Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Accident Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Impact of LWR assembly structural features on cladding burst behavior under LOCA conditions

This provides an initial scoping study on clad balloon and burst behavior for burnup extension of reactor fuel. The associated issues with burnup extension are fuel fragmentation, relocation, and dispersal in the event of cladding failure. The general finding of this work is that the structural features, spacer grids and mixing vanes, locally suppress cladding deformation but have little impact on the overall clad performance during loss-of-coolant accidents. The work detailed in a previous report by Capps et al. focused on core optimization via neutronics, thermal hydraulics and thermomechanical analysis for burnups beyond 62 GWD/tU and enrichments above 5%. Uncertainty of fuel fragmentation relocation and dispersal in high-burnup rods during accident conditions was also investigated. The dispersal aspect of fuel fragmentation depends on cladding rupture. Thus, assessing uncertainties in the rupture behavior is helpful in estimating the dispersal of high-burnup fuel. This study builds on the previous work by assessing the impact of assembly structural features on cladding balloon and burst behavior in a full-length fuel rod. In this work, the BISON fuel performance code was used to generate 2D radial and height meshes containing structural features commonly used in nuclear fuel assemblies. First, meshes were generated with spacer grids. Results were then compared to the cladding burst temperature and balloon strain results from the previous work. A mesh sensitivity study was performed to ensure that mixing vanes and spacer grid effects were appropriately considered, resulting in a more refined mesh than the previous study. The balloon deformation and burst times of the cladding were compared to the original case. Consideration was also given to the effect of rod initial pressure. In conclusion, 3D quarter rod simulations were also performed and found good agreement with the 2D simulations in clad deformation and reasonable agreement in burst times.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2022

[Presentation Slides] Code-to-Code Benchmark Study for Thermal Stress Modeling and Preliminary Analysis of the High-temperature Single Heat-Pipe Experiment

In the heat-pipe-cooled microreactor, heat pipes remove heat from the reactor core as a passive heat-transfer device, so the fluid circulation is not required for cooling, which can substantially simplify the overall reactor design. However, given the extremely high temperatures in the core region and potentially large temperature gradients across the structure materials, thermal stresses need to be well-analyzed to ensure structural integrity during normal operations and accident scenarios. This presentation slides discuss finite element method-based thermal-stress analysis for the high-temperature single heat-pipe test article in the Single Primary Heat Extraction and Removal Emulator (SPHERE) facility at Idaho National Laboratory (INL), using two commercial software packages, Abaqus and Star-CCM+. A code-to-code benchmark study was performed to crosscheck the model setup and capability of each code and to gain preliminary insights into the potential thermal stress concerns from the current experimental setup. It is observed the significant thermal stresses happen at the inner surface of the heat pipe hole surrounded by electric heaters where the largest temperature gradients appear. The temperature fields have good agreements between Abaqus and Star-CCM+, while the induced thermal stresses show modest deviations probably due to differences of meshing engines used in these two codes. It is found that the local maximum thermal stresses may reach close to the ultimate tensile strength and yield strength of structural material depending on the heater power. Ultimately, the coupled thermal-structural analysis will help guide the current experimental plan and ensure the facility safety for future experimental study.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

Impact of control blade insertion on the deformation behavior of SiC-SiC channel boxes in BWRs

This article describes the analysis of distortion of a silicon carbide fiber-reinforced, silicon carbide matrix (SiC-SiC) composite channel box under in-reactor conditions of a boiling water reactor (BWR). The BWR core has significant gradients in the fast neutron flux across the channel box due to the presence of water rods within the fuel assemblies, and these gradients increase further with the insertion of control blades. As a result of the temperature and neutron flux dependent irradiation-induced swelling of SiC, the SiC-SiC composite channel box can undergo distortion. In this work, we evaluate the SiC-SiC channel box distortion for three different control blade positions. This analysis is based on the neutron flux and temperature distributions in the BWR core calculated using the neutronics code MPACT and thermal-hydraulics code CTF. This calculation is coupled through temperature feedback. Subsequently, we have performed structural analysis based on the calculated neutron flux and temperature distributions to determine the deformation and stress development in the channel box. The structural analysis was performed using the fuel performance modeling code BISON and the commercial finite element analysis software Abaqus. The results indicate that large gradients in fast neutron flux (up to 35–40% across a single axial level) will develop across the channel box. Due to these gradients, the channel box will undergo time-dependent bending for all the control blade positions in the assembly. The time-dependent bowing behavior is dominated by the transient swelling of SiC-SiC material under non-uniform neutron flux, and changes with variation in the control blade position. The bending will cause temporary interference between the channel box and control blade, and the interference is expected to be most severe for the fully inserted control blade position. The developed stresses due to differential swelling in the channel box exceed the proportional limit stress of the material, which may cause matrix microcracking in the channel box. However, the stresses remain below the tensile strength of the material, and therefore, development of a full, through-thickness crack in the channel box is not expected. Finally, further work is recommended to explore and evaluate the mitigation strategies.

