Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safety basis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Adhesion Capabilities of Permanent Foaming Fixatives

DOE-EM have identified an operational requirement for a fixative that can immobilize and/or encapsulate residual contamination in 3D void volumes (pipes, gloveboxes, waste containers, etc.) during D and D activities. Failure to safely and effectively immobilize residual contamination can: Put workers at risk; Contaminate the public and environment; Drive up costs. Commercial-off-the-shelf (COTS) polyurethane (PU) foams is one possible solution and is currently being investigated by Savannah River National Lab (SRNL). Adhesion testing will dictate how well PU foams will adhere and immobilize residual contamination onto a substrate. Results can provide a performance criteria for Section 5 of ASTM E3191: Standard Specification for Permanent Foaming Fixatives Used to Mitigate Spread of Radioactive Contamination. Initial mechanical testing showed intumescent rigid PU foams were best in class (tensile, compression, TGA/DSC) Application of intumescent rigid PU foam in pipe scenario with 'contamination' showed excellent adhesion capabilities as long as foam had contact with pipe. The foam, however, was not able to penetrate 'contamination' but created pockets where the contamination interacted with the substrate. Pretreatment options of pipe were considered to produce better immobilization capabilities. Pretreatment options included COTS products like baking spray, rubber cement, and soap. Foam was still able to immobilize on a global sense, but not a local sense. Essentially acted as a mechanical plug. A tensile tester (MTS Criterion Series 43) was utilized to evaluate the tensile adhesion strength of 6 COTS PU foams. ASTM D1623: Tensile and Tensile Adhesion Properties of Rigid Cellular Plastics. Procedures: PU foams were cured between two smooth 2'' x 2'' 304 stainless steel coupons with hinges glued on plates for gripping support. Parameters Used: Pull rate of 0.1 in/min. Calculations: Tensile adhesion strength, elongation, and ImageJ analysis of how PU foam is left on substrate. Outcome: The PU foam with the best adhesion capabilities would be downselected for further evaluation to be used as a permanent foaming fixative. The rigid PU foams had the best adhesion capabilities with the R1 foam having a max load of 236 N. One of the I-R2 samples reached almost 450 N and another sample reached 2500 N before slipping. The other intumescent foam, I-F4, had the most coverage on the stainless steel coupon's surface from the ImageJ results (61.43% surface coverage). The intumescent foam, I-R2, will be the foam of choice for future testing due its fire retardant and adhesion capabilities. Future directions: Conduct the following experiment in a pipe scenario with the down-selected PU foam. Procedures: PU foam will be cured between in a 304 stainless steel pipe (ID: 4'', OD: 4.5'', Height: 4''). Parameters Used: Compression testing results will be referenced to determine if foam's adhesion strength would be greater its compression strength as its being compressed. Calculations: Compression strength, shear stress, total time elapsed. Conduct further adhesion testing with the down-selected PU foam (I-R2) to be treated as a permanent foaming fixative (PFF). Determine the minimum contact the PFF should have with the substrate for adequate results. Evaluate if PFF's adhesion capabilities is time dependent (3.1.5 of ASTM E3911). Subject PFF to seismic stressors addressed in Safety Basis of Interim Operation documents (SBIO) to further evaluate adhesion capabilities.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Testing of Crystalline Silicotitanate to Support Tank-Side Cesium Removal System Operations - 20458

