Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Cost- and Risk-Based Seismic Design Optimization of Nuclear Power Plant Safety Systems

Seismic analysis, design, and qualification of systems, structures, and components (SSCs) is a significant contributor to the capital cost of a nuclear power plant. To reduce capital costs of advanced nuclear power plants and make commercial nuclear energy more competitive, innovations are needed in their structural design and construction, and not just in the reactor core and associated systems. Seismic isolation has been identified as an important cost-cutting technology that enables standardization of equipment across various sites. This paper develops and demonstrates a cost- and risk-based seismic design optimization of a representative safety system in a nuclear power plant with the dual goals of minimizing overnight capital cost and meeting safety goals. The design optimization can also include component seismic isolation, in which case, the optimized design includes a set of equipment that needs to be seismically isolated to minimize capital cost. The open-source codes MASTODON and Dakota are used for seismic probabilistic risk assessment and design optimization, respectively. A generic nuclear facility with a safety system comprising SSCs that are common to nuclear power plants is considered for the demonstration of the design optimization and is assumed to be located at the Idaho National Laboratory site. Generic costs and seismic design cost functions are assumed for the SSCs of the safety system. The sum of the costs of the SSCs is minimized in the optimization process, while the risk of failure of the safety system is provided as a constraint. Furthermore, results show that the optimization process reduces capital costs significantly while automatically prioritizing the safety of SSCs that contribute most to the risk of the safety system.

42 ENGINEERING↗

Development of a leading simulator/trailing simulator methodology as part of an integrated safety-security analysis for nuclear power plants

Nuclear power plant (NPP) risk assessment is broadly separated into disciplines of nuclear safety, security, and safeguards. Different analysis methods and computer models have been constructed to analyze each of these as separate disciplines. However, due to the complexity of NPP systems, there are risks that can span all these disciplines and require consideration of safety-security (2S) interactions which allows a more complete understanding of the relationship among these risks. In this work, a novel leading simulator/trailing simulator (LS/TS) method is introduced to integrate multiple generic safety and security computer models into a single, holistic 2S analysis. A case study is performed using this novel method to determine its effectiveness. The case study shows that the LS/TS method avoided introducing errors in simulation, compared to the same scenario performed without the LS/TS method. A second case study is then used to illustrate an integrated 2S analysis which shows that different levels of damage to vital equipment from sabotage at a NPP can affect accident evolution by several hours.

42 ENGINEERING↗

Nonlinear control of safety factor gradient in tokamaks using spatially variable electron cyclotron current drives

Active control of plasma properties may be necessary to achieve stable operation of next-generation tokamaks over large time scales. Such control algorithms can regulate the plasma properties to avoid the onset of magnetohydrodynamic (MHD) instabilities. For instance, the global and local properties of the safety factor profile are linked to the onset of neoclassical tearing modes (NTMs). This work proposes a model-based control approach for deterring/delaying NTMs through active modulation of one of the safety factor properties - the gradient of the safety factor profile at a particular rational safety factor surface. In particular, a novel control-oriented model for the local safety factor gradient is developed. The nonlinear control model is governed by a nonautonomous ordinary differential equation that accounts for a given rational safety factor surface’s spatial variation over time. Further, to improve the controllability of the spatially evolving parameter, the control model treats ECH&CD positions, along with noninductive powers, as controllable variables. A nonlinear control algorithm based on feedback linearization with optimization is synthesized to achieve the objective of regulating the safety factor gradient around a given target. The proposed algorithm allocates optimal ECH&CD positions, in addition to auxiliary powers, at each time instant as the rational safety factor surface drifts to locations with a low control authority. Stability guarantees of the proposed control law are also discussed in this work. The proposed algorithm is tested for a DIII-D tokamak scenario in nonlinear simulations carried out using the Control Oriented Transport SIMulator (COTSIM). Both fixed and moving ECH&CD cases are studied, and their outcomes are compared. Simulation results demonstrate that enthusiastic regulation of the safety factor gradient can be achieved during the ramp-up and flat-top phases of tokamak operation in both fixed and moving ECH&CD cases. However, real-time updates of ECH&CD positions can prevent the saturation of auxiliary powers.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Updated Godiva-IV Benchmark Preview

