Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 325 records · Page 18

The Challenges of Safe Troubleshooting Work

Troubleshooting work presents electrical and other workers with a challenging combination of physical hazards, working conditions, and time pressure, which can lead to unwanted outcomes if not carefully managed. Summaries of several incidents in which workers were injured or at risk of injury while performing troubleshooting work are presented, identifying organizational weaknesses and error precursors that contributed to each incident. The primary challenges include: Deranged equipment. Equipment that needs troubleshooting is not in a normal operating condition. Actions that are safe when the equipment is in a normal state may not be safe in the deranged state. Work planning and control. The steps taken in troubleshooting are most often determined by the results of the immediately previous diagnostic test, making effective work planning challenging. Multiple types of hazards. Most equipment will present a troubleshooting worker with several types of hazards, including hazardous energy as defined in 29 CFR 1910.147. Portions of the troubleshooting activity may be infeasible without these hazards present. Time pressure. Restoring operation of failed equipment often involves an explicit or implicit sense of urgency. There are effective methods for addressing each challenge, most of which require a combination of advance preparation and management commitment.

Mertz, David E.↗

Automatic Hazard Detection for Landers

Unmanned planetary landers to date have landed 'blind'; that is, without the benefit of onboard landing hazard detection and avoidance systems. This constrains landing site selection to very benign terrain,which in turn constrains the scientific agenda of missions. The state of the art Entry, Descent, and Landing (EDL) technology can land a spacecraft on Mars somewhere within a 20-100km landing ellipse.Landing ellipses are very likely to contain hazards such as craters, discontinuities, steep slopes, and large rocks, than can cause mission-fatal damage. We briefly review sensor options for landing hazard detection and identify a perception approach based on stereo vision and shadow analysis that addresses the broadest set of missions. Our approach fuses stereo vision and monocular shadow-based rock detection to maximize spacecraft safety. We summarize performance models for slope estimation and rock detection within this approach and validate those models experimentally. Instantiating our model of rock detection reliability for Mars predicts that this approach can reduce the probability of failed landing by at least a factor of 4 in any given terrain. We also describe a rock detector/mapper applied to large-high-resolution images from the Mars Reconnaissance Orbiter (MRO) for landing site characterization and selection for Mars missions.

hazard detection↗

Odyssey Mars Orbiter - Thirteen Years of On-Orbit Navigation

The Odyssey spacecraft has been in Mars orbit since October 24, 2001 and has nearly completed 61,490 orbits. Navigation operational objectives include the following: Control the local mean solar time for science observations; for most of the mission, this varied from 3:45 pm to 5:20 pm. Currently, an orbit trim maneuver planned for November 10, 2015 will place Odyssey at 6:45 pm/6:45 am at equator crossings in order to observe early morning ground frost, fog and clouds. Initially, Odyssey was late by 42 minutes for an over-flight of the critical seven minutes of Phoenix's entry, descent and landing (EDL). Odyssey was successfully positioned for this over-flight using the Delta V from angular momentum desaturations (AMD). Similar results for the Mars Science Laboratory's EDL and Comet Siding Spring's minimum risk location will be presented. Odyssey has and continues to relay significant quantities of rover data. Navigation successfully models frequent AMD Delta Vs in order to generate accurate sixty-day trajectory predictions; a typical timing error is 25 seconds after 60 days. However, unexpected events, such as safe-mode entries with their larger and more frequent thrusting, severely impact that trajectory accuracy. Impacted trajectories can have timing errors ranging from a few minutes to ten-to-fifteen minutes after sixty-days. Other analyses (briefly stated) include: a) the offset of the orbital ground track pattern after an initial cycle of 30 days or 362 orbits and b) an operations environment of continuous thrusting if/when one of the three remaining reaction wheels fails.