The direct feed of waste from the Hanford tank farms to the Low-Activity Waste Facility at the Hanford Waste Treatment and Immobilization Plant requires an intermediate treatment step that prepares the waste for vitrification. Washington River Protection Solutions (WRPS) selected a near-tank treatment system known as the Tank-Side Cesium Removal (TSCR) system to perform the required intermediate treatment functions. The approach in the TSCR system is to filter waste supernatant with a sintered metal dead-end filter and then use a series of ion exchange columns to remove cesium; this system has several similarities to the Tank Closure Cesium Removal system that has been deployed on the Savannah River Site. The ion exchange media proposed for use is crystalline silicotitanate (CST), which is a non-elutable media with a high affinity for cesium. Because the media is non-elutable, loaded columns will be blown down with compressed air, moved into interim storage, and replaced with new columns when cesium capacity is reached. The assumed extent and rate of drying that could be achieved in the TSCR column geometry lacked confirmation by experimental data. In addition, once the columns are loaded with cesium, they generate flammable gases (primarily hydrogen) via radiolysis acting on any resident liquids, i.e., moisture, remaining in the media bed. An assessment of available information on CST concluded that gas generation data that bounds expected operational conditions were needed to support the TSCR system safety basis and planned operations. Working with WRPS, Pacific Northwest National Laboratory (PNNL) designed and conducted testing with CST media to address the need for (a) representative in-column drying data, and (b) bounding flammable gas generation data. Drying testing was performed using a full-height column with a diameter of approximately 2 inches with injected air at temperatures of 18 deg. C and 30 deg. C. Gas generation testing was conducted in an engineered bunker that allowed simultaneous irradiation of up to eight samples at a time. These two experimental approaches used at PNNL for the CST testing are summarized and the major outcomes are presented. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Qualification of Processing Batches for Tank Closure Cesium Removal Through In-Tank Batch Contact Testing - 20470

The Tank Closure Cesium Removal (TCCR) process at the Savannah River Site (SRS) is currently processing waste from Tank 10H, generating decontaminated salt solution that is sent to Tank 11H. Transfers out of Tank 11H are then disposed of on site as a grout wasteform in the SRS Saltstone Processing Facility. This is a full-scale demonstration of the use of Crystalline Silicotitanate (CST) for the decontamination of aqueous nuclear waste supernate. CST primarily removes cesium from the high sodium alkaline feed, but also adsorbs strontium, actinides, and some other trace metals. The TCCR unit is an at-tank set of four ion exchange columns, with two typically being operated in series during waste processing. Tank 10H is serving a dual function as both the salt dissolution tank as well as the feed tank for the TCCR system. Prior to operation of TCCR, Tank 10H must undergo dissolution campaigns, dissolving the salt cake to form an aqueous salt solution (supernate). After each dissolution campaign, the supernate created must be qualified prior to processing through the TCCR system. Qualification includes detailed characterization of the supernate as well as in-tank batch contact tests to determine the equilibrium loading of Cs-137 on the CST ion exchange media (IONSIV{sup TM} R9120-Ba). In support of the in-tank batch contact testing, Savannah River National Laboratory (SRNL) developed a CST sample holder, also referred to as a 'tea-bag', to hold a measured amount (∼0.1 grams) of pretreated CST between stainless steel screens. The tea-bag fits within a standard stainless steel sample vial that has been modified to allow the flow of supernate to the CST. This sample holder is then immersed in the waste tank allowing free contact between the CST beads and the surrounding liquid, at an effectively infinite liquid-to-solid phase ratio. A pair of tea-bags are deployed in the tank for a period of 10 days for each batch, after which the CST is recovered, digested, and analyzed to determine the loading of cesium isotopes on the CST. This result then supports the TCCR column thermal loading limits for processing as part of the TCCR safety basis. This paper will discuss the design and testing of the CST sample holder, as well as results from the first few batches of waste qualified and subsequently processed through the TCCR system. In addition, results from analyses of Tank 11H samples, showing decontamination of the product will be included. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Technology Development for Dry Storage of Aluminum-Clad Spent Nuclear Fuel - 20490

