Results for “Behavior based safety” — Page 4

DOE OSTI2022

A new mechanism of stabilizing SEI of Si anode driven by crosstalk behavior and its potential for developing high performance Si-based batteries

Stabilizing solid electrolyte interphase (SEI) is a key factor for determining cell performance of Silicon (Si) anode, such as safety, cycle lifetime, and calendar lifetime. Here, we found a new potential for stabilizing SEI of the Si anode, driven by crosstalk with cathode material. Here we investigated the effect of crosstalk on the chemistry of SEI of the Si anode as a function of three different, representative cathode materials: LiNi 0.5 Mn 0.3 Co 0.2 O 2 (NMC532), LiNi 0.8 Mn 0.1 Co 0.1 O 2 (NMC811), and LiFePO 4 (LFP). Specifically, we observed that crosstalk significantly affected the formation and growth mechanism of SEI layer on the Si anodes. Unexpectedly, dissolved Fe ions from the LFP cathode has a positive impact on the chemistry and electrochemical stability of the SEI layer of Si anode compared to the other cathodes, resulting in better electrochemical performance in terms of initial coulombic efficiency and capacity fade.

25 ENERGY STORAGE↗

DOE OSTI2024

MARVEL Reactor Fuel Performance Report (Rev.2)

The Microreactor Applications Research Validation and EvaLuation (MARVEL) project is producing a high temperature liquid metal-cooled nuclear test bed at Idaho National Laboratory (INL) to ultimately improve the integration of microreactors to end-user applications. This ambitious effort seeks to design, authorize, construct, test, and operate the reactor within five years. In order to construct and operate the MARVEL reactor in a timely manner, the system will utilize materials and component designs which have already been used, qualified, or licensed from previous reactors. The MARVEL reactor will be located at the INL Transient Reactor Test (TREAT) facility in the north high-bay equipment pit and will use the existing 304 stainless steel-clad U-ZrH1.6 pin-type fuel system developed by General Atomics and purchased from TRIGA International. This fuel has been previously qualified under the United States Department of Energy’s (US DOE) Reduced Enrichment for Research and Test Reactors (RERTR) Program. Even though the regulator of the MARVEL reactor is the US DOE, the standards and overall approach recommended by the Nuclear Regulatory Commission is well-defined and utilized here. Following NUREG-1537 regulatory guidance, this report documents the authorization case for the MARVEL fuel system’s application to MARVEL and establishes stable and predictable fuel performance during the most thermophysically unfavorable conditions achievable in the MARVEL reactor. To that end, this report provides a comprehensive survey of the known thermophysical properties, performance, and quantitative relationships associated with the MARVEL reactor fuel element and uses this information to determine its mechanical integrity and risk of reaching unacceptable conditions during the most extreme accident scenarios predicted for the reactor using the most conservative assumptions available. The information contained herein is compiled from a combination of historical reports and peer reviewed scientific publication manuscripts. Known mechanisms under which the fuel is susceptible to failure are highlighted and compared to conditions that could exist in the MARVEL reactor during an unanticipated transient or accident scenario. The two scenarios considered for analysis in this report are (1) an unprotected loss of flow accident and (2) a hypothetical unprotected loss of coolant accident during the loss of flow accident. Preliminary 2D steady-state analyses herein indicate that both fuel-cladding chemical interactions and fuel-cladding mechanical interactions are negligible throughout the fuel’s operational cycle under both normal and high temperature accident scenario conditions. Although higher fidelity 3D time-dependent modeling and simulations are planned, the following may be concluded presently. The MARVEL fuel element maintains its geometric stability and structural integrity during the most extreme accident scenarios predicted for the MARVEL reactor. The hoop stress during the unprotected loss of flow accident reaches about -1.27 MPa; this negative stress indicates that it is compressive rather than tensile. The compressive stress is a result of the NaK pressure on the outside of the fuel element, caused by the restricted thermal expansion of the NaK coolant, exceeding the internal pressures generated inside of the fuel element. The hoop stress generated in the cladding during the unprotected loss of coolant accident reaches a maximum of about approximately 10 MPa, which is nearly an order of magnitude less than the predicted yield strength of the cladding under high-temperature accident scenario conditions. Calculations were compared with results from high performance computational simulations using BISON and are in very close agreement. A conservative MARVEL fuel meat peak temperature limit of 900 °C is recommended presently, which is about 180 °C higher than the peak fuel temperature predicted to occur during the most extreme accident. Based on the known properties and behavior of the MARVEL fuel element, the fuel successfully meets its design and safety requirements under normal and most extreme accident conditions with a large safety margin.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2026