A note of errata prepended to the Godiva-IV delayed-critical benchmark (HEU-MET-FAST- 086) identifies two corrections to be made to the model: The glory hole in the spindle should be made larger, and the height of the safety block should be made smaller (and therefore its density made larger). In addition, the safety block at its full-in position is closer to the inner subassembly plate than was modeled in the benchmark. These changes have been made to HEU-MET-FAST-086 Case 4 in order to estimate the effect on $\kappa$ eff and on the neutron flux spectrum. Using smaller separation, a smaller safety block, and a larger glory hole caused keff to increase by 453 ± 1 pcm from the benchmark. The latest nuclear data, ENDF/B-VIII.0, have also been used, causing $\kappa$ eff to increase another 37 ± 1 pcm. Flux spectra were compared in a modeled fission foil (near the center of Godiva-IV in the glory hole) and at three external (point) detectors. Within the fission foil, using ENDF/B-VIII.0 induced changes in the flux spectrum similar in size to the changes due to using smaller separation, a smaller safety block, and a larger glory hole. At the detectors, using ENDF/B- VIII.0 induced changes in the flux spectrum much larger than those due to changing the model. In other words, the corrections to the benchmark model cause a large increase in $\kappa$ eff , but the changes to the neutron flux spectrum are small compared to those caused by using the latest nuclear data. This study presents a preview of results expected during the reevaluation of the Godiva IV benchmark, but it is not a substitute for the full reevaluation.A note of errata prepended to the Godiva-IV delayed-critical benchmark (HEU-MET-FAST- 086) identifies two corrections to be made to the model: The glory hole in the spindle should be made larger, and the height of the safety block should be made smaller (and therefore its density made larger). In addition, the safety block at its full-in position is closer to the inner subassembly plate than was modeled in the benchmark. These changes have been made to HEU-MET-FAST-086 Case 4 in order to estimate the effect on $\kappa$ eff and on the neutron flux spectrum. Using smaller separation, a smaller safety block, and a larger glory hole caused $\kappa$ eff to increase by 453 ± 1 pcm from the benchmark. The latest nuclear data, ENDF/B-VIII.0, have also been used, causing $\kappa$ eff to increase another 37 ± 1 pcm. Flux spectra were compared in a modeled fission foil (near the center of Godiva-IV in the glory hole) and at three external (point) detectors. Within the fission foil, using ENDF/B-VIII.0 induced changes in the flux spectrum similar in size to the changes due to using smaller separation, a smaller safety block, and a larger glory hole. At the detectors, using ENDF/B- VIII.0 induced changes in the flux spectrum much larger than those due to changing the model. In other words, the corrections to the benchmark model cause a large increase in $\kappa$ eff , but the changes to the neutron flux spectrum are small compared to those caused by using the latest nuclear data. This study presents a preview of results expected during the reevaluation of the Godiva IV benchmark, but it is not a substitute for the full reevaluation.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

LANL Critical Benchmark Comparison Study and Subsequent Revision for Cases Involving LEU and MIX

As part of an international collaboration within the DOE Nuclear Criticality Safety Program (NCSP), LANL is involved in a comparison study to quantify differences in k-effective results from neutron transport simulations of critical benchmark experiments. The DOE NCSP Mission and Vision details the activity in which the French Institut de Radioprotection et de Sûreté Nucléaire (IRSN) leads the study with LANL, ORNL, and LLNL to compare results of various neutron transport codes and nuclear data libraries for ICSBEP benchmarks held in common by the entities. The task statement from the DOE NCSP Five-Year Execution Plan is given as: "The proposal is for IRSN to lead a new intercomparison based on the MORET code with the latest JEFF-3.3 data and ENDF/B-VIII.0 data, when available, using their existing comprehensive selection of 2,714 benchmarks and collate their results together with those from LLNL (COG), LANL (MCNP) and ORNL (SCALE). Due to the large number of benchmarks involved, this effort is envisioned to take three years with an additional year for IRSN to complete a summary report. The benchmark development will be performed independently to minimize modeling errors through discovery and resolution of discrepant results. A summary report will be generated (led by IRSN) to document the results of this study." This report documents results obtained for revisions made to cases involving Intermediate Enriched Uranium (IEU) and a mixture of Pu and Uranium (MIX), with a focus on the changes made to LANL benchmarks modeled with MCNP6 using ENDF/B-VII.1 nuclear data that appeared to have discrepant results when compared with results of other codes. Feedback was used to pinpoint review of particular benchmark input files and to revise them when necessary. This report documents the results of review and revision of specific benchmarks highlighted as possibly discrepant in the comparison study. In addition, there is an effort tied to this work involving collaboration between LANL XCP and NCS Divisions in the development of a shared review/revision procedure and use of a new benchmark repository.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Transition Core Planning and Safety Analyses in Support of LEU Fuel Conversion of the University of Missouri Research Reactor (MURR)