trajectory accuracy↗

Reducing Aviation Fuel Costs with Non-Destructive Testing

Thermal barrier coatings (TBCs) are absolutely critical to the efficient and safe operation of gas turbine engines (GTEs). Manufacturing TBCs is a complex chemical, thermal and mechanical process that requires precise control. And yet, the variation in life of a TBC operated within a GTE is large. This variation ultimately reduces operational performance via a designed reduction to the turbine entry temperature, T4.This paper makes the case for developing advanced THz and sub-millimeter based nondestructive testing (NDT) techniques, capable of estimating when TBC components will fail. Such a technique could identify TBCs with low expected remaining useful lifetimes, directly after production. These TBCs could be re-manufactured, thereby not only improving their own expected useful life, but also the mean lifetime of the entire manufacturing population. A series of calculations demonstrates that TBCs with enhanced life characteristics can withstand higher T4 temperatures. Assuming that a GTE is to operate at a constant thrust, this increased temperature can be traded for a reduction in fuel flow. An analysis comparing fuel savings to manufacturing costs shows that substantial savings are achievable.

microwaves↗

Constellations: A New Paradigm for Earth Observations

The last decade has seen a significant increase in the number and the capabilities of remote sensing satellites launched by the international community. A relatively new approach has been the launching of satellites into heterogeneous constellations. Constellations provide the scientists a capability to acquire science data, not only from specific instruments on a single satellite, but also from instruments on other satellites that fly in the same orbit. Initial results from the A-Train (especially following the CALIPSO/CloudSat launch) attest to the tremendous scientific value of constellation flying. This paper provides a history of the constellations (particularly the A-Train) and how the A-Train mission design was driven by science requirements. The A-Train has presented operational challenges which had not previously been encountered. Operations planning had to address not only how the satellites of each constellation operate safely together, but also how the two constellations fly in the same orbits without interfering with each other when commands are uplinked or data are downlinked to their respective ground stations. This paper discusses the benefits of joining an on-orbit constellation. When compared to a single, large satellite, a constellation infrastructure offers more than just the opportunities for coincidental science observations. For example, constellations reduce risks by distributing observing instruments among numerous satellites; in contrast, a failed launch or a system failure in a single satellite would lead to loss of all observations. Constellations allow for more focused, less complex satellites. Constellations distribute the development, testing, and operations costs among various agencies and organizations for example, the Morning and Afternoon Constellations involve several agencies within the U.S. and in other countries. Lastly, this paper addresses the need to plan for the long-term evolution of a constellation. Agencies need to have a replenishment strategy as some satellites age and eventually leave the constellation. This will ensure overlap of observations, thus providing continuous, calibrated science data over a much longer time period. Thoughts on the evolution of the A-Train will also be presented.

Kelly, Angelita C.↗

Controlled Environmental Effects on Creep Test Data of Woven Fabric Webbings for Inflatable Space Modules

eveloping technologies for proposed lunar and Mars space exploration missions. Enhanced habitation sy g studied as potential habitats due to their inherent low mass and small launch volume. One goal of inflatable module research is quantification of the safe-life and end-of-life creep-strain spectrum. Full-scale pressurized inflatable modules are large, costly, and difficult to experimentally study. Therefore, material subcomponents are often studied as an alternative. An experimental thermally controlled long-term creep study of VectranTM webbings for application to inflatable modules is presented. Vectran fibers have high strength and low creep properties. High strength webbing materials are desirable for the load bearing restraint layer of inflatable modules because they are strong, flexible, and lightweight. Characterization of the creep behavior, safe-life, and end-of- life of webbing specimens will help quantify comparable life properties for inflatable modules. Several experimental multiple-year creep studies of webbing specimens in uncontrolled thermal environments have been conducted at NASA Langley Research Center. Experimental data obtained exhibits the classic creep-strain curve due to load, coupled with unique sinusoidal variation due to variation in temperature and humidity over daily and annual time periods. Results also have indicated that specimens fail within a year if the applied load is greater than 50 percent of the rated load. The primary goal of this study is to eliminate thermal effects from the creep data for a group of webbing specimens, and to allow uncontrolled thermal effects to influence the creep data of a second group of webbing specimens. Comparison of both sets of data will define how temperature influences creep data. A unique creep test facility was fabricated to facilitate the generation and comparison of the two sets of data. The facility consists of five creep test stands with an integrated heating and cooling system, and four creep test stands exposed to external environmental or ambient conditions. The facility contains displacement, temperature, humidity, and load sensors. Test specimens consist of one- inch wide, 48-inch long Vectran webbings rated at 12,500 pounds-per-inch. Experimental thermally controlled creep-strain data has been generated for two groups of webbing specimens. Applied load for all test stands was above 9000 lbs and greater than 50 percent of the rated load. Temperatures varied between 58˚F and 83˚F for the four test stands exposed to ambient conditions. Associated creep data exhibited the classic creep- strain profiles. The temperature was set to 72˚F for the five test stands in the controlled temperature environment. Creep data for tests with temperature control also exhibited the classic strain profiles. Data indicated that if the load is greater n thermal effects do not manifest. Therefore, creep tests with loads less than 50 percent of the rated load are planned for in the near future.

