Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety and Accident Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

MELCOR-TMAP: The integration of MELCOR for fusion and TMAP4 for fusion reactor systems safety analysis and tritium inventory tracking

The design of fusion reactors requires the prediction of radioactive tritium migration during normal operating conditions and accident scenarios. Safety standards such as those from the U.S. Department of Energy (DOE) require that fusion reactor designs limit the release of hazardous material to the environment. In addition to safety requirements, the rarity of tritium supplies for burning D-T fusion plasma requires tritium breeding blankets. Computational modeling of migration of tritium and various reaction products throughout the fusion reactor serves to create designs that fulfill these requirements. MELCOR-TMAP, owned and developed at Idaho National Laboratory (INL), is an integrated system-level engineering code adapted for the analysis of fusion reactor systems. The history of the conception and evolution of the MELCOR-TMAP code, as well as its current capabilities, recent updates including a corrected composite material wall nodalization scheme, and plans for future development, are discussed here.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Changes in Frequency of the Severity and Type of Aviation Accidents (1987 to 2016)

This document reports the fourth analysis to identify the types of accidents with the greatest impact on the overall safety risk in U.S. civil aviation. The first three analyses examined accidents in 1997-20061, in 2001-20102 and in 2005-20143. The safety risks herein are defined to include four elements: (1) the number of total accidents; (2) the number of fatal accidents; (3) the number of total injuries; (4) the number of fatal injuries. Two of the previous analyses also included the number of incidents, but incident data since 2007 are difficult to separate by flight operation. Other incident details are no longer recorded as well. Due to these changes, the author’s working copy of the incident data has not been updated since 2011 (for incidents through 2010), and the incident data were not included in this analysis. Powerplant and non-powerplant system component failures were the only categories with a greater contribution to the overall safety risk from incidents than from accidents. Accident types, as well as accident rates, have been shown to vary considerably among different flight operations (e.g., large air carriers versus general aviation). For this reason, all analyses were done separately for four types of flight operations (Part 121, Scheduled Part 135, Non- Scheduled Part 135 and Part 91).

Evans, Joni K.↗

Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis: Tool Development and Method Evaluation

This report is an update to a prior report that describes progress and findings for a program of research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and throughout the plant, along with a greater interest in the use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human performance-related organizational and technical design issues are identified and addressed early in the design process. This report describes modeling tools and techniques, based on sociotechnical systems theory, to support these design goals and their application in the current research effort. The report is primarily intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control, feedback, and communication relationships amongst the system’s technical and organizational components. We have employed two STAMP-based tools in this effort. The first is Causal Analysis based on STAMP (CAST), an accident and incident analysis technique that was used to examine a performance- and safety-related incident at an industry partner’s plant involving the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. The second tool is Systems Theoretic Process Analysis (STPA) which is a proactive risk analysis tool used to examine existing and potential, planned sociotechnical systems. STPA was used to identify risk factors in the current design of a generic nuclear power plant (NPP) preventive maintenance system. Our analyses focused on identifying near-term system improvements and longer-term design requirements for an optimized IAE system. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived time and schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the eventual event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. STPA findings exposed several areas of concern in the design of current preventive maintenance systems. We also present two preliminary information automation models. The proactive issue resolution (PIR) model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system and represents an end-state vision for our work. From our results, we have generated an initial set of preliminary system-level requirements and safety constraints for these models. We have also focused on early development of easy to learn, easy to use “transportable” tools for sociotechnical systems analysis. We intend these to be used by NPP personnel as a means of gaining reliable and relatively quick insight into (1) sociotechnical systems factors impacting incidents and accidents, (2) potential sociotechnical risk factors in existing or planned system designs, and (3) potential weaknesses in a system’s safety and/or information control structure. We conclude the report with a set of summary recommendations, a discussion of planned and potential follow-on research and development, and a draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗

