SEARCH · Engineering Papers

Results for “Software Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,675 records · Page 93

All sources NASA NTRS DOE OSTI

NASA NTRS2007

Fault Detection and Correction for the Solar Dynamics Observatory Attitude Control System

The Solar Dynamics Observatory is an Explorer-class mission that will launch in early 2009. The spacecraft will operate in a geosynchronous orbit, sending data 24 hours a day to a devoted ground station in White Sands, New Mexico. It will carry a suite of instruments designed to observe the Sun in multiple wavelengths at unprecedented resolution. The Atmospheric Imaging Assembly includes four telescopes with focal plane CCDs that can image the full solar disk in four different visible wavelengths. The Extreme-ultraviolet Variability Experiment will collect time-correlated data on the activity of the Sun's corona. The Helioseismic and Magnetic Imager will enable study of pressure waves moving through the body of the Sun. The attitude control system on Solar Dynamics Observatory is responsible for four main phases of activity. The physical safety of the spacecraft after separation must be guaranteed. Fine attitude determination and control must be sufficient for instrument calibration maneuvers. The mission science mode requires 2-arcsecond control according to error signals provided by guide telescopes on the Atmospheric Imaging Assembly, one of the three instruments to be carried. Lastly, accurate execution of linear and angular momentum changes to the spacecraft must be provided for momentum management and orbit maintenance. In th~sp aper, single-fault tolerant fault detection and correction of the Solar Dynamics Observatory attitude control system is described. The attitude control hardware suite for the mission is catalogued, with special attention to redundancy at the hardware level. Four reaction wheels are used where any three are satisfactory. Four pairs of redundant thrusters are employed for orbit change maneuvers and momentum management. Three two-axis gyroscopes provide full redundancy for rate sensing. A digital Sun sensor and two autonomous star trackers provide two-out-of-three redundancy for fine attitude determination. The use of software to maximize chances of recovery from any hardware or software fault is detailed. A generic fault detection and correction software structure is used, allowing additions, deletions, and adjustments to fault detection and correction rules. This software structure is fed by in-line fault tests that are also able to take appropriate actions to avoid corruption of the data stream.

Starin, Scott R.↗

DOE OSTI2012

Modern Nuclear Data Evaluation with the TALYS Code System

This paper presents a general overview of nuclear data evaluation and its applications as developed at NRG, Petten. Based on concepts such as robustness, reproducibility and automation, modern calculation tools are exploited to produce original nuclear data libraries that meet the current demands on quality and completeness. This requires a system which comprises differential measurements, theory development, nuclear model codes, resonance analysis, evaluation, ENDF formatting, data processing and integral validation in one integrated approach. Software, built around the TALYS code, will be presented in which all these essential nuclear data components are seamlessly integrated. Besides the quality of the basic data and its extensive format testing, a second goal lies in the diversity of processing for different type of users. The implications of this scheme are unprecedented. The most important are: 1. Complete ENDF-6 nuclear data files, in the form of the TENDL library, including covariance matrices, for many isotopes, particles, energies, reaction channels and derived quantities. All isotopic data files are mutually consistent and are supposed to rival those of the major world libraries. 2. More exact uncertainty propagation from basic nuclear physics to applied (reactor) calculations based on a Monte Carlo approach: 'Total' Monte Carlo (TMC), using random nuclear data libraries. 3. Automatic optimization in the form of systematic feedback from integral measurements back to the basic data. This method of work also opens a new way of approaching the analysis of nuclear applications, with consequences in both applied nuclear physics and safety of nuclear installations, and several examples are given here. This applied experience and feedback is integrated in a final step to improve the quality of the nuclear data, to change the users vision and finally to orchestrate their integration into simulation codes.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2020

Review of Tools for Modeling Core Radial Expansion in Liquid Metal-Cooled Fast Reactors