Kenner, Winfred S.↗

Avionics Configuration Assessment for Flightdeck Interval Management: A Comparison of Avionics and Notification Methods

Flightdeck Interval Management is one of the NextGen operational concepts that FAA is sponsoring to realize requisite National Airspace System (NAS) efficiencies. Interval Management will reduce variability in temporal deviations at a position, and thereby reduce buffers typically applied by controllers - resulting in higher arrival rates, and more efficient operations. Ground software generates a strategic schedule of aircraft pairs. Air Traffic Control (ATC) provides an IM clearance with the IM spacing objective (i.e., the TTF, and at which point to achieve the appropriate spacing from this aircraft) to the IM aircraft. Pilots must dial FIM speeds into the speed window on the Mode Control Panel in a timely manner, and attend to deviations between actual speed and the instantaneous FIM profile speed. Here, the crew is assumed to be operating the aircraft with autothrottles on, with autopilot engaged, and the autoflight system in Vertical Navigation (VNAV) and Lateral Navigation (LNAV); and is responsible for safely flying the aircraft while maintaining situation awareness of their ability to follow FIM speed commands and to achieve the FIM spacing goal. The objective of this study is to examine whether three Notification Methods and four Avionics Conditions affect pilots' performance, ratings on constructs associated with performance (workload, situation awareness), or opinions on acceptability. Three Notification Methods (alternate visual and aural alerts that notified pilots to the onset of a speed target, conformance deviation from the required speed profile, and reminded them if they failed to enter the speed within 10 seconds) were examined. These Notification Methods were: VVV (visuals for all three events), VAV (visuals for all three events, plus an aural for speed conformance deviations), and AAA (visual indications and the same aural to indicate all three of these events). Avionics Conditions were defined by the instrumentation (and location) used to present IM information to crews: (1) Integrated (IM information is embedded in extant PFD (Primary Flight Display), ND (Navigation Display), EICAS (Engine Indicating and Crew Alerting System) displays); (2) EFB_Aft (IM information is only supplied in an EFB and mounted in location similar to that for MITRE's UPS work); (3) EFB_Fore (IM information is only supplied in an EFB which is mounted more forward, under the side window), and (4) EFB_Aft plus use of an AGD (the same IM information is supplied in an EFB and on an AGD, both mounted in locations similar to that in MITRE's UPS work ). Twelve commercial pilot crews flew descent scenarios (VNAV Speed with the mode control panel (MCP) speed window open until flaps extended, then VNAV Path) in a commercial transport flight simulator with realistic visual scene and communications. The results of this study serve three practical aims: (1) contribute to the down-select of avionics configuration for future assessment of the ASTAR spacing algorithm at NASA; (2) provide information useful to the FAA Human Factors Division (ANG-C1)'s mission to identify issues pertinent to flight certification of, and flight standards; (3) identify methodological considerations in support of future FIM human-in-the-loop (HITL) investigations.