MELCOR Accident Progression and Source Term Demonstration Calculations for a FHR

MELCOR is an integrated thermal hydraulics, accident progression, and source term code for reactor safety analysis that has been developed at Sandia National Laboratories for the United States Nuclear Regulatory Commission (NRC) since the early 1980s. Though MELCOR originated as a light water reactor (LWR) code, development and modernization efforts have expanded its application scope to include non-LWR reactor concepts. Current MELCOR development efforts include providing the NRC with the analytical capabilities to support regulatory readiness for licensing non-LWR technologies under Strategy 2 of the NRC's near- term Implementation Action Plans. Beginning with the Next Generation Nuclear Project (NGNP), MELCOR has undergone a range of enhancements to provide analytical capabilities for modeling the spectrum of advanced non-LWR concepts. This report describes the generic plant model developed to demonstrate MELCOR capabilities to perform fluoride-salt-cooled high-temperature reactor (FHR) safety evaluations. The generic plant model is based on publicly-available FHR design information. For plant aspects (e.g., reactor building leak rate and details of the cover-gas system) that are not described in the FHR references, the analysts made assumptions needed to construct a MELCOR full-plant model. The FHR model uses a TRi-structural ISOtropic (TRISO)-particle fuel pebble-bed reactor with a primary system rejecting heat to two coiled tube air heat ex changers. Three passive direct reactor auxiliary cooling systems provide heat removal to supplement or replace the emergency secondary system heat removal during accident conditions. Surrounding the reactor vessel is a low volume reactor cavity that insulates the reactor with fire bricks and thick concrete walls. A refractory reactor liner system provides water cooling to reduce the concrete wall temperatures. Example calculations are performed to show the plant response and MELCOR capabilities to characterize a range of accident conditions. The accidents selected for evaluation consider a range of degraded and failed modes of operation for key safety functions providing reactivity control, the primary system decay heat removal and also a piping leak of the line to the coolant drain tank.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

MELCOR Accident Progression and Source Term Demonstration Calculations for a HTGR

MELCOR is an integrated thermal hydraulics, accident progression, and source term code for reactor safety analysis that has been developed at Sandia National Laboratories for the United States Nuclear Regulatory Commission (NRC) since the early 1980s. Though MELCOR originated as a light water reactor (LWR) code, development and modernization efforts over the past decades have expanded its application scope to include non-LWR reactor concepts. Current MELCOR development efforts include providing the NRC with the analytical capabilities to support regulatory readiness for licensing non-LWR technologies under Strategy 2 of the NRC's near-term Implementation Action Plans. Beginning with the Next Generation Nuclear Project (NGNP), MELCOR ha s undergone a range of enhancements to provide analytical capabilities for modeling the spectrum of advanced non-LWR concepts. This report describes the generic plant model developed to demonstrate MELCOR capabilities to perform high-temperature gas reactor (HTGR) safety evaluations. The generic plant model is based on publicly available PMBR-400 design information. For plant aspects (e.g., reactor building size and leak rate) that are not described in the PBMR-400 references, the analysts made assumptions needed to construct a MELCOR full-plant model. The HTGR model uses a TRi-structural ISOtropic (TRISO)-particle fuel pebble-bed reactor with a primary system rejecting heat to a recuperative heat exchange r. Surrounding the reactor vessel is a reactor cavity contained within a confinement room cooled by the Reactor Cavity Cooling System (RCCS). Example calculations are performed to show the plant response and MELCOR capabilities to characterize a range of accident conditions. The accidents selected for evaluation consider a range of degraded and failed modes of operation for key safety functions providing reactivity control, primary system heat removal and reactor vessel decay heat removal, and confinement cooling.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

MELCOR Accident Progression and Source Term Demonstration Calculations for a Heat Pipe Reactor

