SEARCH · Engineering Papers

Results for “SAFETY MARGINS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 595 records · Page 33

All sources NASA NTRS DOE OSTI

NASA NTRS2016

NASA Alternative Orion Small Cell Battery Design Support

The NASA Orion Crew Module Reference Design was produced to address large scale thermal runaway (TR) hazard with specific safety controls for the Orion Spacecraft. The design presented provides the description of a full scale battery design reference for implementation as a drop in replacement to meet all spacecraft energy requirements with compatible 120 Vdc electrical and mechanical interface using small cell technology (18650) packaging. The 32V SuperBrick incorporates unique support features and an electrical bus bar arrangement that allows cells negative can insertion into heat sink that is compressively coupled to the battery enclosure to promote good thermal management. The housing design also provides an internal flame suppression "filter tray" and positive venting path internal to the enclosure to allow hot effluent ejecta to escape in the event of single cell TR. Virtual cells (14P Banks) that are supported to provide cell spacing with interstitial materials to prevent side can failures that can produce cell to cell TR propagation. These features were successfully test in four separate TR run with the full scale DTA1 test article in February 2016. Successfully Completed Test Objectives - Four separate TR test runs with Full-Scale DTA1 housing with Two SuperBricks, Two SuperBrick Emulators All Tests resulted in "clean" gas with less than 6 C rise at Battery vent All Tests resulted in less than 2 C temperature rise on cold-plate outlet All Tests resulted in less than 6 psi pressure rise in the battery housing Test Run 1 -One neighbor cell TR, highest remaining neighbor 139 C. Ejecta shorted to bus caused prolonged additional heating, One shorted cell did experience TR after 12 minutes, remaining cells had adequate thermal margin Test Run 2 - No cell to cell propagation, highest neighbor cell 112 C; Test Run 3 - No cell to cell propagation, highest neighbor cell 96 C; Test Run 4 - No cell to cell propagation, highest neighbor cell 101 C; Primary TR testing and analysis were completed and reviewed for endorsement by NASA Engineering and Safety Center team members. All Key Test Objectives were met and the small cell design alternative was demonstrated and selected to be a feasible drop in replacement for the MPCV Orion CM Battery for EM2 mission.

Haynes, Chuck↗

DOE OSTI2022

Reducing the L-H transition power threshold in ITER-similar-shape DIII-D hydrogen plasmas

Recent dedicated DIII-D experiments in low-torque, ITER-similar-shape (ISS) hydrogen plasmas (at a plasma current I p ~ 1.5 MA and ITER-similar edge safety factor q 95 ~ 3.6) show that the L-H transition power threshold P LH can be reduced substantially (~30%) with L-mode helium admixtures n He /n e $\leqslant$ 25%. In the ensuing H-mode, helium ion fractions n He /n H remain below 25%. H-mode normalized pressure and confinement quality are only slightly affected by helium seeding, and Z eff $\leqslant$ 2.15 (including helium and carbon content). The plasmas investigated here are electron-heat dominated, with temperatures T e (0)/T i (0) $\geqslant$ 1 and edge heat flux ratio Q e /Q i (ρ = 0.95) ~ 1.2–1.5. Without mitigation, P LH is higher by a factor of 2–3 in comparison to similar ISS deuterium plasmas. ISS hydrogen plasmas with lower plasma current I p ~ 1 MA (increased edge safety factor q 95 ~ 5.1) exhibit a substantially lower power threshold. This plasma current dependence, also observed previously on ASDEX-U and in JET, is not accounted for by the commonly used 2008 ITPA multi-machine threshold scaling, but could potentially allow H-mode access at marginal heating power during the initial plasma current ramp-up. Attempts to reduce P LH with low-field- and high-field-side hydrogen pellet injection, using 1.7 mm diameter pellets, have not demonstrated a robust threshold reduction, in contrast to successful earlier experiments with larger 2.7 mm pellets. Finally, techniques for reducing P LH are very important for ITER, in particular for accessing H-mode in hydrogen plasmas during the Pre-Fusion Power Operation-1 (PFPO-1) campaign with marginal auxiliary heating power (20–30 MW of ECH).

