Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24

IOTA Pre-Bake Test Development

The IOTA (Integrable Optics Test Accelerator) Bakeout project is intended to improve the quality of the vacuum within the IOTA ring. Impurities consisting of hydrogen and oxygen that build within the beampipe are reduced through applying heat to the beampipe’s exterior. Two versions of the Bakeout project exist, one as a smaller scale test setup, and one five times larger located within the IOTA ring. During my internship, I worked together with a team to bring this project from an effectively dormant state to ready for testing, working together to create full documentation of the PLC (Programmable Logic Controller) programs, making multiple new hardware configurations of this test possible, as well as an additional safety system.

Seagrave, Kayla [DuPage Coll.; Fermilab]↗

Improving Traditional Registrational Trial End Points: Development and Application of a Desirability of Outcome Ranking End Point for Complicated Urinary Tract Infection Clinical Trials

Abstract Background Traditional end points used in registrational randomized, controlled trials (RCTs) often do not allow for complete interpretation of the full range of potential clinical outcomes. Desirability of outcome ranking (DOOR) is an approach to the design and analysis of clinical trials that incorporates benefits and risks of novel treatment strategies and provides a global assessment of patient experience. Methods Through a multidisciplinary committee of experts in infectious diseases, clinical trial design, drug regulation, and patient experience, we developed a DOOR end point for infectious disease syndromes and demonstrated how this could be applied to 3 registrational drug trials (ZEUS, APEKS-cUTI, and DORI-05) for complicated urinary tract infections (cUTIs). ZEUS compared fosfomycin to piperacillin/tazobactam, APEKS-cUTI compared cefiderocol to imipenem, and DORI-05 compared doripenem to levofloxacin. Using DOOR, we estimated the probability of a more desirable outcome with each investigational antibacterial drug. Results In each RCT, the DOOR distribution was similar and the probability that a patient in the investigational arm would have a more desirable outcome than a patient in the control arm had a 95% confidence interval containing 50%, indicating no significant difference between treatment arms. DOOR facilitated improved understanding of potential trade-offs between clinical efficacy and safety. Partial credit and subgroup analyses also highlight unique attributes of DOOR. Conclusions DOOR can effectively be used in registrational cUTI trials. The DOOR end point presented here can be adapted for other infectious disease syndromes and prospectively incorporated into future clinical trials.

Immunology↗

Reactivity-initiated accidents in two pressurized water reactor high burnup core designs

Here, this paper presents a safety analysis of two proposed core loadings for 24-month Pressurized Water Reactor (PWR) fuel cycles. This analysis focuses on reactivity-initiated accidents (RIAs) and evaluates core safety performance impacts of rod-averaged burnup limits up to 75 GWD/MTU and less than 7 % enriched UO 2 . The capabilities of Polaris, PARCS, and RELAP5-3D are leveraged to evaluate the core neutronic and thermal–hydraulic behavior for normal-operation, uncontrolled control rod withdrawal (CRW) transients, and control rod ejection (CRE) accidents. The two core designs are compared to identify features of realistic high burnup/extended enrichment core design approaches which have significant safety impact, identify experimental data needs for high-fidelity predictive modeling, and provide recommendations for future high burnup core designs. The first core design evaluated in this study was developed by Southern Nuclear Company and used an ZrB 2 Integral Fuel Burnable Absorber (IFBA) and B 4 C Wet-Annular Burnable Absorber (WABA)-based burnable poison strategy. The second core design assessed in this work used a Gd 2 O 3 -doped UO 2 burnable poison, similar to that used in boiling water reactors or French PWRs. Results indicate that fuel thermal limits are maintained for limiting CRW and hot full power (HFP) CRE transients. Cladding failure is predicted for the highest energy deposition rods in each core during limiting hot zero power (HZP) CRE accidents (where maximum radially averaged enthalpy exceeds 120 cal/g), though licensing may be permissible with a limited number of failed rods. While concerns exist regarding high critical boron concentration during steady state for the IFBA core and large plenum pressures for the gadolinia core design, the analysis demonstrates adequate safety performance during limiting RIA accident scenarios for two representative high burnup core designs. Design changes limiting plenum pressures and implementation of accident tolerant fuel (ATF) cladding features which minimize hydriding and susceptibility to pellet-cladding mechanical interaction (PCMI) are recommended for future high burnup fuel concepts. To support the technical basis for burnup limit increases, high-fidelity fuel performance models are needed to address physical effects not considered in this analysis, and high burnup irradiated fuel tests are required to extend applicability of the fuel failure limits and validate existing and future models.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Development of MCNP Training Modules for Safeguards Practitioners [Abstract]