Core radial expansion in liquid-metal cooled fast reactor systems is a well-known phenomenon that produces strong reactivity feedback effects. It is crucial from a safety standpoint to design a reactor with the proper core restraint system to guide expansion of the fuel assemblies into a formation that produces negative reactivity feedback in accident conditions. However, the modeling of core radial expansion and its associated reactivity feedback is extremely challenging. Liquid metal-cooled fast reactor designers (both industry and commercial) have pointed to improved modeling of core radial expansion as a key modeling challenge for these types of reactors. The Department of Energy Nuclear Energy Advanced Modeling and Simulation (DOE-NEAMS) program has an important role to play in helping to develop a robust, predictive tool for this phenomenon. A literature review has been performed to identify current simulation capabilities applicable to the prediction of core radial expansion in liquid metal-cooled fast reactors and the resultant reactivity feedback effects. An overview as well as a detailed description of the multi-physics phenomena underlying core radial expansion is given in the first two chapters. The objective of this report is to identify existing software that has been or could be applied to the core radial expansion problem, and then to identify possible paths to develop a robust, coupled Multiphysics tool for advanced analysis, in which all three physics (radiation transport, structural mechanics, thermal fluids) are taken into account considering feedback effects from each physics to the other. Several computer codes and workflows have been developed in the United States and abroad to perform individual aspects of radial expansion calculations or to perform loosely coupled analysis. No code system currently exists which tightly and robustly couples the neutronics, thermal hydraulics, and thermal mechanical physics with enough detail to fully resolve the complex core radial expansion reactivity feedback effects. The future availability of such a code system is of vital importance to fully understanding the reactivity feedback effects that occur due to radial expansion, and consequently to optimizing the design of the core restraint system. A potential code development path forward using MOOSE-based tools is suggested in order to leverage the natural tight coupling and robustness of MOOSE-based applications. Additionally, potential gaps for modeling and common assumptions are listed which require further investigation to ensure accuracy for prediction of deformations.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2015

Digital Sensor Technology

The nuclear industry has been slow to incorporate digital sensor technology into nuclear plant designs due to concerns with digital qualification issues. However, the benefits of digital sensor technology for nuclear plant instrumentation are substantial in terms of accuracy and reliability. This paper, which refers to a final report issued in 2013, demonstrates these benefits in direct comparisons of digital and analog sensor applications. Improved accuracy results from the superior operating characteristics of digital sensors. These include improvements in sensor accuracy and drift and other related parameters which reduce total loop uncertainty and thereby increase safety and operating margins. An example instrument loop uncertainty calculation for a pressure sensor application is presented to illustrate these improvements. This is a side-by-side comparison of the instrument loop uncertainty for both an analog and a digital sensor in the same pressure measurement application. Similarly, improved sensor reliability is illustrated with a sample calculation for determining the probability of failure on demand, an industry standard reliability measure. This looks at equivalent analog and digital temperature sensors to draw the comparison. The results confirm substantial reliability improvement with the digital sensor, due in large part to ability to continuously monitor the health of a digital sensor such that problems can be immediately identified and corrected. This greatly reduces the likelihood of a latent failure condition of the sensor at the time of a design basis event. Notwithstanding the benefits of digital sensors, there are certain qualification issues that are inherent with digital technology and these are described in the report. One major qualification impediment for digital sensor implementation is software common cause failure (SCCF).

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2021

Thermochemical Modeling in Molten Fluoride Salts for Radionuclide Speciation

An important aspect of the licensing process for nuclear reactors is providing a reasonable assurance of safety to the general public. This includes modeling potential radionuclide releases from the reactor during normal operations and accident scenarios, which is known as the reactor’s source term. A new class of advanced (non-LWR) reactors are being developed which use molten salts as the coolant fluid. Because the molten salt coolant represents a credited barrier for radionuclide transport between the fuel and the environment, a necessary aspect of mechanistic source term (MST) analysis for the KP-FHR is modeling the thermochemistry of molten salts. Provided here is a review of the theory of the thermodynamic principles governing multicomponent phase equilibria, the background of molten salt thermochemistry research, and a summary of the thermochemical data relevant to the KP-FHR coolant salt, Li 2 BeF 4 , commonly referred to as “FLiBe”. A review of literature is followed by a brief introduction to methods that can be used to model the thermochemical behavior of molten salt mixtures. The methodology outlined is based on the use of a commercial thermodynamic modeling software called FactSage, which is one of only a few available softwares based on the modified quasichemical model(MQM), which is the recommended solution model for molten salts.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

NASA NTRS2013

Design and Development of Functionally Effective Human-Machine Interfaces for Firing Room Displays

