Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “reference systems”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,729 records · Page 96

CHIMERA II - A real-time multiprocessing environment for sensor-based robot control

A multiprocessing environment for a wide variety of sensor-based robot system, providing the flexibility, performance, and UNIX-compatible interface needed for fast development of real-time code is addressed. The requirements imposed on the design of a programming environment for sensor-based robotic control is outlined. The details of the current hardware configuration are presented, along with the details of the CHIMERA II software. Emphasis is placed on the kernel, low-level interboard communication, user interface, extended file system, user-definable and dynamically selectable real-time schedulers, remote process synchronization, and generalized interprocess communication. A possible implementation of a hierarchical control model, the NASA/NBS standard reference model for telerobot control system is demonstrated.

Stewart, David B.↗

The Advanced Microgrid: Integration and Interoperability

This white paper focuses on "advanced microgrids," but sections do, out of necessity, reference today's commercially available systems and installations in order to clearly distinguish the differences and advances. Advanced microgrids have been identified as being a necessary part of the modern electrical grid through a two DOE microgrid workshops, the National Institute of Standards and Technology, Smart Grid Interoperability Panel and other related sources. With their grid-interconnectivity advantages, advanced microgrids will improve system energy efficiency and reliability and provide enabling technologies for grid-independence to end-user sites. One popular definition that has been evolved and is used in multiple references is that a microgrid is a group of interconnected loads and distributed-energy resources within clearly defined electrical boundaries that acts as a single controllable entity with respect to the grid. A microgrid can connect and disconnect from the grid to enable it to operate in both grid-connected or island-mode. Further, an advanced microgrid can then be loosely defined as a dynamic microgrid.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Some human factors issues in the development and evaluation of cockpit alerting and warning systems

A set of general guidelines for evaluating a newly developed cockpit alerting and warning system in terms of human factors issues are provided. Although the discussion centers around a general methodology, it is made specifically to the issues involved in alerting systems. An overall statement of the current operational problem is presented. Human factors problems with reference to existing alerting and warning systems are described. The methodology for proceeding through system development to system test is discussed. The differences between traditional human factors laboratory evaluations and those required for evaluation of complex man-machine systems under development are emphasized. Performance evaluation in the alerting and warning subsystem using a hypothetical sample system is explained.

Randle, R. J., Jr.↗

Simplified detection and correction of critical data for ill-conditioned systems

Ill-conditioned systems arising in analysis and optimization can display a high sensitivity to numerical precision for changes and errors in data input. Such data may be in the form of system parameter input or desired system response. The ill-conditioning referred to generally arises from the lack of sufficient independent data to define a complex system or the weak sensitivity of response to source input parameters. It is shown how small errors in data and assumed fixed and known parameters can lead to highly erroneous results in ill-conditioned linear algebraic equations. A simplified detection and correction of critical input data arising in the coefficient matrix and desired response (i.e., right hand side) is proposed.

Ojalvo, Irving U.↗

Cybersecurity for Distance Relay Protection

This project is a DOE follow-up effort on the CREDC workshop held on September 13, 2018 in Cambridge, MA to discuss cybersecurity of distance relays, which considered the benefits, vulnerabilities and risk mitigations for the use of communication systems in power system protection. The objectives of this project are to define the taxonomy of relay protection and associated communications; define use cases describing approaches to reduce the cyber-attack surface on those protective relays; and evaluate the loss of operational functional capability from changes to communication coverage. Mitigating controls will also be evaluated to understand if there are other approaches to reduce attack surfaces while maintaining communications or partial communications. Distance relays are used to protect transmission lines of approximately 10 to 300 miles in length, by detecting short circuits (i.e., faults) on the lines and then tripping circuit breakers in the substation. Such protection systems are a subset of the power system and they incorporate sensing, logic and communication functions. Protection system exposure to cyberattack could be drastically limited by disconnecting relays from all vulnerable communication systems, but this may adversely impact overall power system performance in the absence of cyberattack. This project began with a use case analysis of protection systems with communications, as summarized in this report. It continued with modeling, testing and evaluation in a miniature power system (MPS), located in the Western Area Power Administration (WAPA) Electric Power Training Center (EPTC). The project also incorporated feedback from two industry meetings held in February and September 2019. The suggested next steps account for and complement the work already underway with DOE/CESER funding: 1. Study the performance of LCD and PC vs. PUTT, which is less reliant on communication system performance and GPS timing references. The PUTT scheme could prove to be more resilient to cyberattack or communications-related disruption. It could also be more tolerant of message re-routing with SDN/SDR communication systems. On the other hand, it will be more vulnerable to false tripping during dynamic events or to loss of the voltage signal. The optimum choice of scheme may depend on the specific power system and risk assessment. This study could provide a new template for evaluation based on business functions. 2. Research and develop new methods to detect and monitor distributed physical attacks, possibly using drones, video sensors, thermal sensors, machine learning and other advanced techniques. This will help mitigate the impact of cyberattack on the protection system, and will also help mitigate the impact of wild fires. 3. Implement a scalable PKI for use in electric utility protection systems. This will encourage widespread adoption of secure authentication methods that are already available, but not widely used at present. This will help secure engineering access to the relays. 4. Investigate the use of SDN in combination with SDR to achieve better cybersecurity and electromagnetic security of the network, incorporating path variability. This would help secure both engineering access and peer-to-peer GOOSE messaging. 5. Perform additional testing, with operator evaluation of “red button” scenarios, PUTT vs. LCD, relay mis-operations, and other cyberattacks in the EPTC. This is an important advantage of testing in the EPTC rather than by computer simulation or even hardware-in-the-loop simulation; the EPTC is already dedicated to managing the situational awareness, operator response times and other human impacts. One of the project objectives was to settle on a common nomenclature for this problem space. We have concluded that the OSI layer model, supplemented by ANSI device numbers and other IEEE standards, is already well-accepted by the industry. The IEEE PSRC knowledge base provides a great deal of public information

