Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Criticality Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

Prognostics for Systems Health Management - Model and Hybrid Based Approaches. Where are We Heading?

To facilitate and solve the prediction problem, awareness of the current state and health of the system is key, since it is necessary to perform condition-based system health predictions. To accurately predict the future state of any system, it is required to possess knowledge of its current health state and future operational conditional. In case of next generation electric aircrafts, computing remaining flying time is safety-critical, since an aircraft that runs out of power (battery charge) while in the air will eventually lose control leading to catastrophe. In order to tackle and solve the prediction problem, it is essential to have awareness of the current health state of the system, especially since it is necessary to perform condition-based predictions. To be able to predict the future state of the system, it is also required to possess knowledge of the current and future operational conditions and flight profiles for accurate estimation of end-of-discharge (EOD) for the batteries. Similar framework can be implemented to other complex systems and subsystems. Our research approach is to develop a system level health monitoring safety indicator which runs estimation and prediction algorithms to estimate remaining useful life predictions at system, subsystem swell as component levels. Given models of the current and future system behavior, a general approach of model-based prognostics is discussed as a solution to the prediction problem and further for decision making. Data driven prognostics approaches have been equally used with good results in the past, where respective approaches have their own challenges to tackle. This limits their applicability to complex real-world domains: (a) high complexity or incompleteness of physics-based models and (b) limited representativeness of the training dataset for data-driven models. With the advent of internet of things for data collection and increased use of ML algorithms, hybrid approaches are the next avenue to reduce the challenges and achieve better results. An hybrid framework for fusing information from physics-based performance models along with deep learning algorithms for prognostics of complex safety critical systems is presented. In this framework, we use physics-based performance models to infer unobservable model parameters related to the system's components health solving a calibration problem.

Prognostics↗

Reference Fuel Development for Non-Aluminum Spent Nuclear Fuel Management

The Savannah River Site (SRS) L Area Facility provides for the safe receipt, storage, handling, and shipping of spent nuclear fuel (SNF) and has received more than 47,000 SNF assemblies since 1964. In order to consolidate receipt and storage analysis, L Area criticality safety has historically used several aluminum-clad “reference fuels” to establish bounding storage, handling, and cask loading limits and then applied a reactivity comparison approach to demonstrate that candidate fuels may be processed under the reference fuel limits. Currently, only aluminum-clad SNF from off-site research reactors are transferred on-site. The Accelerated Basin De-Inventory (ABD) program will begin the removal of bundled Non-Aluminum Spent Nuclear Fuel (NASNF) from the L Area disassembly basin for dissolution and disposition, which has driven the need for a non-aluminum reference fuel. This paper discusses the process and results of creating a new fictional homogenous NASNF highly enriched uranium reference fuel, “MITZ,” to be used in nuclear criticality safety evaluations for upcoming SNF disposition operations. Data demonstrating the relationship between neutron multiplication behavior and fuel spacing is generated for the new reference fuel MITZ as well as existing reference fuels representing several types of SNF assemblies.

Reference Fuel↗

Reference Fuel Development for Non-Aluminum Spent Nuclear Fuel Management

The Savannah River Site (SRS) L Area Facility provides for the safe receipt, storage, handling, and shipping of spent nuclear fuel (SNF) and has received more than 47,000 SNF assemblies since 1964. In order to consolidate receipt and storage analysis, L Area criticality safety has historically used several aluminum-clad “reference fuels” to establish bounding storage, handling, and cask loading limits and then applied a reactivity comparison approach to demonstrate that candidate fuels may be processed under the reference fuel limits. Currently, only aluminum-clad SNF from off-site research reactors are transferred on-site. The Accelerated Basin De-Inventory (ABD) program will begin the removal of bundled Non-Aluminum Spent Nuclear Fuel (NASNF) from the L Area disassembly basin for dissolution and disposition, which has driven the need for a non-aluminum reference fuel. This paper discusses the process and results of creating a new fictional homogenous NASNF highly enriched uranium reference fuel, “MITZ,” to be used in nuclear criticality safety evaluations for upcoming SNF disposition operations. Data demonstrating the relationship between neutron multiplication behavior and fuel spacing is generated for the new reference fuel MITZ as well as existing reference fuels representing several types of SNF assemblies.