This project involves creating software for support equipment used on the Space l aunch System (SLS). The goal is to create applications and displays that will be used to remotely operate equipment from the firing room and will continue to support the SLS launch vehicle to the extent of its program. These displays include design practices that help to convey information effectively, such as minimizing distractions at normal operating state and displaying intentional distractions during a warning or alarm state. The general practice for creating an operator display is to reduce the detail of unimportant aspects of the display and promote focus on data and dynamic information. These practices include using minimalist design, using muted tones for background colors, using a standard font at a readable text size, displaying alarms visible for Immediate attention, grouping data logically, and displaying data appropriately varying on the type of data. Users of these displays are more likely to stay focused on operating for longer periods by using design practices that reduce eye strain and fatigue. Effective operator displays will improve safety by reducing human errors during operation, which will help prevent catastrophic accidents. This report entails the details of my work on developing remote displays for the Hypergolics ground system. Before developing a prototype display, the design and requirements of the system are outlined and compiled into a document. Then each subsystem has schematic representations drawn tha.t meet the specifications detailed in the document. The schematics are then used as the outline to create display representations of each subsystem. Each display is first tested individually. Then the displays are integrated with a prototype of the master system, and they are tested in a simulated environment then retested in the real environment. Extensive testing is important to ensure the displays function reliably as intended.

Cho, Henry↗

DOE OSTI2020

Status of the Atlas of Neutron Resonances [Slides]

The Atlas of Neutron Resonances is the most comprehensive compilation of neutron resonances, thermal cross sections, resonance integrals and Maxwellian averaged cross sections generally available. For decades, the Atlas was carefully curated and maintained by Dr. Said Mughabghab who sadly passed on during the summer of 2018 after publishing the 2018 edition of the Atlas . We are continuing the development of this important compendium. To a large extent, the Atlas book is generated from a series of text files given in a single purpose domain-specific format. Therefore, we developed a software API and began the systematic assessment of the Atlas files. With this work past, we are now focusing on new efforts to expand the quality and scope of the Atlas . Current and recently completed projects include a cross comparison of the Atlas bibliography with Nuclear Science References and the EXFOR data library, a better determination of average resonance parameters, and using machine learning to assess the correctness of the spin group assignments of resonances tabulated in the Atlas .

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2024

Validating automated resonance evaluation with synthetic data

The integrity and precision of nuclear data are crucial for a broad spectrum of applications, from national security and nuclear reactor design to medical diagnostics, where the associated uncertainties can significantly impact outcomes. A substantial portion of uncertainty in nuclear data originates from the subjective biases in the evaluation process, a crucial phase in the nuclear data production pipeline. Recent advancements indicate that automation of certain routines can mitigate these biases, thereby standardizing the evaluation process and enhancing reproducibility. This research aims to provide a methodology, framework, and metrics for the validation of automated nuclear data evaluation software leveraging high-quality synthetic data that closely mimic real experimental observables. An introduced error metric provides a scale and intuitive measure of the evaluation quality by quantifying the estimate’s accuracy and performance across the specified energy range. Synthetic data provides access to experimental observables and underlying resonance parameters, enabling comparison of different evaluations. The methodology is demonstrated using Ta-181 isotope data in the resolved resonance region. The Automated Resonance Identification Subroutine (ARIS), which operates without prior resonance information, was used to test and showcase the framework’s capabilities utilizing the proposed error metrics. The results demonstrate the effectiveness of the proposed approach and framework for optimizing software parameters and testing hypotheses through “what-if” controlled experiments, such as modifying assumptions about experimental conditions or average resonance parameters.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2011

Annual Site Environmental Report: 2010 (ASER)