24 POWER TRANSMISSION AND DISTRIBUTION↗

A near-infrared optical nanosensor for measuring aerobic respiration in microbial systems

We developed a ratiometric oxygen-sensitive nanosensor and demonstrated application in monitoring metabolic oxygen consumption in microbial samples over time. Based on a near-infrared (NIR) emitting oxygen-quenched luminophore, platinum(II) octaethylporphine ketone (PtOEPK), along with a stable dioctadecyl dicarbocyanine reference dye (DiD), this nanosensor system provides an advantageous approach for overcoming imaging issues in biological systems, such as autofluorescence and optical scattering in the visible wavelength region. The dyes are encapsulated within a polymer-based nanoparticle matrix to maintain them at a constant ratio in biological samples, precluding the need for complex synthetic approaches. With this constant ratio of the two dyes, the nanosensor response can be measured as a ratio of their two signals, accounting for nanosensor concentration artifacts in measurements. The nanosensors are reversible, which enabled us to temporally monitor systems in which dissolved oxygen concentrations both increase and decrease. These sensors were applied for the monitoring of oxygen in samples of Saccharomyces cerevisiae (brewing yeast) in a 96-well optical fluorescence plate reader format over 60 h. By mixing the nanosensors directly into the sample well with the yeast, we were able to dynamically track metabolic activity changes over time due to varying cell concentration and exposure to an antimicrobial agent. As a result, this system could be a potential platform for high-throughput screening of various species or variants of microbes with unknown metabolic rates in response to external stimuli (antimicrobials, metabolites, etc.).

59 BASIC BIOLOGICAL SCIENCES↗

SU-F-T-31: Shape and Isodose Distributions in Co60 HDR Brachytherapy for Different Utero-Vaginal Time Ratios

Purpose: To optimize the dose in bladder and rectum and show the different shapes of the isodose volumes in Co60-HDR brachytherapy, considering different utero and vaginal sources dwell ratio times (TU:TV). Methods: Besides Ir192-HDR, new Co60-HDR sources are being incorporated. We considered different TU:TV times and computed the dosis in bladder, rectum and at the reference points of the Manchester system. Also, we calculated the isodose volume and shape in each case. We used a EZAG-BEBIG Co0.A86 model with TPS HDRplus3.0.4. and LCT42-7, LCT42-2(R,L) applicators. A reference dose RA= 1.00 Gy was given to the A-right point. We considered the TU:TV dwell time ratios 1:0.25, 1:0.33, 1:0.5, 1:1, 1:2, 1:3, and 1:4. Given TU:TV, the stop time at each dwell position is fixed for each applicator. Results: Increasing TU:TV systematically results in a decreasing of the dose in bladder and rectum, e.g. 9% and 27% reduction were found in 1:0.25 with respect to 1:1, while 12% and 34% increase were found in 1:4 with respect to 1:1. Also, the isodose volume parameters height (h), width (w), thickness (t) and volume (hwt) increased from the 1:0.25 case to the 1:4 value: hwt is 25% lower and 31% higher than the 1:1 reference volume in these cases. Also w decreased for higher TU:TV and may compromise the tumoral volume coverage, decreasing 17% in the 1:0.25 case compared to the 1:1 case. The shape of the isodose volume was obtained for the different TU:TV considered. Conclusion: We obtained the shape of isodose volumes for different TU:TV values in gynecological Co60-HDR. We studied the dose reduction in bladder and rectum for different TU:TV ratios. The volume parameters and hwt are strongly dependent on this ratio. This information is useful for a quantitative check of the TPS and as a starting point towards optimization.

