check standard testing. Over time the use of a calibration check standard offers the ability to assess the stability of the calibration through statistical process control in an efficient and costeffective manner, thereby potentially increasing the time required between full tunnel calibrations.

White, Bethany↗

Tests of General Relativity With the Binary Black Hole Signals from the LIGO-Virgo Catalog GWTC-1

The detection of gravitational waves by Advanced LIGO and Advanced Virgo provides an opportunity to test general relativity in a regime that is inaccessible to traditional astronomical observations and laboratory tests. We present four tests of the consistency of the data with binary black hole gravitational waveforms predicted by general relativity. One test subtracts the best-fit waveform from the data and checks the consistency of the residual with detector noise. The second test checks the consistency of the low- and high-frequency parts of the observed signals. The third test checks that phenomenological deviations introduced in the waveform model (including in the post-Newtonian coefficients) are consistent with 0. The fourth test constrains modifications to the propagation of gravitational waves due to a modified dispersion relation, including that from a massive graviton. We present results both for individual events and also results obtained by combining together particularly strong events from the first and second observing runs of Advanced LIGO and Advanced Virgo, as collected in the catalog GWTC-1. We do not find any inconsistency of the data with the predictions of general relativity and improve our previously presented combined constraints by factors of 1.1 to 2.5. In particular, we bound the mass of the graviton to be 𝑚𝑔≤4.7×10 −23 eV/𝑐 2 (90% credible level), an improvement of a factor of 1.6 over our previously presented results. Additionally, we check that the four gravitational-wave events published for the first time in GWTC-1 do not lead to stronger constraints on alternative polarizations than those published previously.

B P Abbott↗

Evaluation of the Accuracy of the Load Prediction Equations of Low-Load Balance Calibration Data

Accuracy and reliability of the load prediction equations of a low-load calibration data set of a force balance were investigated. First, independent load prediction equations were generated from the data of a full-load and low-load machine calibration. Then, the low- load data set was processed as a set of precision check loads for the load prediction equations that were obtained from the full-load and low-load calibrations. Finally, the load prediction equations of the two calibrations were applied to four manual check load data sets that were recorded between 2009 and 2022. The residuals of the predicted calibration and check loads were compared in all cases. No systematic improvement of the load prediction accuracy was observed when the load prediction equations of the low-load calibration were applied to the check load data sets. Therefore, it is recommended to apply a full-load calibration to a six-component balance even if the balance is not used across its entire design envelope. This approach has the advantage that the resulting load prediction equations are less likely to be applied outside of the calibration load ranges. In addition, it is expected that the numerical estimates of the gage sensitivities are more reliable assuming that the uncertainties of the applied loads and measured outputs of the calibration data are more or less constant across the load range of the balance.

strain-gage balance↗

Evaluation of the Accuracy of the Load Prediction Equations of Low-Load Balance Calibration Data

Accuracy and reliability of the load prediction equations of a low-load calibration data set of a force balance were investigated. First, independent load prediction equations were generated from the data of a full-load and low-load machine calibration. Then, the low-load data set was processed as a set of precision check loads for the load prediction equations that were obtained from the full-load and low-load calibrations. Finally, the load prediction equations of the two calibrations were applied to four manual check load data sets that were recorded between 2009 and 2022. The residuals of the predicted calibration and check loads were compared in all cases. No systematic improvement of the load prediction accuracy was observed when the load prediction equations of the low-load calibration were applied to the check load data sets. Therefore, it is recommended to apply a full-load calibration to a six-component balance even if the balance is not used across its entire design envelope. This approach has the advantage that the resulting load prediction equations are less likely to be applied outside of the calibration load ranges. In addition, it is expected that the numerical estimates of the bridge sensitivities are more reliable assuming that the uncertainties of the applied loads and measured outputs of the calibration data are more or less constant across the load range of the balance.

strain-gage balance↗

Construction of Protograph LDPC Codes with Linear Minimum Distance

A construction method for protograph-based LDPC codes that simultaneously achieve low iterative decoding threshold and linear minimum distance is proposed. We start with a high-rate protograph LDPC code with variable node degrees of at least 3. Lower rate codes are obtained by splitting check nodes and connecting them by degree-2 nodes. This guarantees the linear minimum distance property for the lower-rate codes. Excluding checks connected to degree-1 nodes, we show that the number of degree-2 nodes should be at most one less than the number of checks for the protograph LDPC code to have linear minimum distance. Iterative decoding thresholds are obtained by using the reciprocal channel approximation. Thresholds are lowered by using either precoding or at least one very high-degree node in the base protograph. A family of high- to low-rate codes with minimum distance linearly increasing in block size and with capacity-approaching performance thresholds is presented. FPGA simulation results for a few example codes show that the proposed codes perform as predicted.

Low-density parity-check (LDPC)↗

Are We There Yet? Determining the Adequacy of Formalized Requirements and Test Suites

Structural coverage metrics have traditionally categorized code as either covered or uncovered. Recent work presents a stronger notion of coverage, checked coverage, which counts only statements whose execution contributes to an outcome checked by an oracle. While this notion of coverage addresses the adequacy of the oracle, for Model-Based Development of safety critical systems, it is still not enough; we are also interested in how much of the oracle is covered, and whether the values of program variables are masked when the oracle is evaluated. Such information can help system engineers identify missing requirements as well as missing test cases. In this work, we add to the idea of checked coverage an analysis of requirements coverage to help provide insight to engineers as to whether the requirements or the test suite need to be improved. We implement our approach based on a dynamic backward slicing technique and evaluate it on several systems developed in Simulink. The results of our preliminary study show that even for systems with comprehensive test suites and good sets of requirements, our approach can identify cases where more tests or more requirements are needed to improve coverage numbers.