This report provides information about environmental programs during the calendar year of 2010 at the SLAC National Accelerator Laboratory (SLAC), Menlo Park, California. Activities that overlap the calendar year - i.e., stormwater monitoring covering the winter season of 2010/2011 (October 2010 through May 2011) are also included. SLAC is a federally-funded research and development center with Stanford University as the M&O contractor. Under Executive Order (EO) 13423, Strengthening Federal Environmental, Energy, and Transportation Management, EO 13514, Federal Leadership in Environmental, Energy, and Economic Performance, and DOE Order 450.1A, Environmental Protection Program, SLAC effectively implements and integrates the key elements of an Environmental Management System (EMS) to achieve the site's integrated safety and environmental management system goals. For normal daily activities, SLAC managers and supervisors are responsible for ensuring that policies and procedures are understood and followed so that: (1) Worker safety and health are protected; (2) The environment is protected; and (3) Compliance is ensured. Throughout 2010, SLAC continued to improve its management systems. These systems provided a structured framework for SLAC to implement 'greening of the government' initiatives such as EO 13423, EO 13514, and DOE Orders 450.1A and 430.2B. Overall, management systems at SLAC are effective, supporting compliance with all relevant statutory and regulatory requirements. During 2010, there were no reportable releases to the environment from SLAC operations. In addition, many improvements in waste minimization, recycling, stormwater management, groundwater restoration, and SLAC's chemical management system (CMS) were continued. The following are among SLAC's environmental accomplishments for 2010. To facilitate management and identification of future potential greenhouse gases (GHG) reduction opportunities, SLAC voluntarily completed GHG inventories for calendar year (CY) 2008 and CY 2009 and submitted the results to The Climate Registry. A Lead Management Plan was completed to reduce the potential of lead impacting the environment, and two large legacy tube-trailer modules, each containing 38 tubes of compressed ethane, were reused or recycled by an outside contractor, resulting in hazardous waste avoidance and cost savings of approximately $100,000 in transportation and disposal costs. SLAC continues to make progress on achieving the sustainability goals of EOs 13423 and 13514, which include, but are not limited to reductions in the use of water, energy, and fuel, building to green standards and reductions in GHG emissions. Phase I of the SLAC Advanced Metering project for electrical and natural gas systems was completed. Phase I included the design of the metering system and purchase of the enterprise software. The planning, design, and installation of an advanced water metering system for select buildings, landscape, and process systems were completed. In addition, the last major onsite chiller containing a Class I ozone-depleting substance was taken out of service, and SLAC continued to replace conventional vehicles with electric vehicles. In 2010, there were no radiological impacts to the public or the environment from SLAC operations. The potential doses to the public were negligible and far below the regulatory and SLAC administrative limits. No radiological incidents occurred that increased radiation levels to the public or released radioactivity to the environment. In addition to managing its radioactive wastes safely and responsibly, SLAC worked to reduce the amount of waste generated. SLAC shipped 2,891 cubic feet of low-level radioactive waste, half of which was legacy waste, to appropriate treatment and disposal facilities for low-level radioactive waste. SLAC also continued its efforts to reduce the inventory of materials no longer needed for its mission by permanently removing 125 sealed radioactive sources from the inventory. Ninety-seven of the sealed sources were returned to the manufacturer, and 28 were sent to Energy Solutions for processing before being sent to the Nevada Test Site for burial. In addition, 87 concrete blocks which had been stored in an area known as the Bone Yard were surveyed for potential surface contamination and volumetric activation prior to off-site release. Based on the comprehensive measurements, all 87 blocks were qualified for release and were disposed of as ordinary materials at a landfill. In 2010, the SLAC Environmental Restoration Program personnel continued work on site characterization and evaluation of remedial alternatives at four sites with volatile organic compounds in groundwater and several areas with polychlorinated biphenyls and low concentrations of lead in soil.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

NASA NTRS1990

The Jet Propulsion Laboratory shared control architecture and implementation

A hardware and software environment for shared control of telerobot task execution has been implemented. Modes of task execution range from fully teleoperated to fully autonomous as well as shared where hand controller inputs from the human operator are mixed with autonomous system inputs in real time. The objective of the shared control environment is to aid the telerobot operator during task execution by merging real-time operator control from hand controllers with autonomous control to simplify task execution for the operator. The operator is the principal command source and can assign as much autonomy for a task as desired. The shared control hardware environment consists of two PUMA 560 robots, two 6-axis force reflecting hand controllers, Universal Motor Controllers for each of the robots and hand controllers, a SUN4 computer, and VME chassis containing 68020 processors and input/output boards. The operator interface for shared control, the User Macro Interface (UMI), is a menu driven interface to design a task and assign the levels of teleoperated and autonomous control. The operator also sets up the system monitor which checks safety limits during task execution. Cartesian-space degrees of freedom for teleoperated and/or autonomous control inputs are selected within UMI as well as the weightings for the teleoperation and autonmous inputs. These are then used during task execution to determine the mix of teleoperation and autonomous inputs. Some of the autonomous control primitives available to the user are Joint-Guarded-Move, Cartesian-Guarded-Move, Move-To-Touch, Pin-Insertion/Removal, Door/Crank-Turn, Bolt-Turn, and Slide. The operator can execute a task using pure teleoperation or mix control execution from the autonomous primitives with teleoperated inputs. Presently the shared control environment supports single arm task execution. Work is presently underway to provide the shared control environment for dual arm control. Teleoperation during shared control is only Cartesian space control and no force-reflection is provided. Force-reflecting teleoperation and joint space operator inputs are planned extensions to the environment.

