Results for “risk informed design” — Page 9

NASA NTRS1975

Risk Management Technique for design and operation of facilities and equipment

The Risk Management System collects information from engineering, operating, and management personnel to identify potentially hazardous conditions. This information is used in risk analysis, problem resolution, and contingency planning. The resulting hazard accountability system enables management to monitor all identified hazards. Data from this system are examined in project reviews so that management can decide to eliminate or accept these risks. This technique is particularly effective in improving the management of risks in large, complex, high-energy facilities. These improvements are needed for increased cooperation among industry, regulatory agencies, and the public.

Fedor, O. H.↗

NASA NTRSDate not supplied

Usability of Pre-Flight Planning Interfaces for Supplemental Data Service Provider Tools to Support Uncrewed Aircraft System Traffic Management

Small uncrewed aircraft systems (sUASs) operate in low-altitude, uncontrolled airspace – where support services for their operators (UASOs) are not currently provided. NASA’s System-Wide Safety (SWS) project is identifying the potential risks and hazards to sUAS operations to provide, inform, and improve the designs of In-time Aviation Safety Management Systems (IASMS). The IASMS will include a suite of data-driven tools that compile and analyze data collected from aviation systems and environmental sources to predict hazards, and provide information to allow operators to mitigate these risks (Young et al., 2020). These risk and hazard services can be run and displayed to operators on graphical user interfaces (GUIs), as they relate to a vehicle(s)’ route of flight. These interfaces offer both a means to present hazard service output and offer an opportunity to test user understanding of the information, user decision making, and the best ways to present such data to an operator. Based on these future technologies and intended missions, it is important to investigate interface requirements and evaluate how operators might use these tools. Presenting salient and meaningful risk assessment information to operators is necessary to increase situation awareness and ultimately safety. Building on previous research (Feldman et al., 2022), a usability study comparing two GUIs was conducted to explore how individuals interacted with different styles of information displays. A series of pre-flight hazard and risk-assessment tasks were developed to evaluate participant performance using the Supplemental Data Service Provider Consolidated Dashboard and the Human Automation Team Interface System interfaces. Participants were trained to use both GUIs and their performance was analysed across different scenarios involving multiple sUASs. Performance on simple tasks and the System Usability Scale scores were reported by Feldman et al., 2023. Additional analyses and evaluations on more complex tasks (e.g., risk assessment, prioritization), workload and response times are examined in this paper.

sUAV interfaces↗

NASA NTRSDate not supplied

Usability of Pre-flight Planning Interfaces for Supplemental Data Service Provider Tools to Support Uncrewed Aircraft System Traffic Management

Small uncrewed aircraft systems (sUASs) operate in low-altitude, uncontrolled airspace – where support services for their operators (UASOs) are not currently provided. NASA’s System-Wide Safety (SWS) project is identifying the potential risks and hazards to sUAS operations to provide, inform, and improve the designs of In-time Aviation Safety Management Systems (IASMS). The IASMS will include a suite of data-driven tools that compile and analyze data collected from aviation systems and environmental sources to predict hazards, and provide information to allow operators to mitigate these risks (Young et al., 2020). These risk and hazard services can be run and displayed to operators on graphical user interfaces (GUIs), as they relate to a vehicle(s)’ route of flight. These interfaces offer both a means to present hazard service output and offer an opportunity to test user understanding of the information, user decision making, and the best ways to present such data to an operator. Based on these future technologies and intended missions, it is important to investigate interface requirements and evaluate how operators might use these tools. Presenting salient and meaningful risk assessment information to operators is necessary to increase situation awareness and ultimately safety. Building on previous research (Feldman et al., 2022), a usability study comparing two GUIs was conducted to explore how individuals interacted with different styles of information displays. A series of pre-flight hazard and risk-assessment tasks were developed to evaluate participant performance using the Supplemental Data Service Provider Consolidated Dashboard and the Human Automation Team Interface System interfaces. Participants were trained to use both GUIs and their performance was analysed across different scenarios involving multiple sUASs. Performance on simple tasks and the System Usability Scale scores were reported by Feldman et al., 2023. Additional analyses and evaluations on more complex tasks (e.g., risk assessment, prioritization), workload and response times are examined in this paper.