The University of Missouri Research Reactor (MURR®) is one of six U.S. High Performance Research Reactors (USHPRR), including one critical facility, that is working with the National Nuclear Security Administration (NNSA) Office of Material Management and Minimization (M3) Reactor Conversion Program to convert from highly enriched uranium (HEU) to low-enriched uranium (LEU) fuel. The M3 Reactor Conversion USHPRR Project objectives include the development of LEU fuel element designs that will ensure safe reactor operations and to maintain the existing experimental performance of each facility. The work is being conducted through many inter-related activities being completed by four Project Pillars: Fuel Qualification (FQ), Fuel Fabrication (FF), Reactor Conversion (RC), and Cross Cutting (CC). A new type of LEU fuel based on an alloy of uranium-10 wt% molybdenum (U-10Mo) is expected to allow the conversion of those USHPRR, like MURR, requiring higher density fuels. The very-high-density LEU U-10Mo monolithic fuel is currently undergoing irradiation testing and post-irradiation examination under a planned and documented fuel qualification effort. The FQ Pillar will document fuel property and fuel performance data and qualify the fuel for use in these reactors. The FF Pillar is fabricating fuel for ongoing and future irradiation tests, as well as conducting fabrication demonstrations to validate or update preliminary fabrication assumptions. The FF Pillar is also working to develop and install commercial manufacturing capacity with the U-10Mo monolithic fuel to produce prototypic fuel. Working with the RC Pillar at Argonne, MURR has progressed through a preliminary fuel element design using preliminary data for the proposed monolithic alloy of U-10Mo. Analyses were completed in previous work that found for typical equilibrium operations with the preliminary LEU fuel element design, in conjunction with a power uprate to 12 MW and appropriate changes to the MURR Limiting safety system settings (LSSS), MURR will have adequate margins to safety for steady-state operations and postulated transient accidents and will have experimental performance in key locations that meets or exceeds current operations with HEU fuel. The purpose of this work is to develop a sequence of transition cycles that will enable MURR to transition from operation with the reactor core loaded with fresh LEU fuel elements only to typical equilibrium operations with mixed-burnup cores following conversion while meeting operational requirements on safety and experimental performance. It is expected that the use of fresh LEU fuel at conversion and subsequent low burnup of the LEU fuel elements that will initially be available for use following conversion will result in critical control blade positions that will substantially change the axial power distribution in the core and the neutron flux available in key experimental locations relative to equilibrium LEU operations. Given the constraints of MURR safety margins, operational practices, and production and research, a novel method has been developed to identify a transition sequence that minimizes the time MURR operates atypically compared to the current prototypic cycles using HEU fuel. The proposed transition sequence moves quickly to the same sort of equilibrium cycles for the LEU fuel that have already been evaluated in documented preliminary safety analyses. Although shifting the neutron flux peak to the lower half of the core during initial cycles with LEU at 12 MW reduces the experiment performance in some key locations relative to current HEU operations at 10 MW, all LEU cores provide an average performance that meets or exceeds that of HEU. An LEU cycle is reached that meets or exceeds the level of experimental performance predicted for current HEU and equilibrium LEU operations in more than 450 key locations identified by a reactor specialist at MURR by the 23rd cycle following conversion and that afterwards will enable MURR to consistently meet its experimental performance requirements. The proposed transition sequence only requires the fabrication of 34 fresh LEU elements in the first year of operation and does not exceed the anticipated availability of fresh elements that can be produced by the fuel fabricator. By the third year after conversion, 22 fresh LEU elements will be required each year, which is the same as expected for equilibrium LEU operations and the same as current operations with HEU fuel. The proposed transition sequence thus combines a relatively short time period before equilibrium burnup is achieved, a temporary increase of fuel elements needed annually relative to typical operations that are within the production capabilities of the fuel fabricator, and demonstrates comparable experimental performance of the LEU cores relative to current HEU operations. Further measures may be taken to reduce any initial experimental performance penalty even further, where possible, by repositioning certain experiments to leverage the increased performance in the lower axial experimental positions in the initial cycles following conversion or leaving the experiments in the irradiation facilities longer in order to achieve the required neutron fluence. This analysis may require refinement depending on the experimental facilities in use at the time of conversion. Nonetheless, the results presented here, including the experimental performance, core burnup, and critical control blade positions throughout the transition cycles, show that the proposed transition cycle fuel management patterns are consistent with what is expected and desired for MURR operation with LEU U-10Mo fuel. Detailed core power distributions from the neutronics models were also used to evaluate safety margins during steady-state operations for the selected transition cycles and the equilibrium LEU core. It is shown that there are adequate safety margins for both steady-state operations and postulated accident scenarios. For the steady-state operations with the preliminary LEU fuel element design the analysis predicts at least 2.49 MW margin to the onset of flow instability at the LSSS power of 15 MW. Considering the LSSS power is 125% of full license power, the margin to OFI is sufficient. In addition, the critical heat flux ratio at LSSS power is well above the requirement of CHFR > 2.0 from NUREG-1537 for all considered cases. For postulated transient accidents, the minimum margin to the fuel temperature safety limit is at least 109 °C. In summary, the proposed sequence of core loadings for MURR operations following conversion to LEU fuel and a power uprate to 12 MW provides sufficient safety margins for both steady-state operations and postulated transient accidents during a proposed sequence of transition cycles to equilibrium operations. Analysis has shown that there are some local experimental performance penalties during the initial cycles. Although there are local shifts in the experimental performance, on average all LEU cores at 12 MW have equal or higher performance than HEU at 10 MW. Temporary adjustments are being planned that will produce suitable experimental performance during these cycles. The results indicate that for the equilibrium LEU core the experimental performance exceeds that of current HEU operations in all key locations while also demonstrating sufficient safety margins.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