Backes, Paul G.↗

DOE OSTI2020

Effects of Electrical Stimulation on hiPSC-CM Responses to Classic Ion Channel Blockers

Abstract Human induced pluripotent stem cell-derived cardiomyocytes (hiPSC-CMs) hold great potential for personalized cardiac safety prediction, particularly for that of drug-induced proarrhythmia. However, hiPSC-CMs fire spontaneously and the variable beat rates of cardiomyocytes can be a confounding factor that interferes with data interpretation. Controlling beat rates with pacing may reduce batch and assay variations, enable evaluation of rate-dependent drug effects, and facilitate the comparison of results obtained from hiPSC-CMs with those from adult human cardiomyocytes. As electrical stimulation (E-pacing) of hiPSC-CMs has not been validated with high-throughput assays, herein, we compared the responses of hiPSC-CMs exposed with classic cardiac ion channel blockers under spontaneous beating and E-pacing conditions utilizing microelectrode array technology. We found that compared with spontaneously beating hiPSC-CMs, E-pacing: (1) reduced overall assay variabilities, (2) showed limited changes of field potential duration to pacemaker channel block, (3) revealed reverse rate dependence of multiple ion channel blockers on field potential duration, and (4) eliminated the effects of sodium channel block on depolarization spike amplitude and spike slope due to a software error in acquiring depolarization spike at cardiac pacing mode. Microelectrode array optogenetic pacing and current clamp recordings at various stimulation frequencies demonstrated rate-dependent block of sodium channels in hiPSC-CMs as reported in adult cardiomyocytes. In conclusion, pacing enabled more accurate rate- and concentration-dependent drug effect evaluations. Analyzing responses of hiPSC-CMs under both spontaneously beating and rate-controlled conditions may help better assess the effects of test compounds on cardiac electrophysiology and evaluate the value of the hiPSC-CM model.

Wei, Feng↗

NASA NTRSDate not supplied

Predicting GPS Fidelity in Heavily Forested Areas

There is a compelling need to advance the safety of low altitude flight in forested areas. Signal scattering by trees can interfere with GNSS signal reception and can cause navigation loss within and adjacent to woodlands. An estimate of the signal loss vs. foliage depth is needed to quantify navigational degradation by trees at low altitudes. A previous report described a method which attempts to quantify satellite signal degradation caused by foliage by comparing carrier-to-noise ratio (C/N0) to foliage depth along geometric rays cast from the receiver location to the orbital position of GNSS satellites through a 3D matrix of terrain data. A characteristic curve of attenuation vs. foliage depth was found for both L1 and L2 signals at a single forested site. The current study replicates this result at three additional sites, describes refinements to the method, and explores inherent uncertainties that arise from radiofrequency fading and from receiver limitations for weak signals. For the sites surveyed, 60% and 90% of navigational signal is lost at 10m and 20m of foliage depth, respectively. Since this technique uses low-cost hardware and readily available data collection software, it can allow aviators to estimate GNSS position fidelity in flight ranges near trees.

GPS↗

NASA NTRSDate not supplied

Predicting GPS Fidelity in Heavily Forested Areas

GPS↗

NASA NTRS2015

Java Architecture for Detect and Avoid Extensibility and Modeling

Unmanned aircraft will equip with a detect-and-avoid (DAA) system that enables them to comply with the requirement to "see and avoid" other aircraft, an important layer in the overall set of procedural, strategic and tactical separation methods designed to prevent mid-air collisions. This paper describes a capability called Java Architecture for Detect and Avoid Extensibility and Modeling (JADEM), developed to prototype and help evaluate various DAA technological requirements by providing a flexible and extensible software platform that models all major detect-and-avoid functions. Figure 1 illustrates JADEM's architecture. The surveillance module can be actual equipment on the unmanned aircraft or simulators that model the process by which sensors on-board detect other aircraft and provide track data to the traffic display. The track evaluation function evaluates each detected aircraft and decides whether to provide an alert to the pilot and its severity. Guidance is a combination of intruder track information, alerting, and avoidance/advisory algorithms behind the tools shown on the traffic display to aid the pilot in determining a maneuver to avoid a loss of well clear. All these functions are designed with a common interface and configurable implementation, which is critical in exploring DAA requirements. To date, JADEM has been utilized in three computer simulations of the National Airspace System, three pilot-in-the-loop experiments using a total of 37 professional UAS pilots, and two flight tests using NASA's Predator-B unmanned aircraft, named Ikhana. The data collected has directly informed the quantitative separation standard for "well clear", safety case, requirements development, and the operational environment for the DAA minimum operational performance standards. This work was performed by the Separation Assurance/Sense and Avoid Interoperability team under NASA's UAS Integration in the NAS project.

