Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,063 records · Page 59

Development of Integrated Education, Training and Research Program with Interdisciplinary Applications II

Plasma models have been formulated including realistic spatial profiles of both flow and radio frequency induced ponderomotive force. With these inclusions the picture of stability of various plasma and fluid instabilities, as expected, changed drastically with ground-breaking consequences. The inhomogeneous parallel flow and the radio frequency waves can actually shown to stabilize turbulence. This is different from the prevalent notion that both parallel flow shear and radio frequency waves are responsible for the excitation (destabilization) of plasma turbulence. This has several ground-breaking consequences:- (1) the stabilization by parallel flow clearly goes against the conventional notion of the origin of ionospheric oscillation which invokes parallel flow destabilization as the origin, (2) the stabilization by parallel flow opens us a new avenue for improved mode formation in fusion devices - which mostly rely on the perpendicular flow shear stabilization for improved mode formation but the perpendicular flow is damped in a tokamak - so the improved mode formed by the parallel flow can sustain longer and has more prospect for ignition, (3) the complete stabilization of the ITG mode (and consequent suppression of transport) not only explain many unknown phenomena in the space physics but it also raises a prospect for transport barrier formation by the RF waves but not by the RF induced flow (as most works suggest) which is never observed in a tokamak of that magnitude to create a barrier. These are indeed ground-breaking consequences.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Climate Interventions Risk Framework White Paper

This work describes a structured, risk-based approach for analyzing questions related to the potential deployment of a climate intervention in any user-established future scenario, and further provides a structured means for considering what the potential consequences of such interventions may be. Because the climatological, technological, and geopolitical conditions are currently not believed to be supportive of climate intervention use, the framework establishes a three-pronged approach to frame key analytical questions predicated on future scenarios of interest to the user. These three pieces are: (1) Building a scenario. (2) Assessing the likelihood of that scenario based on assumptions about an actor and their motivations for deploying a climate intervention. (3) Analyzing the potential consequences of that climate intervention. Finally, results from this consequence analysis are compared against projected consequences of unabated climate change as a complete risk analysis of deploying a climate intervention.

54 ENVIRONMENTAL SCIENCES↗

The Essence of Cryptol: A Denotational Cryptol Interpreter in Coq for Foundational Assurances for Quantum Resistant Cryptosystems

Systems of the utmost consequence need a means to establish authenticity of software and data. Cryptosystems implement authentication, but can be vulnerable to cryptographic and implementation attacks. With the threat of quantum cryptographic attacks, “post-quantum” cryptosystems (PQCs) must be henceforth used in these systems. However, the new cryptography needs new ways to, rigorously and machine-checkably, prove systems free of vulnerabilities. We propose a retargetable capability to rapidly instantiate proven correct postquantum cryptosystems through novel proof-carrying synthesis and proof-automation technique, extending those proven successful on existing systems. This capability is crucial to meeting the cryptographic requirements for future high-consequence systems. Since specifications for high consequence cryptography are presently captured in a domain specific language known as Cryptol. While this can enable convenient fully automated reasoning about Cryptol specificaitons and implementations via the Software Analysis Workbench (SAW), Cryptol has expressivity gaps, so that cryptosystems with probabilistic programming features like Falcon cannot be fully expressed in the language. Moreover, SAW’s automation fails for programs and specificaitons with inductive and recursive structure, as in the Sphincs+ PQC. Finally, Cryptol and SAW together represent some 200,000 lines of unverified Haskell, so that the any guarantees about high consequence cryptography are presently contingent on a large, unverified, yet trusted computing base. The first step of the larger project of agile, assured crpytography is therefore to provide a formal, mechanized semantics for Cryptol, so that the specifications expressed by cryptographers in Cryptol can be reasoned about and compiled into performant implementations with a foundational, machine checkable certificate of correctness. This report describes our work on this first step, culminating in the design of a certified denotational interpreter, in Coq, for core Cryptol.