MARVEL Reactor Fuel Performance Report

The Microreactor Applications Research Validation and EvaLuation (MARVEL) project is producing a high temperature liquid metal-cooled nuclear test bed at Idaho National Laboratory (INL) to ultimately improve the integration of microreactors to end-user applications. This ambitious effort seeks to design, authorize, construct, test, and operate the reactor within five years. In order to construct and operate the MARVEL reactor in a timely manner, the system will utilize materials and component designs which have already been used, qualified, or licensed from previous reactors. The MARVEL reactor will be located at the INL Transient Reactor Test (TREAT) facility in the north high-bay equipment pit and will use the existing 304 stainless steel-clad U-ZrH1.6 pin-type fuel system developed by General Atomics and purchased from TRIGA International. This fuel has been previously qualified under the United States Department of Energy’s (US DOE) Reduced Enrichment for Research and Test Reactors (RERTR) Program. Even though the regulator of the MARVEL reactor is the US DOE, the standards and overall approach recommended by the Nuclear Regulatory Commission is well-defined and utilized here. Following NUREG-1537 regulatory guidance, this report documents the authorization case for the MARVEL fuel system’s application to MARVEL and establishes stable and predictable fuel performance during the most thermophysically unfavorable conditions achievable in the MARVEL reactor. To that end, this report provides a comprehensive survey of the known thermophysical properties, performance, and quantitative relationships associated with the MARVEL reactor fuel element and uses this information to determine its mechanical integrity and risk of reaching unacceptable conditions during the most extreme accident scenarios predicted for the reactor using the most conservative assumptions available. The information contained herein is compiled from a combination of historical reports and peer reviewed scientific publication manuscripts. Known mechanisms under which the fuel is susceptible to failure are highlighted and compared to conditions that could exist in the MARVEL reactor during an unanticipated transient or accident scenario. The two scenarios considered for analysis in this report are (1) an unprotected loss of flow accident and (2) a hypothetical unprotected loss of coolant accident during the loss of flow accident. Preliminary 2D steady-state analyses herein indicate that both fuel-cladding chemical interactions and fuel-cladding mechanical interactions are negligible throughout the fuel’s operational cycle under both normal and high temperature accident scenario conditions. Although higher fidelity 3D time-dependent modeling and simulations are planned, the following may be concluded presently. The MARVEL fuel element maintains its geometric stability and structural integrity during the most extreme accident scenarios predicted for the MARVEL reactor. The hoop stress during the unprotected loss of flow accident reaches about -1.27 MPa; this negative stress indicates that it is compressive rather than tensile. The compressive stress is a result of the NaK pressure on the outside of the fuel element, caused by the restricted thermal expansion of the NaK coolant, exceeding the internal pressures generated inside of the fuel element. The hoop stress generated in the cladding during the unprotected loss of coolant accident reaches a maximum of about approximately 10 MPa, which is nearly an order of magnitude less than the predicted yield strength of the cladding under high-temperature accident scenario conditions. Calculations were compared with results from high performance computational simulations using BISON and are in very close agreement. A conservative MARVEL fuel meat peak temperature limit of 900 °C is recommended presently, which is about 180 °C higher than the peak fuel temperature predicted to occur during the most extreme accident. Based on the known properties and behavior of the MARVEL fuel element, the fuel successfully meets its design and safety requirements under normal and most extreme accident conditions with a large safety margin.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2015

Classification of birds and bats using flight tracks

Not Available

Cullinan, Valerie I.↗

DOE OSTI2013

A Variable Load LVDT-Based Creep Test Rig for Use in ATR Loop 2A

Understanding the creep behavior of materials in a radiation environment is essential in evaluating safety issues associated with nuclear power plant operation, especially for plants applying for life extension. In US materials testing reactors (MTRs), this understanding has been achieved through a “cook and look” approach (where specimens are irradiated under load for some period of time and then removed from an MTR for post-irradiation examination). A number of “cook and look” cycles can be required for each evaluated material, which makes this approach expensive. In addition, examinations are limited to end-state conditions, which may or may not be sufficient to reveal all phenomena of interest (because examinations are not performed at prototypic conditions relative to temperature, pressure, stress, etc.).