sUAV interfaces↗

DOE OSTI2024

Idaho National Laboratory Integrated Multisite SSHAC Level 3: Probabilistic Volcanic Hazards Assessment

The Idaho National Laboratory (INL) resides on the eastern Snake River Plain (ESRP), part of the Snake River Plain (SRP) with a complex origin and geologic history of volcanism. Much of the Quaternary (last 2.58 million years) volcanism within 400 km of INL is genetically associated with a major thermal anomaly referred to as the Yellowstone hotspot, which is currently located more than 180 km northeast of INL. Near INL, local volcanic sources include silicic domes near its southern border, and numerous dike-fed basaltic vents of the ESRP, some of which are near or within the INL boundaries. Quantitative probabilistic assessments of screened-in volcanic hazardous phenomena for nine different facility complexes at the INL are presented for a Senior Seismic Hazard Analysis Committee (SSHAC) Level 3 (SL3) study. The comprehensive, integrated multisite SSHAC study consists of a single regional Probabilistic Volcanic Hazards Assessment (PVHA) that pertains to all nine INL facility complexes, with site-specific information developed at each respective area of interest (AOI), referred to as the "INL facility AOI" (Figure ES-1). Hazard products are generated for specified INL facility AOIs for use by multiple stakeholders from different agencies in risk-informed decision-making regarding site selection, operations, and design of nuclear facilities at INL, consistent with U.S. Department of Energy (DOE) and U.S. Nuclear Regulatory Commission (NRC) regulatory guidance. The study also serves as the basis for future periodic safety assessments required for existing DOE facilities, such as 10-year evaluations of natural-phenomena hazards. Elements of the INL PVHA including initial characterization, screening, quantitative assessments of eruption and hazard potential, and consideration of facility needs are conducted using the three phases of the SSHAC process: evaluation, integration, and documentation. As per regulatory guidance, the SSHAC framework provided the necessary processes and procedures for the PVHA Technical Integration (TI) team, at three workshops, five formal working meetings and many TI team remote meetings, to conduct initial characterization, screen the volcanic hazards, create PVHA model inputs, exercise those models in the PVHA, consider facility-specific volcanic hazard needs, and perform final hazard calculations. The Participatory Peer Review Panel (PPRP) provided independent oversight and performed process and technical reviews of the PVHA throughout its duration. The study included an extensive New Data Collection and Analyses (NDCA) program developed by the PVHA TI team to reduce uncertainties in hazard-significant elements in the PVHA model. NDCA activities generated 20 reports providing important contributory datasets and results to the project database for characterizing the ESRP. For example, a report compiling the dimensions of ESRP shield volcanoes and lava fields was used to construct volcanic footprints (areas of impact), was compared with data from INL subsurface cores, and was used to validate the results of lava-flow inundation modeling on the contemporary terrain. Another example is the acquisition of aeromagnetic data over INL and its surrounding area, with maps of buried magmatic features (e.g., subsurface volcanoes and swarms of feeder dikes) that informed the PVHA conceptual model of volcanism. The SSHAC evaluation process was used to conduct all elements of the PVHA including initial characterization and screening. Existing data and NDCA activities provided the foundation to develop the tectonomagmatic conceptual model of volcanism for the region of geographical interest in the SRP and Yellowstone hotspot volcanic system, and for considering volcanoes in the western US. Considering Quaternary volcanic sources active during this period, the screening approach identified and evaluated magma compositions, types of eruptive and intrusive phenomena, types of hazardous phenomena, and proximity of sources to INL. The PVHA TI team evaluated 18 types of magmatic sources in terms of 20 potentially hazardous phenomena, resulting in 360 screening decisions. The screening process resulted in 140 screened-in hazardous volcanic phenomena for Quaternary volcanic sources 1) proximal to INL facility complexes in the ESRP (64 basaltic and 54 silicic), 2) regional sources associated with the Yellowstone caldera system and Blackfoot Reservoir volcanic field (7), and 3) more distal sources from thirteen Cascade volcanoes and two volcanoes at Long Valley caldera (CA).