97 MATHEMATICS AND COMPUTING↗

Quantitative Risk Assessment for Fuel Cell Electric Bus Hydrogen Storage and Refueling Facility

It is necessary to understand the safety implications and risk mitigation options for fuel cell electric bus fleet deployment, especially for related facilities responsible for operations such as production, storage, compression, and dispensing of hydrogen for use by the buses. In this report, we present a quantitative risk assessment for a potential fuel cell electric bus fleet that was motivated by efforts to improve resilience at the Portland International Airport but can be applicable to a range of hydrogen case studies and use cases. We estimated risk for a facility that produces, stores, compresses, and dispenses hydrogen for the fleet of buses, with a focus on individual risk to people in terms of annual frequency of fatality. We considered the frequency of hydrogen leaks that could result in harmful physical outcomes like jet fires or explosions, and the consequences of those outcomes for people. We created customized fault trees to calculate the frequencies of different sizes of leaks and event sequence diagrams to calculate ignition probabilities for the various leak sizes. We also leveraged the HyRAM+ toolkit to use these inputs to calculate overall risk for the facility, which we separated into one section responsible for producing, storing, and compressing hydrogen, and one section responsible for dispensing the hydrogen to the buses. We found that the dispensing area seemed to have a higher risk than the production/storage/compression area of the facility, largely because of the inclusion of a component with a high leak frequency (the heat exchanger used to cool the hydrogen before entering the vehicle, to prevent overheating and expansion of hydrogen in the onboard tank). For the example production and refueling facility we evaluated and the data we used for the analysis, the leak frequency had a larger impact on the risk differences between the two sections on the facility, compared to the physical outcome consequence, which was slightly different due to the varying fuel conditions, but not substantially different. Actions can be taken to prevent these hazards (e.g., lowering leak frequencies in system components) or to mitigate the consequences if they do occur (e.g., installing barriers to protect people if ignition events occur). The choice of which actions to take depends not only on safety considerations but also on space, time, staffing, feasibility, and financial constraints. Therefore, the quantitative risk assessment approach can help understand relative risk contributions from different components, leak sizes, consequences, and human actions, to prioritize risk reduction strategies and balance these parameters. The outcomes of this report may be useful for a variety of stakeholders working in the hydrogen, transportation, vehicle, and aviation sector, including those responsible for aspects like facility design, operations, and regulations. There is not a single value of risk that determines whether a hypothetical system is “safe” or not. The insights about risk mitigations may be leveraged, and the quantitative risk assessment approach can be applied to other case studies to understand risk priorities and contributions specific to different FCEB and hydrogen facility uses.

08 HYDROGEN↗

Planning for Seattle at the Convergence of Resilience and Energy

Grid reliability metrics obscure important temporal, spatial, and categorical considerations for increasing energy resilience. Systemwide or feeder-level outage metrics do not identify which kinds of services are affected by outages, where, and for how long. These outage metrics indicate the impacts of outages but cannot measure the consequences to customers that could result from those outages. The consequences of power outages for surrounding community members are caused by disruptions to electricity-dependent critical services, rather than to electricity itself. Power outages can decrease a community's access to healthcare, fuel, safe indoor temperatures, and provisions like food and water. This project developed critical service access, a new consequence-focused resilience metric that quantifies the relative access to critical services provided to households by distribution infrastructure during normal conditions and major disruptions. We use a spatially granular grid analysis that facilitates targeted resilience interventions; dividing feeders into isolatable sections and combining those sections with the critical service access metric allows us to identify where energy improvements like solar-plus-storage microgrids could create the most benefits for community members by protecting access to food, fuel, health, shelter, and public safety services. We identify locations in a South Seattle study area that could be high priorities for resilience investment and summarize their potential neighborhood-scale resilience benefits. This analysis was complemented by direct feedback from study area residents collect through a survey and focus groups. Results can help utilities understand how and where long power outages can create real consequences for customers, set strategic targets based on that understanding, and measure the potential benefits of energy resilience upgrades for more informed decisions.

14 SOLAR ENERGY↗

Technology assessment of future intercity passenger transportation systems. Volume 6: Impact assessment

Consequences that might occur if certain technological developments take place in intercity transportation are described. These consequences are broad ranging, and include economic, environmental, social, institutional, energy-related, and transportation service implications. The possible consequences are traced through direct (primary) impacts to indirect (secondary, tertiary, etc.) impacts. Chains of consequences are traced, reaching as far beyond the original transportation cause as is necessary to identify all impacts felt to be influenced significantly by the technological development considered.