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

NASA NTRS2008

Space-Based Range

Space-Based Range (SBR), previously known as Space-Based Telemetry and Range Safety (STARS), is a multicenter NASA proof-of-concept project to determine if space-based communications using NASA's Tracking and Data Relay Satellite System (TDRSS) can support the Range Safety functions of acquiring tracking data and generating flight termination signals, while also providing broadband Range User data such as voice, video, and vehicle/payload data. There was a successful test of the Range Safety system at Wallops Flight Facility (WFF) on December 20, 2005, on a two-stage Terrier-Orion spin-stabilized sounding rocket. SBR transmitted GPS tracking data and maintained links with two TDRSS satellites simultaneously during the 10-min flight. The payload section deployed a parachute, landed in the Atlantic Ocean about 90 miles downrange from the launch site, and was successfully recovered. During the Terrier-Orion tests flights, more than 99 percent of all forward commands and more than 95 percent of all return frames were successfully received and processed. The time latency necessary for a command to travel from WFF over landlines to White Sands Complex and then to the vehicle via TDRSS, be processed onboard, and then be sent back to WFF was between 1.0 s and 1.1 s. The forward-link margins for TDRS-10 (TDRS East [TDE]) were 11 dB to 12 dB plus or minus 2 dB, and for TDRS-4 (TDRS Spare [TDS]) were 9 dB to 10 dB plus or minus 1.5 dB. The return-link margins for both TDE and TDS were 6 dB to 8 dB plus or minus 3 dB. There were 11 flights on an F-15B at Dryden Flight Research Center (DFRC) between November 2006 and February 2007. The Range User system tested a 184-element TDRSS Ku-band (15 GHz) phased-array antenna with data rates of 5 Mbps and 10 Mbps. This data was a combination of black-and-white cockpit video, Range Safety tracking and transceiver data, and aircraft and antenna controller data streams. IP data formatting was used.

Source record↗

DOE OSTI2023

Development of Shielding Benchmarks Using the Godiva IV Assembly

The Nuclear Criticality Safety Program (NCSP) is developing a shielding benchmark using the Godiva IV assembly as a source. Its present status is reviewed herein. Even eight decades into the nuclear era, substantial work remains to develop a database of shielding benchmarks to support future nuclear development. A nuclear simulation is only as good as its supporting data, inputs, and validation basis. Uncertainty in these areas is addressed using conservatism, which adds margin and, occasionally, cost. In many shielding situations, high accuracy is not necessary because additional material is not particularly expensive. After all, 1–2 cm of lead often reduces the gamma ray dose substantially. However, in certain areas, conservatism can add unnecessary cost. These areas include mobile shielding applications such as casks, ships, microreactors, and spacecraft, where weight and, thus, margin is expensive. Although these characteristics are side benefits for NCSP shielding benchmark development, the main driver is enabling more reliable placement of criticality accident alarm systems (CAASs) in nuclear material facilities, such as those dedicated to the production of advanced reactor fuels. CAAS placement relies on more than accurate data and code validation. It also relies on sufficiently accurate materials specifications, geometry specifications, and a well-defined, alarm-producing baseline accident. All these things require tacit knowledge and understanding of the problem being evaluated. Benchmarks can help ensure this understanding.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

NASA NTRS1999

Proposed Mars Surveyor 2001 Landing Site at 'Ibishead Peninsula', Southern Elysium Planitia

Our objective is to propose a landing site that the Mars Surveyor 2001 Lander and Curie Rover could go to on Mars that should meet the safety requirements of the spacecraft landing system and optimize surface operations (chiefly driven by power and communications requirements). This site lies between 1.5-3.5 deg S latitude, 195-198 deg W longitude, along a sharp albedo contact between the low-viscosity flow units of southern Elysium Planitia and the eroded highlands margin east of Aeolis Mensae. A relatively-bright "peninsula-like" protrusion of the eroded highlands into the south Elysium plains in this area reminds us of the head of an Ibis, and so we nickname this site "Ibishead Peninsula". This site is designed to be situated as close to a diversity of geologic units within view of the lander instruments. Based on our experience with the visibility of horizon details from the Mars Pathfinder and Viking landing sites, we stipulate that for horizon features to be resolved suitably for detailed study from the lander, they must be no more than several kilometers distant. This is so that diversity can be placed in a geologic context in a region that we feel has some exciting science potential. This objective is different from the Mars Pathfinder requirement to land at a site with a maximum chance for containing a diversity of rocks within a few tens of meters of the lander, which resulted in the selection of a "grab bag" site.