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2016

Initial results from safety testing of US AGR-2 irradiation test fuel - 18574

Two cylindrical compacts containing tri-structural isotropic (TRISO)-coated particles with kernels that contained a mixture of uranium carbide and uranium oxide (UCO) and two compacts with UO{sub 2}-kernel TRISO particles have undergone 1600 deg. C safety testing. These compacts were irradiated in the US Advanced Gas Reactor Fuel Development and Qualification Program's second irradiation test (AGR-2). The time-dependent releases of several radioisotopes ({sup 110m}Ag, {sup 134}Cs, {sup 137}Cs, {sup 154}Eu, {sup 155}Eu, {sup 90}Sr, and {sup 85}Kr) were monitored while heating the fuel specimens to 1600 deg. C in flowing helium for 300 h. The UCO compacts behaved similarly to previously reported 1600 deg. C-safety-tested UCO compacts from the AGR-1 irradiation. No failed TRISO or failed SiC were detected (based on krypton and cesium release), and cesium release through intact SiC was very low. Release behavior of silver, europium, and strontium appeared to be dominated by inventory originally released through intact coating layers during irradiation but retained in the compact matrix until it was released during safety testing. Both UO{sub 2} compacts exhibited cesium release from multiple particles whose SiC failed during the safety test. Europium and strontium release from these two UO{sub 2} compacts appeared to be dominated by release from the particles with failed SiC. Silver release was characteristically similar to the release from the UCO compacts in that an initial release of the majority of silver trapped in the matrix occurred during ramping to 1600 deg. C. However, additional silver release was observed later in the safety testing due to the UO{sub 2} TRISO with failed SiC. Failure of the SiC layer in the UO{sub 2} fuel may have been dominated by CO corrosion, as opposed to the palladium degradation observed in AGR-1 UCO fuel. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2025

Contrasting Chemical Kinetic Parameters for Near In‐Service‐Temperature Aging and High‐Temperature Thermal Decomposition of Triaminotrinitrobenzene Formulations

Triaminotrinitrobenzene-based high explosives such as LX-17 offer high energy density and exceptional safety, yet their long-term aging behavior at low temperatures remains poorly understood. In this study, several legacy and new production lots of LX-17 were subjected to accelerated aging experiments below 100°C, during which the formation rate of the initial degradation product, monofurazan (F1), was monitored. Kinetic analysis was performed using a sample-age-aware computational approach, yielding activation energy estimates of 82–91 kJ mol −1 for the low-temperature initiation step—markedly lower than the ∼200 kJ mol −1 associated with high-temperature thermal decomposition. Extrapolation from established cookoff models supports the conclusion that the dominant degradation mechanism at low temperatures differs from that at high temperatures. In conclusion, our results provide a unified kinetic framework that bridges the gap between in-service conditions and high-temperature damage.