42 ENGINEERING↗
NASA NTRS1989

Axisymmetric shell analysis of the Space Shuttle solid rocket booster field joint

The Space Shuttle Challenger (STS 51-L) accident led to an intense investigation of the structural behavior of the solid rocket booster (SRB) tang and clevis field joints. The presence of structural deformations between the clevis inner leg and the tang, substantial enough to prevent the O-ring seals from eliminating hot gas flow through the joints, has emerged as a likely cause of the vehicle failure. This paper presents results of axisymmetric shell analyses that parametrically assess the structural behavior of SRB field joints subjected to quasi-steady-state internal pressure loading for both the original joint flown on mission STS 51-L and the redesigned joint recently flown on the Space Shuttle Discovery. Discussion of axisymmetric shell modeling issues and details is presented and a generic method for simulating contact between adjacent shells of revolution is described. Results are presented that identify the performance trends of the joints for a wide range of joint parameters.

Nemeth, Michael P.↗
NASA NTRS1991

Axisymmetric shell analysis of the space shuttle solid rocket booster field joint

The Space Shuttle Challenger (STS 51-L) accident led to an intense investigation of the structural behavior of the solid rocket booster (SRB) tang and clevis field joints. Results are presented of axisymmetric shell analyses that parametrically assess the structural behavior of SRB field joints subjected to quasi-steady-state internal pressure loading for both the original joint flown on mission STS 51-L and the redesigned joint flown for the first time after the STS 51-L accident on the Space Shuttle Discovery. Discussion of axisymmetric shell modeling issues and details is presented and a generic method for simulating contact between adjacent shells of revolution is described. Results are presented that identify the performance trends of the joints for a wide range of joint parameters. An important finding is that the redesigned joint exhibits significantly smaller O-ring gap changes and much less sensitivity to joint clearances than the original joint. For a wide range of joint parameters, the result presented indicate that the redesigned joint provides a much better pressure seal than the original joint.

Nemeth, Michael P.↗
NASA NTRS2005

Analysis of Carbon/Carbon Fragments From the Columbia Tragedy

The extensive investigation following the Space Shuttle Orbiter Columbia accident of February 1, 2003 determined that hot gases entered the wing through a breach in the protective reinforced carbon/carbon (RCC) leading edge. In the current study, the exposed edges of the recovered RCC from the vicinity of the breach are examined with scanning electron microscopy and Raman spectroscopy. Electron microscopy of the exposed edges revealed regions of pointed carbon fibers, characteristic of exposure to high temperature oxidizing gases. The Raman technique relates the observed 1350 and 1580 to 1600 cm(-1) bands to graphitic dom ains and their corresponding temperatures of formation. Some of the regions showed evidence of exposure temperatures beyond 2700 ?C during the accident.

Tallant, David R.↗
NASA NTRS2001

Autogenic Feedback Training Exercise and pilot performance: enhanced functioning under search-and-rescue flying conditions

Studies have shown that autonomous mode behavior is one cause of aircraft fatalities due to pilot error. In such cases, the pilot is in a high state of psychological and physiological arousal and tends to focus on one problem, while ignoring more critical information. This study examined the effect of training in physiological self-recognition and regulation, as a means of improving crew cockpit performance. Seventeen pilots were assigned to the treatment and control groups matched for accumulated flight hours. The treatment group contained 4 pilots from HC-130 Hercules aircraft and 4 HH-65 Dolphin helicopter pilots; the control group contained 3 pilots of HC-130s and 6 helicopter pilots. During an initial flight, physiological data were recorded on each crewmember and an instructor pilot rated individual crew performance. Eight crewmembers were then taught to regulate their own physiological response levels using Autogenic-Feedback Training Exercise (AFTE). The remaining participants received no training. During a second flight, treatment participants showed significant improvement in performance (rated by the same instructor pilot as in pretests) while controls did not improve. The results indicate that AFTE management of high states of physiological arousal may improve pilot performance during emergency flying conditions.