Latorella, Kara A.↗

Flying Qualities Evaluation of a Commuter Aircraft With an Ice Contaminated Tailplane

During the NASA/FAA (Federal Aviation Administration) Tailplane Icing Program, pilot evaluations of aircraft flying qualities were conducted with various ice shapes attached to the horizontal tailplane of the NASA Twin Otter Icing Research Aircraft. Initially, only NASA pilots conducted these evaluations, assessing the differences in longitudinal flight characteristics between the baseline or clean aircraft, and the aircraft configured with an Ice Contaminated Tailplane (ICT). Longitudinal tests included Constant Airspeed Flap Transitions, Constant Airspeed Thrust Transitions, zero-G Pushovers, Repeat Elevator Doublets, and Simulated Approach and Go-Around tasks. Later in the program, guest pilots from government and industry were invited to fly the NASA Twin Otter configured with a single full-span artificial ice shape attached to the leading edge of the horizontal tailplane. This shape represented ice formed due to a 'Failed Boot' condition, and was generated from tests in the Glenn Icing Research Tunnel on a full-scale tailplane model. Guest pilots performed longitudinal handling tests, similar to those conducted by the NASA pilots, to evaluate the ICT condition. In general, all pilots agreed that longitudinal flying qualities were degraded as flaps were lowered, and further degraded at high thrust settings. Repeat elevator doublets demonstrated reduced pitch damping effects due to ICT, which is a characteristic that results in degraded flying qualities. Pilots identified elevator control force reversals (CFR) in zero-G pushovers at a 20 deg flap setting, a characteristic that fails the FAR 25 no CFR certification requirement. However, when the same pilots used the Cooper-Harper rating scale to perform a simulated approach and go-around task at the 20 deg flap setting, they rated the airplane as having Level I and Level II flying qualities respectively. By comparison, the same task conducted at the 30 deg flap setting, resulted in Level II flying qualities for the approach portion, and Level III for the go-around portion.The results of this program indicate that safe and acceptable flying qualities with an ICT condition, can be effectively assessed by task-oriented pilot maneuvers. In addition, other maneuvers such as repeat elevator doublets provide good qualitative and quantitative assessments of pitch damping and elevator effectiveness, which are characteristics that correlate well with pilot task ratings. The results of this testing indicate that the FAR 25 zero-G pushover maneuver, which requires no CFR during its execution, may be an overly conservative pass/fail criteria for aircraft certification.

Ranaudo, Richard J.↗

CloudSat Anomaly Recovery and Operational Lessons Learned

In April 2011, NASA's pioneering cloud profiling radar satellite, CloudSat, experienced a battery anomaly that placed it into emergency mode and rendered it operations incapable. All initial attempts to recover the spacecraft failed as the resultant power limitations could not support even the lowest power mode. Originally part of a six-satellite constellation known as the "A-Train", CloudSat was unable to stay within its assigned control box, posing a threat to other A-Train satellites. CloudSat needed to exit the constellation, but with the tenuous power profile, conducting maneuvers was very risky. The team was able to execute a complex sequence of operations which recovered control, conducted an orbit lower maneuver, and returned the satellite to safe mode, within one 65 minute sunlit period. During the course of the anomaly recovery, the team developed several bold, innovative operational strategies. Details of the investigation into the root-cause and the multiple approaches to revive CloudSat are examined. Satellite communication and commanding during the anomaly are presented. A radical new system of "Daylight Only Operations" (DO-OP) was developed, which cycles the payload and subsystem components off in tune with earth eclipse entry and exit in order to maintain positive power and thermal profiles. The scientific methodology and operational results behind the graduated testing and ramp-up to DO-OP are analyzed. In November 2011, the CloudSat team successfully restored the vehicle to consistent operational collection of cloud radar data during sunlit portions of the orbit. Lessons learned throughout the six-month return-to-operations recovery effort are discussed and offered for application to other R&D satellites, in the context of on-orbit anomaly resolution efforts.

cloud profiling radar satellite↗

Coconut oil derived five‐component synthetic oviposition deterrent for oriental fruit fly, Bactrocera dorsalis