MELCOR is an integrated thermal hydraulics, accident progression, and source term code for reactor safety analysis that has been developed at Sandia National Laboratories for the United States Nuclear Regulatory Commission (NRC) since the early 1980s. Though MELCOR originated as a light water reactor (LWR) code, development and modernization efforts have expanded its application scope to includ e non-LWR reactor concepts. Current MELCOR development efforts include providing the NRC with the analytical capabilities to support regulatory readiness for licensing non-LWR techno logies under Strategy 2 of the NRC?s near- term Implementation Action Plans. Beginning with the Next Generation Nuclear Project (NGNP), MELCOR has undergone a range of enha ncements to provide analytical capabilities for modeling the spectrum of advanced non-LWR concepts. This report describes the generic plant model developed to demonstrate MELCOR capabilities to perform heat pipe reactor (HPR) safety evaluations. The generic plant mode l is based on a publicly-available Los Alamos National Laboratory (LANL) Megapower design as modified in the Idaho National Laboratory (INL) Design A description. For plant aspects (e.g., reactor building size and leak rate) that are not described in the LANL and INL references , the analysts made assumptions needed to construct a MELCOR full-plant model. The HP R uses high assay, low-enrichment uranium (HALEU) fuel with steel cladding that uses heat pipes to transfer heat to a secondary Brayton air cycle. The core region is surrounded by a stainless-steel shroud, alumina reflector, core barrel and boron carbide neutron shield. The reactor is secured inside a below-grade cavity, with the operating floor located above the cavity. Example calculations are performed to show the plant response and MELCOR capabilities to characterize a range of accident conditions. The accidents selected for evaluation consider a range of degraded and failed modes of operation for key safety functions providing re activity control, the primary and secondary system heat removal, and the effectiveness of th e confinement natural circulation flow into the reactor cavity (i.e., a flow blockage).

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

MECHANISTIC MULTIPHYSICS MODELING OF CLADDING RUPTURE IN NUCLEAR FUEL RODS DURING LOSS-OF-COOLANT ACCIDENT CONDITIONS

The Loss of Coolant Accident (LOCA) is a design basis accident that is included as part of the safety analysis of nuclear power plants. As the nuclear industry desires to increase the cycle length and discharge burnup of existing nuclear power plants they must demonstrate safe operation during a LOCA on high burnup fuel. During a LOCA transient on high burnup fuel rods, the rods may undergo a process known as fuel fragmentation, relocation, and dispersal (FFRD). To permit dispersal, the cladding encapsulating the fuel must rupture with an opening size large enough to allow the fragmented fuel particles to release. Current licensing tools used by industry and the United States Nuclear Regulatory Commission are limited in geometric fidelity and materials that can be analyzed. These simulation tools generally employ a quasi-two-dimensional (1.5D or Layered1D) or 2D-RZ axisymmetric geometric representations exclusively. While a valid approach under some instances, there are times when important physics have an asymmetric behavior in the fuel rod. Examples include fuel fragmentation, thermal-hydraulic boundary conditions, and cladding rupture, all of which are important for LOCA analysis. As industry pursues burnup extensions it must be demonstrated that fuel dispersal can be mitigated or eliminated. To do this, an understanding of the rupture opening after cladding failure is required. This work presents the development of a model for predicting the size and location of the rupture opening in failed fuel rods during LOCA conditions using advanced modeling and simulation tools. In order to supply the rupture model with appropriate boundary conditions, improvements to fuel fragmentation, axial relocation and oxidation modeling were required. First, the eXtended Finite Element Method (XFEM) is used to mechanistically predict the number of fuel fragments that form due to material strength randomization, criteria for strength randomization, mesh density, power ramping rates and irradiation effects. These predictions with associated uncertainty were compared to empirical correlations developed for UO2 verifying that they can be used with increased confidence in subsequent axial relocation analyses. Secondly, a new first-of-its-kind Layered2D computational framework was developed that provides the ability to apply azimuthally varying boundary conditions while providing discrete layers to track fuel movement during the LOCA. An existing fuel axial relocation model developed for Layered1D was extended to work within the Layered2D framework. A large sensitivity study was performed on the initial version of the model to identify modeling parameters of particular importance, with the emissivity used for radiation after blowdown being the primary source of uncertainty. Then, a simplistic approach to incorporate mechanical degradation of the cladding due to oxidation was also developed to investigate the impact of reduced cladding thickness on predictions of the time to failure of cladding tubes. It was found that the cladding will typically rupture prior to a reduction in thickness that is sufficient to impact the rupture behavior. A model was then developed for predicting cladding rupture that transfers the cladding surface temperatures, rod internal and external pressures, fast neutron fluence, and fast neutron flux from a more detailed Layered1D, Layered2D, or 2D-RZ analysis to a 3D cladding only analysis. Comparisons of the rupture model to a few experiments indicate reasonable predictions. The rupture model was then applied to two accident tolerant fuel concepts (FeCrAl and Cr-coated Zircaloy) where it predicted that both ATF concepts would have smaller rupture openings and delayed rupture times than the standard Zircaloy-4 cladding material under identical loading conditions.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

