SEARCH · Engineering Papers

Results for “documentation requirements tracing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

All sources NASA NTRS DOE OSTI

DOE OSTI2026

One Earth Energy FEED Process Design Basis

This report establishes the process design basis for the front-end engineering design (FEED) of a carbon capture and injection facility at One Earth Energy's (OEE) ethanol production plant in Gibson City, Illinois, developed as part of the Illinois Storage Corridor CarbonSAFE Phase III project. The facility is designed to compress and dehydrate up to approximately 458,000 metric tonnes of CO 2 per year, sourced directly from OEE's ethanol fermenters, for permanent injection into a saline aquifer approximately four miles from the plant. At normal operating conditions, the system will process 1,290 metric tonnes of CO 2 per day, assuming 355 operating days per year and an ethanol production rate of 160 million gallons per year. The proposed process trains a multistage centrifugal blower with a five-stage reciprocating compressor, delivering CO 2 to the injection wellhead at up to 1,500 psig. Triethylene glycol (TEG) dehydration, applied after the fourth compression stage, reduces water content to a target of 10 lb/MMscf, well within the 30 lb/MMscf injection limit. Beyond dehydration, no additional treatment is required; trace impurities including oxygen and nitrogen will remain in the injected stream. Key design considerations include the absence of spare cooling tower capacity at the site, necessitating new cooling infrastructure, and the need for a new electrical substation to support large motor loads. The facility is designed for continuous, largely unattended operation, monitored around the clock by existing OEE operations staff. This document serves as the foundational reference for all subsequent detailed engineering activities associated with the OEE CO 2 injection facility.

01 COAL, LIGNITE, AND PEAT↗

NASA NTRS2008

Certifying Auto-Generated Flight Code

Model-based design and automated code generation are being used increasingly at NASA. Many NASA projects now use MathWorks Simulink and Real-Time Workshop for at least some of their modeling and code development. However, there are substantial obstacles to more widespread adoption of code generators in safety-critical domains. Since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently the generated code still needs to be fully tested and certified. Moreover, the regeneration of code can require complete recertification, which offsets many of the advantages of using a generator. Indeed, manual review of autocode can be more challenging than for hand-written code. Since the direct V&V of code generators is too laborious and complicated due to their complex (and often proprietary) nature, we have developed a generator plug-in to support the certification of the auto-generated code. Specifically, the AutoCert tool supports certification by formally verifying that the generated code is free of different safety violations, by constructing an independently verifiable certificate, and by explaining its analysis in a textual form suitable for code reviews. The generated documentation also contains substantial tracing information, allowing users to trace between model, code, documentation, and V&V artifacts. This enables missions to obtain assurance about the safety and reliability of the code without excessive manual V&V effort and, as a consequence, eases the acceptance of code generators in safety-critical contexts. The generation of explicit certificates and textual reports is particularly well-suited to supporting independent V&V. The primary contribution of this approach is the combination of human-friendly documentation with formal analysis. The key technical idea is to exploit the idiomatic nature of auto-generated code in order to automatically infer logical annotations. The annotation inference algorithm itself is generic, and parametrized with respect to a library of coding patterns that depend on the safety policies and the code generator. The patterns characterize the notions of definitions and uses that are specific to the given safety property. For example, for initialization safety, definitions correspond to variable initializations while uses are statements which read a variable, whereas for array bounds safety, definitions are the array declarations, while uses are statements which access an array variable. The inferred annotations are thus highly dependent on the actual program and the properties being proven. The annotations, themselves, need not be trusted, but are crucial to obtain the automatic formal verification of the safety properties without requiring access to the internals of the code generator. The approach has been applied to both in-house and commercial code generators, but is independent of the particular generator used. It is currently being adapted to flight code generated using MathWorks Real-Time Workshop, an automatic code generator that translates from Simulink/Stateflow models into embedded C code.

Denney, Ewen↗

NASA NTRS1984

Assessment of Techniques for Measuring Tropospheric H Sub x O Sub y

In its continuing efforts to direct its applications programs towards relevant national needs, NASA is conducting the Tropospheric Chemistry Program, the long-range objective of which is to apply NASA's space technology to assess and predict human impact on the troposphere, particularly on the regional to global scale. One area of required research is instrumentation development, which is aimed at improving the capability to measure important trace gases and aerosols which are key species in the major atmospheric biogeochemical cycles. To focus on specific needs, the Instrumentation Worksphop for H(x)O(y) Tropospheric Species was conducted in August 1982. The workshop discussed current measurement needs and instrument capabilities for H(x)O(y) species, including OH, HO2, and H2O2. The workshop activities and conclusions are documented.