A candidate disposition pathway for the > 13 MTHM of aluminum-clad spent nuclear fuel (ASNF), owned and managed by the U.S. Department of Energy, is the drying and placement of the SNF into sealed-canister dry storage, with the ASNF-in- canisters 'road-ready' for transportation to and final direct disposal in a repository waste package. Technical information gaps in fuel drying, and fuel dry storage behavior, have previously challenged the declaration of technology readiness for drying and placement of this fuel into the DOE Standard Canister design for > 50 years of safe dry storage. The principal technical information gaps included: i) characterization and thermal dehydration behavior of aluminum (oxy)hydroxide films attendant on the cladding due to film formation during reactor operation and during post-discharge up to long-term wet storage histories; and ii) G-value data to enable estimation of the radiolytic gas generation from the cladding with its (oxy)hydroxide films. Thus, the oxide films on the ASNF challenged the safety of a sealed storage canister with thermal and radiolytic decomposition of the waters on the films that can lead to corrosion, pressurization, and flammability issues. These gaps in the technical information base have largely been closed. This paper discusses the investigations at the Idaho National Laboratory (INL) and the Savannah River National laboratory (SRNL), and outlines the pending technology development work for input to an engineering design to enable a road-ready dry storage system for ASNF. The ASNF inventory considered for road-ready dry storage is stored at the Savannah River Site (SRS) and at the Idaho Nuclear Technology and Engineering Center (INTEC) at the INL. The ASNF inventory in the SRS L Basin is from foreign and domestic research reactors (FRR and DRR), and is diverse in terms of design, irradiation, and post-reactor-discharge storage conditions; these factors yield a range of characteristics of cladding oxide films on ASNF. Mixed aluminum (oxy)hydroxide (boehmite and bayerite/gibbsite) films, non-uniform in thicknesses up to a maximum local thickness bounded by 25 μm, were observed on ASNF materials removed from wet storage in the L Basin and in non-sealed dry storage at the SRS following reactor service and a long-term (up to 40+ years) interim storage history. The ASNF inventory at INTEC, in both wet and vented dry storage, is predominantly from the Advanced Test Reactor (ATR), but it also includes DRR and FRR fuel. To address a profound behavior of these films, radiolysis testing of aluminum specimens with mixed type boehmite/bayerite oxide films was performed to develop basic data on G-values for production of radiolytic hydrogen under dry storage conditions with nominal relative humidity, temperature, and cover gas. Modeling and simulation of canister internal environments with postulated inventories of oxide films provides estimation of the evolution of the conditions of the canister loaded with ASNF. Simultaneous Thermal Analysis (TGA/DSC) of hydrated oxide powders, and laboratory-scale aluminum specimens with a bayerite film (∼10 μm) using TGA methods, inform drying time/temperature conditions to be used for the ASNF. A demonstration project is recommended for Verification and Validation of the drying and storage of the ASNF. Remaining major tasks leading up to the hot demonstration include scale-up radiolysis testing and scale-up drying testing. Engineering design with the information from the technology program will establish the safety basis and enable long-term (> 50 years) dry storage compatibility with ASNF in the DOE Standard Canister pending its transportation to and disposal in a repository. This full capability would show the ASNF-in-canister storage system to be road-ready. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Criticality Safety Calculations for Inadvertent PuF6 Formation

During a review of the Surplus Plutonium Disposition (SPD) at Savannah River Site (SRS) project Safety Basis Strategy a comment was made about the risk of inadvertent formation of plutonium hexafluoride, PuF6, during a plutonium fire suppressed by the NovecTM 1230 fire suppressant. NovecTM 1230 is a fluorine rich non-hydrogenous extinguishing agent. Hydrogenous materials, like water, increase reactivity of fissile material by adding moderation to the system and thus are generally not used as firefighting agents in fissile material areas.

Wade, Brindley↗

Tank 11H Low Temperature Aluminum Dissolution and Inhalation Dose Potential Analyses at Savannah River Site – 26018