unmanned aircraft systems↗

DOE OSTI2013

Intelligent Software Agents: Sensor Integration and Response

Abstract In a post Macondo world the buzzwords are Integrity Management and Incident Response Management. The twin processes are not new but the opportunity to link the two is novel. Intelligent software agents can be used with sensor networks in distributed and centralized computing systems to enhance real-time monitoring of system integrity as well as manage the follow-on incident response to changing, and potentially hazardous, environmental conditions. The software components are embedded at the sensor network nodes in surveillance systems used for monitoring unusual events. When an event occurs, the software agents establish a new concept of operation at the sensing node, post the event status to a blackboard for software agents at other nodes to see , and then react quickly and efficiently to monitor the scale of the event. The technology addresses a current challenge in sensor networks that prevents a rapid and efficient response when a sensor measurement indicates that an event has occurred. By using intelligent software agents - which can be stationary or mobile, interact socially, and adapt to changing situations - the technology offers features that are particularly important when systems need to adapt to active circumstances. For example, when a release is detected, the local software agent collaborates with other agents at the node to exercise the appropriate operation, such as: targeted detection, increased detection frequency, decreased detection frequency for other non-alarming sensors, and determination of environmental conditions so that adjacent nodes can be informed that an event is occurring and when it will arrive. The software agents at the nodes can also post the data in a targeted manner, so that agents at other nodes and the command center can exercise appropriate operations to recalibrate the overall sensor network and associated intelligence systems. The paper describes the concepts and provides examples of real-world implementations including the Threat Detection and Analysis System (TDAS) at the International Port of Memphis and the Biological Warning and Incident Characterization System (BWIC) Environmental Monitoring (EM) Component. Technologies developed for these 24/7 operational systems have applications for improved real-time system integrity awareness as well as provide incident response (as needed) for production and field applications.

emergency response↗

DOE OSTI2022

Particle Swarm Optimization Algorithm for Critical Experiment Design

Nuclear criticality experiments are used to validate nuclear cross section data used by simulation software. This is typically achieved by designing a critical system with a high sensitivity to a certain material’s cross section. Once the experiment has been carried out, a high fidelity model of the system is developed into a benchmark. When this benchmark model is simulated by a transport code, some of the difference between the experimental and computational effective neutron multiplication factor can be attributed to inaccurate nuclear data. Nuclear data evaluators then can make adjustments accordingly to improve cross section data.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2023