Hoell, J. M.↗

NASA NTRS1995

Task Analytic Models to Guide Analysis and Design: Use of the Operator Function Model to Represent Pilot-Autoflight System Mode Problems

Task-analytic models structure essential information about operator interaction with complex systems, in this case pilot interaction with the autoflight system. Such models serve two purposes: (1) they allow researchers and practitioners to understand pilots' actions; and (2) they provide a compact, computational representation needed to design 'intelligent' aids, e.g., displays, assistants, and training systems. This paper demonstrates the use of the operator function model to trace the process of mode engagements while a pilot is controlling an aircraft via the, autoflight system. The operator function model is a normative and nondeterministic model of how a well-trained, well-motivated operator manages multiple concurrent activities for effective real-time control. For each function, the model links the pilot's actions with the required information. Using the operator function model, this paper describes several mode engagement scenarios. These scenarios were observed and documented during a field study that focused on mode engagements and mode transitions during normal line operations. Data including time, ATC clearances, altitude, system states, and active modes and sub-modes, engagement of modes, were recorded during sixty-six flights. Using these data, seven prototypical mode engagement scenarios were extracted. One scenario details the decision of the crew to disengage a fully automatic mode in favor of a semi-automatic mode, and the consequences of this action. Another describes a mode error involving updating aircraft speed following the engagement of a speed submode. Other scenarios detail mode confusion at various phases of the flight. This analysis uses the operator function model to identify three aspects of mode engagement: (1) the progress of pilot-aircraft-autoflight system interaction; (2) control/display information required to perform mode management activities; and (3) the potential cause(s) of mode confusion. The goal of this paper is twofold: (1) to demonstrate the use of the operator functio model methodology to describe pilot-system interaction while engaging modes And monitoring the system, and (2) to initiate a discussion of how task-analytic models might inform design processes. While the operator function model is only one type of task-analytic representation, the hypothesis of this paper is that some type of task analytic structure is a prerequisite for the design of effective human-automation interaction.

Degani, Asaf↗

NASA NTRS2017

Applying Standard Independent Verification and Validation (IVV) Techniques Within an Agile Framework: Is There a Compatibility Issue?

Agile methods have gained wide acceptance over the past several years, to the point that they are now a standard management and execution approach for small-scale software development projects. While conventional Agile methods are not generally applicable to large multi-year and mission-critical systems, Agile hybrids are now being developed (such as SAFe) to exploit the productivity improvements of Agile while retaining the necessary process rigor and coordination needs of these projects. From the perspective of Independent Verification and Validation (IVV), however, the adoption of these hybrid Agile frameworks is becoming somewhat problematic. Hence, we find it prudent to question the compatibility of conventional IVV techniques with (hybrid) Agile practices.This paper documents our investigation of (a) relevant literature, (b) the modification and adoption of Agile frameworks to accommodate the development of large scale, mission critical systems, and (c) the compatibility of standard IVV techniques within hybrid Agile development frameworks. Specific to the latter, we found that the IVV methods employed within a hybrid Agile process can be divided into three groups: (1) early lifecycle IVV techniques that are fully compatible with the hybrid lifecycles, (2) IVV techniques that focus on tracing requirements, test objectives, etc. are somewhat incompatible, but can be tailored with a modest effort, and (3) IVV techniques involving an assessment requiring artifact completeness that are simply not compatible with hybrid Agile processes, e.g., those that assume complete requirement specification early in the development lifecycle.

Agile↗

NASA NTRS2008

Human Rating Requirements for NASA's Constellation Program

NASA s Constellation Program (CxP) will conduct a series of human space expeditions of increasing scope, starting with missions supporting the International Space Station and expanding to encompass the Moon and Mars. Although human-rating is an integral part of all CxP activities throughout their life cycle, NASA Procedural Requirements document NPR 8705.2B, Human-Rating Requirements (HRR) for Space Flight Systems, defines the additional processes, procedures, and requirements necessary to produce human-rated space systems that protect the safety of crew members and passengers on these NASA missions. In order to be in compliance with 8705.2B the CxP must show appropriate implementation or progression toward the HRR, or justification for an exception. Compliance includes an explanation of how the CxP intends to meet the HRR, analyses to be performed to determine implementation; and a matrix to trace the HRR to CxP requirements. The HRR requires the CxP to establish a human system integration team (HSIT), consisting of astronauts, mission operations personnel, training personnel, ground processing personnel, human factors personnel, and human engineering experts, with clearly defined authority, responsibility, and accountability to lead the human-system integration. For example, per the HRR the HSIT is involved in the evaluation of crew workload, human-in-the-loop usability evaluations, determining associated criteria, and in assessment of how these activities influenced system design. In essence, the HSIT is invaluable in CxP s ability to meet the three fundamental tenets of human rating: the process of designing, evaluating, and assuring that the total system can safely conduct the required human missions; the incorporation of design features and capabilities that accommodate human interaction with the system to enhance overall safety and mission success; and the incorporation of design features and capabilities to enable safe recovery of the crew from hazardous situations.