Currently, there is approximately 34 million gallons of high-level radioactive tank waste in the Tank Farm at the Savannah River Site (SRS). The ultimate goal of operations at the Tank Farm is to remove the high level waste (HLW) from the tanks followed by stabilization of the waste through vitrification of the HLW into glass or grouting the decontaminated waste into saltstone. After bulk removal of the HLW consisting of sludge, saltcake, and supernatant, further efforts are made to reduce the residual waste present in the tank in order to declare preliminary cease waste removal (PCWR) signifying completion of HLW removal. These reduction efforts can include tank washing to remove soluble salts and radioisotopes and dissolution of solids including aluminum. Aluminum in the form of gibbsite and boehmite is relatively insoluble in water. Through addition of aqueous sodium hydroxide, the aluminum can be dissolved at mild temperatures. In order for the waste tank to meet closure mode requirements of the Concentration, Storage, and Transfer Facilities (CSTF), which includes the Tank Farm, Documented Safety Analysis (DSA), a component of the safety basis, the inhalation dose potential (IDP) and the radiolytic hydrogen generation rate of the stored waste must be demonstrated to be lower than their respective designated limits. These parameters are calculated from measured radiochemical analyses of isotopes that emit a high amount of radioactivity including Cs-137, Sr-90, Pu-238, Pu-239, Pu-240, Pu-241, Am-241, and Cm-244. Following the low temperature aluminum dissolution (LTAD) process, Tank 11H slurry samples were pulled from the tank and sent to Savannah River National Laboratory (SRNL) to measure the extent of aluminum dissolution, hydroxide concentration, densities of slurry and supernatant, weight percent solids analyses, and radionuclide activities. The analyses of the composite sample found that approximately 90% of the total aluminum in the slurry was dissolved, indicating successful reduction of the insoluble aluminum in the waste tank. Additionally, the weight percent insoluble solids (slurry basis) measurement of the composite sample was found to be approximately 1%, demonstrating that minimal solids still remain in the tank. Finally, the radiochemical analyses of the composite sample determined that the waste contents of the tank met the IDP and radiolytic hydrogen generation rate requirements of the CSTF DSA. These measurements have shown that the LTAD process in Tank 11H was successful in waste reduction efforts and a positive step towards declaring PCWR and tank closure at SRS.

Dekarske, John [Savannah River National Laboratory↗

COR-0011 Rev 6 MARVEL Project Code of Record

This Code of Record identifies the codes, standards, and procedures necessary to design, develop, construct, and startup the Microreactor Applications Research Validation and Evaluation (MARVEL) Project at the Materials and Fuel Complex (MFC) Transient Reactor Test (TREAT) Facility and the Idaho National Laboratory (INL). The MARVEL Project is an INL test microreactor funded by the United States Department of Energy (DOE) via the Microreactor Program (MRP). The goal of the project is to establish an operational nuclear applications test bed that can generate combined heat and power to enable integration and R&D with end-user technologies, as well as allow microreactor technologists to test next-generation control systems. The microreactor is a thermal reactor utilizing Uranium Zirconium Hydride (UZrH) fuel with review and authorization by the Department of Energy Idaho Operations Office (DOE-ID) for National Environmental Policy Act (NEPA) compliance, safety review, and supplemental readiness assessments for startup and operation. To enable rapid deployment, the MARVEL reactor will reside in the Transient Reactor Test (TREAT) Facility and utilize the existing operating Category B reactor facility, approved facility safety basis, operating crews, and recent re-start experience.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

A Mathematical Basis for the Safety Analysis of Conflict Prevention Algorithms

In air traffic management systems, a conflict prevention system examines the traffic and provides ranges of guidance maneuvers that avoid conflicts. This guidance takes the form of ranges of track angles, vertical speeds, or ground speeds. These ranges may be assembled into prevention bands: maneuvers that should not be taken. Unlike conflict resolution systems, which presume that the aircraft already has a conflict, conflict prevention systems show conflicts for all maneuvers. Without conflict prevention information, a pilot might perform a maneuver that causes a near-term conflict. Because near-term conflicts can lead to safety concerns, strong verification of correct operation is required. This paper presents a mathematical framework to analyze the correctness of algorithms that produce conflict prevention information. This paper examines multiple mathematical approaches: iterative, vector algebraic, and trigonometric. The correctness theories are structured first to analyze conflict prevention information for all aircraft. Next, these theories are augmented to consider aircraft which will create a conflict within a given lookahead time. Certain key functions for a candidate algorithm, which satisfy this mathematical basis are presented; however, the proof that a full algorithm using these functions completely satisfies the definition of safety is not provided.