The Monte-Carlo N-Particle (MCNP) software developed at LANL is the most widely used neutron transport code in the world. It is an essential tool for a variety of applications including detector development and design, nuclear fuel burnup simulation, criticality safety, and nondestructive assay system optimization. For this reason, it is indispensable within the safeguards and materials control & accountability (MC&A) communities. Multiple MCNP training courses have been created and taught over the last several decades by the MCNP development team at LANL, however there are no existing courses that cover specialized topics considered fundamental to NDA and safeguards models. To fill this gap, the MCNP team and Safeguards Science and Technology group at LANL have co-created a set of training modules customized to meet the specialized needs of the safeguards and MC&A communities. The basic modules cover concepts such as NDA system optimization, He-specific and other capture tallies, and tools for improved theoretical understanding. An advanced module was also created to cover topics including variance reduction for active interrogation simulations, use of the LANL MCNPTools post-processor, PTRAC (particle tracking) and list-mode data simulations, and fuel burnup simulations. The training modules teach to the latest and most state-of-the-art MCNP features and tools released by the development team at LANL and are intended to be taught jointly by the developers and safeguards experts. Ultimately, we hope that creation of these modules will serve to capture and convey the safeguards modeling and MCNP expertise at LANL, and that we will be able to share the modules more broadly with the MC&A and safeguards communities.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Performance Analysis and Simulaion of the Hydraulic Scram System in TREAT Reactor

The Transient Reactor Test Facility (TREAT) at Idaho National Laboratory (INL) serves a vital role in nuclear fuel safety research, enabling transient experiments that simulate reactivity excursions and accident scenarios. Central to these operations is the transient control rod drive system (TCRDS), which drives rapid motion of the transient control rods such that TREAT can simulate rapid power changes typical of reactor accidents. The reliability and performance of this system are critical for protecting both fuel specimens and reactor infrastructure. This study presents the initial phase of a two-year investigation into the dynamics and reliability of the TREAT hydraulic TCRDS. Conducted in collaboration with INL, the research employs a combined computational and experimental approach to analyze the system's response time, pressure transients, and potential failure modes. Emphasis is placed on understanding how fluid characteristics influence the TCRDS’s ability to achieve both rapid power changes and mechanical stability. The TRDS and the skid that powers it will be analyzed throughout this investigation. Computational modeling using computational fluid dynamics (CFD) will simulate the hydraulic response under varying conditions. In parallel, experimental testing planned at INL will validate these models and capture key performance metrics. This paper outlines the system design, analytical framework, and modeling strategies that form the foundation for later testing. Ultimately, this work aims to support improvements to the TCRDS’s design and reliability, contributing to the broader goal of enhancing nuclear fuel safety and sustaining TREAT’s mission as a premier nuclear fuel test facility.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

Radiation Safety Information Computational Center (RSICC) [Slides]

This presentation touches on the Radiation Safety Information Computational Center (RSICC). This Lecture provides general mission, statistics, and strategies. A general background is provided of the tool. Licensee agreements and export control agreements are discussed. The presentation finishes with a look at the most in demand and requested software packages.