NASA Discipline Neuroscience↗
DOE OSTI2021

Development of phenomena identification and ranking table for Westinghouse lead fast reactor’s safety

The Westinghouse Lead-cooled Fast Reactor (LFR) is a medium-size, passively safe, economic, Gen-IV nuclear reactor. An important effort within the Westinghouse LFR program is the development of the safety analysis methodology, which comprises computer code development, model development, and experimental testing. A key initial task associated with the development of the safety analysis methodology is the identification of processes and phenomena that affect the plant's capability to meet selected safety performance indicators. This is accomplished through the development of a Phenomena Identification and Ranking Table (PIRT) for selected accident scenarios which, for this specific PIRT effort, included selected postulated design basis accidents and hypothetical beyond design basis accidents in LFRs. This paper describes the role of PIRT in the development of the Westinghouse LFR safety analysis methodology and the process used in the PIRT development. Specifically, the Westinghouse LFR PIRT assessed importance of pertinent phenomena and identified gaps in their knowledge-base by evaluating current modeling capabilities and data available for validation. The ultimate goal was to provide guidance on computer code development and validation efforts and to prioritize testing to support LFR design and licensing. The key phenomena and processes that are deemed highly important for the safety performance indicators, but for which the state of knowledge is low, are presented. The testing program and analyses development are planned to address significant phenomena in the PIRT.

Lead fast reactor↗
NASA NTRS1980

Decision-problem state analysis methodology

A methodology for analyzing a decision-problem state is presented. The methodology is based on the analysis of an incident in terms of the set of decision-problem conditions encountered. By decomposing the events that preceded an unwanted outcome, such as an accident, into the set of decision-problem conditions that were resolved, a more comprehensive understanding is possible. All human-error accidents are not caused by faulty decision-problem resolutions, but it appears to be one of the major areas of accidents cited in the literature. A three-phase methodology is presented which accommodates a wide spectrum of events. It allows for a systems content analysis of the available data to establish: (1) the resolutions made, (2) alternatives not considered, (3) resolutions missed, and (4) possible conditions not considered. The product is a map of the decision-problem conditions that were encountered as well as a projected, assumed set of conditions that should have been considered. The application of this methodology introduces a systematic approach to decomposing the events that transpired prior to the accident. The initial emphasis is on decision and problem resolution. The technique allows for a standardized method of accident into a scenario which may used for review or the development of a training simulation.

Dieterly, D. L.↗
DOE OSTI2023

Sensitivity Analysis of Transient Critical Heat Flux by RIA Under High-Pressure Flow Boiling Conditions in TRTL

A reactivity-initiated accident (RIA) is a design-basis accident under which critical heat flux (CHF) is likely to be exceeded. The operational margin for RIAs is currently determined using steady-state CHF lookup tables, which provide conservative estimates relative to transient CHF phenomena. The Transient Reactor Test Loop (TRTL) facility at Oregon State University is capable of performing out-of-pile rapid heating experiments representative of a RIA at conditions representative of a pressurized water reactor (PWR). Here, to further our understanding of and ability to predict transient CHF under PWR conditions, we performed a sensitivity analysis on a RELAP5-3D model of the TRTL facility coupled to the RAVEN code framework to define a proposed experimental test matrix to be performed at the TRTL facility. We then implemented a flow boiling CHF correlation into RELAP5-3D and performed a secondary sensitivity analysis inspecting the impact of the built-in RELAP5-3D CHF and heat transfer multipliers on both the prediction of CHF and key safety parameters, such as peak cladding temperature and heat flux. The results show that the multiplier with the highest influence toward the prediction of CHF occurrence and the safety parameters is the transient CHF multiplier. Operational performance envelopes have been developed for each of the test matrix cases and will be used for validation once the experiments are performed. The TRTL facility is currently performing shakedown testing to verify system performance prior to proceeding with the experimental campaign. Restart testing results include pump curve restart testing, pressure tests, and heater rod thermocouple transients.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2023

Non-Nuclear Test Facility Development to Support Verification and Validation Needs