Chemistry - Chemical explosives↗

DOE OSTI2013

Plutonium Metal: Oxidation Considerations and Approach

Plutonium is arguably the most unique of all metals when considered in the combined context of metallurgical, chemical, and nuclear behavior. Much of the research in understanding behavior and characteristics of plutonium materials has its genesis in work associated with nuclear weapons systems. However, with the advent of applications in fuel materials, the focus in plutonium science has been more towards nuclear fuel applications, as well as long term storage and disposition. The focus of discussion included herein is related to preparing plutonium materials to meet goals consistent with non-proliferation. More specifically, the emphasis is on the treatment of legacy plutonium, in primarily metallic form, and safe handling, packaging, and transport to meet non-proliferation goals of safe/secure storage. Elevated temperature oxidation of plutonium metal is the treatment of choice, due to extensive experiential data related to the method, as the oxide form of plutonium is one of only a few compounds that is relatively simple to produce, and stable over a large temperature range. Despite the simplicity of the steps required to oxidize plutonium metal, it is important to understand the behavior of plutonium to ensure that oxidation is conducted in a safe and effective manner. It is important to understand the effect of changes in environmental variables on the oxidation characteristics of plutonium. The primary purpose of this report is to present a brief summary of information related to plutonium metal attributes, behavior, methods for conversion to oxide, and the ancillary considerations related to processing and facility safety. The information provided is based on data available in the public domain and from experience in oxidation of such materials at various facilities in the United States. The report is provided as a general reference for implementation of a simple and safe plutonium metal oxidation technique.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA NTRS2005

Formal Safety Certification of Aerospace Software

In principle, formal methods offer many advantages for aerospace software development: they can help to achieve ultra-high reliability, and they can be used to provide evidence of the reliability claims which can then be subjected to external scrutiny. However, despite years of research and many advances in the underlying formalisms of specification, semantics, and logic, formal methods are not much used in practice. In our opinion this is related to three major shortcomings. First, the application of formal methods is still expensive because they are labor- and knowledge-intensive. Second, they are difficult to scale up to complex systems because they are based on deep mathematical insights about the behavior of the systems (t.e., they rely on the "heroic proof"). Third, the proofs can be difficult to interpret, and typically stand in isolation from the original code. In this paper, we describe a tool for formally demonstrating safety-relevant aspects of aerospace software, which largely circumvents these problems. We focus on safely properties because it has been observed that safety violations such as out-of-bounds memory accesses or use of uninitialized variables constitute the majority of the errors found in the aerospace domain. In our approach, safety means that the program will not violate a set of rules that can range for the simple memory access rules to high-level flight rules. These different safety properties are formalized as different safety policies in Hoare logic, which are then used by a verification condition generator along with the code and logical annotations in order to derive formal safety conditions; these are then proven using an automated theorem prover. Our certification system is currently integrated into a model-based code generation toolset that generates the annotations together with the code. However, this automated formal certification technology is not exclusively constrained to our code generator and could, in principle, also be integrated with other code generators such as RealTime Workshop or even applied to legacy code. Our approach circumvents the historical problems with formal methods by increasing the degree of automation on all levels. The restriction to safety policies (as opposed to arbitrary functional behavior) results in simpler proof problems that can generally be solved by fully automatic theorem proves. An automated linking mechanism between the safety conditions and the code provides some of the traceability mandated by process standards such as DO-178B. An automated explanation mechanism uses semantic markup added by the verification condition generator to produce natural-language explanations of the safety conditions and thus supports their interpretation in relation to the code. It shows an automatically generated certification browser that lets users inspect the (generated) code along with the safety conditions (including textual explanations), and uses hyperlinks to automate tracing between the two levels. Here, the explanations reflect the logical structure of the safety obligation but the mechanism can in principle be customized using different sets of domain concepts. The interface also provides some limited control over the certification process itself. Our long-term goal is a seamless integration of certification, code generation, and manual coding that results in a "certified pipeline" in which specifications are automatically transformed into executable code, together with the supporting artifacts necessary for achieving and demonstrating the high level of assurance needed in the aerospace domain.

Denney, Ewen↗

NASA NTRS2012

Damage Tolerance Behavior of Friction Stir Welds in Aluminum Alloys

Friction stir welding is a solid state welding process used in the fabrication of various aerospace structures. Self-reacting and conventional friction stir welding are variations of the friction stir weld process employed in the fabrication of cryogenic propellant tanks which are classified as pressurized structure in many spaceflight vehicle architectures. In order to address damage tolerance behavior associated with friction stir welds in these safety critical structures, nondestructive inspection and proof testing may be required to screen hardware for mission critical defects. The efficacy of the nondestructive evaluation or the proof test is based on an assessment of the critical flaw size. Test data describing fracture behavior, residual strength capability, and cyclic mission life capability of friction stir welds at ambient and cryogenic temperatures have been generated and will be presented in this paper. Fracture behavior will include fracture toughness and tearing (R-curve) response of the friction stir welds. Residual strength behavior will include an evaluation of the effects of lack of penetration on conventional friction stir welds, the effects of internal defects (wormholes) on self-reacting friction stir welds, and an evaluation of the effects of fatigue cycled surface cracks on both conventional and selfreacting welds. Cyclic mission life capability will demonstrate the effects of surface crack defects on service load cycle capability. The fracture data will be used to evaluate nondestructive inspection and proof test requirements for the welds.