Maddalon, Jeffrey M.↗

Classification of Unmanned Aircraft Systems. UAS Classification/Categorization for Certification

Category, class, and type designations are primary means to identify appropriate aircraft certification basis, operating rules/limitations, and pilot qualifications to operate in the National Airspace System (NAS). The question is whether UAS fit into existing aircraft categories or classes, or are unique enough to justify the creation of a new category/class. In addition, the characteristics or capabilities, which define when an UAS becomes a regulated aircraft, must also be decided. This issue focuses on UAS classification for certification purposes. Several approaches have been considered for classifying UAS. They basically group into either using a weight/mass basis, or a safety risk basis, factoring in the performance of the UAS, including where the UAS would operate. Under existing standards, aircraft must have a Type Certificate and Certificate of Airworthiness, in order to be used for "compensation or hire", a major difference from model aircraft. Newer technologies may make it possible for very small UAS to conduct commercial services, but that is left for a future discussion to extend the regulated aircraft to a lower level. The Access 5 position is that UAS are aircraft and should be regulated above the weight threshold differentiating them from model airplanes. The recommended classification grouping is summarized in a chart.

Source record↗

Towards a Formal Basis for Modular Safety Cases

Safety assurance using argument-based safety cases is an accepted best-practice in many safety-critical sectors. Goal Structuring Notation (GSN), which is widely used for presenting safety arguments graphically, provides a notion of modular arguments to support the goal of incremental certification. Despite the efforts at standardization, GSN remains an informal notation whereas the GSN standard contains appreciable ambiguity especially concerning modular extensions. This, in turn, presents challenges when developing tools and methods to intelligently manipulate modular GSN arguments. This paper develops the elements of a theory of modular safety cases, leveraging our previous work on formalizing GSN arguments. Using example argument structures we highlight some ambiguities arising through the existing guidance, present the intuition underlying the theory, clarify syntax, and address modular arguments, contracts, well-formedness and well-scopedness of modules. Based on this theory, we have a preliminary implementation of modular arguments in our toolset, AdvoCATE.

Safety↗

Basis for Dose and Reactor Safety Design Criteria for Army Regulation AR 50–7 and DA Pamphlet

This report describes the basis used to develop the radiological dose acceptance and design criteria contained in the draft updates to Army Regulation 50–7 (AR 50–7) Army Reactor Program and its accompanying draft Department of the Army (DA) Pamphlet (PAM), Army Reactor Program Procedures. These criteria will apply to Army nuclear reactors that fall under AR 50–7 and its accompanying DA PAM and ensure alignment with the overall objectives of the Army Reactor Program. The development basis for the radiological dose and design criteria supports a modern, technology-neutral, risk-informed, and performance-based approach to Army regulation of reactors and the demonstration of “adequate protection of the public.” To establish these criteria that support the Army’s unique operational requirements, multiple well-known and well-established standards and their supporting documentation were reviewed to ensure consistency with existing regulatory safety levels, including guidance from U.S. and international sources. These include the U.S. Nuclear Regulatory Commission’s (NRC’s) regulations and policy, the Canadian Nuclear Safety Commission’s (CNSC’s) regulatory documents, the International Atomic Energy Agency’s (IAEA’s) safety standards, as well as industry input that is tailored specifically to advanced microreactors. This report walks through the key definitions and associated references used for these criteria, which are outlined in Section 2.0. Based on these definitions, the dose acceptance criteria were established for various receptors for routine reactor operations (Section 3.2), design basis accidents (Section 3.3), and beyond design basis accidents (Section 3.4). Comparisons of multiple national and international dose limits are provided in these sections. Lastly, Section 4.0 outlines the reactor safety design criteria contained in the draft DA PAM and their associated bases.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