Source record↗

The mutual attraction of magnetic knots

It is observed that the magnetic knots associated with active regions on the sun have an attraction for each other during the formative period of the active regions, when new magnetic flux is coming to the surface. The attraction disappears when new flux ceases to rise through the surface. Then the magnetic spots and knots tend to come apart, leading to disintegration of the sunspots previously formed. The dissolution of the fields is to be expected, as a consequence of the magnetic repulsion of knots of like polarity and as a consequence of the hydromagnetic exchange instability. The purpose of this paper is to show that the mutual attraction of knots during the formative stages of a sunspot region may be understood as the mutual hydrodynamic attraction of the rising flux tubes. Two rising tubes attract each other, as a consequence of the wake of the leading tube when one is moving behind the other, and as a consequence of the Bernoulli effect when rising side by side.

Parker, E. N.↗

Fast Context Switching in Real-Time Propositional Reasoning

The trend to increasingly capable and affordable control processors has generated an explosion of embedded real-time gadgets that serve almost every function imaginable. The daunting task of programming these gadgets is greatly alleviated with real-time deductive engines that perform all execution and monitoring functions from a single core model, Fast response times are achieved using an incremental propositional deductive database (an LTMS). Ideally the cost of an LTMS's incremental update should be linear in the number of labels that change between successive contexts. Unfortunately an LTMS can expend a significant percentage of its time working on labels that remain constant between contexts. This is caused by the LTMS's conservative approach: a context switch first removes all consequences of deleted clauses, whether or not those consequences hold in the new context. This paper presents a more aggressive incremental TMS, called the ITMS, that avoids processing a significant number of these consequences that are unchanged. Our empirical evaluation for spacecraft control shows that the overhead of processing unchanged consequences can be reduced by a factor of seven.

Nayak, P. Pandurang↗

The Urban Environmental Monitoring/100 Cities Project: Legacy of the First Phase and Next Steps

The Urban Environmental Monitoring (UEM) project, now known as the 100 Cities Project, at Arizona State University (ASU) is a baseline effort to collect and analyze remotely sensed data for 100 urban centers worldwide. Our overarching goal is to use remote sensing technology to better understand the consequences of rapid urbanization through advanced biophysical measurements, classification methods, and modeling, which can then be used to inform public policy and planning. Urbanization represents one of the most significant alterations that humankind has made to the surface of the earth. In the early 20th century, there were less than 20 cities in the world with populations exceeding 1 million; today, there are more than 400. The consequences of urbanization include the transformation of land surfaces from undisturbed natural environments to land that supports different forms of human activity, including agriculture, residential, commercial, industrial, and infrastructure such as roads and other types of transportation. Each of these land transformations has impacted, to varying degrees, the local climatology, hydrology, geology, and biota that predate human settlement. It is essential that we document, to the best of our ability, the nature of land transformations and the consequences to the existing environment. The focus in the UEM project since its inception has been on rapid urbanization. Rapid urbanization is occurring in hundreds of cities worldwide as population increases and people migrate from rural communities to urban centers in search of employment and a better quality of life. The unintended consequences of rapid urbanization have the potential to cause serious harm to the environment, to human life, and to the resulting built environment because rapid development constrains and rushes decision making. Such rapid decision making can result in poor planning, ineffective policies, and decisions that harm the environment and the quality of human life. Slower, more thought-out, decision making could result in more favorable outcomes. The harm to the environment includes poor air quality, soil erosion, polluted rivers and aquifers, and loss of wildlife habitat. Human life is then threatened because of increased potential for disease spreading, human conflict, environmental hazards, and diminished quality of life. The built environment is potentially threatened when cities are built in areas that can be impacted by events such as hurricanes, tsunamis, earthquakes, fires, and landslides. Our goals include assessing the threat of such events on cities and the people living there.