Parker, T. J.↗

DOE OSTI1994

Nuclear Safety [Vol. 35, No. 2, July-December 1994]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 179 Consideration of Postaccident Consequences in the Determination of Safety Objectives for Future Nuclear Power Plants in France, D. Queniart, A. Sugier, and J. Lochard; ACCIDENT ANALYSIS: 187 Nuclear Safety Research: The Phebus FP Severe Accident Experimental Program, P. von der Hardt, A. V. Jones, C. Lecomte, and A. Tattegrain; 205 Containment Performance Analysis of the Advanced Neutron Source Reactor at the Oak Ridge National Laboratory, S. H. Kim, R. P. Taleyarkhan, and V. Georgevich; 213 Assessment of Fission Product Deposits in the Reactor Coolant System: The DEVAP Program, G. Le Marois and M. Megnin; 222 Erratum to “A Review of the Available Information on the Triggering Stage of a Steam Explosion," Vol. 35, No. 1, CONTROL AND INSTRUMENTATION: 223 Effects of Normal Aging on Calibration and Response Time of Nuclear Plant Resistance Temperature Detectors and Pressure Sensors, H. M. Hashemian; DESIGN FEATURES: 235 Defense in Depth Against the Hydrogen Risk—A European Research Program, F. Fineschi; ENVIRONMENTAL EFFECTS: 246 Technical Note: A Preliminary Analysis of the Risks to Hong Kong Resulting from Potential Accidents of Daya Bay Nuclear Power Plant, Z. Shi and X. Wei; OPERATING EXPERIENCES: 253 Reactor Shutdown Experience, Compiled by J. W. Cletcher; SPECIAL SECTION ON TMI-2 VESSEL INVESTIGATION PROJECT: 256 Three Mile Island—New Findings 15 Years After the Accident A. M. Rubin and E. Beckjord; 269 Relocation of Molten Material to the TMI-2 Lower Head, J. R. Wolf, D. W. Akers, and L. A. Neimark; 280 Insight Into the TMI-2 Core Material Relocation Through Examination of Instrument Tube Nozzles, L. A. Neimark; 288 Physical and Radiochemical Examinations of Debris from the TMI-2 Lower Head, D. W. Akers and B. K. Schuetz; 301 Results of Metallographic Examinations and Mechanical Tests of Pressure Vessel Samples from the TMI-2 Lower Head, D. R. Diercks and G. E. Korth; 313 Margin-to-Failure Calculations for the TMI-2 Vessel, J. Rempe, L. Stickler, S. Chavez, G. Thinnes, R. Witt, and M. Corradini; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 328 1993 Accident Sequence Precursor (ASP) Program Results, L. N. Vanden Heuvel, J. W. Cletcher, D. A. Copinger, J. W. Minarick, B. W. Dolan, and P. D. O’Reilley; RECENT DEVELOPMENTS: 339 Reports, Standards, and Safety Guides, D. S. Queener; 345 Proposed Rule Changes as of June 30, 1994; ANNOUNCEMENTS: 234 Thirty-First Annual Meeting of the National Council on Radiation Protection and Measurements; 356 1995 International Incineration Conference; 358 Fifth International Controls and Instrumentation Conference; 359 ANS International Topical Meeting on Safety of Operating Reactors; 359 Fifth International Conference on Nuclear Criticality Safety; 360 International Conference on Probabilistic Safety Assessment Methodology and Applications; 351 The Authors; 357 Reviewers of Nuclear Safety, Vol. 35.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA NTRS1991

A linear control design structure to maintain loop properties during limit operation in a multi-nozzle turbofan engine

The implementation of multi-variable control systems on turbofan engines requires the use of limit protection to maintain safe engine operation. Since a turbofan engine typically encounters limits during transient operation, the use of a limit protection scheme that modifies the feedback loop may void the desired 'guarantees' associated with linear multi-variable control design methods, necessitating considerable simulation to validate the control with limited protection. An alternative control design structure is proposed that maintains the desired linear feedback properties when certain safety limits are encountered by moving the limit protection scheme outside the feedback loop. This proposed structure is compared to a structure with a limit protection scheme that modifies the feedback loop properties. The two design structures are compared using both linear and nonlinear simulations. The evaluation emphasizes responses where the fan surge margin limit is encountered.

Mattern, Duane↗

NASA NTRS2005

Intelligent Life-Extending Controls for Aircraft Engines

Aircraft engine controllers are designed and operated to provide desired performance and stability margins. The purpose of life-extending-control (LEC) is to study the relationship between control action and engine component life usage, and to design an intelligent control algorithm to provide proper trade-offs between performance and engine life usage. The benefit of this approach is that it is expected to maintain safety while minimizing the overall operating costs. With the advances of computer technology, engine operation models, and damage physics, it is necessary to reevaluate the control strategy fro overall operating cost consideration. This paper uses the thermo-mechanical fatigue (TMF) of a critical component to demonstrate how an intelligent engine control algorithm can drastically reduce the engine life usage with minimum sacrifice in performance. A Monte Carlo simulation is also performed to evaluate the likely engine damage accumulation under various operating conditions. The simulation results show that an optimized acceleration schedule can provide a significant life saving in selected engine components.