McGill, Preston↗

NASA NTRS2014

MARGInS: Model-Based Analysis of Realizable Goals in Systems

Under NASAs Constellation effort, the Exploration Technology Development Program funded research toward a system validation capability that applied machine learning and test-case generation techniques to the analysis of black-box system behavior. The behavior analysis capability scaled to spaces of hundreds of input parameters and tens of thousands of test cases. Aerospace systems at the vehicle level, especially those systems which contain some level of autonomy, are best described by hybrid and non-linear mathematics. Even simplified models of such systems need parameter dimensionalities in the hundreds or thousands of parameters in order to capture sufficient fidelity. The System Safety Assessments (such as those described in the SAE ARP 4761A Safety Assessment Process guidelines) for these systems are prone to errorinteractions between the vehicles subsystems are complex, and can display emergent behaviors. NASA captured this new analysis in the Model-based Analysis of Realizable Goals in Systems (MARGInS) tool and applied it to the Pad Abort 1 (PA-1) simulation as part of the independent validation and verification cycle before the PA-1 flight test in May of 2010. MARGInS evaluated the adherence of the high-fidelity simulation to its requirements, and deter- mined the margins to failure from the expected nominal input conditions. Following the PA-1 test, the capabilities within the MARGInS framework have been extended with sophisticated statistical and white-box test case generation techniques and applied to other NASA missions. The frame- work now includes a critical factors analysis that was applied to NASAs Orion simulation and design. NASAs Aeronautics Research Mission Directorate (ARMD) leveraged the existing MARGInS framework for work on aviation safety for civil transport vehicles and for research on autonomy issues. The NASA ARMD effort created a time series output prediction capability that has been used to characterize trajectories for a plane with an adaptive control system, and a safety boundary detection capability that has been applied to an air traffic control concept of operation for the Federal Aviation Administration. The statistical and machine- learning based techniques within MARGInS have been successfully combined with concolic execution to improve the coverage of a critical unit by driving system-level inputs. The use case driving the concolic execution and MARGInS integration was inspired by the Air France 447 disaster in which the loss of a critical functionality (the airspeed calculation from the pitot tubes) led to loss of the entire plane with the people aboard. To illustrate capabilities and limitations, we will highlight the analyses for the applications listed above. We will then discuss the future plans for MARGInS and its interfaces with other tools.

Validation↗

NASA NTRS1997

Control Synthesis for a Class of Hybrid Systems Subject to Configuration-Based Safety Constraints

We examine a class of hybrid systems which we call Composite Hybrid Machines (CHM's) that consists of the concurrent (and partially synchronized) operation of Elementary Hybrid Machines (EHM's). Legal behavior, specified by a set of illegal configurations that the CHM may not enter, is to be achieved by the concurrent operation of the CHM with a suitably designed legal controller. In the present paper we focus on the problem of synthesizing a legal controller, whenever such a controller exists. More specifically, we address the problem of synthesizing the minimally restrictive legal controller. A controller is minimally restrictive if, when composed to operate concurrently with another legal controller, it will never interfere with the operation of the other controller and, therefore, can be composed to operate concurrently with any other controller that may be designed to achieve liveness specifications or optimality requirements without the need to reinvestigate or reverify legality of the composite controller. We confine our attention to a special class of CHM's where system dynamics is rate-limited and legal guards are conjunctions or disjunctions of atomic formulas in the dynamic variables (of the type x less than or equal to x(sub 0), or x greater than or equal to x(sub 0)). We present an algorithm for synthesis of the minimally restrictive legal controller. We demonstrate our approach by synthesizing a minimally restrictive controller for a steam boiler (the verification of which recently received a great deal of attention).