Reference Fuel↗

Software Error Incident Categorizations in Aerospace

Since the first use of computers in space and aircraft, software errors have occurred. These errors can manifest as loss-of-life or less catastrophically. As the demand for automation increases, software in safety-critical systems should be designed to be tolerant to the most likely software faults. This paper categorizes historic aerospace software errors to determine trends of how and where automation is most likely to fail. A distinction between software producing wrong (erroneous) output versus no output (fail-silent) is introduced. Of the historical incidents analyzed, 87% were from software acting unexpectedly rather than simply stopping. Rebooting was found to be ineffective to clear erroneous behavior, and only partially effective for silent software. Errors were traced back to the software logic itself in 62% of cases, 13% within configurable data, and 25% introduced through input. Thirty percent (30%) of unexpected software behavior was caused by the absence of software and 20% was due to “unknown-unknowns”. These findings indicate that to achieve fault tolerance in safety-critical systems, backup strategies must be employed to detect and respond to erroneous software behavior beyond only fail-silent cases, and robust off-nominal testing should be performed to uncover unanticipated situations.

Software↗

Evaluating the Trustworthiness of Deep Neural Networks in Deployment – A Comparative Study (Replicability Study)

As deep neural networks (DNNs) are increasingly used in safety critical applications, there is a growing concern for their trustworthiness. Even highly trained, high-performant networks are not 100% accurate. However, it is very difficult to predict their behaviour during deployment without ground truth. In this paper, we provide a comparative and replicability study on recent approaches that have been proposed to evaluate the trustworthiness of DNNs. We find that it is very difficult to run and reproduce the results for these approaches on their replication packages, and it is even more difficult to run the tools on artifacts other than their own. Further, it is difficult to compare the effectiveness of the tools, due to lack of clearly defined evaluation metrics. Our results indicate that more effort is needed in our research community to obtain sound techniques for evaluating the trustworthiness of neural networks in safety-critical domains. To this end, we contribute an evaluation framework that incorporates the considered approaches and enables evaluation on common benchmarks, using common metrics. Using this framework, we run a comparative study of the three approaches.

Trustworthy AI↗

Applying formal methods and object-oriented analysis to existing flight software

Correctness is paramount for safety-critical software control systems. Critical software failures in medical radiation treatment, communications, and defense are familiar to the public. The significant quantity of software malfunctions regularly reported to the software engineering community, the laws concerning liability, and a recent NRC Aeronautics and Space Engineering Board report additionally motivate the use of error-reducing and defect detection software development techniques. The benefits of formal methods in requirements driven software development ('forward engineering') is well documented. One advantage of rigorously engineering software is that formal notations are precise, verifiable, and facilitate automated processing. This paper describes the application of formal methods to reverse engineering, where formal specifications are developed for a portion of the shuttle on-orbit digital autopilot (DAP). Three objectives of the project were to: demonstrate the use of formal methods on a shuttle application, facilitate the incorporation and validation of new requirements for the system, and verify the safety-critical properties to be exhibited by the software.

Cheng, Betty H. C.↗

Risk Analysis of Various Design Architectures for High Safety-significant Safety-related Digital Instrumentation and Control Systems of Nuclear Power Plants during Accident Scenarios

This report documents the plus-up activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2022 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades/designs. An integrated risk assessment technology for the DI&C systems was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the safety margin obtained from plant modernization, especially for the high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing advanced risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems to support system design decisions and diversity and redundancy applications, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals and deal with the expensive licensing justifications from regulatory insights, the LWRS-developed framework instructs nuclear vendors and utilities on how to effectively lower the costs associated with digital compliance and speed industry advances by: (1) defining an integrated risk-informed analysis process for DI&C upgrade, including hazard analysis, reliability analysis, and consequence analysis, (2) applying systematic and risk-informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development, licensing, and deployment of advanced DI&C technologies on nuclear power plant (NPPs). Adding diversity within system or components is the main means to eliminate and mitigate CCFs, but diversity also increases plant complexity and errors and may not address all sources of systematic failures. How to optimize the diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in HSSSR DI&C systems of NPPs and supporting relevant design optimization, the framework provides: ? An integrated best-estimate, risk-informed capability to address new technical digital issues quantitatively, accurately, and efficiently in plan modernization progress, such as software CCFs in HSSSR DI&C systems of NPPs ? A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to efficiently predict and prevent risk in the early design stage of DI&C systems ? Technical bases and risk-informed insights to assist U.S. Nuclear Regulatory Commission (NRC) and industry to address and fulfill the risk-informed alternatives for evaluation of CCFs in HSSSR DI&C systems of NPPs ? An integrated risk-informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The plus-up research and development efforts of this project in FY 2022 are focused on methodology improvement of software CCF modeling and estimation, prevention analysis, importance analysis and risk analysis of various design architectures of HSSSR DI&C systems. This work greatly enhances the capability of the LWRS-developed framework for the risk assessment and design optimization of safety-critical DI&C systems. It should be noted that all the analyses are performed for the demonstration of the LWRS-developed framework, not for the evaluation of relevant systems. Results are obtained based on very limited design information and testing data.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Provable Repair of Vision Transformers