Guo, Ten-Huei↗

NASA NTRS1991

A linear control design structure to maintain loop properties during limit operation in a multi-nozzle turbofan engine

The implementation of multi-variable control systems on turbofan engines requires the use of limit protection to maintain safe engine operation. Since a turbofan engine typically encounters limits during transient operation, the use of a limit protection scheme that modifies the feedback loop may void the desired 'guarantees' associated with linear multi-variable control design methods, necessitating considerable simulation to validate the control with limit protection. An alternative control design structure is proposed that maintains the desired linear feedback properties when certain safety limits are encountered by moving the limit protection scheme outside of the feedback loop. This proposed structure is compared to a structure with a limit protection scheme that modifies the feedback loop properties. The two design structures are compared using both linear and nonlinear simulations. The evaluation emphasizes responses where the fan surge margin limit is encountered.

Mattern, Duane↗

NASA NTRS2018

Optimization of Second Fault Detection Thresholds to Maximize Mission Probability of Success

In order to support manned spaceflight safety requirements, the Space Launch System (SLS) has defined program-level requirements for key systems to ensure successful operation under single fault conditions. The SLS program has also levied requirements relating to the capability of the Inertial Navigation System to detect a second fault. This detection functionality is required in order to feed abort analysis and ensure crew safety. Increases in navigation state error due to sensor faults in a purely inertial system can drive the vehicle outside of its operational as-designed environmental and performance envelope. As this performance outside of first fault detections is defined and controlled at the vehicle level, it allows for the use of system level margins to increase probability of mission success on the operational edges of the design. A top-down approach is utilized to assess vehicle sensitivity to second sensor faults. A wide range of failure scenarios in terms of both fault magnitude and time is used for assessment. The approach also utilizes a schedule to change fault detection thresholds autonomously. These individual values are optimized along a nominal trajectory in order to maximize probability of mission success in terms of system-level insertion requirements while minimizing the probability of false positives. This paper will describe an approach integrating Genetic Algorithms and Monte Carlo analysis to tune the threshold parameters to maximize vehicle resilience to second fault events over an ascent mission profile. The analysis approach and performance assessment and verification will be presented to demonstrate the applicability of this approach to second fault detection optimization to maximize mission probability of success through taking advantage of existing margin.

Anzalone, Evan J.↗

DOE OSTI2020

Exploratory Investigation of Disengagements and Crashes in Autonomous Vehicles Under Mixed Traffic: An Endogenous Switching Regime Framework

Autonomous Vehicles (AVs) have a large potential to improve traffic safety but also pose some critical challenges. While AVs may help reduce crashes caused by human error, they still may experience failures of technologies and sensing, as well as decision-making errors in a mixed traffic environment. A disengagement refers to an AV transitioning control from autonomous systems to the trained test driver. The safety critical nature of disengagements makes it imperative to analyze disengagements and crashes together. In this study, we analyze both crashes and disengagements from real-world AV driving in California to fill the knowledge gap regarding the relationship between disengagements and crashes in a mixed traffic environment. A nested logit model was calibrated using three different outcomes: (1) disengagement with a crash, (2) disengagement with no crash, and (3) no disengagement with a crash. Furthermore, endogenous switching regime models were also calibrated to draw distinctions between the relation of disengagements and crashes while accounting for endogeneity effects. The results show that factors related to AV systems (such as software failures) and other roadway participants increase the propensity of a disengagement without a crash. Furthermore, AVs were observed to disengage less often as the technology matured over time. Marginal effects revealed an 8% decrease. The results thus suggest that disengagements are a part of AVs' safe performance and disengagement alerts may need to be triggered in order to avoid certain failures with current technology.