58 GEOSCIENCES↗

NASA NTRS1988

Advanced probabilistic methods for quantifying the effects of various uncertainties in structural response

The effects of actual variations, also called uncertainties, in geometry and material properties on the structural response of a space shuttle main engine turbopump blade are evaluated. A normal distribution was assumed to represent the uncertainties statistically. Uncertainties were assumed to be totally random, partially correlated, and fully correlated. The magnitude of these uncertainties were represented in terms of mean and variance. Blade responses, recorded in terms of displacements, natural frequencies, and maximum stress, was evaluated and plotted in the form of probabilistic distributions under combined uncertainties. These distributions provide an estimate of the range of magnitudes of the response and probability of occurrence of a given response. Most importantly, these distributions provide the information needed to estimate quantitatively the risk in a structural design.

Nagpal, Vinod K.↗

NASA NTRS2023

IMPACTing Medical System Design with a Risk Analysis Tool [“IMPACT” sur la Conception du Système Médical avec un Outil d'Analyse des Risques]

Background: Following the success of Artemis I, NASA is preparing for human extended duration missions. Ongoing efforts are focused on mitigating mission-related risks, including those affecting crew health and performance. Communication latency, logistics of resupply and time frame of medical evacuation are barriers to provision of healthcare for these missions, especially with respect to constraints in mass, volume, and crew training. An in-depth assessment of medical risks, capabilities and resources for a specific mission design is necessary to determine an optimal balance that maximizes likelihood of mission success. Overview: IMPACT (Informed Mission Planning via Analysis of Complex Tradespaces) is a dynamic tool designed to estimate medical risk and outcomes for a specific mission design. In its current iteration, a list of medical conditions selected based on likelihood of occurrence and/or consequence was linked to a set of clinical capabilities and resources necessary for diagnosis and management. A probabilistic risk analysis tool was then used to identify and estimate the likelihood and consequence of risks through the following outcome metrics: loss of crew life (inflight mortality due to medical conditions), need for medical evacuation (return to definitive care), and crew disability (task time affected based on how medical conditions influence the ability to perform specific exploration mission crew tasks). Finally, the model’s optimization algorithm provides recommendations for medical capabilities that maximize risk mitigation relative to mass and volume constraints. In the Spring of 2023, IMPACT was utilized to estimate outcome metrics for a design reference mission that would be representative of an extended duration Artemis mission. Notional data generated were then used to determine a recommended set of medical capabilities and resources relative to user-defined mass and volume constraints. A multidisciplinary team has also been updating IMPACT to strengthen the model’s fidelity. Figure 1 shows how updates to outcome metric inputs for the conditions resulted in different capability and resource allocation recommendations. Discussion: This presentation will discuss the IMPACT tool and share the latest data generated for a representative extended duration Artemis mission. Efforts to improve the fidelity of data generated by the model’s algorithm will also be discussed.