Vision Transformers have emerged as state-of-the-art image recognition tools, but may still exhibit incorrect behavior. Incorrect image recognition can have disastrous consequences in safety-critical real-world applications such as self-driving automobiles. In this paper, we present Provable Repair of Vision Transformers (PRoViT), a provable repair approach that guarantees the correct classification of images in a repair set for a given Vision Transformer without modifying its architecture. PRoViT avoids negatively affecting correctly classified images (drawdown) by minimizing the changes made to the Vision Transformer’s parameters and original output. Here, we observe that for Vision Transformers, unlike for other architectures such as ResNet or VGG, editing just the parameters in the last layer achieves correctness guarantees and very low drawdown. We introduce a novel method for editing these last-layer parameters that enables PRoViT to efficiently repair state-of-the-art Vision Transformers for thousands of images, far exceeding the capabilities of prior provable repair approaches.

97 MATHEMATICS AND COMPUTING↗

Water ingress testing of Pressure Cooker 1006027150 REVAB-021

The requirements of this water ingress test are defined in PA-RD-01009, TA-55 Criticality Safety Requirements. “The container design should be capable of preventing the entry of more than 50 ml water when subjected to water spray at a flow of up to 2 inches water per hour for 2 hours or when immersed in water up to a depth of 6 inches above the top of the container for the same period of time.” The six allen screw fasters on the lid of the container were torqued to approximately 45 inch-pounds with a calibrated torque wrench in a crisscross pattern to ensure equal force distribution. The container management team of ORI-2 has developed a standard practice of gathering 5 data points to increase the statistical confidence in the data. This method has been demonstrated in previous LA-URs and approved official memorandums as follows: LANL Memo, SPE-2: 19-016 dated August 22, 2019; LANL Memo, SPE-2:19-020 dated September 24, 2019; and LA-UR-19-28268, Water Ingress Testing of Commercially Available Containers for the TA-55 Criticality Safety Program.

42 ENGINEERING↗

Implementation of a System of Gamma Imagers for Measuring Plutonium Holdup

The Surplus Plutonium Disposition (SPD) project is an effort to dilute and dispose of many tonsof weapons grade plutonium. This work will take place in a shielded glovebox to protect workers fromradiological dose. Accurate measurements of the holdup, or material left behind, in the gloveboxes is im-portant for Nuclear Material Control and Accountancy, worker dose minimization, criticality safety, andprocess monitoring. Shielding around the gloveboxes presents an obstacle for the traditional GeneralizedGamma Holdup (GGH) method. The uncertainties associated with that method, at around 28%, arealso detrimental since the amount of holdup must be kept below an established limit with a high level ofconfidence.Passive gamma-ray imaging provides a more complete depiction of the distribution of radioactivematerials. Recent refinement of the method has demonstrated that quantitative information can beextracted from the images with a well-characterized system. A permanently installed system of gamma-ray imagers is currently being developed to measure plutonium holdup in the SPD gloveboxes. Thispaper will report on progress with the development of this system.This application requires that the features of current commercially available instruments from H3Dand PHDS, optimized for measurement performance in a mobile application, be translated into theconstraints of the operational environment with fixed installations. The interaction between facilityconstraints and measurement capabilities will be addressed.A series of measurements with plutonium sources in a mocked-up glovebox geometry with imagersmounted above the ceiling of the glovebox have been taken. Imager performance with respect to angularresolution, minimum measurement time for quantification, and signal-to-noise ratio with a multitudeof sources will be evaluated for those measurements. A series of prototypes of user interfaces will bepresented for display of the data to its various consumers for the purposes of Nuclear Material Controland Accountancy, worker dose minimization, criticality safety, and process monitoring.