The Contribution of Pilots to Resilience in Normal Operations: A Survey Approach

Much of our knowledge about human performance in flight safety has come from the analysis of undesired events, whether accidents, incidents, or crew behaviors identified via flight exceedance monitoring or observational techniques. In recent years, there has been an acknowledgement that operational personnel are not merely sources of “human error”, but also make a unique human contribution to safe outcomes. In a few celebrated cases, this takes the form of “heroic saves”, but on many more occasions, operational personnel contribute to safety through everyday, often-unnoticed actions that turn potentially hazardous situations into non-events. An emerging approach to safety, frequently referred to as “Safety II,” proposes that the positive human contribution is an important and largely untapped source of safety information. Some airlines have successfully trained observers to identify and record the positive behaviors exhibited by the crew over the course of a flight. In other cases, flight crew are interviewed about good practices or positive behaviors. However, each of these methods are relatively limited in scale and resource intensive. A survey could provide a relatively low-cost approach to systematically gather this information on a larger scale. The primary purpose of the research was to develop and assess a surveys methodology for assessing crews' activities in normal flights and the operational perturbations encountered during normal operations. We hope that such a survey could be both a research tool as well as a safety management aid for the aviation industry. We collected responses concerning revenue flights from two groups of airline pilots (N = 25 & N= 65). The results indicated that relatively few flights proceeded exactly as in the original flight plan. Pilots routinely anticipated and adapted to changing circumstances. We will review the challenges encountered in developing the survey and summarize preliminary findings from two administrations of the survey to airline pilots.

human contribution safety↗

The Contribution of Pilots to Resilience in Normal Operations. Part II: A closer look at briefings: Anticipation and Monitoring Also Known as Planning and Coordination

Much of our knowledge about human performance in flight safety has come from the analysis of undesired events, whether accidents, incidents, or crew behaviors identified via flight exceedance monitoring or observational techniques. In recent years, there has been an acknowledgement that operational personnel are not merely sources of “human error”, but also make a unique human contribution to safe outcomes. In a few celebrated cases, this takes the form of “heroic saves”, but on many more occasions, operational personnel contribute to safety through everyday, often-unnoticed actions that turn potentially hazardous situations into non-events. An emerging approach to safety, frequently referred to as “Safety II,” proposes that the positive human contribution is an important and largely untapped source of safety information. Some airlines have successfully trained observers to identify and record the positive behaviors exhibited by the crew over the course of a flight. In other cases, flight crew are interviewed about good practices or positive behaviors. However, each of these methods are relatively limited in scale and resource intensive. A survey could provide a relatively low-cost approach to systematically gather this information on a larger scale. The primary purpose of the research was to develop and assess a surveys methodology for assessing crews' activities in normal flights and the operational perturbations encountered during normal operations. We hope that such a survey could be both a research tool as well as a safety management aid for the aviation industry. We collected responses concerning revenue flights from two groups of airline pilots (N = 25 & N= 65). The results indicated that relatively few flights proceeded exactly as in the original flight plan. Pilots routinely anticipated and adapted to changing circumstances. We will review the challenges encountered in developing the survey and summarize preliminary findings from two administrations of the survey to airline pilots.