42 ENGINEERING↗

DOE OSTI2022

Sensitivity/Uncertainty Comparison Study Involving IRSN, LANL, and ORNL Tools to Support Validation

Under a DOE Nuclear Criticality Safety Program (NCSP) task involving Analytical Methods, three Laboratories collaborated in a comparison of results obtained from Sensitivity/Uncertainty (S/U) packages relevant to validation of transport codes. The task involves Institut de Radioprotection et de Sûreté Nucléaire (IRSN), Los Alamos National Laboratory (LANL), and Oak Ridge National Laboratory (ORNL) comparing results of MORET 5/MACSENS V3.0, MCNP6.2/Whisper-1.1, and SCALE 6.2.3/TSUNAMI/USLSTATS respectively. All Monte Carlo transport code results utilize nuclear data from ENDF/B-VII.1 evaluation. This study examines five cases from the International Handbook of Evaluated Criticality Safety Benchmark Experiments (ICSBEP Handbook) selected as application models: IEU-MET- FAST-002-001, LEU-COMP-THERM-001-001, LEU-SOL-THERM-004-001, MIX-COMP- THERM-001-001, and U233-SOL-THERM-001-001. This is a continuation of a previous study to examine Pu and HEU cases: HEU-MET-FAST-013-001, HEU-SOL-THERM-001-008, PU-MET- FAST-022-001, and PU-SOL-THERM-001-001. Ultimately, comparison is made between Upper Subcritical Limits (USLs) obtained using each code package for each application case. Since differences exist in whether packages take into account margin of subcriticality (MOS), the USL is computed using only bias and bias uncertainty, also known as the calculational margin (CM) in ANSI/ANS-8.24. Results comparison appears to show that benchmark selection has a greater influence on the USL than the method used for calculation of bias and bias uncertainty.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

NASA NTRS1984

Effect of aerodynamic and angle-of-attack uncertainties on the blended entry flight control system of the Space Shuttle from Mach 10 to 2.5

A six-degree-of-freedom simulation analysis has been performed for the Space Shuttle Orbiter during entry from Mach 10 to 2.5 with realistic off-nominal conditions using the entry flight control system specified in May 1978. The off-nominal conditions included the following: (1) aerodynamic uncertainties, (2) an error in deriving the angle of attack from onboard instrumentation, (3) the failure of two of the four reaction control-system thrusters on each side, and (4) a lateral center-of-gravity offset. With combinations of the above off-nominal conditions, the control system performed satisfactorily with a few exceptions. The cases that did not exhibit satisfactory performance displayed the following main weaknesses. Marginal performance was exhibited at hypersonic speeds with a sensed angle-of-attack error of 4 deg. At supersonic speeds the system tended to be oscillatory, and the system diverged for several cases because of the inability to hold lateral trim. Several system modifications were suggested to help solve these problems and to maximize safety on the first flight: alter the elevon-trim and speed-brake schedules, delay switching to rudder trim until the rudder effectiveness is adequate, and reduce the overall rudder loop gain. These and other modifications were incorporated in a flight-control-system redesign in May 1979.

Stone, H. W.↗

DOE OSTI2023

Polymer Compositions in Critical Experiments: Possibly Not What You Think

The Chlorine Worth Study (CWS) Experiment was performed at the National Criticality Experiments Research Center (NCERC) in December 2021. Its goal was to provide a validation benchmark experiment with chlorine and plutonium in the thermal neutron spectrum. This purpose is necessary to reduce the margin of subcriticality in aqueous chloride operations at the Los Alamos National Laboratory Plutonium Facility (PF-4). Reducing the margin of subcriticality will enable higher throughput, required to meet NNSA mission needs. The experiment used layers of plutonium plates, polyethylene (HDPE), aluminum, and polyvinyl chloride (PVC) or chlorinated polyvinyl chloride (CPVC). They were optimized to match plutonium-chloride solutions of 30 g/L, 300 g/L, and 600 g/L. Upon completion of the experiment, a International Criticality Safety Benchmark Evaluation Program (ICSBEP) report was immediately started. The compositions of all materials were assumed pure unless additional information was known (such as for the plutonium plates). During the benchmark analysis, the assumed CPVC composition was questioned. The follow-on work led to lessons learned on compositions in benchmarks. Materials, and specifically polymers, are often much more complex than a basic chemical formula. The CWS experiment is used as an example in this paper to document the lessons learned.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA NTRS2001

Space-based Encoded Telemetry for Range Safety

This work involves the analysis of a communication system that uses the NASA Tracking and Data Relay Satellite/Space Network (TDRSS/SN) to provide range safety and flight termination system support for expendable launch vehicles and the space shuttle. We examined the high-alphabet scheme for flight termination, and considered an analogous digital system. We also considered the bit-rate needed for a flight termination system using the TDRSS system based on the received signal-to-noise ratio, and link margin. We found that a TDRSS spread-spectrum communication system operating in the vicinity of 150 bits/second could satisfy the requirements for flight termination.