Advanced Simulation and Computing: ASC FY24 Implementation Plan

The DOE National Nuclear Security Administration (NNSA) Stockpile Stewardship Program (SSP) is an integrated technical program for maintaining the safety, security, and reliability of the U.S. nuclear stockpile. The SSP incorporates nuclear test data, computational modeling and simulation, and experimental facilities to advance understanding of nuclear weapons. The suite of data analyzed comes from activities including previous nuclear tests, stockpile surveillance, experimental research, and development and engineering programs. This integrated national program requires the continued use of experimental facilities and the computational capabilities to support the SSP missions. These component parts, in addition to an appropriately scaled production capability, enable NNSA to support stockpile requirements. The ultimate goal of the SSP, and thus of the Advanced Simulation and Computing (ASC) program, is to ensure that the U.S. maintains a safe, secure, and effective strategic deterrent. The ASC program is a cornerstone of the SSP, providing simulation capabilities and computational resources to support the annual stockpile assessment and certification process, study advanced nuclear weapons design and manufacturing processes, analyze accident scenarios and weapons aging, and provide the tools to enable stockpile Life Extension Programs (LEPs) and the resolution of Significant Finding Investigations (SFIs). This work requires a balance of resources, including technical staff, hardware, simulation software, and computer science solutions. The ASC program focuses on increasing the predictive capabilities in a three-dimensional (3D) simulation environment while maintaining support to the SSP. The Program continues to improve its unique tools for understanding and solving progressively more difficult stockpile problems (sufficient resolution, dimensionality, and scientific details), and quantifying critical margins and uncertainties. Resolving each issue requires increasingly difficult analyses because the aging process has progressively moved the stockpile further from the original test base. While the focus remains on the U.S. nuclear weapons program, where possible, the Program also enables the use of high-performance computing (HPC) and simulation tools to address broader national security needs, such as foreign nuclear weapon assessments and nuclear counterterrorism. The 2022 Nuclear Posture Review (NPR) calls for NNSA to “deliver a modern, adaptive nuclear security enterprise based on an integrated strategy for risk management, production-based resilience, science and technology innovation, and workforce initiatives.” Furthermore, “NNSA will establish a Science and Technology Innovation Initiative to accelerate the integration of science and technology (S&T) throughout its activities.” Executing this strategy necessitates the continued emphasis on developing and sustaining high-quality scientific and engineering staff, as well as supporting computational and experimental capabilities. These components constitute the foundation of the nuclear weapons program. The continued success of the SSP and LEPs is predicated upon the ability to credibly certify the stockpile, without a return to underground nuclear tests (UGTs). Shortly after the nuclear test moratorium entered into force in 1992, the Accelerated Strategic Computing Initiative (ASCI) was established to provide an extensive simulation capability to underpin stockpile certification. While computing and simulation have always been essential to the success of the nuclear weapons program, the program goal of ASCI was to execute NNSA’s vision of using these tools in support of the stockpile stewardship mission. The ASCI program was essential to the successful demonstration of the SSP, providing critical nuclear weapons simulation and modeling capabilities. ASCI officially evolved into the ASC program in fiscal year (FY) 2005, but the mission remains essentially the same: provide the simulation and computational capabilities that underpin the ability to maintain a safe, secure, effective nuclear weapon stockpile, without returning to underground nuclear testing. The capabilities that the ASC program provides at the national laboratories play a vital role in the nuclear security enterprise and are necessary for fulfilling the stockpile stewardship and life extension requirements outlined for NNSA. The Program develops modern simulation tools that provide insights into stockpile aging issues, provide the computational and simulation tools that enable designers and analysts to certify the current stockpile and life-extended nuclear weapons, and inform the decision-making process when any modifications in nuclear warheads or the associated manufacturing processes are deemed necessary. Furthermore, ASC is enhancing the predictive simulation capabilities that are essential to evaluate weapons effects, design experiments, and ensure test readiness. The ASC program continues to improve its unique tools to solve stockpile problems— with a focus on sufficient resolution, dimensionality, and scientific detail—to enable Quantification of Margins and Uncertainties (QMU) and to resolve the increasingly difficult analyses needed for stockpile stewardship. The needs of the Stockpile Management and Production Modernization programs (formerly Directed Stockpile Work) also drive the requirements for simulation and computational resources. These requirements include planned LEPs, stockpile support activities, and mitigation efforts against the potential for technical surprise. All of the weapons within the current stockpile are in some stage of the life extension process. The simulation and computational capabilities are crucial for successful execution of these life extensions and for ensuring NNSA can certify these life-extended weapons without conducting a UGT.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS2002

Synthesizing Certified Code

Code certification is a lightweight approach to demonstrate software quality on a formal level. Its basic idea is to require producers to provide formal proofs that their code satisfies certain quality properties. These proofs serve as certificates which can be checked independently. Since code certification uses the same underlying technology as program verification, it also requires many detailed annotations (e.g., loop invariants) to make the proofs possible. However, manually adding theses annotations to the code is time-consuming and error-prone. We address this problem by combining code certification with automatic program synthesis. We propose an approach to generate simultaneously, from a high-level specification, code and all annotations required to certify generated code. Here, we describe a certification extension of AUTOBAYES, a synthesis tool which automatically generates complex data analysis programs from compact specifications. AUTOBAYES contains sufficient high-level domain knowledge to generate detailed annotations. This allows us to use a general-purpose verification condition generator to produce a set of proof obligations in first-order logic. The obligations are then discharged using the automated theorem E-SETHEO. We demonstrate our approach by certifying operator safety for a generated iterative data classification program without manual annotation of the code.

Whalen, Michael↗