Stefanov, William L.↗

Risk Management of Jettisoned Objects in LEO

The construction and maintenance of the International Space Station (ISS) has led to the release of many objects into its orbital plane, usually during the course of an extra-vehicular activity (EVA). Such releases are often unintentional, but in a growing number of cases, the jettison has been intentional, conducted after a careful assessment of the net risk to the partnership and to other objects in space. Since its launch in 1998 the ISS has contributed on average at least one additional debris object that is simultaneously in orbit with the station, although the number varies widely from zero to eight at any one moment. All of these objects present potential risks to other objects in orbit. Whether it comes from known and tracked orbiting objects or from unknown or untrackable objects, collision with orbital debris can have disastrous consequences. Objects greater than 10cm are generally well documented and tracked, allowing orbiting spacecraft or satellites opportunities to perform evasive maneuvers (commonly known as Debris Avoidance Maneuvers, or DAMs) in the event that imminent collision is predicted. The issue with smaller debris; however, is that it is too numerous to be tracked effectively and yet still poses disastrous consequences if it intercepts a larger object. Due to the immense kinetic energy of any item in orbit, collision with debris as small as 1cm can have catastrophic consequences for many orbiting satellites or spacecraft. Faced with the growing orbital debris threat and the potentially catastrophic consequences of a collision-generated debris shower originating in an orbit crossing the ISS altitude band, in 2007 the ISS program manger asked program specialists to coordinate a multilateral jettison policy amongst the ISS partners. This policy would define the acceptable risk trade rationale for intentional release of a debris object, and other mandatory constraints on such jettisons to minimize the residual risks whenever a jettison was accepted. Although ISS-related debris often presents untenable risks to the EVA crew, IVA crew, or to a departing cargo vehicle for a controlled disposal, such released objects also present a ballistic nuisance to the visiting vehicle traffic, and a potential fragmentation threat to the hundreds of other functional and debris objects whose perigees lie below the ISS orbital altitude. Thus, every such jettison decision is a conscious risk trade.

Bacon, John B.↗

Addressing Human System Risks to Future Space Exploration

NASA is contemplating future human exploration missions to destinations beyond low Earth orbit, including the Moon, deep-space asteroids, and Mars. While we have learned much about protecting crew health and performance during orbital space flight over the past half-century, the challenges of these future missions far exceed those within our current experience base. To ensure success in these missions, we have developed a Human System Risk Board (HSRB) to identify, quantify, and develop mitigation plans for the extraordinary risks associated with each potential mission scenario. The HSRB comprises research, technology, and operations experts in medicine, physiology, psychology, human factors, radiation, toxicology, microbiology, pharmacology, and food sciences. Methods: Owing to the wide range of potential mission characteristics, we first identified the hazards to human health and performance common to all exploration missions: altered gravity, isolation/confinement, increased radiation, distance from Earth, and hostile/closed environment. Each hazard leads to a set of risks to crew health and/or performance. For example the radiation hazard leads to risks of acute radiation syndrome, central nervous system dysfunction, soft tissue degeneration, and carcinogenesis. Some of these risks (e.g., acute radiation syndrome) could affect crew health or performance during the mission, while others (e.g., carcinogenesis) would more likely affect the crewmember well after the mission ends. We next defined a set of design reference missions (DRM) that would span the range of exploration missions currently under consideration. In addition to standard (6-month) and long-duration (1-year) missions in low Earth orbit (LEO), these DRM include deep space sortie missions of 1 month duration, lunar orbital and landing missions of 1 year duration, deep space journey and asteroid landing missions of 1 year duration, and Mars orbital and landing missions of 3 years duration. We then assessed the likelihood and consequences of each risk against each DRM, using three levels of likelihood (Low: less than or equal to 0.1%; Medium: 0.1%–1.0%; High: greater than or equal to 1.0%) and four levels of consequence ranging from Very Low (temporary or insignificant) to High (death, loss of mission, or significant reduction to length or quality of life). Quantitative evidence from clinical, operational, and research sources were used whenever available. Qualitative evidence was used when quantitative evidence was unavailable. Expert opinion was used whenever insufficient evidence was available. Results: A set of 30 risks emerged that will require further mitigation efforts before being accepted by the Agency. The likelihood by consequence risk assessment process provided a means of prioritizing among the risks identified. For each of the high priority risks, a plan was developed to perform research, technology, or standards development thought necessary to provide suitable reduction of likelihood or consequence to allow agency acceptance. Conclusion: The HSRB process has successfully identified a complete set of risks to human space travelers on planned exploration missions based on the best evidence available today. Risk mitigation plans have been established for the highest priority risks. Each risk will be reassessed annually to track the progress of our risk mitigation efforts.