This study focuses on developing a non-nuclear test facility to help meet the verification and validation (V&V) requirements of a water-cooled small modular reactor (SMR) system. The scaling analysis necessary for reactor system experimentation and assessment model V&V considers various reactor system accident scenarios such as main steam line break (MSLB), steam generator tube rupture (SGTR), and containment condensation and heat transfer. The goal is to identify key physics based phenomena of interest (POI), specific figures of merit (FOMs), and the state of knowledge (SOK) by employing phenomena identification and ranking table (PIRT) studies. Important physics phenomena such as heat transfer, fluid dynamics, structural integrity, and material selection must be addressed when scaling a thermal-hydraulics system. Alongside these considerations, modifications to the facility may be needed to align the scaled system with the available footprint (height and space) of the facility. These modifications may include infrastructure upgrades, changes to the piping layout, implementation of safety measures, and installation of new instrumentation and control systems. The test facility aims to provide a scaled-down version of prototypic facilities for comprehensive V&V activities by overcoming these challenges and making the necessary modifications. This approach minimizes scaling distortion, simulates prototypic plant conditions, and accurately models accident event progressions. Thus, the facility will be capable of adequately modeling a scaled SMR system to support the design, development and licensing needs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS1996

Second International Airborne Remote Sensing Conference and Exhibition

The conference provided four days of displays and scientific presentations on applications, technology, a science of sub-orbital data gathering and analysis. The twelve displayed aircraft equipped with sophisticated instrumentation represented a wide range of environmental and reconnaissance missions,including marine pollution control, fire detection, Open Skies Treaty verification, thermal mapping, hydrographical measurements, military research, ecological and agricultural observations, geophysical research, atmospheric and meterological observations, and aerial photography. The U.S. Air Force and the On-Site Inspection Agency displayed the new Open Skies Treaty verification Boeing OC 135B that promotes international monitoring of military forces and activities. SRl's Jetstream uses foliage and ground penetrating SAR for forest inventories, toxic waste delineation, and concealed target and buried unexploded ordnance detection. Earth Search Sciences's Gulfstream 1 with prototype miniaturized airborne hyperspectral imaging equipment specializes in accurate mineral differentiation, low-cost hydrocarbon exploration, and nonproliferation applications. John E. Chance and the U.S. Army Corps of Engineers displayed the Bell 2 helicopter with SHOALS that performs hydrographic surveying of navigation projects, coastal environment assessment, and nautical charting surveys. Bechtel Nevada and U.S. DOE displayed both the Beech King AIR B-200 platform equipped to provide first response to nuclear accidents and routine environmental surveillance, and the MBB BO-105 helicopter used in spectral analysis for environmental assessment and military appraisal. NASA Ames Research Center's high-altitude Lockheed ER-2 assists in earth resources monitoring research in atmospheric chemistry, oceanography, and electronic sensors; ozone and greenhouse studies and satellite calibration and data validation. Ames also showcased the Learjet 24 Airborne Observatory that completed missions in Venus cloud cover analysis, Quadantid meteor shower studies, extra-solar far infrared ionic structure lines measurement, Cape Kennedy launch support, and studies in air pollution, The Products and Services Exhibit showcased new sensor and image processing technologies, aircraft data collection services, unmanned vehicle technology, platform equipment, turn-key services, software a workstations, GPS services, publications, and processing and integration systems by 58 exhibitors. The participation of aircraft users and crews provided unique dialogue between those who plan data collection a operate the remote sensing technology, and those who supply the data processing and integration equipment. Research results using hyperspectral imagery, radar and optical sensors, lidar, digital aerial photography, a integrated systems were presented. Major research and development programs and campaigns we reviewed, including CNR's LARA Project and European Space Agency's 1991-1995 Airborne Campaign. The pre-conference short courses addressed airborne video, photogrammetry, hyperspectral data analysis, digital orthophotography, imagery and GIS integration, IFSAR, GPS, and spectrometer calibration.