ANDRA's Underground Research Laboratory in Bure: Major Role in the Cigeo Development - 20005

The Industrial Center for Geological Disposal, also called Cigeo, is the deep geological disposal facility project developed by Andra since 1991. It is intended for the final disposal of High-Level Waste (HLW) and Intermediate Level Waste-Long Lived (ILW-LL) generated in France by the nuclear industry. Cigeo is located in the east of France (Meuse/Haute-Marne site). The disposal will be implemented in a 140 to 160 m thick clay layer at about 500 m depth. The license application file will be submitted in 2020. If the license is granted, the construction of the pilot phase of Cigeo (ramp, shafts, drifts, initial disposal vaults) could start in 2025 at the earliest. Since 2000, the development of the safety case of Cigeo for post closure has been supported by a three-stage construction, design, and scientific and technological experiment program performed in the French Underground Research Laboratory (URL) in Bure. These stages of the URL activities supported the iterative interactions between the knowledge acquired by scientific and technological R and D program, the design process and the safety assessment. The stages focused on assessing the suitability of the disposal concept, providing the basis for safety options and construction design, and preparing for licensing using large scale demonstrations. Recently, Andra launched the fourth development stage of the URL to implement a new set of technological experiments aiming at consolidating the design options of disposal cells and galleries for the pilot phase of Cigeo and at assessing monitoring technologies. Recently, Andra launched the fourth development stage of the URL to implement a new set of technological experiments aiming at consolidating the design of the pilot phase of Cigeo and at assessing design options and monitoring technologies. Removal of a segment ring, construction of an X drift crossing, improved construction techniques for HLW vaults, and construction of an ILW-LL prototype disposal vault are example activities during the fourth phase. In the future, the URL in Bure will remain a unique location to carry out research on promising technical solutions, to reduce Cigeo's construction and operation risks and strengthen the long-term safety assessment. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Human Performance Contributions to Safety in Commercial Aviation

Every day in aviation, pilots, air traffic controllers, and other front-line personnel perform countless correct judgments and actions in a variety of operational environments. These judgments and actions are often the difference between an accident and a non-event. Ironically, data on these behaviors are rarely collected or analyzed. Data-driven decisions about safety management and design of safety-critical systems are limited by the available data, which influence how decision makers characterize problems and identify solutions. Large volumes of data are collected on the failures and errors that result in infrequent incidents and accidents, but in the absence of data on behaviors that result in routine successful outcomes, safety management and system design decisions are based on a small sample of nonrepresentative safety data. This assessment aimed to find and document “safety successes” made possible by human operators. With many Aeronautics Research Mission Directorate (ARMD) Programs and Projects focusing on increased automation and autonomy and decreased human involvement, failure to fully consider the human contributions to successful system performance in civil aviation represents a significant risk — a risk that has not been recognized to date. Without understanding how humans contribute to safety, any estimate of predicted safety of autonomous capabilities is incomplete and inherently suspect. Furthermore, understanding the ways in which humans contribute to safety can promote strategic interactions among safety technologies, functions, procedures and the people using them. Without this understanding, the full benefits of an integrated, optimized human/technology or autonomous system will not be realized. Historically, safety has been consistently defined in terms of the occurrence of accidents or recognized risks (i.e., in terms of things that go wrong). These adverse outcomes are explained by identifying their causes, and safety is restored by eliminating or mitigating these causes. An alternative to this approach is to focus on what goes right and identify how to replicate that process. Focusing on the rare cases of failures attributed to “human error” provides little information about why human performance routinely prevents adverse events. Hollnagel has proposed that things go right because people continuously adjust their work to match their operating conditions. These adjustments become increasingly important as systems continue to grow in complexity. Thus, the definition of safety should reflect not only “avoiding things that go wrong” but “ensuring that things go right.” The basis for safety management requires developing an understanding of everyday activities. However, few mechanisms to monitor everyday work exist in the aviation domain, which limits opportunities to learn how designs function in reality. This concept of safety thinking and safety management is reflected in the emerging field of resilience engineering. According to Hollnagel, a system is resilient if it can sustain required operations under expected and unexpected conditions by adjusting its functioning prior to, during, or following changes, disturbances, and opportunities. To explore “positive” behaviors that contribute to resilient performance in commercial aviation, the assessment team examined a range of existing sources of data about pilot and air traffic control (ATC) tower controller performance, including subjective interviews with domain experts and objective aircraft flight data records. These data were used to identify strategies that support resilient performance, methods for exploring and refining those strategies in existing data, and proposed methods for capturing and analyzing new data.