Schmitt, Kyle↗

Automatic Facial Expression Recognition and Operator Functional State

The prevalence of human error in safety-critical occupations remains a major challenge to mission success despite increasing automation in control processes. Although various methods have been proposed to prevent incidences of human error, none of these have been developed to employ the detection and regulation of Operator Functional State (OFS), or the optimal condition of the operator while performing a task, in work environments due to drawbacks such as obtrusiveness and impracticality. A video-based system with the ability to infer an individual's emotional state from facial feature patterning mitigates some of the problems associated with other methods of detecting OFS, like obtrusiveness and impracticality in integration with the mission environment. This paper explores the utility of facial expression recognition as a technology for inferring OFS by first expounding on the intricacies of OFS and the scientific background behind emotion and its relationship with an individual's state. Then, descriptions of the feedback loop and the emotion protocols proposed for the facial recognition program are explained. A basic version of the facial expression recognition program uses Haar classifiers and OpenCV libraries to automatically locate key facial landmarks during a live video stream. Various methods of creating facial expression recognition software are reviewed to guide future extensions of the program. The paper concludes with an examination of the steps necessary in the research of emotion and recommendations for the creation of an automatic facial expression recognition program for use in real-time, safety-critical missions.

Blanson, Nina↗

Automatic Facial Expression Recognition and Operator Functional State

The prevalence of human error in safety-critical occupations remains a major challenge to mission success despite increasing automation in control processes. Although various methods have been proposed to prevent incidences of human error, none of these have been developed to employ the detection and regulation of Operator Functional State (OFS), or the optimal condition of the operator while performing a task, in work environments due to drawbacks such as obtrusiveness and impracticality. A video-based system with the ability to infer an individual's emotional state from facial feature patterning mitigates some of the problems associated with other methods of detecting OFS, like obtrusiveness and impracticality in integration with the mission environment. This paper explores the utility of facial expression recognition as a technology for inferring OFS by first expounding on the intricacies of OFS and the scientific background behind emotion and its relationship with an individual's state. Then, descriptions of the feedback loop and the emotion protocols proposed for the facial recognition program are explained. A basic version of the facial expression recognition program uses Haar classifiers and OpenCV libraries to automatically locate key facial landmarks during a live video stream. Various methods of creating facial expression recognition software are reviewed to guide future extensions of the program. The paper concludes with an examination of the steps necessary in the research of emotion and recommendations for the creation of an automatic facial expression recognition program for use in real-time, safety-critical missions

Blanson, Nina↗

CST: A Tool for Optimizing the Efficiency and Effectiveness of Static-Code Analysis Tools

Static Code Analysis (SCA) is a vital component of NASA IV&V’s mission assurance for safety-critical software as it reduces the likelihood of software-induced hazards impacting mission success. Static Code Analysis achieves this by identifying hazards that may not have been otherwise detectable by typical code reviews or other testing. Using SCA tools, however, can be intimidating due to steep learning curves, especially considering tool performance and defect coverage varies greatly. Because of this variation amongst SCA tools, understanding which tools support certain defects and which do not, as well as understanding how to run an analysis based on steps that are unique to each tool, can be difficult to both new and experienced analysts alike. To mitigate this, the SCAWG or the IV&V Static Code Analysis Working Group, created the SCA Checker Taxonomy and Starting Point Profiles. The Checker Selection Tool (CST) incorporates these two SCAWG products into an interactive tool which allows the user to: select organized categories of defects they would like the SCA tools to discover, select default checkers depending on their mission type (e.g. flight), and configure multiple SCA tools at once. C/C++, Java, and Python defect checkers from four common SCA tools were utilized in this iteration of the CST. This iteration also includes the addition of training, SCA tool specific help, and taxonomy guide links, into its design to help users new to Static Code Analysis learn how to perform SCA more efficiently. The CST has been subject to beta testing by experienced static code analysts from the SCAWG to ensure a usable and accurate final product. The implications of the CST in the mission assurance of NASA safety-critical software are profound, as the CST can help identify and reduce false positives and false negatives, fundamentally improving overall SCA efficiency and accuracy.

static code analysis↗

Vibration Anomaly Indicator in UAVs in presence of Wind

One of the critical factors affecting flight safety of unmanned aerial vehicles (UAVs) is the amount of vibration they are exposed during a flight. For UAVs under remote operation, vehicle stabilization and navigation is typically achieved by estimating its attitude and position using onboard miniature sensors such as accelerometers, gyroscopes, and GPS via an onboard autopilot. Since precise control of the UAV relies heavily on the attitude sensing, the vibration levels need to be as low as possible in order to minimize the signal noise. Incorrect sensor data can lead to uncertain state estimation causing the multirotor to drift from its desired position. Moreover, high vibrations can induce faults in the safety-critical components of the UAV such as its on-board sensors, motors and propellers. Hence, it is important to monitor the vibration levels during a UAV flight. This paper specifically looks into effect of wind on the vibrations recorded by the autopilot system in an octocopter. Using data from experimental flights under varying wind conditions, we aim to classify between a nominal and anomalous vibration level and define a safety metric known as the Vibrational Anomaly Indicator (VAI) for small UAV systems. Further, we will study effect of high vibrations on the inertial measurement unit (IMU) of an octocopter under laboratory set-up and compute the VAI from IMU measurements. Results would demonstrate the utility of VAI as an health indicator for unmanned flights either in presence of winds or from degraded on-board IMU sensor.