Abstract BACKGROUND Bactrocera dorsalis, oriental fruit fly (OFF), is one of the most destructive agricultural pests. Although bait sprays can effectively control OFF,resistance development has been a concern. We evaluated the oviposition deterrent activity of coconut free fatty acids (CFFA), a mixture of eight coconut oil‐derived fatty acids known to repel hematophagous insects and deter their feeding and oviposition, against OFF females. RESULTS In laboratory 72‐h two‐choice assays using guava‐juice infused‐agar as an oviposition substrate, CFFA deterred OFF oviposition in a dose‐dependent manner with the greatest reduction of 87% at 20 mg dose compared to the control. When the eight CFFA components were tested individually, four compounds (caprylic, capric, oleic, and linoleic acids) significantly reduced OFF oviposition (‘negative‐compounds’), two (lauric and myristic acids) had no effect (‘neutral‐compounds’), and two (palmitic and stearic acids) stimulated OFF oviposition (‘positive‐compounds’). In two‐choice tests, the ‘negative‐compounds’ blend failed to elicit the same level of oviposition reduction as CFFA at equivalent concentrations found in CFFA. Adding the two ‘neutral‐compounds’ recovered the oviposition deterrence similar to CFFA. Subsequent subtraction tests showed that four ‘negative‐compounds’ plus lauric acid was as effective as CFFA in reducing OFF oviposition in guava‐juice agar. This five‐component key‐deterrent blend also reduced OFF oviposition by 95 and 72% on papaya and tomato fruit, respectively. CONCLUSION CFFA acts as an oviposition deterrent for OFF. Given that CFFA compounds are generally regarded as safe for humans and the environment, CFFA and its bioactive components have potential use in behavioral control strategies against OFF. © 2023 Society of Chemical Industry. This article has been contributed to by U.S. Government employees and their work is in the public domain in the USA.

Agriculture↗

Software Health Management: A Short Review of Challenges and Existing Techniques

Modern spacecraft (as well as most other complex mechanisms like aircraft, automobiles, and chemical plants) rely more and more on software, to a point where software failures have caused severe accidents and loss of missions. Software failures during a manned mission can cause loss of life, so there are severe requirements to make the software as safe and reliable as possible. Typically, verification and validation (V&V) has the task of making sure that all software errors are found before the software is deployed and that it always conforms to the requirements. Experience, however, shows that this gold standard of error-free software cannot be reached in practice. Even if the software alone is free of glitches, its interoperation with the hardware (e.g., with sensors or actuators) can cause problems. Unexpected operational conditions or changes in the environment may ultimately cause a software system to fail. Is there a way to surmount this problem? In most modern aircraft and many automobiles, hardware such as central electrical, mechanical, and hydraulic components are monitored by IVHM (Integrated Vehicle Health Management) systems. These systems can recognize, isolate, and identify faults and failures, both those that already occurred as well as imminent ones. With the help of diagnostics and prognostics, appropriate mitigation strategies can be selected (replacement or repair, switch to redundant systems, etc.). In this short paper, we discuss some challenges and promising techniques for software health management (SWHM). In particular, we identify unique challenges for preventing software failure in systems which involve both software and hardware components. We then present our classifications of techniques related to SWHM. These classifications are performed based on dimensions of interest to both developers and users of the techniques, and hopefully provide a map for dealing with software faults and failures.