97 MATHEMATICS AND COMPUTING↗

43-0434 Bridge Inspection Report 2021

The documentation includes the following: 1. 2021 NMDOT Bridge Inspection Report including Element Level Data Collection (in digital formats prepared by NMSU)--conforms to the National Bridge Inspection Standards and AASHTO Manual for Bridge Element Inspection; 2. 2021 Supplemental Report (in digital formats prepared by NMSU)--provides detailed information related to current condition of major bridge components; 3. 2021 Inspection Pictures (in digital format prepared by NMSU); 4. 2021 Delamination Map (in digital format prepared by LANL). During the 2021 inspection, three critical findings were reported to our LANL contact, Mr. Jonathan Stein, by text and/or email on June 26, 2021. 1. The south joint of the bridge had a modular section of the joint that could potentially come loose during the passing of vehicles. This was reported as a critical finding for safety. If the modular section becomes dislodged or deformed it could pose a serious hazard that could result in a punctured tire to vehicles, motorcyclists and/or bicyclist causing drivers/riders to lose control; 2. The bracket plate located at the north end of the bridge on the pedestrian walkway was corroded through and provides little protection to pedestrians and bicyclists. This was reported as a critical finding for safety to prevent injuries to people; 3. The north approach rail has three missing posts. These posts help ensure that traffic is redirected and the energy is absorbed by the rail. This was reported as a critical finding for safety. Additionally, the approach rail is on a curve with a nearby drop off. Immediate repair is recommended. Based on the 2021 inspection, the bridge deck is rated in "fair" condition. The chain drag performed on the deck identified several areas with delamination that are concentrated near the expansion joints, in the closure joint of the deck near the bridge centerline, and at the south end of the northbound lanes. The chain drag performed during the 2021 inspection revealed 215,333 sq. in. (1495 sq. ft) of delaminations and patched areas (not including the sidewalk). This is approximately a 600% increase from 2019. It is recommended that the delaminations and spalls with exposed rebar be repaired. The "delaminated area" map for the 2021 inspection is provided in the supplemental report.

42 ENGINEERING↗

A Minimum Principle-Based Algorithm for Energy-Efficient Eco-Driving of Electric Vehicles in Various Traffic and Road Conditions

Our report presents an optimization algorithm for energy-efficient driving of electric vehicles. The algorithm is based on Pontryagin’s Minimum Principle by considering the driving mission as an optimal control problem. On a planned route, diverse application cases may occur due to various physical traits such as powertrain (e.g., switching between motor and generator operation), environmental variations (e.g., terrain grade change), traffic laws (e.g., speed limits), and safety concerns (e.g., headway to the leading vehicle). The proposed algorithm handles these real-world challenges by considering the perturbation to the system dynamics and the constraints to the control and state variables.

33 ADVANCED PROPULSION SYSTEMS↗

Public Safety: Fighting Crime and Terrorism; Border Security

This chapter discusses risks from unintentional or illicit movement of nuclear and radioactive material out of regulatory control through international border crossing points, summarizes international efforts to build capacity and support border security, and discusses how detection equipment can be used to screen for penetrating radiation at traditional border crossing points.

border security↗

Influence of elongation and triangularity on plasma response to resonant magnetic perturbations

Abstract Systematic toroidal modeling of the plasma response to the n = 1–4 ( n is the toroidal mode number) resonant magnetic perturbation (RMP) field is carried out in order to understand the plasma-shaping effect on controlling the type-I edge-localized modes (ELMs) in tokamak experiments. Considered are large variations of the plasma elongation and triangularity at a fixed edge safety factor q a , for limiter plasmas with both single-null (SN) and double-null (DN) divertor-like boundary shapes. Numerical results assuming conformal 3D RMP coils show that (i) the optimum coil phasing between the upper and lower rows for ELM control becomes increasingly sensitive to the plasma elongation with higher- n toroidal spectra, (ii) the optimum coil phasing is however essentially independent of the plasma triangularity for all n = 1–4 RMP fields, (iii) with the same coil current and the optimum coil phasing, high elongation generally favors ELM control but it may be more challenging for plasmas with intermediate elongation and with lower- n ( n = 1–2) RMPs, and (iv) higher triangularity is generally always better for ELM control with all n = 1–4 fields for both DN and SN divertor-like plasma boundary shapes.

Physics↗

Integrated Spatial, Spectral, & Temporal Optical Reflectance System for Precision Occupancy & Location Sensing to Improve Building Energy Efficiency