human contribution safety↗

Nuclear Safety [Vol. 36, No. 1, January-June 1995]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. THE CHORNOBYL ACCIDENT: 1 The Chornobyl Accident Revisited, Part II: The State of the Nuclear Fuel Located Within the Chornobyl Sarcophagus, A A. Borovoi and A. R. Sich; GENERAL SAFETY CONSIDERATIONS: 33 Nuclear Power Safety in Central and Eastern Europe, R. Wilson; 46 Safety of Nuclear Power Reactors in the Former Eastern European Countries, S. Chakraborty; 53 Technical Note: On the Definition of Common-Cause Failures, H. Paula; ACCIDENT ANALYSIS: 58 Modeling and Analysis of Core-Debris Recriticality During Hypothetical Severe Accidents in the Advanced Neutron Source Reactor, S.-H. Kim, V. Georgevich, D. B. Simpson, C. O. Slater, and R. P. Taleyarkhan; 68 Ignitability of Hydrogen/Oxygen/Diluent Mixtures in the Presence of Hot Surfaces, R. K. Kumar and G. W. Koroll; 94 Coupled RELAP5 and CONTAIN Accident Analysis Using PVM, K. A. Smith, A. J. Baratta, and G. E. Robinson; CONTROL AND INSTRUMENTATION: 109 Application of Fuzzy Logic in Nuclear Reactor Control Part I: An Assessment of State-of-the-Art, A. S. Heger, N. K. Alang-Rashid, and M. Jamshidi; DESIGN FEATURES: 122 Twenty-Third DOE/NRC Nuclear Air-Cleaning and Treatment Conference, R. R. Bellamy, J. J. Hayes, and M. W. First; ENVIRONMENTAL EFFECTS: 135 Atmospheric Dispersion and the Radiological Consequences of Normal Airborne Effluents from a Nuclear Power Plant, D. Fang, C. Z. Sun, and L. Yang; 142 Calculation of Distribution Coefficients for Radionuclides in Soils and Sediments, I. Puigdomenech and U. Bergstrom: OPERATING EXPERIENCES: 155 Reactor Shutdown Experience, Compiled by J. W. Cletcher; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 158 Operating Experience Feedback Report—Reliability of Safety-Related Steam Turbine-Driven Standby Pumps Used in U.S. Commercial Nuclear Power Plants, J. R. Boardman; 166 Turbine Building Hazards, H. L Ornstein; RECENT DEVELOPMENTS: 169 Reports, Standards, and Safety Guides, D. S. Queener; 175 Proposed Rule Changes as of Dec. 31,1994; ANNOUNCEMENTS: 32 Harvard School of Public Health In-Place Filter Testing Workshop; 134 International Conference on Advances in the Operational Safety of Nuclear Power Plants; 193 30th Tennessee Industries Week; 193 DOE Technical Standards Program 1995 Workshop; 194 Multiphase Flow Experiments and Instrumentation; 180 The Authors; 185 Indexes to Nuclear Safety, Volumes 34 and 35.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Single pilot IFR accident data analysis

The aircraft accident data recorded and maintained by the National Transportation Safety Board for 1964 to 1979 were analyzed to determine what problems exist in the general aviation single pilot instrument flight rules environment. A previous study conducted in 1978 for the years 1964 to 1975 provided a basis for comparison. The purpose was to determine what changes, if any, have occurred in trends and cause-effect relationships reported in the earlier study. The increasing numbers have been tied to measures of activity to produce accident rates which in turn were analyzed in terms of change. Where anomalies or unusually high accident rates were encountered, further analysis was conducted to isolate pertinent patterns of cause factors and/or experience levels of involved pilots. The bulk of the effort addresses accidents in the landing phase of operations. A detailed analysis was performed on controlled/uncontrolled collisions and their unique attributes delineated. Estimates of day vs. night general aviation activity and accident rates were obtained.

Harris, D. F.↗

Creating Formal Characterizations ofRoutine Contingency Management inCommercial Aviation

Traditional approaches to safety management focus on collection of data describing unwanted states (i.e., accidents and incidents) and analysis of undesired behaviors (i.e., faults and errors) that precede those states. Thus, in the traditional view of safety, safety is both defined and measured by its absence, namely the lack of safety. In extremely high confidence systems like commercial air transport, however, opportunities to measure the absence of safety are relatively rare. Ironically, a critical barrier to measuring safety and the impact of mitigation strategies in commercial aviation is the lack of opportunities for measurement.