K A Shair↗

NASA NTRSDate not supplied

IMPACTing Medical System Design with a Risk Analysis Tool

Background: Following the success of Artemis I, NASA is preparing for human extended duration missions. Ongoing efforts are focused on mitigating mission-related risks, including those affecting crew health and performance. Communication latency, logistics of resupply and time frame of medical evacuation are barriers to provision of healthcare for these missions, especially with respect to constraints in mass, volume, and crew training. An in-depth assessment of medical risks, capabilities and resources for a specific mission design is necessary to determine an optimal balance that maximizes likelihood of mission success. Overview: IMPACT (Informed Mission Planning via Analysis of Complex Tradespaces) is a dynamic tool designed to estimate medical risk and outcomes for a specific mission design. In its current iteration, a list of medical conditions selected based on likelihood of occurrence and/or consequence was linked to a set of clinical capabilities and resources necessary for diagnosis and management. A probabilistic risk analysis tool was then used to identify and estimate the likelihood and consequence of risks through the following outcome metrics: loss of crew life (inflight mortality due to medical conditions), need for medical evacuation (return to definitive care), and crew disability (task time affected based on how medical conditions influence the ability to perform specific exploration mission crew tasks). Finally, the model’s optimization algorithm provides recommendations for medical capabilities that maximize risk mitigation relative to mass and volume constraints. In the Spring of 2023, IMPACT was utilized to estimate outcome metrics for a design reference mission that would be representative of an extended duration Artemis mission. Notional data generated were then used to determine a recommended set of medical capabilities and resources relative to user-defined mass and volume constraints. A multidisciplinary team has also been updating IMPACT to strengthen the model’s fidelity. Figure 1 shows how updates to outcome metric inputs for the conditions resulted in different capability and resource allocation recommendations. Discussion: This presentation will discuss the IMPACT tool and share the latest data generated for a representative extended duration Artemis mission. Efforts to improve the fidelity of data generated by the model’s algorithm will also be discussed.

K A Shair↗

NASA NTRSDate not supplied

Human Capabilities Assessments for Autonomous Missions: A Multi-Team Research Effort to Reduce Risk in the Human-System Integration Architecture for Future Deep-Space Missions

In future exploration missions beyond low earth-orbit, crew will have to execute complex operations and respond to off-nominal events, without real-time support from Mission Control. It is anticipated that increased reliance on automated systems, including human-centric vehicle and information architecture, will need to be designed to support the crew; increased risk to performance, health, and safety may occur if these are not implemented appropriately. The Human Factors and Behavioral Performance Element (HFBP) in the NASA Human Research Program supports research to characterize and mitigate such human health and performance risks, including the Risk of Adverse Outcome Due to Inadequate Human Systems Integration Architecture (HSIA). The HSIA risk addresses the integration of onboard capability and the crew roles and responsibilities necessary to enable the crew to respond effectively and efficiently in the increasingly autonomous mission operations environment. In 2017, HFBP released the “Human Capabilities Assessments for Autonomous Missions” (HCAAM) research topic to address HSIA related questions. HCAAM is a major NASA research effort that has assembled a multidisciplinary team from seven institutions to work closely with design and engineering efforts on research towards developing and refining human performance standards, guidelines and automation tools. The scientific focus is on quantitative assessment of human capabilities relevant to future deep-space missions during which earth/spacecraft communication is so delayed and intermittent that the crew must be able to function autonomously. The integrated strategy of the HCAAM project characterizes human capabilities and limitations related to potential performance decrements during long duration exploration mission spaceflight as relevant to both routine and complex task performance; defines system characteristics that reduce the likelihood or impact of potential decrements in human performance capabilities; performs integrated assessment of intelligent system responses within the context of an operational environment with relevant NASA tools, systems, and data structures in order to determine positive or negative interactions and validate recommended approaches; and proposes specific updates to existing standards and guidelines for inclusion in NASA handbooks for the design of future spacecraft intelligent systems that provide crew performance assessment/feedback, and to also serve as decision-support aids for the onboard crew (i.e., NASA-STD-3001, and NASA/SP-Human Integration Design Handbook (HIDH)). The scientific research vectors being addressed by the seven HCAAM teams include: - crew task performance (accuracy, efficiency) (crew + automation) - crew performance (accuracy, efficiency) - crew Situation Awareness - procedure design and multi-modal enhancement - concurrent tasking (mixed manual + some level of autonomy) - task handover - crew self-planning and time-lining - task design - trust in automation, real-time calibration - human multi-sensory feedback and guidance - human trust in on-board software-based intelligent assistants - virtual assistants The presentation will highlight plans and progress made in each of these research areas as well as the methods by which surrogate astronaut crews in the NASA JSC HERA spaceflight analog facility will function as human test subjects for all of the HCAAM research projects.