Kozaitis, Sam↗

NASA NTRS2002

Space-Based Encoded Telemetry for Range Safety

This work involves the analysis of a communication system that uses the NASA Tracking and Data Relay Satellite/space Network (TDRSS/SN) to provide range safety and flight termination system support for expendable launch vehicles and the space shuttle. We examined the high-alphabet scheme for flight termination, and considered an analogous digital system. We also considered the bit-rate needed for a flight termination system using the TDRSS system based on the received signal-to-noise ratio, and link margin. We found that a TDRSS spread-spectrum communication system operating in the vicinity of 150 bits/second could satisfy the requirements for flight termination.

Kozaitis, Samuel P.↗

NASA NTRS2011

Early Oscillation Detection for DC/DC Converter Fault Diagnosis

The electrical power system of a spacecraft plays a very critical role for space mission success. Such a modern power system may contain numerous hybrid DC/DC converters both inside the power system electronics (PSE) units and onboard most of the flight electronics modules. One of the faulty conditions for DC/DC converter that poses serious threats to mission safety is the random occurrence of oscillation related to inherent instability characteristics of the DC/DC converters and design deficiency of the power systems. To ensure the highest reliability of the power system, oscillations in any form shall be promptly detected during part level testing, system integration tests, flight health monitoring, and on-board fault diagnosis. The popular gain/phase margin analysis method is capable of predicting stability levels of DC/DC converters, but it is limited only to verification of designs and to part-level testing on some of the models. This method has to inject noise signals into the control loop circuitry as required, thus, interrupts the DC/DC converter's normal operation and increases risks of degrading and damaging the flight unit. A novel technique to detect oscillations at early stage for flight hybrid DC/DC converters was developed.

Wang, Bright L.↗

NASA NTRS2007

Comprehensive Shuttle Foam Debris Reduction Strategies

The Columbia Accident Investigation Board (CAIB) was clear in its assessment of the loss of the Space Shuttle Columbia on February 3, 2003. Foam liberated from the External Tank (ET) impacting the brittle wing leading edge (WLE) of the orbiter causing the vehicle to disintegrate upon re-entry. Naturally, the CAB pointed out numerous issues affecting this exact outcome in hopes of correcting systems of systems failures any one of which might have altered the outcome. However, Discovery s recent return to flight (RTF) illustrates the primacy of erosion of foam and the risk of future undesirable outcomes. It is obvious that the original RTF focused approach to this problem was not equal to a comprehensive foam debris reduction activity consistent with the high national value of the Space Shuttle assets. The root cause is really very simple when looking at the spray-on foam insulation for the entire ET as part of the structure (e.g., actual stresses > materials allowable) rather than as some sort of sizehime limited ablator. This step is paramount to accepting the CAB recommendation of eliminating debris or in meeting any level of requirements due to the fundamental processes ensuring structural materials maintain their integrity. Significant effort has been expended to identify root cause of the foam debris In-Flight Anomaly (FA) of STS-114. Absent verifiable location specific data pre-launch (T-0) and in-flight, only a most probable cause can be identified. Indeed, the literature researched corroborates NASNTM-2004-2 13238 disturbing description of ill defined materials characterization, variable supplier constituents and foam processing irregularities. Also, foam is sensitive to age and the exposed environment making baseline comparisons difficult without event driven data. Conventional engineering processes account for such naturally occurring variability by always maintaining positive margins. Success in a negative margin range is not consistently achieved. Looking at the ET S spray-on foam insulation as part of the structural system (e.g., glass half full mentality) will create an environment where ET debris levels as low as reasonably achievable (ALARA) can be realized. ALARA is a NASA requirements philosophy deployed for the complex, mission altering radiation exposure requirements for life safety of astronauts. In the Shuttle s case, reasonableness is established by exhaustive engineering rigor, allowable debris size/quantity, technology maturity and programmatic constraints. A more robust urethane foam thermal protection system (TPS) will enhance the hctionality of the new Ares I Crew Launch Vehicle (CLV) Upper Stage. This paper will outline the strategy for a comprehensive effort to reduce ET foam debris and outline steps leading to an improved foam TPS. The NASA must remain committed to such an approach no matter what becomes of the next flight s actual debris field lest we fall back into a false sense of security. This commitment along with full implementation of all the other CAB recommendations such as orbiter hardening will significantly improve the Shuttle system, the engineering workforce, future capabilities & alternate policy offramps, national human resource protection, high value national asset protection and increase the level of service to the overall NASA mission.

Semmes, Edmund B.↗