UL 1741SC Conformance Development, Evaluation, and Proposal [Slides]

V2G AC is a type of grid interconnection by mobile battery that transforms an EV into a DER with the potential to stabilize the grid and lower costs for electricity. UL 1741SC is a critical new standard to enable grid interconnection of V2G AC-capable vehicles, by defining requirements for V2G AC-intended EVSEs as a gatekeeper between the grid and the EV to support grid safety, such as through redundant voltage trip (namely oversight). EVSE manufacturers need a clear set of conformance test cases and criteria by which to evaluate their equipment and confirm the compliance with UL 1741SC, so that the EVSEs performs as intended for the grid safety. Hence, NLR identified necessary conformance tests and performed the tests identified to understand the maturity.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Teleoperation of Construction Robots Using Human Interaction: Case Study Examples: Preprint

The integration of advanced teleoperation methods in construction robotics has the potential to enhance productivity and safety in demanding environments. Among different methods, hand gestures have emerged as an intuitive approach, enabling seamless communication between human operators and robotic systems. This study demonstrates the use of hand gestures for controlling a model robotic excavator and a virtual robotic arm in construction applications. Two case study examples are presented. In the first case study, a series of hand gestures are performed to control a model robotic excavator's bucket and arm movements. The second case study focuses on using hand gestures to control a virtual robotic arm to perform a material handling task in a simulated environment. In both cases, the performed hand gestures are all successfully captured and interpreted by the gesture-based teleoperation method to conduct the corresponding tasks, which demonstrates the application of the gesture-based control method for various types of construction robots. Also, the limitations of the gesture-based teleoperation method (e.g., recognition delay, sensitivity to motion outliers) are discussed. Future work will focus on developing a digital twin system to support gesture-based teleoperation for a wider range of construction robots.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Investigation on the explosion dynamics of large-format lithium-ion pouch cells