Intelligent Contingency Management,↗

MURR LEU structural and thermal hydraulics analyses: Part II – Impacts of irradiation thermo-mechanical behavior on thermal hydraulics safety analyses

A series of structural analyses have been performed to support the conversion of the University of Missouri Research Reactor (MURR) from the use of highly enriched uranium (HEU; ≥20 wt% U-235) to low-enriched uranium (LEU; <20 wt% U-235) fuel. The irradiation thermo-mechanical analysis evaluated the effects of fuel swelling, irradiation creep, thermal expansion, as well as thermal resistance from the oxide layer growth for the MURR LEU element in prototypic thermal and irradiation conditions as presented in Part I of this article. Overall, this irradiation thermo-mechanical analysis predicts smaller gap thickness reductions in previously limiting regions, and larger reductions in the middle of the outermost end channels where power density is not typically a maximum. Due to substantial differences between the channel gap reductions assumed for the previous safety analyses and those predicted by the irradiation thermo-mechanical analysis, a need to evaluate their impact on the thermal hydraulics safety analyses arose. This article presents the results from the steady-state safety analysis for normal operation as well as the two most limiting accident scenarios. The calculation models were revised in order to account for the spatial and temporal variation of the channel gap thicknesses. The results show that sufficient safety margins are still maintained for normal operation as well as during the postulated accident transients. This work provides a methodology of incorporating the irradiation thermo-mechanical behavior of plate-type fuel into the thermal hydraulics safety analyses.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

An Approach for Defining IASMS Services, Functions, and Capabilities

Assuring safety in the NAS with the inclusion of new entrants, such as Advanced Air Mobility (AAM), will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using autonomous vehicles. The focus of the In-time Aviation Safety Management System (IASMS) is to overcome AAM’s safety assurance challenges. The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs) designed to manage operational risks, identify unknown risks, and inform system designs. This paper describes an approach for defining SFCs based on technology trends in research, assessment of known and unknown risks in voluntary safety reports, and causal and contributing factors in aviation accidents and incidents. This approach would identify potential SFCs that further expand the Monitor, Assess, and Mitigate (M-A-M) functionality that represents the enabling framework of the IASMS. Safety implications that will result from integration of AAM in the transformation of the National Airspace System (NAS) were addressed in National Academies committees reports on AAM and IASMS. Development of a ConOps for IASMS was a top recommendation and can be represented as a reframing of safety assurance that builds on real-time alerting such as the Traffic Alert and Collision Avoidance System, and adds the more encompassing in-time temporal parameter in recognition of the different timelines for collecting and assessing safety data for risk mitigations. For example, mining for safety trends from data sources such as the Aviation Safety Information Analysis and Sharing system occurs over a longer time period. Research on AAM operations poses that SFCs can be designed to monitor the safety margin appropriate for AAM including with regards to the distance between current flight parameters and nominal ideal conditions. These in-time comparisons will become more complex as the density of operations increases at least in certain areas and can include planned and actual 4D trajectory, and in-time comparisons having implications on conflict modeling and prediction including expected and actual departure time, fix/waypoint crossing times, and arrival time. These comparisons would be integrated as part of SFCs that redefine and inform new safety margin. An increased safety margin improves management of operational risks while reducing the potential for anomalies. An increased safety margin also has implications for operator confidence in the certainty of its operations and trust in automation. Technology trends in research could be used to refine existing SFCs and define needs for additional SFCs that provide safety improvements to the design and operation of vehicles, airspace design, and operator performance requirements. NASA is developing innovative approaches to safeguard against major accidents and incidents that have occurred in the NAS and those anticipated with the inclusion of envisioned AAM operations. The innovations use operational performance data to monitor, detect, and predict flight variations exceeding safe nominal patterns, such as would be caused by navigational error, severe weather complications, or hijacking of UAS controls. These innovative approaches have high potential to prevent accidents and incidents in the new AAM era. It is anticipated that elements of the innovations will evolve into SFCs for the IASMS. Voluntary safety reports can be monitored to identify anomalies related to design or operational performance risks. Reports could be periodically monitored and assessed for specific topics. Reports might serve as weak signals or precursors indicative of emergent risk such as when combined with other safety information. The architecture could include SFCs that are based on voluntary safety reports recognizing the periodic temporal nature of data analysis. As previously mentioned, aviation accidents with their causal and contributing precursors can inform the need for SFCs in the IASMS. Accidents and incidents at San Francisco International Airport such as Asiana 214 and Air Canada 759 illustrate how combinations of different factors lead to increased risk. These types of precursors and different factors have implications on the types of SFCs that could be needed to monitor and manage different sources and types of design and operational risk. Continuing to assure the safety of AAM as designs and operations gain in complexity can be accompanied by defining SFCs that also increase in complexity. These SFCs can leverage information from findings and recommendations synthesized across on-going research, voluntary safety reports, and accident and incident reports. These SFCs can serve to refine accuracy of algorithms and resolve limitations with current practices. The IASMS architecture represents the framework for the SFCs and their critical role in safety assurance.