Vibration↗

Serious Gaming for Building a Basis of Certification via Trust and Trustworthiness of Autonomous Systems

Autonomous systems governed by a variety of adaptive and nondeterministic algorithms are being planned for inclusion into safety-critical environments, such as unmanned aircraft and space systems in both civilian and military applications. However, until autonomous systems are proven and perceived to be capable and resilient in the face of unanticipated conditions, humans will be reluctant or unable to delegate authority, remaining in control aided by machine-based information and decision support. Proving capability, or trustworthiness, is a necessary component of certification. Perceived capability is a component of trust. Trustworthiness is an attribute of a cyber-physical system that requires context-driven metrics to prove and certify. Trust is an attribute of the agents participating in the system and is gained over time and multiple interactions through trustworthy behavior and transparency. Historically, artificial intelligence and machine learning systems provide answers without explanation - without a rationale or insight into the machine “thinking”. In order to function as trusted teammates, machines must be able to explain their decisions and actions. This transparency is a product of both content and communication. NASA’s Autonomy Teaming & TRAjectories for Complex Trusted Operational Reliability (ATTRACTOR) project seeks to build a basis for certification of autonomous systems via establishing metrics for trustworthiness and trust in multi-agent team interactions, using AI (Artificial Intelligence) explainability and persistent modeling and simulation, in the context of mission planning and execution, with analyzable trajectories. Inspired by Massively Multiplayer Online Role Playing Games (MMORPG) and Serious Gaming, the proposed ATTRACTOR modeling and simulation environment is similar to online gaming environments in which player (aka agent) participants interact with each other, affect their environment, and expect the simulation to persist and change regardless of any individual agent’s active participation. This persistent simulation environment will accommodate individual agents, groups of self-organizing agents, and large-scale infrastructure behavior. The effects of the emerging adaptation and coevolution can be observed and measured to building a basis of measurable trustworthiness and trust, toward certification of safety-critical autonomous systems.

Allen, B. Danette↗

Lunar Search & Rescue Applications of Lunar GNSS

Accurate lunar navigation and timing knowledge provides for the development of safety-critical services in the cislunar and lunar surface domain. Currently under development, the Goddard Space Flight Center’s (GSFC) Search and Rescue Mission Office is investigating and integrating search and rescue (SAR) capability into planned and future lunar communication and navigation interfaces. Lunar Search and Rescue (LunaSAR) development has a stated end-goal for assured, reliable, and timely indication of distress events for a wide variety of lunar surface users, including government-sponsored, commercial, and international users. LunaSAR performance requirements are modelled after the current terrestrial Cospas-Sarsat distress notification system, leveraging an internationally robust global navigation satellite system (GNSS) ecosystem as a core element of survivor locating capability. This presentation will discuss NASA’s work to develop user-focused distress messaging capabilities including infusion of example sensor data for triggering of automated distress alerts coupled with location-tagging. Additionally, the presentation will examine overall message structures, rotating fields for use in bi-directional distress messaging, and specific use cases based on NASA’s lunar exploration and lunar communication relay architectures. Modelling and simulation of LunaSAR use by individual lunar explorers will be discussed, based on notional industry and government design reference missions and mission considerations. Results from GSFC-funded Internal Research and Development (IRAD) efforts will be detailed, including successful distress message formulation simulating the ingestion of example legacy space suit telemetry fields. Hardware-in-the-loop testing using high-reliability software defined radio (SDR) modules serve as an example of IRAD successes and the framework for technical requirements. Architectural development and technical evolution from 2020 to 2021 included alignment of LunaSAR distress waveforms with ongoing NASA LunaNet interoperability development, as well as engagement with NASA Lunar Spectrum authorities for allocation of UHF-band distress frequencies on the lunar surface. S-Band and UHF-band transmission characteristics will be detailed, along with band-specific applications of each emission type. Additionally, examples of ingestion and formatting of GNSS signals (using historical terrestrial National Marine Electronics Association-formatted GNSS data) will be detailed, underscoring lunar user needs for a common lunar GNSS receiver output message framework. Maturity and ability to support evolving lunar exploration goals has been demonstrated and will be detailed, with maturity gaps such as position, navigation, and timing (PNT) and lunar reference frames identified within the context of distress message generation. Provision of LunaSAR services for lunar surface users represents a new era of ensured safety for lunar explorers and builds off of forty years of the Cospas-Sarsat program, underscoring the importance of lunar GNSS for safety-critical applications and growing interest in safe, reliable lunar surface operations. Enabled by new GNSS systems being developed by government and industry partners, NASA will continue to evolve and integrate lunar GNSS types into distress message generation, with a focus on compact and efficient message transmission over various lunar communication links. When fielded, LunaSAR will be the first dedicated search and rescue notification system employed on another celestial body. Robust lunar navigation and timing services form the core of LunaSAR capabilities, allowing for system syncing with time-dominant sensors, and high-accuracy location of those in distress while engaged in lunar surface activities.