Paloski, W. H.↗

Earth-Independent Medical Operations (EIMO) Concept of Operations

Compared to the current paradigm for crew health in low-Earth orbit and Lunar missions that rely on constant communication with Mission Control, there is an anticipated shift in medical operations for deep-space exploration missions. This shift stems from mission constraints imposed by the considerable distance from Earth, which include resource limitations due to a lack of resupply, mass, power, volume, and data limitations, challenges imposed by communication latency and the inability to evacuate in case of emergencies. To transition towards a more self-reliant medical approach, a comprehensive strategy is essential to progressively enable crew autonomy and mitigate mission success risks in the challenging environment of space. This transformative shift is collectively referred to as "Earth-Independent Medical Operations" (EIMO), signifying the gradual transfer of medical care and decision-making from terrestrial resources to space-based assets. This transition is aimed at bolstering astronaut health and performance while simultaneously reducing the overall risks associated with space missions. The constraints related to EIMO necessitate an integrated development of medical systems, featuring interoperability with mission planning, vehicle design, spacesuit design, and data architecture. This integration is vital in establishing a robust medical infrastructure that not only supports the well-being of astronauts but also ensures the success of the mission as a whole. The Human Research Program (HRP) Exploration Medical Capability (ExMC) Element has developed a model-based Concept of Operations (ConOps) outlining an initial vision for EIMO. Within this ConOps, a comprehensive view is presented, encompassing stakeholder needs, system objectives, and system goals associated with EIMO. Additionally, it provides illustrative examples of the various activities (scenarios) for which the system will be employed during missions. The selection of these activities has been meticulous, aiming to encompass a wide spectrum of medical conditions, including those falling under different risk categories, such as low-likelihood-low-consequence, low-likelihood-high-consequence, and high-likelihood-low-consequence. The selection of these activities (scenarios) effectively encompasses the wide range of medical events situated within an assumed probability-consequence bell curve. In each scenario, at least one of the five main EIMO components identified is captured. Those EIMO components are: Pre-mission Planning, Acute and Emergent Management Decision Making, Prolonged Medical Management Decision Making, Supplies and Resource Management, and Task Load Management. The ConOps was developed by a multidisciplinary team consisting of systems engineers, scientists, and clinicians across NASA and aims to serve as an initial recommendation to gradually and safely enabling crew autonomy for Mars missions and beyond.

Earth Independent Medical Operations↗

Earth-Independent Medical Operations (EIMO) Concept of Operations (ConOps)

Compared to the current paradigm for crew health in low-Earth orbit and Lunar missions that rely on constant communication with Mission Control, there is an anticipated shift in medical operations for deep-space exploration missions. This shift stems from mission constraints imposed by the considerable distance from Earth, which include resource limitations due to a lack of resupply, mass, power, volume, and data limitations, challenges imposed by communication latency and the inability to evacuate in case of emergencies. To transition towards a more self-reliant medical approach, a comprehensive strategy is essential to progressively enable crew autonomy and mitigate mission success risks in the challenging environment of space. This transformative shift is collectively referred to as "Earth-Independent Medical Operations" (EIMO), signifying the gradual transfer of medical care and decision-making from terrestrial resources to space-based assets. This transition is aimed at bolstering astronaut health and performance while simultaneously reducing the overall risks associated with space missions. The constraints related to EIMO necessitate an integrated development of medical systems, featuring interoperability with mission planning, vehicle design, spacesuit design, and data architecture. This integration is vital in establishing a robust medical infrastructure that not only supports the well-being of astronauts but also ensures the success of the mission as a whole. The Human Research Program (HRP) Exploration Medical Capability (ExMC) Element has developed a model-based Concept of Operations (ConOps) outlining an initial vision for EIMO. Within this ConOps, a comprehensive view is presented, encompassing stakeholder needs, system objectives, and system goals associated with EIMO. Additionally, it provides illustrative examples of the various activities (scenarios) for which the system will be employed during missions. The selection of these activities has been meticulous, aiming to encompass a wide spectrum of medical conditions, including those falling under different risk categories, such as low-likelihood-low-consequence, low-likelihood-high-consequence, and high-likelihood-low-consequence. The selection of these activities (scenarios) effectively encompasses the wide range of medical events situated within an assumed probability-consequence bell curve. In each scenario, at least one of the five main EIMO components identified is captured. Those EIMO components are: Pre-mission Planning, Acute and Emergent Management Decision Making, Prolonged Medical Management Decision Making, Supplies and Resource Management, and Task Load Management. The ConOps was developed by a multidisciplinary team consisting of systems engineers, scientists, and clinicians across NASA and aims to serve as an initial recommendation to gradually and safely enabling crew autonomy for Mars missions and beyond.