In-Time Aviation Safety Management System↗

A realistic TRACE PWR LOCA model with application to high-burnup analysis

This paper presents a TRACE model of a postulated large-break loss-of-coolant accident (LBLOCA) event in a four-loop pressurized water reactor (PWR). The input files have been made publicly available and serve as a starting point for researchers to improve upon or apply to their purposes. The model, based on a legacy PWR model, contains numerous improvements and modifications consistent with US Nuclear Regulatory Commission LBLOCA analysis guidelines. The model is applied to analyze high-burnup (>62 GWD/MTU) fuel behavior during LBLOCA, improving on previous work to provide realistic thermal hydraulic predictions for future fuel performance analyses and experiments related to fission fragment, relocation, and dispersal (FFRD). Sensitivity studies are presented to quantify the impact of the vessel-modeling approach, core radial discretization, and other phenomena. In conclusion, the model is intended for research purposes and contains sufficient plant geometric, operational, and safety system details to represent the main physical phenomena pertaining to LBLOCA.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Nuclear Safety [Vol. 30, No. 3, July-September 1989]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 325 Safety of Framatome Advanced Nuclear Steam Supply Systems Designs by J. A. Charles and D. Lange, 333 Book Review of Nuclear Accidents: Intervention Levels for the Protection of the Public by H. B. Piper; ACCIDENT ANALYSIS: 335 Living PRA Computer Systems by S. C. Dinsmore and H.-P. Balfanz, 343 Summary of ICAP Assessments of RELAP5/MOD2 by W. E. Driskell and R. G. Hanson; CONTROL AND INSTRUMENTATION: 352 Thermal Performance Monitoring System at Maanshan Nuclear Power Plant by H.-J. Chao, Y.-P. Lin, G.-H. Jou, L.-Y. Liao, and Y.-B. Chen; DESIGN FEATURES: 358 Warning Systems for Nuclear Power Plant Emergencies by J. H. Sorensen and D. S. Mileti; WASTE AND SPENT FUEL MANAGEMENT: 371 Activities Related to Waste Management Compiled by E G. Silver; OPERATING EXPERIENCES: 382 Steam Generator Tube Performance: Experience with Water-Cooled Nuclear Power Reactors During 1985 by O. S. Tatone and R. L. Tapping, 400 Systems Interaction Analyses: Concepts and Techniques (Part II) by M. D. Muhlheim and G. A. Murphy, 413 Reactor Shutdown Experience Compiled by J. W. Cletcher, 416 Operating U.S. Power Reactors Compiled by E G. Silver; RECENT DEVELOPMENTS: 440 General Administrative Activities Compiled by E G. Silver, 460 Reports, Standards, and Safety Guides by D. S. Queener, 466 Status of Power-Reactor Licensing Activities Compiled by E G. Silver, 470 Proposed Rule Changes as of Mar. 31, 1989; ANNOUNCEMENTS: 334 Proceedings Published, 351 CEC Seminar on Methods and Codes for Assessing the Off-Site Consequences of Nuclear Accidents, 357 Short Course on Multiphase Flow and Heat Transfer: Bases and Applications in A: The Nuclear Power Industry B: The Process Industries, 357 International Conference on Probabilistic Safety Assessment and Management, 478 International Topical Meeting on the Safety, Status, and Future of Non-Commercial Reactors and Irradiation Facilities, 475 The Authors.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Identification of Important Phenomena for Light Water Reactors During Heat Transport System Failure Events in Integrated Energy Systems