60 APPLIED LIFE SCIENCES↗

Remote sensing and geophysical characterization of a floodplain-hillslope system in the East River watershed, Colorado

This package is part of the Watershed Function SFA Data Collection and contains remote sensing data and geophysical measurements acquired at the Pumphouse hillslope-floodplain site, in the East River, Colorado. The remote sensing dataset includes: a) a WorldView-2 (WV-2) pan-sharpened multi-spectral remote sensing image, and b) LiDAR derived products. The WV-2 image was acquired on September 24th, 2015, and it is composed of eight spectral bands (coastal, blue, green, yellow, red, red edge, NIR1, and NIR2) with a spatial resolution of 0.5 m, covering an area of 750x750 m. The LiDAR products are a digital surface model (DSM), representing the top-of-canopy elevation, and a digital terrain model (DTM), representing the bare-ground elevation, at the spatial resolution of 0.5 m. Such data are extracted from the LiDAR point-cloud dataset acquired over the entire watershed on August 2015 (http://dx.doi.org/10.21952/WTR/1412542). The geophysical dataset is composed of the electrical resistivity tomography (ERT) data acquired along a 158.75 m long transect, spanning the hillslope topographical gradient with 1.25 m electrode spacing. The dataset also includes soil water content measured with a TDR system. The package provides also polygons of different vegetation communities, which were used as reference data for mapping plant community distributions. The spatial polygons are based on plant locations acquired during the field campaign of June-July 2017 using an RTK DGPS system. The reference dataset is composed by 11 vegetation classes, namely, deciduous forest, evergreen forest, riparian shrubland, sagebrush, shrubland, potentilla, frasera, lupine meadow, veratrum, bunchgrass meadow, and forb, as well as four non-vegetation classes, such as water-river, water-lake, man-made, bare area, and shadow. The vegetation classes are determined based on distinct spectral and/or structural signatures of dominant species. The package includes products derived by these datasets, such as: a) a plant height map, computed by subtracting the DTM from the DSM, and b) a plant community distribution map, obtained by using a data-fusion machine-learning-based framework that exploit the WV-2 image and plant height information.

54 ENVIRONMENTAL SCIENCES↗

Flight Results of the NF-15B Intelligent Flight Control System (IFCS) Aircraft with Adaptation to a Longitudinally Destabilized Plant

Adaptive flight control systems have the potential to be resilient to extreme changes in airplane behavior. Extreme changes could be a result of a system failure or of damage to the airplane. The goal for the adaptive system is to provide an increase in survivability in the event that these extreme changes occur. A direct adaptive neural-network-based flight control system was developed for the National Aeronautics and Space Administration NF-15B Intelligent Flight Control System airplane. The adaptive element was incorporated into a dynamic inversion controller with explicit reference model-following. As a test the system was subjected to an abrupt change in plant stability simulating a destabilizing failure. Flight evaluations were performed with and without neural network adaptation. The results of these flight tests are presented. Comparison with simulation predictions and analysis of the performance of the adaptation system are discussed. The performance of the adaptation system is assessed in terms of its ability to stabilize the vehicle and reestablish good onboard reference model-following. Flight evaluation with the simulated destabilizing failure and adaptation engaged showed improvement in the vehicle stability margins. The convergent properties of this initial system warrant additional improvement since continued maneuvering caused continued adaptation change. Compared to the non-adaptive system the adaptive system provided better closed-loop behavior with improved matching of the onboard reference model. A detailed discussion of the flight results is presented.