Search and Rescue↗

Selected Uses of TSUNAMI in Critical Experiment Design and Analysis

Validation in criticality safety is performed by comparing the results of critical experiments with the calculated results from models of the experiments using the computational method to be validated. Laboratory critical experiments are controlled systems that achieve a k eff of approximately 1 and enable investigation of the parameters at which such a critical condition is achieved. For the critical experiments used in a validation to capture the biases of the materials and neutron energy spectra of interest, those materials must be included in the experiment such that they influence k eff or another observable parameter with statistical significance. This paper discusses the use of sensitivity uncertainty (S/U) methods to develop critical experiments for various purposes. S/U techniques are useful for understanding the underlying components of nuclear data which affect the k eff or another parameter of a given configuration. S/U calculations are most commonly used to compare existing experiments to applications of interest; however, S/U techniques can also be used to identify, optimize, or assess features of proposed experiments so that they can better test specific portions of nuclear data or match an application of interest. The S/U techniques discussed here are from the TSUNAMI code system. The two primary codes discussed in this work are TSUNAMI-3D, which implements the KENO criticality code to calculate the sensitivity of k eff to nuclear data, and TSAR, which calculates the sensitivity of a reactivity difference between two configurations based on their TSUNAMI-3D generated sensitivity profiles. The methods used in these tools are discussed in more detail in the SCALE manual. This paper is one of a series on the development and use of TSUNAMI tools. The other papers address development of TSUNAMI methods and a review of TSUNAMI applications.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Pitch Variation Experiments in Water-Moderated Square-Pitched U(6.9)O 2 Fuel Rod Lattices with Fuel to Water Volume Ratios Spanning 0.08 to 0.67

The US Department of Energy (DOE) Nuclear Energy Research Initiative funded the design and construction of the Seven Percent Critical Experiment (7uPCX) at Sandia National Laboratories. The start-up of the experiment facility and the execution of the experiments described here were funded by the DOE Nuclear Criticality Safety Program. The 7uPCX is designed to investigate critical systems with fuel for light water reactors in the enrichment range above 5% 235 U. The 7uPCX assembly is a water-moderated and -reflected array of aluminum-clad square-pitched U(6.90%)O 2 fuel rods. Other critical experiments performed in the 7uPCX assembly are documented in LEU-COMP-THERM-078, LEU-COMP-THERM-080, LEU-COMPTHERM- 096, LEU-COMP-THERM-097, and LEU-COMP-THERM-101. The twenty-seven critical experiments in this series were performed in 2020 in the SCX at the Sandia Pulsed Reactor Facility. The experiments are grouped by fuel rod pitch. Case 1 is a base case with a pitch of 0.8001 cm and no water holes in the array. Cases 2 through 6 have the same pitch as Case 1 but contain various configurations with water holes, providing slight variations in the fuel-to-water ratio. Similarly, Case 7 is a base case with a pitch of 0.854964 cm and no water holes in the array. Cases 8 through 11 have the same pitch as Case 7 but contain various configurations with water holes. Cases 12 through 15 have a pitch of 1.131512 cm and differ according to the number of water holes in the array, with Case 12 having no water holes. Cases 16 through 19 have a pitch of 1.209102 cm and differ according to number of water holes in the array, with Case 16 having no water holes. Cases 20 through 23 have a pitch of 1.6002 cm and differ according to number of water holes in the array, with Case 20 having no water holes. Cases 24 through 27 have a pitch of 1.709928 cm and differ according to number of water holes in the array, with Case 24 having no water holes. As the experiment case number increases, the fuel-to-water volume ratio decreases.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