Pipatsrisawat, Knot↗

Airborne Radar for sUAS Sense and Avoid

A primary challenge for the safe integration of small UAS operations into the National Airspace System (NAS) is traffic deconfliction, both from manned and unmanned aircraft. The UAS Traffic Management (UTM) project being conducted at the National Aeronautics and Space Administration (NASA) considers a layered approach to separation provision, ranging from segregation of operations through airspace volumes (geofences) to autonomous sense and avoid (SAA) technologies for higher risk, densely occupied airspace. Cooperative SAA systems, such as Automatic Dependent Surveillance-Broadcast (ADS-B) and/or vehicle-to-vehicle communication systems provide significant additional risk mitigation but they fail to adequately mitigate collision risks for non-cooperative (non-transponder equipped) airborne aircraft. The RAAVIN (Radar on Autonomous Aircraft to Verify ICAROUS Navigation) flight test being conducted by NASA and the Mid-Atlantic Aviation Partnership (MAAP) was designed to investigate the applicability and performance of a prototype, commercially available sUAS radar to detect and track non-cooperative airborne traffic, both manned and unmanned. The radar selected for this research was a Frequency Modulated Continuous Wave (FMCW) radar with 120 degree azimuth and 80 degree elevation field of view operating at 24.55GHz center frequency with a 200 MHz bandwidth. The radar transmits 2 watts of power thru a Metamaterial Electronically Scanning Array antenna in horizontal polarization. When the radar is transmitting, personnel must be at least 1 meter away from the active array to limit nonionizing radiation exposure. The radar physical dimensions are 18.7cm by 12.1cm by 4.1cm and it weighs less than 820 grams making it well suited for installation on small UASs. The onboard, SAA capability, known as ICAROUS, (Independent Configurable Architecture for Reliable Operations of Unmanned Systems), developed by NASA to support sUAS operations, will provide autonomous guidance using the traffic radar tracks from the onboard radar. The RAAVIN set of studies will be conducted in three phases. The first phase included outdoor, ground-based radar evaluations performed at the Virginia Tech’s Kentland Farm testing range in Blacksburg, VA. The test was designed to measure how well the radar could detect and track a small UAS flying in the radar’s field of view. The radar was used to monitor 5 test flights consisting of outbound, inbound and crossing routes at different ranges and altitudes. The UAS flown during the ground test was the Inspire 2, a quad copter weighing less than 4250 grams (10 pounds) at maximum payload. The radar was set up to scan and track targets over its full azimuthal field of view from 0 to 40 degrees in elevation. The radar was configured to eliminate tracks generated from any targets located beyond 2000 meters from the radar and moving at velocities under 1.45 meters per second. For subsequent phases of the study the radar will be integrated with a sUAS platform to evaluate its performance in flight for SAA applications ranging from sUAS to manned GA aircraft detections and tracking. Preliminary data analysis from the first outdoor ground tests showed the radar performed well at tracking the vehicle as it flew outbound and repeatedly maintained a track out to 1000 meters (maximum 1387 meters) until the vehicle slowed to a stop to reverse direction to fly inbound. As the Inspire flew inbound tracks from beyond 800 meters, a reacquisition time delay was consistently observed between when the Inspire exceeds a speed of 1.45 meters per second and when the radar indicated an inbound target was present and maintained its track. The time delay varied between 6 seconds to over 37 seconds for the inbound flights examined, and typically resulted in about a 200 meter closure distance before the Inspire track was maintained. The radar performed well at both acquiring and tracking the vehicle as it flew crossing routes out past 400 meters across the azimuthal field of view. The radar and ICAROUS software will be integrated and flown on a BFD-1400-SE8-E UAS during the next phase of the RAAVIN project. The main goal at the conclusion of this effort is to determine if this radar technology can reliably support minimum requirements for SAA applications of sUAS. In particular, the study will measure the range of vehicle detections, lateral and vertical angular errors, false and missed/late detections, and estimated distance at closest point of approach after an avoidance maneuver is executed. This last metric is directly impacted by sensor performance and indicates its suitability for the task.

Szatkowski, George N.↗

Dynamic Response Testing in an Electrically Heated Reactor Test Facility

Non-nuclear testing can be a valuable tool in development of a space nuclear power or propulsion system. In a non-nuclear test bed, electric heaters are used to simulate the heat from nuclear fuel. Standard testing allows one to fully assess thermal, heat transfer, and stress related attributes of a given system, but fails to demonstrate the dynamic response that would be present in an integrated, fueled reactor system. The integration of thermal hydraulic hardware tests with simulated neutronic response provides a bridge between electrically heated testing and full nuclear testing. By implementing a neutronic response model to simulate the dynamic response that would be expected in a fueled reactor system, one can better understand system integration issues, characterize integrated system response times and response characteristics, and assess potential design improvements at a relatively small fiscal investment. Initial system dynamic response testing was demonstrated on the integrated SAFE-100a heat pipe cooled, electrically heated reactor and heat exchanger hardware, utilizing a one-group solution to the point kinetics equations to simulate the expected neutronic response of the system (Bragg-Sitton, 2005). The current paper applies the same testing methodology to a direct drive gas cooled reactor system, demonstrating the applicability of the testing methodology to any reactor type and demonstrating the variation in system response characteristics in different reactor concepts. In each testing application, core power transients were controlled by a point kinetics model with reactivity feedback based on core average temperature; the neutron generation time and the temperature feedback coefficient are provided as model inputs. Although both system designs utilize a fast spectrum reactor, the method of cooling the reactor differs significantly, leading to a variable system response that can be demonstrated and assessed in a non-nuclear test facility.