HCAAM VNSCOR↗

NASA NTRSDate not supplied

Preliminary Medical Risk Estimates and Clinical Capability Needs for Artemis IV

BACKGROUND Human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in- mission medical care. Compared with the ISS, the greater distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and significant limitations on the evacuation of ill or injured crew. Spacecraft mass, volume, and power will be curtailed while higher demands will be placed on the crew’s knowledge, skills, and abilities. In this higher risk environment, it is important to: a) quantitatively estimate human system risk attributable to medical conditions, a process known as Probabilistic Risk Analysis, and b) use these estimates to inform medical system design. IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a PRA and medical trade space analysis tool developed by NASA to advance exploration mission medical system design. IMPACT v1.0 improves upon and will soon replace NASA’s existing tool, the Integrated Medical Model, with: a novel evidence base baselined to exploration environments; an expanded list of 119 medical conditions; a significant increase in the number of medical resources that can be utilized and in the flexibility of their use; and the modelling of time lost performing mission-specific tasks due to medical conditions. METHODOLOGY: This abstract will present IMPACT estimates of medical system risk and clinical capability needs for the Artemis IV mission. Artemis IV is currently scheduled for 2026 and will visit the Gateway space station in lunar orbit prior to the second lunar landing of the Artemis program. The baseline Artemis IV mission that was modeled was 28 days in duration with phases including Orion outbound, 4 days on the Gateway space station in lunar orbit, 2 crew on the surface of the Moon for approximately one week, an additional 5 days on Gateway, and then return to Earth. This baseline was compared to two alternative 34-day design reference missions (DRMs) that shifted the lunar sortie earlier or later in the mission profile. Assumptions included 2 female and 2 male crew and a notional medical system mass of 25 kg. Medical system risk estimates include loss of crew life (LOCL), consideration of medical evacuation (known as return to definitive care – RTDC), and an estimate of crew time lost due to medical conditions (Task Time Lost – TTL). The presentation will also describe the medical conditions that are the greatest drivers of risk as well as the clinical capabilities and resources that have the largest effect on risk. RESULTS: All three DRMs had very low probability of LOCL from medical conditions, primarily due to short duration. RTDC was also similar across the DRMs. In contrast, TTL was higher in the early lunar sortie DRM due to earlier occurrence of EVA-related medical conditions. Taken as a whole, there was no clinically significant difference in medical risk across the three missions. Results for clinical capabilities and an example medical equipment list will be discussed but were similar across DRMs.

D Hilmers↗

NASA NTRSDate not supplied

Medical Risk Estimates and Clinical Capability Needs for A Long Duration Artemis Mission

BACKGROUND Human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in-mission medical care. Compared with the ISS, the greater distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and significant limitations on the evacuation of ill or injured crew. Spacecraft mass, volume, and power will be curtailed while higher demands will be placed on the crew’s knowledge, skills, and abilities. In this higher risk environment, it is important to: a) quantitatively estimate human system risk attributable to medical conditions, a process known as Probabilistic Risk Analysis, and b) use these estimates to inform medical system design. IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a PRA and medical trade space analysis tool developed by NASA to advance exploration mission medical system design. IMPACT v1.0 improves upon and will soon replace NASA’s existing tool, the Integrated Medical Model, with: a novel evidence base baselined to exploration environments; an expanded list of 119 medical conditions; a significant increase in the number of medical resources that can be utilized and in the flexibility of their use; and the modelling of time lost performing mission-specific tasks due to medical conditions. DISCUSSION: This abstract will present IMPACT estimates of medical system risk and clinical capability needs for an extended duration Artemis mission of approximately 9 months, with phases including outbound transit, 3 months on the Lunar Gateway space station, 3 months on the Lunar surface with EVAs, 3 months on Gateway (simulating the return phase of a Mars mission), and transit back to Earth. Medical system risk estimates include loss of crew life (LOCL), consideration of medical evacuation (known as return to definitive care – RTDC), and an estimate of crew time lost due to medical conditions (Task Time Lost – TTL). The presentation will also describe the medical conditions that are the greatest drivers of risk as well as the clinical capabilities and resources that have the largest effect on risk.