Buildings consume approximately 35% of the electricity used in the U.S. and building owners can significantly reduce this energy use by providing services like heating, electrical power and lighting only when people are present. The ARPAe funded program titled “INTEGRATED SPATIAL, SPECTRAL, & TEMPORAL OPTICAL REFLECTANCE SYSTEM FOR PRECISION OCCUPANCY & LOCATION SENSING TO IMPROVE BUILDING ENERGY EFFICIENCY” demonstrates how a low cost sensor technology developed for measuring distances can be used to count and locate occupants with a high degree of precision with a very low error rates. This platform tells a building control system where occupants are located (but not who they are) so that energy consuming services can be provided only when the services are needed by building occupants. The original proof of concept involved using low cost, commercially available time-of-flight (TOF) sensors that measure distance, but the performance of these existing sensors was lacking, as they could not operate properly in the presence of sunlight, which blinded the simple TOF sensors and limited their utility in buildings. This project proposed a powerful new class of TOF sensors that used state-of-the-art integrated circuit (IC) fabrication processes that combined advanced photonics with conventional silicon chip circuitry for improved sensor performance. An equally important part of this project was to find ways to maximize occupant count and location accuracy while using the fewest number of sensors possible, in order to keep costs low. By using building blueprints to create digital twins of commercial building spaces, the team developed new algorithms to maximize occupant count and tracking accuracy by properly locating the minimum number of sensors at just the right spots in the building. This capability not only minimizes system costs but also simplified sensor installation and system commissioning. Our simulations of our sensor networks for a range of commercial floorplan designs demonstrated that our installed cost target of $0.08/sqft was attainable, though not fully demonstrated during the project. Finally, we noted that the TOF sensor concept could provide a valuable role in health and eldercare by tracking patients without the need for worn sensors and would be useful for fall detection and other patient safety metrics, including tracking healthcare/patient interactions. We feel that, when fully developed, this new class of sophisticated TOF sensors and support software will be a powerful new approach to improving building energy efficiency based on occupant centric control platforms and will also open new levels of patient safety in healthcare operations. To realize this potential, the team formed the Troy Sensor Company LLC to oversee licensing of the programs patents and continue to seek commercialization of this program’s activity sensing technologies.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Managing the techno-economic impacts of partial string failure in multistring energy storage systems

The role of energy storage systems (ESSs) is becoming increasingly important for today’s electric power systems. Unavailability of an ESS assigned to critical grid services may cause unwanted disruption of those services and hence, may have a significant techno-economic impact. Like any physical equipment, an ESS is vulnerable to various types of faults. Failure of one or more strings in a multistring ESS does not have to be the cause of shutting down the entire ESS. It can still operate with a partial number of strings and continue providing critical services to the grid, if there are no reliability or safety issues and is acceptable under applicable standards. However, it is important to make sure that the control strategies are adaptable to the changes in ESS capacity caused by failed strings. Also, depending on the previous operation and type of failure, the reallocation of duty cycle burden among available strings could be non-uniform. These complexities suggest that mitigation of the impact of partial failure in multistring ESSs is not trivial and needs careful consideration. This is the topic of this paper. The proposed work investigates the impact of partial failure of a large multistring ESS on the assigned service and develops strategies to adjust the ESS control duty cycles for reducing such impacts. In doing so, the paper proposes a novel two-stage framework that plans for the multistring failure using robust optimization theory and then adjusts in real-time using a rule-based algorithm, based on the real-time information on the power availability of the string. Illustrations provided in this work are based on frequency regulation use-case, which is a common application for many utility-scale ESSs. A 750 kilowatt (kW)/1500 kilowatt-hour (kWh) 3-string ESS is used for the demonstration in this work and the efficacy of the proposed method is demonstrated and compared against methods that do not incorporate string failure in their strategy. In particular, here we show that revenue loss of 93% can be incurred when partial string failure is not included in operation and planning. These losses in revenue are reduced by 60% with the proposed method.

25 ENERGY STORAGE↗

Observation of fully detached divertor integrated with improved core confinement for tokamak fusion plasmas