Source record↗
DOE OSTI2020

Comparison of Light-Weight Radioisotope Heater Unit (LWRHU) Historical Testing to Special Form Testing Requirements

This paper compares the Light-Weight Radioisotope Heater Unit (LWRHU) historical testing to Department of Transportation (DOT) Special Form criteria per 49 CFR Part 173, Shippers-General Requirements for Shipments and Packages, Section 469, Tests for special form Class 7 (radioactive) materials as specified in DOE-STD-1027, Hazard Categorization of DOE Nuclear Facilities. Compliance with the aforementioned criteria allows for the exclusion of radioactive sources from the facility’s nuclear material inventory. As part of a new program at Los Alamos National Laboratory (LANL), LWRHUs are planned to be moved into TA-55, PF-5 Power Source Assembly Area (PSAA) for assembly and testing activities. The PSAA Facility is categorized as a low hazard, non-nuclear facility per DOE STD-1027 and is described in TA55-PF-5-FHC-11-001, Facility Hazard Categorization of the PSAA at PF-5, TA-55. The Facility Hazard Categorization document states, there must be documentation that radioactive sources are engineered to pass the special form testing specified by DOT in 49 CFR 173.469, Tests for special form Class 7 (radioactive) materials or ANSI N43.6, Sealed Radioactive Sources - Classification. This paper documents the extensive historical environmental safety testing of the LWRHU and demonstrates its ability to survive potential launch safety accident scenarios. The testing results are used herein to demonstrate through a comparative analysis that the robust design of the LWRHU meets or exceeds the special form testing specifications in 49 CFR 173.469, enabling the LWRHU to be transported and handled in PF-5 in support of testing and assembly program.

07 ISOTOPE AND RADIATION SOURCES↗
DOE OSTI2023

Development of a BlueCRAB/MELCOR Framework for Supporting Realistic Mechanistic Source Term Calculations in Microreactors

Efforts are currently underway to deploy microreactor modeling and simulation tools to better support vendors and regulatory authorities in submitting and reviewing licensing applications. In particular, the Nuclear Regulatory Commission is expected to rely on the Comprehensive Reactor Analysis Bundle (BlueCRAB) multiphysics toolset in performing design- and beyond-design-basis accident analyses. In addition, the Nuclear Regulatory Commission has been using the MELCOR code to estimate mechanistic source terms during accidents. As MELCOR relies on isotopic inventory and reactor temperature/power evolution profiles during accident conditions—all of which can theoretically be obtained from BlueCRAB—the ultimate goal of this activity is to establish a common BlueCRAB-MELCOR framework. However, prior to the present research, BlueCRAB had never been used to calculate such quantities of interest at the full-core level. While there are many Monte Carlo (MC) codes capable of computing such quantities of interest, they are unable to readily account for multiphysics feedback. BlueCRAB allows for the coupling of different physics codes together to perform multiphysics-informed calculations. Therefore, the purpose of this fiscal year 2023 work is to investigate the feasibility and challenges of performing such calculations within BlueCRAB so as to generate the data that MELCOR relies on. To demonstrate the methodology, the proposed workflow was applied to a prototypical heat pipe-cooled microreactor model. To predict isotopic concentrations (taking into account the ac- cumulation of fission products during operation), the necessary microscopic cross sections were generated via OpenMC and tabulated with respect to temperature and burnup. Next, a recently developed capability in Griffin (the reactor physics application in BlueCRAB) was used to convert the OpenMC output format into the ISOXML format used by Griffin. A multiphysics microscopic depletion calculation that involved performing a coupled full-core, heterogeneous neutron trans- port and thermal calculation at each depletion step was conducted to deplete the core to end of life (EOL) conditions so as to provide both isotopics and the initial condition for the transient calculation. Following a brief null-transient to verify that the initial condition had been properly restarted and was indeed in thermal equilibrium, a heat pipe failure transient was simulated. Thus, the entire workflow of using BlueCRAB to generate MELCOR inputs, from cross-section generation to producing isotopic inventory and power/temperature evolution profiles during transients, is demonstrated. This report also details the identified gaps in the workflow and how they were (for the most part) addressed. Future work should focus on directly including MEL- COR into the workflow by performing a MELCOR calculation using the BlueCRAB-generated input data. In addition, the heat pipe reactor design should be improved so as to reflect more prototypical burnup characteristics at EOL.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2004

The Use of SolidEdge as an Engineering Tool to Support NASA Projects

This presentation will cover the use of SolidEdge to facilitate creation of components and component assemblies generated by SOMTC in the support of NASA projects and GSE (e.g., Return To Flight and support components related to a multitude of optical assemblies.) Return To Flight (RTF) Program consist of several projects derived from a Columbia Accident Investigation Board (CAIB) report. One of the recommendations is to increase visual analysis capabilities of the flight vehicle prior to reaching orbit. SolidEdge as the primary 3-D modeler will be utilized by Space Optics Manufacturing Technology Center (SOMTC) at MSFC to generate multiple preliminary design concepts relative to air and ground based viewing platforms with increased fidelity.