Heymann, Michael↗

DOE OSTI2023

Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis: Tool Development and Method Evaluation

This report is an update to a prior report that describes progress and findings for a program of research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and throughout the plant, along with a greater interest in the use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human performance-related organizational and technical design issues are identified and addressed early in the design process. This report describes modeling tools and techniques, based on sociotechnical systems theory, to support these design goals and their application in the current research effort. The report is primarily intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control, feedback, and communication relationships amongst the system’s technical and organizational components. We have employed two STAMP-based tools in this effort. The first is Causal Analysis based on STAMP (CAST), an accident and incident analysis technique that was used to examine a performance- and safety-related incident at an industry partner’s plant involving the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. The second tool is Systems Theoretic Process Analysis (STPA) which is a proactive risk analysis tool used to examine existing and potential, planned sociotechnical systems. STPA was used to identify risk factors in the current design of a generic nuclear power plant (NPP) preventive maintenance system. Our analyses focused on identifying near-term system improvements and longer-term design requirements for an optimized IAE system. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived time and schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the eventual event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. STPA findings exposed several areas of concern in the design of current preventive maintenance systems. We also present two preliminary information automation models. The proactive issue resolution (PIR) model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system and represents an end-state vision for our work. From our results, we have generated an initial set of preliminary system-level requirements and safety constraints for these models. We have also focused on early development of easy to learn, easy to use “transportable” tools for sociotechnical systems analysis. We intend these to be used by NPP personnel as a means of gaining reliable and relatively quick insight into (1) sociotechnical systems factors impacting incidents and accidents, (2) potential sociotechnical risk factors in existing or planned system designs, and (3) potential weaknesses in a system’s safety and/or information control structure. We conclude the report with a set of summary recommendations, a discussion of planned and potential follow-on research and development, and a draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2022

Flexible machine-learning interatomic potential for simulating structural disordering behavior of Li 7 La 3 Zr 2 O 12 solid electrolytes

Batteries based on solid-state electrolytes, including Li 7 La 3 Zr 2 O 12 (LLZO), promise improved safety and increased energy density; however, atomic disorder at grain boundaries and phase boundaries can severely deteriorate their performance. Machine-learning (ML) interatomic potentials offer a uniquely compelling solution for simulating chemical processes, rare events, and phase transitions associated with these complex interfaces by mixing high scalability with quantum-level accuracy, provided that they can be trained to properly address atomic disorder. To this end, we report the construction and validation of an ML potential that is specifically designed to simulate crystalline, disordered, and amorphous LLZO systems across a wide range of conditions. The ML model is based on a neural network algorithm and is trained using ab initio data. Performance tests prove that the developed ML potential can predict accurate structural and vibrational characteristics, elastic properties, and Li diffusivity of LLZO comparable to ab initio simulations. As a demonstration of its applicability to larger systems, we show that the potential can correctly capture grain boundary effects on diffusivity, as well as the thermal transition behavior of LLZO. Here these examples show that the ML potential enables simulations of transitions between well-defined and disordered structures with quantum-level accuracy at speeds thousands of times faster than ab initio methods.

25 ENERGY STORAGE↗

DOE OSTI2013

Safety aspects of dry spent fuel storage and spent fuel management

As with the storage of all radioactive materials, the storage of spent nuclear fuel (SF) and high-level radioactive waste (HLW) must conform to safety requirements. Safety aspects like safe enclosure of radioactive materials, safe removal of decay heat, nuclear criticality safety and avoidance of unnecessary radiation exposure must be achieved throughout the storage period. The implementation of these safety requirements can be achieved by dry storage of SF and HLW in casks as well as in other systems such as dry vault storage systems or spent fuel pools, where the latter is neither a dry nor a passive system. After the events of Fukushima, the advantages of passively and inherently safe dry storage systems have become more obvious. TUV and BAM, who work as independent experts for the competent authorities, present the licensing process for sites and casks and inform about spent nuclear fuel management and issues concerning dry storage of spent nuclear fuel, based on their long experience in these fields. All safety relevant issues like safe enclosure, shielding, removal of the decay heat or behavior of cask and building under accident conditions are checked and validated with state-of-the-art methods and computer codes before the license approval. It is shown how dry storage systems can ensure the compliance with the mentioned safety criteria over a long storage period. Exemplarily, the process of licensing, erection and operation of selected German dry storage facilities is presented. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