Integration of divertor detachment with a high-performance (β N ~ 3, β p > 2, H 98 ~ 1.5) core plasma has been demonstrated in DIII-D high-β p (poloidal beta) plasmas associated with a sustained core internal transport barrier (ITB) and an H-mode edge transport barrier (ETB). Such good core-edge integration has been achieved for both neon and nitrogen seeding, for both favorable and unfavorable B-field directions, independently from the impurity puffing locations, though these variations play important roles on divertor characteristics. Compared to the standard H-mode plasmas, the high-β p plasma exhibits a much wider window of detachment compatible with high confinement core. Fully detached divertor plasmas with low plasma temperature (Te < 5 eV), low particle flux, and low heat flux across the entire divertor target plate were obtained by using nitrogen seeding. This detached high-β p plasma is compatible with a newly developed detachment control system which can help optimize the nitrogen gas flow rate. Several features, i.e., the high edge safety factor in the high-β p scenario, impurity injection, closed divertor and reduced heating power requirement due to the high confinement, facilitate the achievement of full divertor detachment at lower density. Instead of degrading global performance, the divertor detachment facilitates the access to an even stronger ITB at large radius with a relatively weak ETB through self-organized synergy between ITB and ETB, leading to sustained high confinement. The strengthening of the large-radius ITB compensates for the ETB degradation associated with divertor detachment. In addition, a weak ETB naturally has smaller edge localized modes (ELMs). In particular, with neon injection, a long-period no-ELM H-mode phase has been achieved simultaneously with high-performance core and partially detached divertor plasmas. Furthermore, these results demonstrate the possibility of integrating excellent core plasma performance with an effective divertor solution, an essential step toward steady-state operation of reactor-grade plasmas.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

REGULATORY TESTING AND 3D SCANNING METHODOLOGY OF THE DPP-1 TYPE SHIPPING CONTAINER FOR NCT AND HAC TESTS

The safe transportation of radioactive material using appropriately designed and certified transportation packages is important to protect the public and environment. In the United States of America all transportation of radioactive material is regulated by the Department of Transportation (DOT) along with input by the Nuclear Regulatory Commission (NRC). All packages that contain radioactive material requires that it be transported and regulated by the requirements set by the DOT Class 7 hazardous material transportation. Federal regulations place strict administrative controls on the transport of radioactive materials. The two main goals for transporting radioactive materials are 1. Safety should be the primarily focused on the package because it is the first line of defense. 2. Package integrity should be directly related to the degree of the hazard of the radioactive material contents. The two-part goal ensures that the right package is used. Type B packages are designed to transport radioactive materials with the highest level of radioactivity. Examples of material transported in Type B packagings include spent nuclear fuel, high-level radioactive waste, and high concentrations of other radioactive materials. The purpose of this test protocol is to determine the effects of drop and thermal testing on package performance in a Type B shipping package (DPP-1). Required physical tests for the DPP-1 package include free drop, crush, puncture, penetration, compression, vibration, water spray, water immersion, and thermal. The preparation, regulatory testing, and post-test evaluation of a Type B shipping package tested to the 10 CFR 71.71 and 10 CFR 71.73 requirements will be presented. Six packages were tested and the responses when subjected to the HAC sequence of free drop, puncture, and thermal tests according to 10 CFR 71.73(c)(1), (c)(2), (c)(3) and (c)(4) were measured. The Free Drop, Crush and Puncture tests were performed at the NTRC in Knoxville, TN, and the Thermal tests were performed Southwest Research Institute in San Antonio, TX. The test units were subjected to a pre-operational leak testing before the NCT and HAC tests and a post-operational leak test and a helium leak test once regulatory testing was complete. Finally, all test units were scanned with a handheld blue light scanner to capture a 3D CAD geometry of the test units in the deformed shape. The handheld scanner provided the most effective and reliable way to acquire accurate 3D measurements of the test unit. The scanned geometry was sectioned in areas with deformation and the cross-section profile was measured to determine accurate and repeatable results of the deformed shape of the test units.

Martinez, Oscar↗

Accelerating Transitions to Zero Carbon Power Systems

As power systems evolve, becoming increasingly renewable, distributed, dynamic, and digital, managing them becomes ever more challenging and complex. System operators serve as the "air traffic controllers" for electricity grids, working to balance supply and demand, manage evolving electricity markets, and ensure the safety and reliability of electricity systems. To adapt to the rapidly changing energy landscape and support the transition to modern, zero carbon power systems, system operators must develop and adopt new technologies, approaches, and frameworks. The Global Power System Transformation (G-PST) Consortium is a network of system operators, research institutions, and industry partners working to accelerate and scale the technical solutions required to transform our world's power systems. By developing and sharing robust models and tools, research and demonstration results, knowledge, and innovation, the G-PST Consortium is empowering system operators to transition to 100% renewable energy while ensuring the reliability, safety, and cost-effectiveness of grid operations.