Dynamic Slicing↗

Cloud based tool for analysis of chemical kinetic mechanisms

The size and complexity of chemical kinetic models used to simulate combustion of hydrocarbon fuels continue to increase with our improved understanding of the underlying physical mechanisms, along with the improved ability to utilize such models as the result of increased computational power and efficiency. As mechanisms grow beyond thousands of species and tens of thousands of reactions, it becomes increasingly difficult to manually check for errors and physical inconsistencies. In this work, we present several automated methods to check for such issues in the specification of chemical reaction models. First, we demonstrate how discontinuities in thermodynamic data can cause simulation difficulties manifested as long wall-clock times and convergence failures. To correct this type of problem, we describe an automated method for refitting thermodynamic parameters. We also outline several methods to check the timescales of reaction rate coefficients to ensure physical consistency. All the methods are made available through a web-based tool (https://combustiontools.llnl.gov) intended to aid mechanism developers and users to improve the accuracy and performance of fuel models used by the combustion community.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

What, why and when to go virtual: An international analysis of early adopters of virtual building energy codes inspections

To meet greenhouse gas reduction targets, several countries are pursuing more ambitious policies in their buildings and construction sectors, such as introducing zero net energy/carbon building codes. Countries often report not having enough qualified staff for performing building energy code inspections and many are exploring faster, easier, and more reliable methods to check the compliance of buildings with their codes. Building inspections are a critical element for ensuring code compliance and they have traditionally been performed in person. However, in-person inspections can be labor and travel intensive, costly, and prone to human error. In this paper, the authors explore how virtual inspections, particularly in light of the recent COVID-19 pandemic, have impacted processes for building code compliance checks in jurisdictions and communities around the world. Here, the authors collected data on four key parameters (time and financial savings, scope of inspections, changing practices and technological innovation, and benefits to consumers) from six jurisdictions and communities in five countries (Australia, Canada, Singapore, United Arab Emirates, and the United States) to analyze the impacts of virtual inspections on code compliance checks. The analysis found the greatest value from virtual inspections in geographically dispersed regions and for cities experiencing rapid building construction. The study also explored emerging technologies that are being piloted for virtual inspections. Although many of these technologies hold promise, more resources and capacity are needed to make them viable for use in building energy code inspections.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Dynamical logical qubits in the Bacon-Shor code

The Bacon-Shor code is a quantum error correcting subsystem code composed of weight-2 check operators that admits a single logical qubit, and has distance 𝑑 on a 𝑑×𝑑 square lattice. We show that when viewed as a Floquet code, by choosing an appropriate measurement schedule of the check operators, it can additionally host several dynamical logical qubits. Specifically, we identify a period-4 measurement schedule of the check operators that preserves logical information between the instantaneous stabilizer groups. Such a schedule not only measures the usual stabilizers of the Bacon-Shor code, but also measures and promotes gauge operators of the parent subsystem code to additional temporary stabilizers that protect the dynamical logical qubits against errors. We show that the code distance of these Floquet-Bacon-Shor codes scales as Θ⁢(𝑑/√𝑘) on an 𝑛=𝑑×𝑑 lattice with 𝑘 dynamical logical qubits, along with the logical qubit of the parent subsystem code. Unlike the usual Bacon-Shor code, the Floquet-Bacon-Shor code family introduced here can therefore saturate the subsystem bound 𝑘⁢𝑑=𝑂⁡(𝑛). Moreover, several errors are shown to be self-corrected purely by the measurement schedule itself. This work provides insights into the design space for dynamical codes and expands the known approaches for constructing Floquet codes.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

HELIUM LEAK TEST MODELING OF A SPENT NUCLEAR FUEL CANISTER

The U.S. Department of Energy (DOE) is considering the development of one or more federal consolidated interim storage facilities (CISFs) to be used to store commercial spent nuclear fuel (SNF) at locations in the U.S. One of the first technical challenges of a CISF is performing an inspection of SNF canisters upon their receipt to confirm they can be placed into the CISF’s licensed storage configuration. The canister receipt inspection is critical to CISF site operations. The test is conceived as being a helium (He) leak check, intended to confirm that the confinement boundary of a SNF canister is intact. SNF canisters are filled with He when they are sealed, so detection of a He leak indicates that a through-wall flaw has occurred in the canister confinement boundary. Other measurements are planned to occur upon canister receipt in addition to the He leak check such as krypton-85 measurements, which would indicate confinement breaches of one or more fuel rods in addition to a breach of the SNF canister. However, the He leak check has been identified as one of such high importance and has such significant technical challenges that a full-scale demonstration is needed to confirm the He leak test’s viability and to assist in planning relative to its operational requirements. A modeling methodology for simulating the He detection test was developed to help inform the test plan and the design of the test vessels. To develop the modeling methodology a detailed computational fluid dynamics (CFD) benchmark model was constructed to compare against leak rate test data from a transportation package for radioactive material. This report is focused on modeling efforts to simulate the benchmark leak test.

Suffield, Sarah R.↗