W Thompson↗

NASA NTRS2022

Medical Risk Estimates and Clinical Capability Needs for a Late Artemis Mission

BACKGROUND Human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in-mission medical care. Compared with the ISS, the greater distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and significant limitations on the evacuation of ill or injured crew. Spacecraft mass, volume, and power will be curtailed while higher demands will be placed on the crew’s knowledge, skills, and abilities. In this higher risk environment, it is important to: a) quantitatively estimate human system risk attributable to medical conditions, a process known as Probabilistic Risk Analysis, and b) use these estimates to inform medical system design. IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a PRA and medical trade space analysis tool developed by NASA to advance exploration mission medical system design. IMPACT v1.0 improves upon and will soon replace NASA’s existing tool, the Integrated Medical Model, with: a novel evidence base baselined to exploration environments; an expanded list of 119 medical conditions; a significant increase in the number of medical resources that can be utilized and in the flexibility of their use; and the modelling of time lost performing mission-specific tasks due to medical conditions. DISCUSSION: This abstract will present IMPACT estimates of medical system risk and clinical capability needs for an extended duration Artemis mission of approximately 9 months, with phases including outbound transit, 3 months on the Lunar Gateway space station, 3 months on the Lunar surface with EVAs, 3 months on Gateway (simulating the return phase of a Mars mission), and transit back to Earth. Medical system risk estimates include loss of crew life (LOCL), consideration of medical evacuation (known as return to definitive care –RTDC), and an estimate of crew time list due to medical conditions (Task Time Lost –TTL). The presentation will also describe the medical conditions that are the greatest drivers of risk as well as the clinical capabilities and resources that have the largest effect on risk.

A Anderson↗

NASA NTRS2024

Preliminary Medical Risk Estimates and Clinical Capability Needs for Late Artemis Missions

BACKGROUND Human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in- mission medical care. Compared with the ISS, the greater distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and significant limitations on the evacuation of ill or injured crew. Spacecraft mass, volume, and power will be curtailed while higher demands will be placed on the crew’s knowledge, skills, and abilities. In this higher risk environment, it is important to: a) quantitatively estimate human system risk attributable to medical conditions, a process known as Probabilistic Risk Analysis, and b) use these estimates to inform medical system design. IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a PRA and medical trade space analysis tool developed by NASA to advance exploration mission medical system design. IMPACT v1.0 improves upon and will soon replace NASA’s existing tool, the Integrated Medical Model, with: a novel evidence base baselined to exploration environments; an expanded list of 119 medical conditions; a significant increase in the number of medical resources that can be utilized and in the flexibility of their use; and the modelling of time lost performing mission-specific tasks due to medical conditions. METHODOLOGY: This abstract will present IMPACT estimates of medical system risk and clinical capability needs for the Artemis IV mission. Artemis IV is currently scheduled for 2026 and will visit the Gateway space station in lunar orbit prior to the second lunar landing of the Artemis program. The baseline Artemis IV mission that was modeled was 28 days in duration with phases including Orion outbound, 4 days on the Gateway space station in lunar orbit, 2 crew on the surface of the Moon for approximately one week, an additional 5 days on Gateway, and then return to Earth. This baseline was compared to two alternative 34-day design reference missions (DRMs) that shifted the lunar sortie earlier or later in the mission profile. Assumptions included 2 female and 2 male crew and a notional medical system mass of 25 kg. Medical system risk estimates include loss of crew life (LOCL), consideration of medical evacuation (known as return to definitive care – RTDC), and an estimate of crew time lost due to medical conditions (Task Time Lost – TTL). The presentation will also describe the medical conditions that are the greatest drivers of risk as well as the clinical capabilities and resources that have the largest effect on risk. RESULTS: All three DRMs had very low probability of LOCL from medical conditions, primarily due to short duration. RTDC was also similar across the DRMs. In contrast, TTL was higher in the early lunar sortie DRM due to earlier occurrence of EVA-related medical conditions. Taken as a whole, there was no clinically significant difference in medical risk across the three missions. Results for clinical capabilities and an example medical equipment list will be discussed but were similar across DRMs.