This work adapts historical literature and existing phenomena identification and ranking tables (PIRT) to be applicable to a novel nuclear power plant (NPP) and chemical or thermal process integrated energy system (IES), particularly focusing on the process heat and heat transport system failure events that are not a concern during normal NPP operation but become vital when an IES is considered. Nuclear energy has been suggested to go beyond base-load applications and be used for hydrogen co-generation systems, amongst other IESs. Prior to the implementation of nuclear IESs, sufficient analysis must be performed on accident events to ensure public safety. The events considered were deemed important because of their potential to damage systems, structures, and components (SSCs). Process thermal events of concern include loss of heat load and temperature transient events. Loss of heat load events were characterized as having high importance and being well understood. Temperature transient events may be further categorized by the cyclic loading and harmonics phenomena. Cyclic loading issues were classified as medium to high importance with knowledge gaps existing regarding fatigue and low power operation, while harmonics phenomena were classified as low importance and are well understood. Heat transport system failure events of concern include intermediate and process heat exchanger failures, mass addition to reactor coolant, ingress of material from thermal manifold/energy storage, and loss of intermediate fluid. Furthermore, these events tended to be of high or medium importance, with some knowledge gaps needing to be filled for individual reactor systems due to unique designs.

Integrated Energy System (IES)↗

Preliminary Criticality and Radiation Shielding Analysis for the Storage and Transfer of MARVEL Reactor Spent Nuclear Fuel

This report documents the results of preliminary nuclear criticality and radiation shielding assessments during transfer and dry storage of irradiated Microreactor Applications Research Validation and Evaluation (MARVEL) reactor fuel at Idaho National Laboratory (INL). The assessments focus on transfer casks and storage canisters that are currently in use at INL, which may be compatible with the irradiated MARVEL reactor fuel. The criticality assessments were performed using the radiation transport code MCNP6 with 37 MARVEL reactor fuel elements in various configurations and scenarios. All transfer and storage configurations under dry conditions were below the assumed criticality safety limit of 0.93. Some storage and transfer configurations under wet conditions exceeded the criticality safety limit. This suggests that the appropriate administrative and engineering controls, in addition to reducing the number of MARVEL reactor fuel elements per transfer cask or storage canister, can be expected to ensure criticality safety under all scenarios. The radiation shielding assessments were performed by generating conservative neutron and photon source terms using the ORIGEN module in the SCALE suite of codes. These source spectra were used to estimate the dose equivalent rates using the radiation transport code MCNP6, both on contact and 1 m away from the fuel and transfer casks. The maximum estimated dose equivalent rate of 37 unshielded MARVEL reactor fuel elements on contact is approximately 42000 R/hr. The maximum estimated dose equivalent rates on contact to the ATR transfer cask, HFEF-5 transfer cask, and high load charger were approximately 233 mR/hr, 171 mR/hr, and 201 mR/hr, respectively. This suggests that with the appropriate administrative and engineering controls, all three transfer casks analyzed can be expected to provide sufficient radiation shielding to workers during transfer of irradiated MARVEL reactor fuel. These calculations are performed to support the planning and strategy for the MARVEL project and will demonstrate the technical viability of the different configurations discussed and help identify where engineered or administrative controls may be necessary. A complete criticality safety analysis and radiation shielding analysis, including validation and contingency and accident analysis must be completed by licensed and authorized personnel before any transfer or storage of MARVEL reactor nuclear fuel.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