Explosion is the most extreme case of thermal runaway of lithium-ion (Li-ion) batteries. In this study, explosion dynamics of large-format Li-ion cells are investigated experimentally and numerically. Overcharge-to-explosion tests are conducted on 40 Ah Li-ion cells with Li[Ni 0.8 Co 0.1 Mn 0.1 ]O 2 cathode. Based on the explosion physics, shockwave and detonation models are used to characterize the shock effect of the cell explosion and evaluate the explosion equivalent. Von Neumann peak is observed on the pressure curves, and the shockwave velocity is supersonic at this time; the unwrinkled spherical flame phenomenon observed in the experiment indicates that it is detonation. Additionally, a geometric model is established based on the real testing scenario, and the explosion behavior is numerically studied. The characteristics of the explosion dynamics process are interpreted and the propagation mechanism of the shockwave are revealed; the deflagration to detonation transition (DDT) phenomenon in this process is caused by the formation of “hot spots”, and the explosion of the cells eventually turns into stable combustion. Here this study fills the gap in the research on thermal runaway of Li-ion cells, especially in the extreme cases of fire and explosion, and provide useful guidance for battery safety.

42 ENGINEERING↗

FEED Study of CarbonCapture Inc DAC and CarbonCure Utilization Technologies Using United States Steel’s Gary Works Plant Waste Heat (Final Report)

The University of Illinois at Urbana-Champaign (UIUC) led this project to produce a front-end engineering design (FEED) study of an advanced Direct Air Capture and Utilization System (DACUS) system that can remove a minimum of 5,000 tonnes/yr net of carbon dioxide from air (based on cradle-to-gate LCA) and utilizing the CO 2 to produce low carbon intensity ready mix concrete. The designed system, if built, would be larger than any currently existing Direct Air Capture (DAC) collector in the U.S. Such carbon capture technologies are critical to meeting the goals of the DOE’s program to accelerate climate-critical technology. In addition to the power sector, industrial facilities for the manufacture of steel and cement/concrete are among the major sources of anthropogenic CO 2 . DAC is a promising new technology for reducing CO 2 , a potent greenhouse gas, in the atmosphere but is expensive, in part due to the energy required to adsorb and desorb captured CO 2 during cycles. By integrating CarbonCapture Inc. (CCI) DAC modules at United States Steel's Gary Works (USS) and utilizing the site's waste heat, energy, and location this project evaluates the feasibility of utilizing the captured CO 2 and the logistics of transportation. CarbonCapture Inc. has developed an innovative DAC system using novel adsorbents to cost-effectively capture CO 2 . The captured, liquified gas will be trucked to ready-mix concrete plants within the region, the closest of which is approximately 3.5 miles away, where CarbonCure will inject it into concrete during the mixing process at the facilities. The carbon dioxide reacts with concrete, mineralizing into calcium carbonate (CaCO 3 ), permanently locking the greenhouse gas into the matrix of the building material. This FEED study demonstrated a full CO 2 value chain for DACUS from industrial facilities. It also provided a means for Visage Energy Corp. (Visage) to assess the impact of this holistic approach on job creation, regional economic impact, and environmental justice. The project team also included Sargent & Lundy (S&L) to provide the constructability review and costing of the integration of the DAC with the steel plant. Ecotek Engineering USA, LLC designed the outside battery limit (OSBL) infrastructure to connect the DAC and the plant. Activities performed during the project included: (1) Project Management Plan; (2) Technology Maturation Plan (TMP); (3) Initial Workforce Readiness Plan; (4) Workforce Readiness Plan; (5) Front-End Engineering Design (FEED) Study; (6) Project Design Basis; (7) Hazards and Operability (HAZOP) Study; (8) Constructability Review; (9) Project Cost Assessment; (10) Logistics Analysis of CO 2 Transportation to the Utilization Site; (11) Business Case Analysis; (12) Life Cycle Analysis (LCA); (13) Environmental Health and Safety (EH&S) Analysis; (14) Environmental Justice Analysis; and (15) Economic Revitalization and Job Creation Outcomes Analysis. This report provides a summary of the outcomes and results of the project, which was performed between Oct. 1, 2022, through Sept. 30, 2024.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Improving Performance via Energy Efficiency JUSTIFI: Open-Source Software for Identifying and Quantifying Non-Energy Benefits