Null, Cynthia H.↗

Step-loaded creep testing of Zircaloy-4 cladding at higher temperatures in the α-phase

A refined understanding of zirconium-based cladding thermomechanical performance during rapid transients is essential for enhancing the safety and operation of light-water reactors. Traditional models for zirconium alloys under accident conditions generally assume that creep dominates fuel cladding performance. Here, these historic models have largely remained unchanged and serve as the basis for safety criteria development. As the U.S. nuclear industry pursues higher burnup levels, the increased release of fission gases during transients raises the risk of cladding failure in the low-temperature hcp α-phase, making the fidelity of these models of greater importance. Creep testing was conducted from 550–700°C with 25–120 MPa applied hoop stresses to investigate Zircaloy-4 deformation at accident-relevant temperatures in the α-phase. Step-loading was employed to capture creep behavior across a wide stress range from a single sample. The stress-strain rate data at higher temperatures (650 and 700°C) were well-described by isotropic versions of the Erbacher and Kaddour models, while the lower temperature data (550 and 600°C) were underpredicted by both anisotropic and isotropic model variants. Greater strain rates during the initial loading step at 650 and 700°C were attributed to recrystallization and grain growth of sub-micron crystallites. Yet, texture analysis revealed the basal split texture remained after testing. These observations produced results suggesting Zircaloy-4 claddings experience higher creep rates across the α-phase than previously thought, possibly related to dynamic anisotropy due to temperature dependent activation of deformation mechanisms, effects of biaxial loading, and variation in material condition between the current testing used in previous model development.

36 MATERIALS SCIENCE↗

Safety Review of the Hydrogen Components of a Reference Design of the Wind-H2-Green Steel/Ammonia Project

The Department of Energy Hydrogen Fuel Cell Technology Office and Wind Energy Technologies Office's Wind-H2-Green Steel/Ammonia project is an initiative to demonstrate the feasibility and efficacy of GW-scale integrated energy systems. The team designed reference facilities that utilize wind- and solar-produced hydrogen for industrial steel and ammonia production. This novel concept warranted review of safety codes and standards as they apply to the designs and the identification of codes and standards gaps. This report reviews hydrogen production and storage codes and standards using reference design specifications from a Minnesota steel plant. Requirements, recommendations, and exclusions for the system were identified. Observed gaps included non-specific salt cavern storage requirements, electrolyzer capacity beyond regulated ranges, and lack of requirements for iron reduction via hydrogen. This report will aide future project design efforts and may provide a basis for safety reviews in new designs for industrial facilities with hydrogen production integration.

08 HYDROGEN↗

Safety Review of the Hydrogen Components of a Reference Design of the Wind-H2-Green Steel/Ammonia Project

The Department of Energy Hydrogen Fuel Cell Technology Office and Wind Energy Technologies Office’s Wind-H2-Green Steel/Ammonia project is an initiative to demonstrate the feasibility and efficacy of GW-scale integrated energy systems. The team designed reference facilities that utilize wind- and solar-produced hydrogen for industrial steel and ammonia production. This novel concept warranted review of safety codes and standards as they apply to the designs and the identification of codes and standards as they apply to the designs and the identification of codes and standards gaps. This report reviews hydrogen production and storage codes and standards using reference design specifications from a Minnesota steel plant. Requirements, recommendations, and exclusions for the system were identified. Observed gaps included non-specific salt cavern storage requirements, electrolyzer capacity beyond regulated ranges, and lack of requirements for iron reduction via hydrogen. This report will aide future project design efforts and may provide a basis for safety reviews in new designs for industrial facilities with hydrogen production integration.