Bragg-Sitton, Shannon M.↗

Application of Simulated Reactivity Feedback in Nonnuclear Testing of a Direct-Drive Gas-Cooled Reactor

Nonnuclear testing can be a valuable tool in the development of an in-space nuclear power or propulsion system. In a nonnuclear test facility, electric heaters are used to simulate heat from nuclear fuel. Standard testing allows one to fully assess thermal, heat transfer, and stress related attributes of a given system but fails to demonstrate the dynamic response that would be present in an integrated, fueled reactor system. The integration of thermal hydraulic hardware tests with simulated neutronic response provides a bridge between electrically heated testing and full nuclear testing. By implementing a neutronic response model to simulate the dynamic response that would be expected in a fueled reactor system, one can better understand system integration issues, characterize integrated system response times and response and response characteristics, and assess potential design improvements with a relatively small fiscal investment. Initial system dynamic response testing was demonstrated on the integrated SAFE 100a heat pipe cooled, electrically heated reactor and heat exchanger hardware. This Technical Memorandum discusses the status of the planned dynamic test methodology for implementation in the direct-drive gas-cooled reactor testing and assesses the additional instrumentation needed to implement high-fidelity dynamic testing.

Bragg-Sitton, S. M.↗

Apollo 16 Mission Anomaly Report No. 1: Oxidizer Deservicing Tank Failure

The command module reaction control system is emptied of all remaining propellant using ground support equipment designed to provide an acid/base neutralization of the propellant in both the liquid and gaseous phases so that it may be disposed of safely. During the deactivation operation of the oxidizer from the Apollo 16 command module on 7 May 1972, the scrubber tank of the decontamination unit exploded, destroying the ground support equipment unit and damaging the building that housed the operation. Only minor injuries were received by the personnel in the area and the command module was not damaged. Test results show that the failure was caused by an insufficient quantity of neutralizer for the quantity of oxidizer. This insufficiency lead to exothermic nitration-type reactions which produced large quantities of gas at a very high rate and failed the decontamination tank.

Source record↗

Some Abort Techniques and Procedures for Manned Spacecraft

This paper is concerned with our present state of knowledge on the procedures and effectiveness of aborts from manned orbital and lunar missions. By abort is meant a deliberate or unintentional termination of the primary mission followed by an expedient return to earth of the payload (spacecraft and crew). A deliberate abort may be initiated if a critical component failed and thus impaired the probability of mission success or the crew's safety. Examples of this kind of abort are failure of the launch guidance system or the oxygen and cabin pressure system. Also, an unintentional abort may occur during the launch phase due to the complete or partial failure of one of the launch-vehicle stages to operate. For each mission every conceivable set of circumstances must be considered and evaluated to see if an abort of the mission is called for and to determine what sequence of events should occur to bring the spacecraft and crew safely back to earth with the highest probability of success. Factors which must be considered are: how to specify and sense an abort condition, how much fuel should be put onboard the vehicle for abort purposes, what size and kind of rocket engines are best suited for each mission, and what compromise is incurred due to other mission requirements? If an abort occurs, the optimum time of application as well as the magnitude and direction of the velocity changes must be determined beforehand and the crew must be clearly informed of what action is required or what the situation is so that they can decide the proper action.

Maneuver↗

A Miniaturized, High-Bandwidth Optical Fiber Fabry–Perot Cavity Vibration Sensor Demonstrated up to 800 °C

A typical structural health monitoring technique involves measuring the vibrational characteristics of components or systems to detect signs of degradation or damage. Many industrial applications require engineered systems to safely operate under extreme, high-temperature environments that pose challenges not only to materials but also to sensors that would be used for structural health monitoring. Here, in this study, miniaturized optical Fabry-Perot cavities (FPCs) were developed and tested as a means of measuring the resonant frequencies of metal components that are most relevant to extreme-environment applications. Two of the three candidate FPC designs tested up to 800 ° C provided accurate measurements (validated by theoretical models and laser Doppler vibrometry) of the fundamental vibrational mode of the specimen to which each was bonded, although both sensors failed during thermal cycling. An analysis of the reflected optical spectrum from the FPC and X-ray computed tomography revealed two opportunities to improve the sensor reliability. First, the Cu optical fiber coating that was used could either be replaced with a more oxidation-resistant material or protected with commercially available films. Second, the adhesives used to bond the fibers to metal capillaries and establish the FPC could be replaced with a more robust solution, although the Resbond 907TS adhesive appeared to outperform Resbond 907.