Energy efficiency is pivotal to achieving operational excellence, as it enhances value while reducing waste. This presentation explores the integration of non-energy benefits (NEBs) into energy efficiency projects, which can lead to risk reduction, value creation, and cost savings. By quantifying NEBs - such as improved safety, decreased pollution, and increased productivity - companies can strengthen their business cases for energy investments, ultimately improving payback periods and aligning with strategic goals. Designed for a diverse audience, from trained auditors to novices in energy assessments, we have developed open-source software called JUSTIFI, NEB finding methodology, and training materials which build on existing frameworks and leverages resources from the U.S. Department of Energy and Better Plants energy system analysis software suite such as MEASUR. This work aims to maximize ROI through NEB identification, utilizing tools like JUSTIFI and the NEBs Discovery Protocol.

97 MATHEMATICS AND COMPUTING↗

Electrostatic dust remediation for future exploration of the Moon

Dust accumulation is one of the critical issues that must be mitigated on in-situ lunar explorations because an in-situ probe is exposed to small dust particles, which are easily attached to it, during its operations. The Lunar Dust Science Definition Team is organized by the Jet Propulsion Lab/California Institute of Technology through NASA’s Biological and Physical Sciences Division to define key science questions and assess dust remediation techniques. Here, we assess three electrostatic remediation technology concepts: electrostatic dust shield; surface electrostatically collecting dust, later called attractive surface; and electron beam — plasma jet inducing electrostatic dust lofting from a surface. We qualitatively investigate their maturity by defining six operational factors: Time and location; Amount of dust removal; Contamination of target surfaces; Operation duration; Installation; and Safety. In addition to these techniques, we discuss a supporting system that loads dust particles onto a test article to examine dust removal efficiency. Here, the results show that further development increases the maturity of all the technologies. While laboratory and theoretical demonstrations reported whether each technology robustly work on the Moon, which hosts a complex, heterogeneous dust environment, we find that it is still uncertain if this is the case because none has been tested in the lunar environment. Particularly, operation duration and safety are critical to be addressed further on both laboratory and spaceflight scales.

42 ENGINEERING↗

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

New Mobility Technology Assessment - Benefits, Risks, and Safety

The age of vehicle automation is upon us. The fundamental perception and control technology is maturing as we speak (and write) with robo-taxis proliferating in select US cities. The news cycle is no longer filled with technological skepticism, but rather societal commentary on our collective response and use of the technology. This maturing of the technology is also accompanied by a renaissance in new types of urban movement technology to more effectively link people with goods, services, and employment, particularly in dense development areas where vehicle congestion (even automated vehicles) prevents high quality mobility. The National Renewable Energy Laboratory, through the DOE Clean Energy to Communities (C2C) program has worked with two jurisdictions to assess the benefits, risks, and safety concerns for a new product offering based on suspended cable technology which is fully automated and proposes an aerial network of self-propelled gondolas. The recognized need, independent of the technology, is to fairly assess the benefits of the proposed transportation system, assess its technical maturity, as well as risks and safety concerns. Using this new technology as an example, a technology represented by Swyft Cities, NREL developed a succession of mini-studies that characterized the technical maturity level, assessed the proposed benefits for Greenville, SC, examined the risks involved in moving forward with an emerging mobility technology, and determined the governing safety protocols and standards that are applicable to the space. These mini-case studies, though centered on Swyft Cities aerial automated gondola technology, are highly transferable to any type of new mobility technology and lays out a repeatable process for assessing new technology within an city or community context.

33 ADVANCED PROPULSION SYSTEMS↗

How can a diverse set of integral and semi-integral measurements inform identification of discrepant nuclear data?