Earth Independent Medical Operations↗

Exploiting Literature-Based Discovery to Study Effects of Bullying

Bullying represents an aggressive behavioral problem. It can create severe mental illness in children, adolescents, and adults. Researchers are interested in studying bullying to understand its long-term negative consequences and design better-targeted intervention programs. Broadly researchers in psychology and education have conducted studies on bullying without using advanced analytical features offered by the computer science domain. However, researchers could benefit from power of advanced analytics for an in-depth understanding of bullying. In this paper, we present graph-based advanced analytics by employing a literature-based discovery (LBD) approach to study the direct and indirect consequences of bullying from published literature. In addition, we describe a graph-based study on the evolution of research on bullying consequences in the last two decades. Our graph-based study reveals a summary view of associations of bullying with other diseases and disorders from published literature. Further, we employ literature reference information to quantify the strength of the graph-derived relationships. We demonstrate that LBD is a valuable approach to perform advanced analytics on bullying that helps us to understand the severity of its consequences.

Hasan, S M Shamimul↗

Advanced Computational Accident Scenario Modeling for Safety Margin Economic Analysis

The intent of this research is to establish a new tool in the Risk Informed Safety Margin Characterization (RISMC) tool-kit for the fiscal analysis of potential power plant upgrades. This is being done by providing proof-of-concept of the Safety Margin Economic Evaluation (SMEE) methodology of performing cost-benefit analyses of potential Nuclear Power Plant (NPP) upgrades to allow for more data-driven decision making with regards to nuclear safety. To this end, the RAVEN code developed by the Idaho National Laboratory is being used to perform a cost-benefit analysis of several potential power plant safety upgrades to compare the material cost of the upgrades with the probabilistic benefit of avoiding accident scenario consequences to find the most cost effective safety upgrades. Additionally, the MELCOR and MACCS2 codes developed by the Sandia National Laboratory are being used for accident scenario modeling. Evaluating potential NPP upgrades is concluded by doing a detailed cost-benefit analysis of the upgrades. The cost of the upgrade is the direct material cost of implementing, maintaining, and operating the upgrade at an NPP for the projected duration of its lifetime. The benefit of the upgrade is more complex, and is essentially the Risk avoided, where Risk is defined as Consequences multiplied by Probability. Here, Consequences is the economic impact of a severe accident and/or nuclear release and Probability is the likelihood that an NPP upgrade will prevent or mitigate a severe accident, reducing or even eliminating its Consequences. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Incorporating realistic conservatism into criticality alarm placement and emergency response: a regulatory perspective - 14425