Birri, Anthony [Oak Ridge National Laboratory (ORN↗

Utilizing Commercial Submersible Mixer Pumps for Sludge Removal in Savannah River Site's Tank 26 - 20289

The Savannah River Site (SRS) Liquid Waste System (LWS) safely manages, stores, treats, and dispositions liquid radioactive waste. The LWS consists of 51 underground waste storage tanks (eight of which are operationally closed and filled with grout), waste evaporators, treatment facilities, and solidification facilities, known as the Defense Waste Processing Facility (DWPF) and Saltstone Production Facility (SPF). One of the waste storage tanks, Tank 26, was placed into service in 1980 as an F Tank Farm (FTF) Evaporator Feed Tank. From 1980 to 2013, Tank 26 received F Canyon receipts and dilute supernate that was then transferred to the 242-16F FTF Evaporator for volume reduction. In 2013, the steam tube bundle failed in the FTF Evaporator, and the decision was made not to repair/resume evaporator operation. During operation of Tank 26, solids built up to a level of 2.03 m in the tank with a volume of 1062.9 kL. Due to the evaporator failure and subsequent shutdown, the solids in Tank 26 were selected to feed Sludge Batch 10, which is collected and prepped prior to being sent to DWPF for final disposition. To accomplish solids removal, Commercial Submersible Mixer Pumps (CSMPs) were selected to slurry the solids in preparation to be sent to Tank 51. Four CSMPs were installed in Tank 26 with each one installed in a separate quadrant of Tank 26. This work would mark the first deployment of CSMPs in an SRS waste tank. The CSMPs were developed in response to operational issues from previous mixing pumps and budgetary constraints. The CSMPs use the concept of modifying commercially available equipment for nuclear waste applications. The CSMPs consist of a 230-horsepower submersible mixing pump (manufactured by GPM, Inc.) joined to a mast fabricated at SRS. For this application, Savannah River Remediation (SRR) design services was challenged to provide a mast design that required no steel superstructure support system on top of Tank 26. Also, SRR design services provided a simplified Tank 26 riser interface that did not require extensive machine parts to adjust height of the suction screen of the CSMP within the tank. Other design improvements include no requirements for tank top radiation monitors and no requirements for flushing of the CSMPs during startup/shutdown operations. The CSMPs were operated at an initial height of 2.29 m above the Tank 26 bottom for 10 days. After sludge sounding, the CSMPs were lowered to a height of 1.52 m with no issues due to proper work planning and the simplified riser interface. With the CSMPs lowered to a level of 1.52 meters above the tank bottom, the CSMPs were operated for 12 days and another sounding was performed. The sounding level came back matching the disturbance depth results of the first pump run. Chemistry samples were analyzed while the tank was left to settle. The analysis revealed enough weight percent solids to provide good feed to Sludge Batch 10. Also, the results revealed the supernate within the mixture would provide good salt solution feed to Salt Waste Processing Facility (SWPF) Salt Batch 3. So, the plan was modified to let the disturbed solids settle and decant the salt solution for addition to SWPF Salt Batch 3. Then water will be added back to Tank 26, and the CSMPs run in order to wash the solids to decrease settling time prior to being sent to Tank 51 for Sludge Batch 10. Utilizing CSMPs for waste removal in an SRS Tank has provided a cost-effective means for further waste removal efforts. In addition, the CSMPs are easier to operate by utilizing a robust and simplified design. The CSMPs performed quite well with no process shutdown or delays during operation. As a result, CSMPs are integral to the future of removing radioactive waste from storage tanks at SRS. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