D. Hilmers↗

NASA NTRS2005

An Integrated Approach to Risk Assessment for Concurrent Design

This paper describes an approach to risk assessment and analysis suited to the early phase, concurrent design of a space mission. The approach integrates an agile, multi-user risk collection tool, a more in-depth risk analysis tool, and repositories of risk information. A JPL developed tool, named RAP, is used for collecting expert opinions about risk from designers involved in the concurrent design of a space mission. Another in-house developed risk assessment tool, named DDP, is used for the analysis.

defect detection and prevention (DDP)↗

DOE OSTI2020

Readiness Evaluation for Sustained Operations

Readiness evaluation for sustained operations is a continuous function that progresses from overseeing establishment of five key programmatic elements during design and construction phases to monitoring the output of those elements performing during commissioning and operations. Continuously assessing readiness for sustained operations becomes an important business function for the U.S. Department of Energy’s Office of River Protection as competition for federal funds increases with increasing waste treatment operations throughout the Office of Environmental Management complex. The five key programmatic elements are as follows: Risk management – Risks and opportunities should prioritize continuous improvement initiatives and be informed by the design and technical authorities and stakeholder monitors. Continuous improvement – All levels of the project organization should exhibit commitment to continuous improvement and learning. Continuity of design and technical authorities – The authorities are responsible for managing knowledge for its effective use in the other elements. Stakeholder monitoring – Active and deliberate monitoring of stakeholder relationships. Sustained operations integrated business planning – Integrated business planning in a federal environment competitive for congressional funding.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2026

Exploring the fusion power plant design space: comparative analysis of positive and negative triangularity tokamaks through optimization

The optimal configuration choice between positive triangularity (PT) and negative triangularity (NT) tokamaks for fusion power plants hinges on navigating different operational constraints rather than achieving specific plasma performance metrics. This study presents a systematic comparison using constrained multi-objective optimization with the integrated FUsion Synthesis Engine (FUSE) framework. Over 200 000 integrated design evaluations were performed exploring the trade-offs between capital cost minimization and operational reliability (maximizing q 95 ) while satisfying engineering constraints including 250 ± 50 MW net electric power, tritium breeding ratio > 1.1, power exhaust limits and an hour flattop time. Both configurations achieve similar cost-performance Pareto fronts through contrasting design philosophies. PT, while demonstrating resilience to pedestal degradation (compensating for up to 40% reduction), are constrained to larger machines (R 0 > 6.5 m) by the narrow operational window between L–H threshold requirements and the research-established power exhaust limit (P sol /R < 15 MW m –1 ). This forces optimization through comparatively reduced magnetic field (∼8 T). NT configurations exploit their freedom from these constraints to access compact, high-field designs (R 0 ~ 5.5 m, B 0 >12 T), creating natural synergy with advancing HTS technology. Sensitivity analyses reveal that PT’s economic viability depends critically on uncertainties in L–H threshold scaling and power handling limits. Notably, a 50% variation in either could eliminate viable designs or enable access to the compact design space. These results suggest configuration selection should be risk-informed: PT offers the lowest-cost path when operational constraints can be confidently predicted, while NT is robust to large variations in constraints and physics uncertainties.