Nuclear data are used for a variety of applications, including criticality safety, reactor performance, and material safeguards. Despite the breadth of use-cases, the effective neutron multiplication factor, keff, of ICSBEP critical assemblies are primarily used for nuclear data validation; these are sensitive to specific energy regions and nuclides and are unable to uniquely constrain nuclear data. As a consequence, general-purpose nuclear data libraries, such as ENDF/B-VIII.0, may have deficiencies that, while not apparent in criticality applications, negatively impact other applications, such as non-destructive analysis of special nuclear material and neutron diagnosed subcritical experiments. Recent work by the Experiments Underpinned by Computational Learning for Improvements in Nuclear Data (EUCLID) project developed a machine learning tool, RAFIEKI, which uses random forests and the SHAP metric to determine which nuclear data contribute most to predicted bias between measured and simulated responses (e.g. keff). This paper contrasts RAFIEKI analysis applied to keff only against RAFIEKI analysis with keff paired with either LLNL pulsed sphere measurements or subcritical benchmarks. Two examples show that a) including pulsed sphere measurements substantially increases 9Be nuclear data importance to bias between 2 and 15 MeV, and b) including subcritical benchmarks has the potential for disentangling compensating errors between 240Pu (n,el) and (n,il) cross-sections between 0.1 and 10 MeV. These results show that RAFIEKI analysis applied to response sets that include, but go beyond, keff can aid nuclear data evaluators in identifying issues in nuclear data.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Radiation induced non-linear oscillations in ITER baseline scenario plasmas in DIII-D

Abstract This work shows how the radiation brought about by metals or metal-equivalent radiators such as Kr and Xe produces non-linear dynamics on otherwise stationary β N flattops of DIII-D ITER Baseline Scenario demonstration discharges. The Kr and Xe gases are used to reproduce the radiative loss rates of W in present machines that operate at core temperatures much lower than the expected ITER temperature. Experiments on DIII-D with injection of Kr and Xe, as well as with sources of intrinsic metals reach the range of radiated fraction values expected in the ITER core and experience slow oscillations in temperature and radiated power. In many cases of high radiated fraction, the core temperature decreases enough for the safety factor profile to rise above the 1/1 rational surface, naturally eliminating sawteeth and occasionally producing a persistent helical core. The oscillations can be reproduced by a modified Lotka–Volterra system for temperature and radiated fraction if diffusion and noise are included, which indicates that the interplay between temperature and radiation can be the main cause of the cyclic nature of the system. A new physics based model which includes equations for temperature, density and input power can also reproduce the oscillations observed in the experiments. The present results suggest that the non-linearity of the system can be increased by the inclusion of the inherently non-linear alpha heating term, which is proportional to ∼ n e 2 T i 2 , and obtains oscillations in the model when added to an otherwise more stationary system.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Systematic Enterprise Risk Management by Integrating the RISMC Toolkit and Cost-Benefit Analysis (Final Report)

The goal of this research is to theorize and quantify the relationships between safety and the financial performance of nuclear power plants (NPPs). The Socio-Technical Risk Analysis (SoTeRiA) theoretical framework, which connects the social aspects (e.g., safety culture) and structural features (e.g., safety practices) of an organization with organizational safety and financial risks, is used to theorize the direct and indirect relationships between safety and the financial performance of NPPs. An Integrated Enterprise Risk Management (I-ERM) methodological framework is developed to operationalize SoTeRiA to quantify NPP safety and financial performance in a unified platform where their underlying physical degradation mechanisms, coupled with maintenance performance (considering human and organizational factors), are explicitly incorporated to depict the interconnections and dependencies between safety and financial performance. In this study, NPP safety refers to both occupational safety and system safety (estimated from Probabilistic Risk Assessment, PRA), and financial performance refers to the monetary values associated with NPP operation and maintenance (O&M) strategies. This report covers a case study demonstrating the feasibility of the I-ERM methodological framework. More detailed development of one of the I-ERM modules, i.e., Probabilistic Physics-of-Failure (PPoF) analysis, and its connection with other I-ERM modules is demonstrated in a second case study. The outcome of this research will help NPP decision-makers create cost-saving maintenance strategies while maintaining safety by providing cost- and risk-informed recommendations regarding maintenance work processes and operational strategies.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