Berdich, Debbie↗

NASA NTRS1990

Design knowledge capture for a corporate memory facility

Currently, much of the information regarding decision alternatives and trade-offs made in the course of a major program development effort is not represented or retained in a way that permits computer-based reasoning over the life cycle of the program. The loss of this information results in problems in tracing design alternatives to requirements, in assessing the impact of change in requirements, and in configuration management. To address these problems, the problem was studied of building an intelligent, active corporate memory facility which would provide for the capture of the requirements and standards of a program, analyze the design alternatives and trade-offs made over the program's lifetime, and examine relationships between requirements and design trade-offs. Early phases of the work have concentrated on design knowledge capture for the Space Station Freedom. Tools are demonstrated and extended which helps automate and document engineering trade studies, and another tool is being developed to help designers interactively explore design alternatives and constraints.

Boose, John H.↗

NASA NTRS2004

Software Safety Analysis of a Flight Guidance System

This document summarizes the safety analysis performed on a Flight Guidance System (FGS) requirements model. In particular, the safety properties desired of the FGS model are identified and the presence of the safety properties in the model is formally verified. Chapter 1 provides an introduction to the entire project, while Chapter 2 gives a brief overview of the problem domain, the nature of accidents, model based development, and the four-variable model. Chapter 3 outlines the approach. Chapter 4 presents the results of the traditional safety analysis techniques and illustrates how the hazardous conditions associated with the system trace into specific safety properties. Chapter 5 presents the results of the formal methods analysis technique model checking that was used to verify the presence of the safety properties in the requirements model. Finally, Chapter 6 summarizes the main conclusions of the study, first and foremost that model checking is a very effective verification technique to use on discrete models with reasonable state spaces. Additional supporting details are provided in the appendices.

Butler, Ricky W.↗

NASA NTRS2004

Portable Wireless LAN Device and Two-Way Radio Threat Assessment for Aircraft VHF Communication Radio Band

Nguyen, Truong X.↗

DOE OSTI2025

High-Burnup BWR LOCA Burst Analysis Using High-Fidelity Multiphysics Simulations

The US nuclear industry is looking to improve on the operating economics of the current fleet of light-water reactors (LWRs). One way of achieving this is by operating fuel to higher burnup. In pressurized water reactors (PWRs), relaxing the current burnup limit will allow for cycle length extensions and power uprates; in boiling water reactors (BWRs) it may allow for improved fuel utilization and reduced feed assemblies, as well as more efficient power uprates and increased capacity factors that will support the Administration’s Executive Order to facilitate 5 GW of power uprates at existing nuclear facilities. However, one of the key limitations to operating fuel to higher burnup is the risk of fuel fragmentation, relocation, and dispersal (FFRD). Recognizing the high interest in extending burnup limits, the US Nuclear Regulatory Commission (NRC) has issued Draft Regulatory Guide DG-1434, which defines an approach that would be acceptable to the NRC for addressing FFRD risk. The approach defined will require better understanding of the phenomena leading to FFRD as well as best-estimate simulation methods to understand FFRD risk in high-burnup cores. The Nuclear Energy Advanced Modeling and Simulation program is supporting the FFRD industry challenge problem through development of state-of-the-art, high-fidelity modeling and simulation LWR analysis capabilities; namely, the BISON fuel performance code and the VERA core simulator software. These tools, along with the US NRC TRACE system analysis code, have been utilized for analysis of FFRD risk in both PWR and BWR cores in recent years. The work documented in this report addresses the lack of high-fidelity research for BWRs and builds on a previous activity where the framework has been applied to Cycles 16 through 18 of Limerick Unit 1, a BWR/4, with introduction of 8 high-burnup lead use assemblies (HBLUAs) that were representative of the 8 HBLUAs loaded into Limerick Unit 2 in 2021. VERA was used in this previous activity to model rod-by-rod depletion in these cycles, and its solution was used to initialize a TRACE simulation of a large-break loss-of-coolant accident (LBLOCA) at the end of Cycle 18. In the work documented in this report, the TRACE model was improved by refining the core mesh and utilizing a new feature that allows for capturing the full 3D VERA power distribution in the model. This allows for a more detailed solution for setting BISON boundary conditions. Furthermore, the solutions from VERA and TRACE were used to set up and perform BISON simulations of about 1,000 rods sampled from the core, including all burnup levels. Utilizing two cladding burst models, it was shown that no fuel rods were predicted to burst during the postulated LBLOCA transient. Additionally, a sensitivity study was performed by artificially increasing linear heat rate during the postulated LBLOCA to identify parameters that correlate with rod burst susceptibility. Burnup, fission gas release, and hoop strain were all found to be positively correlated with rod burst susceptibility. Small-break loss-of-coolant accident (SBLOCA) analyses were also performed; these analyses predicted cladding temperature increases that were bounded by the LBLOCA cladding temperatures for all small break sizes studied for this plant. However, future refinements to the plant response assumptions during the SBLOCA could impact the predicted cladding response. Finally, a benchmark study was performed between CTF and TRACE for LOCA conditions to better qualify CTF for BWR LOCA modeling.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRS2013