FUSE framework↗

DOE OSTI2025

COnfirmation using Gamma-ray Non-Imaging Zero-knowledge ANti-mask Time-encoding (COGNIZANT) Final Summary Report

In potential future arms reduction treaties in which the numbers of nuclear warheads may approach small numbers, using delivery systems as a proxy for the warheads themselves may be insufficient. Therefore, a technical means of verifying the presence of a nuclear warhead may become necessary. Verifying that a declared item actually is a warhead is technically challenging within a verification regime: providing assurance to the monitoring party that a presented item is a warhead while protecting sensitive information about that warhead may be required. It is generally believed that strong assurance will require the confirmation of key attributes that may reveal closely-guarded critical design information. This provides high confidence to the monitoring party, but presents a risk of information loss to the host. A verification system must overcome this hurdle. Over the last several decades, systems have been developed that balance host and monitoring partner needs by using sensitive information to confirm treaty accountable items (TAI) as warheads while sequestering that information behind an information barrier (1). These are designed to meet the needs of the host but places the onus on the monitor to authenticate the hardware, firmware, and software. Authentication requires that the monitor confirm that all components of the system have not been modified and work as intended. In 2014, Glaser et al. proposed applying the concept of “zero knowledge protocols” (ZKP) from the field of cryptography to the problem of warhead verification (2). In mathematical cryptography, ZKP is accomplished by challenging one party to solve a problem that is only possible if that party possesses the information being authenticated. After repeated challenges, the party provides confidence that it possesses this information without revealing any details about the information itself. Systems have been in development based on this idea at both Princeton and MIT (2) (3) (4). The final measurement results produced by these systems can be viewed by both the host and the monitoring party without the worry of revealing sensitive information. However, in both of these physical implementations, there remains an information barrier within the system. The need for a digital information barrier to protect a measurement result is eliminated, but it has been replaced with the need to sequester physical components of the system, potentially obfuscating the measurement process itself. Both implementations physically insert information into the system that requires protection to prevent undesired disclosure of sensitive information: in the Princeton method, one must physically load the complement of the expected image of a true warhead into the system, and in the MIT technique, one loads a collection of spectator foils whose thicknesses physically encrypt a measured spectrum. This complicates authentication of the hardware and measurement process. The CONFIDANTE/COGNIZANT concept developed in this project do not load sensitive information into the system at any time, and could therefore open the possibility of allowing the inspector to not only view the final data but also the measurement as it is being performed and all associated equipment.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

NASA NTRS2019

A Risk Informed Approach to Reliability Requirements Tailoring

Every institution has their “recipe” for success. Cell phones and personal computers seem like they are designed to be obsolete in 2-3 years. Automobiles seem like they are designed to have a power train failure within 1000 miles of the extended warranty expiration; at least that’s been my experience. The Jet Propulsion Laboratory (JPL) is not any different. JPL has a tried and proven recipe for success because in space things can’t fail. Or else. However, in today’s competitive environment and funding limitations, that recipe for success is being challenged and the resultant increased risk accepted. This paper will describe JPL’s Risk Informed Decision Making (RIDM) approach to tailoring reliability requirements based on mission classification and other project characteristics.

Klohoker, John↗

NASA NTRS1990

Expert System Development Methodology (ESDM)

The Expert System Development Methodology (ESDM) provides an approach to developing expert system software. Because of the uncertainty associated with this process, an element of risk is involved. ESDM is designed to address the issue of risk and to acquire the information needed for this purpose in an evolutionary manner. ESDM presents a life cycle in which a prototype evolves through five stages of development. Each stage consists of five steps, leading to a prototype for that stage. Development may proceed to a conventional development methodology (CDM) at any time if enough has been learned about the problem to write requirements. ESDM produces requirements so that a product may be built with a CDM. ESDM is considered preliminary because is has not yet been applied to actual projects. It has been retrospectively evaluated by comparing the methods used in two ongoing expert system development projects that did not explicitly choose to use this methodology but which provided useful insights into actual expert system development practices and problems.

Sary, Charisse↗