Thornton, Gary↗
DOE OSTI2022

Initial development of a generic fluoride salt-cooled reactor model

Fluoride high-temperature reactors (FHRs) are high-temperature, low-pressure reactor concepts that use tri-structural isotropic (TRISO) fuel and molten fluoride salt coolant. These reactors have the potential to provide both electrical power and high-temperature process heat. We used generic FHR parameters for a pebble-bed FHR to develop an initial model with fresh fuel for a generic FHR (gFHR) in MELCOR and SCALE (NEWT and KENO). In this paper, we present the development of our gFHR models, which will serve as the baseline for a sensitivity and uncertainty analysis to quantify the range of possible source terms for FHRs in severe accidents. We present MELCOR results for fuel and coolant temperatures through the core, a nodalization study for the steady-state thermal hydraulic model, and development of reactor physics models in SCALE. As this work progresses, these models will be used to calculate source terms for a loss-of-forced-flow accident and to conduct a sensitivity study on this accident to establish a range of possible source terms. SCALE will provide reactor physics parameters like isotopic inventory, decay heat generation, and temperature coefficients of reactivity. Using the uncertainty quantification tools within SCALE, we will generate distributions for those parameters and will use the uncertainty quantification code RAVEN or DAKOTA to sample those distributions in MELCOR to quantify the impact of reactor physics and thermal hydraulic uncertainties on FHR source terms. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS2004

A Formal Methods Approach to the Analysis of Mode Confusion

The goal of the new NASA Aviation Safety Program (AvSP) is to reduce the civil aviation fatal accident rate by 80% in ten years and 90% in twenty years. This program is being driven by the accident data with a focus on the most recent history. Pilot error is the most commonly cited cause for fatal accidents (up to 70%) and obviously must be given major consideration in this program. While the greatest source of pilot error is the loss of situation awareness , mode confusion is increasingly becoming a major contributor as well. The January 30, 1995 issue of Aviation Week lists 184 incidents and accidents involving mode awareness including the Bangalore A320 crash 2/14/90, the Strasbourg A320 crash 1/20/92, the Mulhouse-Habsheim A320 crash 6/26/88, and the Toulouse A330 crash 6/30/94. These incidents and accidents reveal that pilots sometimes become confused about what the cockpit automation is doing. Consequently, human factors research is an obvious investment area. However, even a cursory look at the accident data reveals that the mode confusion problem is much deeper than just training deficiencies and a lack of human-oriented design. This is readily acknowledged by human factors experts. It seems that further progress in human factors must come through a deeper scrutiny of the internals of the automation. It is in this arena that formal methods can contribute. Formal methods refers to the use of techniques from logic and discrete mathematics in the specification, design, and verification of computer systems, both hardware and software. The fundamental goal of formal methods is to capture requirements, designs and implementations in a mathematically based model that can be analyzed in a rigorous manner. Research in formal methods is aimed at automating this analysis as much as possible. By capturing the internal behavior of a flight deck in a rigorous and detailed formal model, the dark corners of a design can be analyzed. This paper will explore how formal models and analyses can be used to help eliminate mode confusion from flight deck designs and at the same time increase our confidence in the safety of the implementation. The paper is based upon interim results from a new project involving NASA Langley and Rockwell Collins in applying formal methods to a realistic business jet Flight Guidance System (FGS).

Butler, Ricky W.↗
DOE OSTI2023

MELCOR-TMAP: The integration of MELCOR for fusion and TMAP4 for fusion reactor systems safety analysis and tritium inventory tracking

The design of fusion reactors requires the prediction of radioactive tritium migration during normal operating conditions and accident scenarios. Safety standards such as those from the U.S. Department of Energy (DOE) require that fusion reactor designs limit the release of hazardous material to the environment. In addition to safety requirements, the rarity of tritium supplies for burning D-T fusion plasma requires tritium breeding blankets. Computational modeling of migration of tritium and various reaction products throughout the fusion reactor serves to create designs that fulfill these requirements. MELCOR-TMAP, owned and developed at Idaho National Laboratory (INL), is an integrated system-level engineering code adapted for the analysis of fusion reactor systems. The history of the conception and evolution of the MELCOR-TMAP code, as well as its current capabilities, recent updates including a corrected composite material wall nodalization scheme, and plans for future development, are discussed here.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