NASA NTRS2022

Adaptive IV&V for Increasingly Complex Software Systems

As NASA software systems continue to innovate, becoming more complex and nondeterministic, the need for the NASA IV&V Program to become systemically adaptive to ensure mission success is paramount. To ensure adaptability within resource constraints, IV&V has developed an agile, risk-based approach to identify, characterize, scope, focus, and prioritize mission assurance activities. This risk based adaptive framework has been applied to trends such as increased reliance on data driven algorithms for safety and mission critical software behavior, use of MBSE in system design, and application of agile principles to embedded software development. The framework is enabled by continuous innovation of new approaches such as software only test beds, assurance design tools, and initiatives that augment IV&V assurance methods with artificial intelligence and machine learning techniques. This presentation will highlight the trends the NASA IV&V Program is seeing, the innovative steps it is taking to address those challenges, and how it is postured to address evolving risk and constantly changing and new technologies.

Wesley W Deadrick↗

NASA NTRSDate not supplied

Preliminary Results from the Saffire VI Experiment

Preliminary results are presented for one test of the last flight of the Spacecraft Fire Experiment (Saffire VI) which was conducted on an orbiting Cygnus spacecraft. These experiments directly address the risks associated with our understanding of spacecraft fire behavior at practical length scales and geometries. The lack of this experimental data has forced spacecraft designers to base their designs and safety precautions on 1-g understanding of flame spread, flame self-extinguishment, fire detection, and suppression. The Saffire experiment was developed by an international team of investigators with the goal of addressing open issues in spacecraft fire safety. NASA’s Spacecraft Fire Safety Demonstration Project was formulated with the goal of conducting a series of large-scale experiments in spacecraft environments that represent practical spacecraft fires. These tests spanned 1.5 to 3.2 kW with free air volumes of 17 to 19 cubic meters. The final flight in the series of six experiments examined concurrent spread over large samples (all 41 cm wide) including a thin sheet of flammable fuel (cotton/fiberglass 50 cm long); 2-sided spread over 1 cm thick polymethyl methacrylate (PMMA) (18 cm long); 1-sided spread over 0.5 cm thick (18 cm long); and Nomex fabric (7 cm long). Results are presented for the PMMA samples, the SIBAL sample, and the thin cotton samples from Saffire IV and V. The flame heat release is determined and compared to the overall temperature rise in the spacecraft and the change in the concentration of carbon dioxide and carbon monoxide in the spacecraft. Overall, the temperature and pressure rise in the spacecraft were found to be less significant than the increase in carbon dioxide and carbon monoxide.

fire↗

NASA NTRSDate not supplied

Preliminary Results from the Saffire VI Experiment

The preliminary results are presented for one test of the last flight of the Spacecraft Fire Experiment (Saffire VI) which was conducted on an orbiting Cygnus spacecraft. These experiments directly address the risks associated with our understanding of spacecraft fire behavior at practical length scales and geometries. The lack of this experimental data has forced spacecraft designers to base their designs and safety precautions on 1-g understanding of flame spread, flame self-extinguishment, fire detection, and suppression. The Saffire experiment was developed by an international team of investigators with the goal of addressing open issues in spacecraft fire safety. NASA’s Spacecraft Fire Safety Demonstration Project was designed with the goal of conducting a series of large-scale experiments in spacecraft environments that represent practical spacecraft fires. The final flight examined concurrent spread over large samples (all 41 cm wide) including a thin sheet of flammable fuel (cotton/fiberglass 50 cm long); 2-sided spread over 1 cm thick polymethyl methacrylate (PMMA) (18 cm long) ; 1-sided spread over 0.5 cm thick (18 cm long); and Nomex fabric (7 cm long). This paper focusses on the two-sided PMMA sample. The flame heat release is determined and is compared to the overall temperature rise in the spacecraft and the change in the concentration of carbon dioxide and carbon monoxide in the spacecraft.

fire↗