Review of historical process plant criticality accidents shows that their consequences vary widely and are extremely difficult to predict accurately. Because of the wide variability and inherent uncertainty in estimating consequences, criticality detector placement analysis and consequence estimation for emergency response typically utilize very conservative assumptions with regard to the total fissions, time-dependent fission rate, and intervening shielding. For detector placement, a 'minimum accident of concern' is typically defined, whereas emergency consequence evaluations typically define a maximum fission source term. These require different mindsets because what is conservative for one type of analysis may be non-conservative for the other. While some conservatism is commonly practiced in both cases, excessive conservatism can result in a net increase in risk, such as resulting from inadvertent alarm activations, that can be costly to operations and counterproductive to safety. Conversely, reliance on very detailed calculational models to reduce conservatism could increase the number and complexity of controls, such as shielding for dose mitigation. Deterministic regulatory criteria have also been applied for determining where criticality detectors are to be deployed and what areas must be evacuated in the event of an accident. This paper explores several issues associated with criticality alarm placement and emergency response from a regulatory perspective. This paper will discuss insights gained from historical fuel facility accidents and significant events regarding the inherent risk of criticality, the most likely locations for criticality to occur, and the most probable characteristics of a critical excursion. This will include discussion of the previously disputed relevance of the United States Nuclear Regulatory Commission's (USNRC's) longstanding model for a critical excursion. While USNRC regulations deterministically require dual alarm coverage in all areas having greater than a 'critical mass' of fissionable material, a process is provided to grant exemptions when a risk-informed argument is technically justified. Similar risk-informed considerations have been used to justify compensatory measures allowing limited operation during periods of alarm system outage due to component failure or maintenance. This paper will explore the application of risk information and performance history to address requirements for criticality alarm system coverage, granting exemptions from deterministic criteria, allowing compensatory measures during system outages, determining evacuation areas and routes, and assessing the significance associated with alarm system issues. Finally, the impact of shielding on the USNRC's regulatory risk basis and approved subcritical margin will be reviewed. (authors)

42 ENGINEERING↗

A Methodology for defining intermediate level waste package characteristics that ensure criticality safety in a geological disposal facility - 14599

Radioactive Waste Management (RWM) is responsible for implementing geological disposal of the UK's higher activity radioactive wastes. These wastes include fissile nuclides and, therefore, demonstration of the criticality safety of the wastes under disposal conditions forms an important component of RWM's disposal system safety case. The basis for ensuring criticality safety of intermediate level waste (ILW) packages is to specify controls on the fissile material content of individual packages through the application of deterministic criticality safety assessments (CSAs). The approach is defined and controlled through RWM's Disposability Assessment process, which aims to ensure that: criticality is prevented during waste package transport to a GDF; the risk of criticality is tolerable and as low as reasonably practicable (ALARP) during GDF operations; and the likelihood and consequences of criticality arising from the evolution of waste packages after GDF closure are low. The most restrictive phase determines the package fissile material limit and, until now, in many cases the GDF post-closure phase has provided the most restrictive limit. Currently, the GDF post-closure limits are derived deterministically using highly stylised and conservative assumptions about fissile material accumulations occurring on very long timescales into the future. RWM, waste producers and regulators do not currently consider this approach to be yielding an appropriate balance of risk. Therefore, RWM is modifying the process for setting fissile material limits on ILW packages by making use of the outcomes of its recent research projects to establish the likelihood of post-closure criticality in a GDF and the consequences of hypothetical post-closure criticality events (presented in companion papers). This paper presents the revised methodology, which is based on the requirement that criticality in a GDF can be demonstrated to be of low and tolerable consequences with regard the performance of a GDF. A probabilistic 'low-likelihood package envelope' is proposed that establishes the packaging and disposal facility conditions under which post-closure criticality is considered to be of low likelihood and low consequence. The bounding conditions for establishing the extent of the package envelope have been evaluated through application of the methodologies and models developed in RWM's Likelihood of Criticality research project. It is expected that the vast majority of ILW packages would meet the package envelope requirements. The methodology also allows the use of other options, such as deterministic CSAs, for waste packages that fall outside the low-likelihood package envelope. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

AniMACCS

AniMACCS is an animation software used in conjunction with MELCOR Accident Consequence Code System (MACCS), which is responsible for estimating the offsite consequences of potential severe accidents at nuclear power plants (NPPs) and of atmospheric releases of radioactive aerosols and gases from other nuclear facilities. MACCS is used to perform probabilistic health and economic consequence assessment of hypothetical releases of radioactive material. AniMACCS utilizes the MACCS output files to generate visual and geographical depictions of the accident consequences. SAND2020-12229 M Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Gallagher, LInda↗