Testing the Origins of Basalt Fragments fro Apollo 16

Several 2-4 mm regolith fragments of basalt from the Apollo 16 site were recently described by [1]. These included a high-Ti vitrophyric basalts (60603,10-16) and one very-low-titanium (VLT) crystalline basalt (65703,9-13). As Apollo 16 was the only highlands sample return mission distant from the maria, identification of basaltic samples at the site indicates input from remote sites via impact processes [1]. However, distinguishing between impact melt and pristine basalt can be notoriously difficult and requires significant sample material [2-6]. The crystal stratigraphy method utilizes essentially non-destructive methods to make these distinctions [7,8]. Crystal stratigraphy combines quantitative petrography in the form of crystal size distributions (CSDs) coupled with mineral geochemistry to reveal the petrogenetic history of samples. The classic CSD plot of crystal size versus population density can reveal insights on growth/cooling rates, residence times, and magma history which in turn can be used to evaluate basaltic vs impact melt origin [7-9]. Electron microprobe (EMP) and laser ablation (LA)-ICP-MS analyses of mineral phases complement textural investigations. Trace element variations document subtle changes occurring during the formation of the samples, and are key in the interpretation and preservation of this rare lunar sample collection.

Donohue, P. H.↗

NASA NTRS2004

Leo Spacecraft Charging Design Guidelines: A Proposed NASA Standard

Over the past decade, Low Earth Orbiting (LEO) spacecraft have gradually required ever-increasing power levels. As a rule, this has been accomplished through the use of high voltage systems. Recent failures and anomalies on such spacecraft have been traced to various design practices and materials choices related to the high voltage solar arrays. NASA Glenn has studied these anomalies including plasma chamber testing on arrays similar to those that experienced difficulties on orbit. Many others in the community have been involved in a comprehensive effort to understand the problems and to develop practices to avoid them. The NASA Space Environments and Effects program, recognizing the timeliness of this effort, commissioned and funded a design guidelines document intended to capture the current state of understanding. This document, which was completed in the spring of 2003, has been submitted as a proposed NASA standard. We present here an overview of this document and discuss the effort to develop it as a NASA standard.

Hillard, G. B.↗

NASA NTRS2002

LEO Spacecraft Charging Guidelines

Over the past decade, Low Earth Orbiting (LEO) spacecraft have gradually required ever-increasing power levels. As a rule, this has been accomplished through the use of high voltage systems. Recent failures and anomalies on such spacecraft have been traced to various design practices and materials choices related to the high voltage solar arrays. NASA Glenn has studied these anomalies including plasma chamber testing on arrays similar to those that experienced difficulties on orbit. Many others in the community have been involved in a comprehensive effort to understand the problems and to develop practices to avoid them. The NASA Space Environments and Effects program, recognizing the timeliness of this effort, has commissioned and funded a design guidelines document intended to capture the current state of understanding. We present here an overview of this document, which is now nearing completion.

Hillard, G. B.↗

NASA NTRS2009

Generating Code Review Documentation for Auto-Generated Mission-Critical Software

Model-based design and automated code generation are increasingly used at NASA to produce actual flight code, particularly in the Guidance, Navigation, and Control domain. However, since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently auto-generated code still needs to be fully tested and certified. We have thus developed AUTOCERT, a generator-independent plug-in that supports the certification of auto-generated code. AUTOCERT takes a set of mission safety requirements, and formally verifies that the autogenerated code satisfies these requirements. It generates a natural language report that explains why and how the code complies with the specified requirements. The report is hyper-linked to both the program and the verification conditions and thus provides a high-level structured argument containing tracing information for use in code reviews.