08 HYDROGEN↗

Informing New Concepts for UAS and Autonomous System Safety Management using Disaster Management and First Responder Scenarios

As emerging flight operations become more prevalent and increasingly automated and distributed, the capabilities for managing safety of vehicles and operations will also need to evolve. To address this challenge, the National Academies has envisioned an In-Time Aviation Safety Management System (IASMS) capability for a wide range of aviation operations including current commercial operations as well as new entrants envisioned with advanced air mobility (AAM). The suite of IASMS services, functions, and capabilities (SFCs) would be implemented in a federated approach and would address trends as well as individual operations. Through predictive modeling and data analysis, IASMS is envisioned to identify arising risks so that they can be mitigated, in-time, before a safety incident occurs. IASMS and its requisite set of SFCs must leverage a wide range of information to perform. To better understand these new needs, FSF worked with the aviation and humanitarian communities to develop and validate scenarios that include traditional aviation operations and UAS operations intermingled as they are deployed for disaster management and first responder (DMFR) situations. The three scenarios developed include: • Post Natural disaster response, such as a hurricane, involving multiple parties utilizing traditional aviation and UAS to support rescue operations, surveil damage, and locate survivors needing assistance. • Wildfire fighting in remote locations with traditional aircraft for transport and fire-retardant delivery combined with UAS for surveillance of fire locations as well as to track individual firefighter locations. • Medical Operations and AAM in Urban Environments including passenger-carrying helicopters and AAM vehicles, medical missions (such as transport of radio-pharmaceuticals), and other UAS delivery operations (such as the delivery of defibrillators). Each scenario was developed and validated by representatives with expertise in humanitarian operations, urban and rural emergency response, air traffic management, UAS operations, and traditional flight operations. The scenario definitions address roles and responsibilities of individual actors, the appropriate utilization of UAS, and the actions taken by those actors to appropriately manage risks associated with the mission and environment. The risks to aviation traffic and to people on the ground explored included potential risks arising from incompatibilities in calculating reference altitudes (eg, differing uses of AGL, MSL, barometric, or GPS-derived values), loss of command and control (C2) communications, rapid changes in weather and winds, and physical interference. For each risk, IASMS SFCs were postulated in the context of monitoring services, risk assessment capabilities, and identifying appropriate mitigation strategies. The identified SFC capabilities were envisioned from known services postulated for IASMS and for UTM. For these unique environments, IASMS SFCs are needed to address conditions such as hazardous payloads, micro-climates and urban canyons, and the need to keep uninvolved air traffic out of the area where DMFR operations are being conducted. The second phase of analysis focused on inferring the specific information needs and the SFCs for IASMS, utilizing a structure of 16 information classes to organize requirements. For each of the risks identified in the workshops, it was postulated what data sources would be necessary to monitor critical aspects of the risk (eg, surrounding air traffic, ground population, terrain, etc). to be directly measured as well as data that would be derived, which implies additional SFCs for different actors to understand what information would likely be exchanged between parties. For an IASMS to be effective, additional research is needed to develop the advanced algorithms that can address the increasingly autonomous and complex operations in differing environments and to develop means of identifying unknown risks. Looking at these scenarios highlighted a number of research issues. These include the ability to quickly "cordon off" airspace thru temporary flight restrictions (TFRs) or other means, developing clear definitions to enable automation-based algorithms for prioritizing operations, defining airspace density metrics, standardization of altitude reporting, and establishing a basis for safety data metrics definition and collection. This paper seeks to outline the development of an IASMS in the context of the DMFR scenarios and resulting demonstrations. Utilizing this contextual approach, NASA will generate recommendations for an assured safety framework for AAM operations that enables AAM operations to safely access the NAS.

In Time Aviation Safety Management System↗