ENERGY PLANNING, POLICY, AND ECONOMY,POWER TRANSMI↗

Safety evaluation of connected and automated vehicles in mixed traffic with conventional vehicles at intersections

Connected and Automated Vehicles (CAVs) can potentially improve the performance of the transportation system by reducing human errors. This paper investigates the safety impact of CAVs in a mixed traffic with conventional vehicles at intersections. Analyzing real-world AV crashes in California revealed that rear-end crashes at intersections are the dominant crash type. Therefore, to enhance our understanding of the future interactions between human-driven vehicles with CAVs at intersections, a simulation framework was developed to model the mixed traffic environment of Automated Vehicles (AV), cooperative AVs, and conventional human-driven vehicles. In order to model AVs driving behavior, Adaptive Cruise Control (ACC) and cooperative ACC (CACC) models are utilized. Particularly, this study explores system improvements due to automation and connectivity across varying CAV market penetration scenarios. ACC and CACC car following models are used to mimic the behavior of AVs and cooperative AVs. Real-world connected vehicle data are utilized to modify and tune the acceleration/deceleration regimes of the Wiedemann model. Next, the driving volatility concept capturing variability in vehicle speeds was utilized to calibrate the simulation to represent the safety performance of a real-world environment. Two surrogate safety measures are used to evaluate the safety performance of a representative intersection under different market penetration rate of CAVs: the number of longitudinal conflicts and driving volatility. At low levels of ACC market penetration, the safety improvements were found to be marginal, but safety improved substantially with more than 40% ACC penetration. Additional safety improvements can be achieved more quickly through the addition of cooperation and connectivity through CACC. Furthermore, ACC/CACC vehicles were found to improve mobility performance in terms of average speed and travel time at intersections.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Light Water Sustainability Program: Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis

This report describes the interim progress for research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and elsewhere throughout the plant, along with a greater use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human-performance-related organizational and technical design issues are identified and addressed. This report describes modeling tools and techniques, based on sociotechnical system theory, to support these design goals and their application in the current research effort. The report is intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control and feedback relationships amongst the system’s technical and organizational components. Up to this point, we have employed a Causal Analysis based on STAMP (CAST) technique to examine a performance- and safety-related incident at an industry partner’s plant that involved the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. Our ongoing analysis is focused on identifying near-term process improvements and longer-term design requirements for an optimized IAE system. The latter analyses will employ a second STAMP-derived technique, System-Theoretic Process Analysis (STPA). STPA is a useful modeling tool for generating and analyzing actual or potential information control structures. Finally, we have begun modeling plantwide organizational relationships and processes. Organizational system modeling will supplement our CAST and STPA findings and provide a basis for mapping out a plantwide information control architecture. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the initiating event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. We present two preliminary information automation models. The proactive issue resolution model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system. From our results, we have generated a set of preliminary system-level requirements and safety constraints. These requirements will be further developed over the remainder of our project in collaboration with nuclear industry subject matter experts and specialists in the technical systems under consideration. Additionally, we will continue to pursue the system analyses initiated in the first part of our effort, with a particular emphasis on STPA as the main tool to identify weak or weakening control structures that affect the resilience of organizations and programs. Our intent is to broaden the scope of the analysis from an individual use case to a related set of use cases (e.g., maintenance tasks, compliance tasks) with similar human-system performance challenges. This will enable more generalized findings to refine the Proactive Issue Resolution and IAE models, as well as their system-level requirements and safety constraints. We will use organizational system modeling analyses to supplement STPA findings and model development. We conclude the report with a set of summary recommendations and an initial draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗

Updated Commercial Aviation Non-Airport Crash Density Values Using Data Obtained from the U.S. National Transportation Safety Board for 2000 through 2019

This report documents the calculation of the commercial aviation (CA) non-airport crash density for Air Route Traffic Control Center (ARTCC) area associated with the Contiguous United States (CONUS) using the methodology outlined in the Department of Energy (DOE) Standard 3014-2006, Accident Analysis for Aircraft Crash Into Hazardous Facilities. For analytical purposes, the CA aircraft fleet is comprised of aircraft engaged in operations under Title 14 of the Code of Federal Regulations (CFR) Part 121 (i.e., Air Carrier) and Part 135 (i.e., Air Taxi).

99 GENERAL AND MISCELLANEOUS↗