Denney, Ewen↗

NASA NTRS1992

Achieving and documenting closure in plant growth facilities

As NASA proceeds with its effort to develop a Controlled Ecological Life Support System (CELSS) that will provide life support to crews during long duration space missions, it must address the question of facility and system closure. The concept of closure as it pertains to CELSS and engineering specifications, construction problems and monitoring procedures used in the development and operation of a closed plant growth facility for the CELSS program are described. A plant growth facility is one of several modules required for a CELSS. A prototype of this module at Kennedy Space Center is the large (7m tall x 3.5m diameter) Biomass Production Chamber (BPC), the central facility of the CELSS Breadboard Project. The BPC is atmospherically sealed to a leak rate of approximately 5 percent of its total volume per 24 hours. This paper will discuss the requirements for atmospheric closure in the facility, present CO2 and trace gas data from initial tests of the BPC with and without plants, and describe how the chamber was sealed atmospherically. Implications that research conducted in this type of facility will have for the CELSS program are discussed.

Knott, W. M.↗

NASA NTRS2010

Documentation of Stainless Steel Lithium Circuit Test Section Design

The Early Flight Fission-Test Facilities (EFF-TF) team was tasked by Naval Reactors Prime Contract Team (NRPCT) to design, fabricate, and test an actively pumped lithium (Li) flow circuit. This Li circuit takes advantage of work in progress at the EFF TF on a stainless steel sodium/potassium (NaK) circuit. The effort involved modifying the original stainless steel NaK circuit such that it could be operated with Li in place of NaK. This new design considered freeze/thaw issues and required the addition of an expansion tank and expansion/extrusion volumes in the circuit plumbing. Instrumentation has been specified for Li and circuit heaters have been placed throughout the design to ensure adequate operational temperatures and no uncontrolled freezing of the Li. All major components have been designed and fabricated prior to circuit redesign for Li and were not modified. Basic circuit components include: reactor segment, Li to gas heat exchanger, electromagnetic liquid metal pump, load/drain reservoir, expansion reservoir, instrumentation, and trace heaters. The reactor segment, based on a Los Alamos National Laboratory 100-kW design study with 120 fuel pins, is the only prototypic component in the circuit. However, due to earlier funding constraints, a 37-pin partial-array of the core, including the central three rings of fuel pins (pin and flow path dimensions are the same as those in the full design), was selected for fabrication and test. This Technical Publication summarizes the design and integration of the pumped liquid metal Li flow circuit as of May 1, 2005.

Godfroy, T. J.↗

NASA NTRS2010

Documentation of Stainless Steel Lithium Circuit Test Section Design

Godfroy, Thomas J.↗

NASA NTRS1994

A three-dimensional transport model for the middle atmosphere

In this paper we describe fundamental properties of an 'off-line' three-dimensional transport model, that is, a model which uses prescribed rather than predicted winds. The model is currently used primarily for studying problems of the middle atmosphere because we have not (yet) incorporated a formulation for the convective transport of trace species, a prerequisite for many tropospheric problems. The off-line model is simpler and less expensive than a model which predicts the wind and mass evolution (an 'on-line' model), but it is more complex than the two-dimensional (2-D) zonally averaged transport models often used in the study of chemistry and transport in the middle atmosphere. It thus serves as a model of intermediate complexity and can fill a useful niche for the study of transport and chemistry. We compare simulations of four tracers, released in the lower stratosphere, in both the on- and off-line models to document the difference resulting from differences in modeling the same problem with this intermediate model. These differences identify the price to be paid in going to a cheaper and simpler calculation. The off-line model transports a tracer in three dimensions. For this reason, it requires fewer approximations than 2-D transport model, which must parameterize the effects of mixing by transient and zonally asymmetric wind features. We compare simulations of the off-line model with simulations of a 2-D model for two problems. First, we compare 2-D and three-dimensional (3-D) models by simulating the emission of an NO(x)-like tracer by a fleet of high-speed aircraft. The off-line model is then used to simulate the transport of C-14 and to contrast its simulation properties to that of the host of 2-D models which participated in an identical simulation in a recent NASA model intercomparison. The off-line model is shown to be somewhat sensitive to the sampling strategy for off-line winds. Simulations with daily averaged winds are in very good qualitative agreement but are less diffusive than when driven with instantaneous winds sampled at half-hour intervals. Simulations with the off-line and 2-D models are quite similar in the middle and upper stratosphere but behave quite differently in the lower stratosphere, where the 3-D model has a substantially more vigorous circulation. The off-line model is quite realistic in its simulation of C-14. While there are still systematic differences between the 3-D calculation and the observations, the differences seem to be substantially reduced when compared with the body of 2-D simulations documented in the above mentioned NASA intercomparison, particularly at 31 deg N.

Rasch, Philip J.↗