Bosworth, John T.↗

Electrochemical Membrane for Carbon Dioxide Capture and Power Generation

FuelCell Energy, Inc. (FCE), in collaboration with AECOM Corporation (formerly URS Corporation) and Pacific Northwest National Laboratory, has been developing a novel Combined Electric Power and Carbon-dioxide Separation (CEPACS) system. The CEPACS system is based on electrochemical membrane (ECM) technology derived from FCE’s carbonate fuel cell products featuring internal (methane steam) reforming and carrying the trade name of Direct FuelCell®. The unique chemistry of carbonate fuel cells offers an innovative approach for separation of CO 2 from existing fossil-fuel power plant exhaust streams (flue gases). The ECM-based CEPACS system has the potential to become a transformational CO 2 -separation technology by working as two devices in one: it separates the CO 2 from the exhaust of other plants such as an existing coal-fired plant and simultaneously produces clean electric power at high efficiency using a supplementary fuel. The development effort was carried out under the U.S. Department of Energy (DOE) cooperative agreement DE-FE0007634. The overall objective of this project was to successfully demonstrate the ability of FCE’s ECM-based CEPACS system technology to separate ≥90% of the CO 2 from a simulated Pulverized Coal (PC) power plant flue gas stream and to compress the captured CO2 to a state that can be easily transported for sequestration or beneficial use. In addition, a key objective was to show, through the technical and economic feasibility study and bench scale testing, that the ECM-based CEPACS system is an economical alternative for CO 2 capture in PC power plants, and that it meets DOE’s objective related to the incremental cost of electricity (COE) for post-combustion CO 2 capture (no more than 35% increase in COE). The project was performed in three budget periods (BP). The specific objective for BP1 was to complete the Preliminary Technical and Economic Feasibility Study. The T&EF study was based on the carbon capture system size suitable for a reference 550 MW PC power plant. The specific objectives for BP2 were to perform (flue gas) contaminant effect evaluation tests, small area membrane tests using clean simulated flue gas, design a flue gas pretreatment system for processing of the gas feed to ECM, update the Technical & Economic Feasibility Study (T&EFS) incorporating results of contaminant effect tests and small area membrane tests, and to prepare a test facility for bench scale testing. The specific objectives for BP3 were to perform bench scale testing (parametric and long-duration testing) of a 11.7 m 2 ECM-based CO 2 capture, purification and compression system, and update (as final) the Technical and Economic Feasibility Study. In addition, an Environmental Health and Safety evaluation (assessment) of the ECM technology was included. This final technical report presents the progress made under the project.

20 FOSSIL-FUELED POWER PLANTS↗

Improved Microwave Fiber-Optic Link

High power output and narrow linewidth of Nd:YAG laser and external modulator combination enable higher stability and higher dynamic range fiber-optic transmission of microwave signals over longer distances. System prototype to test concept of high fidelity transmission of received microwave signals over fiber-optic cables, without need to downconvert microwave signals for transmission. Useful in distribution of future, more stable, frequency reference signals, phased array radar systems, and aircraft landing systems using bistatic radar.

Logan, Ronald T.↗

Characterization Study of TestBed Infrastructure Performance in a Distributed Simulation Environment: Baseline Analysis

Characterization of the performance of Air Traffic Management Exploration (ATM-X) TestBed integration environment has been investigated and documented for one system configuration for progressively increasing traffic. Several statistical parameters were used to assess the performance of the TestBed distributed system such as mean, standard deviation, skewness, and kurtosis of latency, and update rate for aircraft state messages that are transmitted through the simulated system under investigation. It is necessary to assess the performance characteristics of distributed systems in terms of the indicated statistical parameters mentioned above. It is critical to verify the system performance with respect to a researcher’s required system performance. Computer host specifications are documented in terms of Central Processing Unit (CPU) clock speed and core count. Transmission Control Protocol/ Internet Protocol (TCP/IP) message protocol was used for data transmission. The system network topology also contributes to the latency and update rate variations from the one imposed by the data source. The motivation for selecting the TestBed infrastructure as the focus of this study can be attributed to the number of services and capabilities it provides that help simplify the process of preparing and conducting a simulation. These capabilities include an easy to use GUI for simulation configuration, access to TestBed library by the end-user of other simulation software components, a modular adapter paradigm that allows simple connectivity of external software to TestBed, connectivity with other simulation laboratories, and a Software Development Kit (SDK) for quicker development. Two types of traffic generators, Air Traffic Generator (ATG) and Multi Aircraft Control System (MACS) were used to generate messages that were injected into the TestBed distributed environment. Eight different air traffic scenarios with progressively increasing loads were generated for each air traffic simulator. The corresponding air traffic loads between the two simulators had an identical number of aircraft per scenario, but different flight plans. It was observed that the performance of MACS degraded for air traffic scenarios containing more than 200 aircraft (37.5 KB/s nominal throughput). However, ATG performed adequately under all tested air traffic loads up to 1200 aircraft (225. KB/s nominal throughput). The tests show that MACS exhibits better latency performance with smaller aircraft loads when compared to ATG. The tests also show that the TestBed infrastructure successfully transmits 1200 aircraft without significant degradation of its performance. From the latency trends for both MACS and ATG, it is clear that as aircraft load increases, the latency in the system increases as well as its standard deviation. Likewise, the trends for the update data rate for both MACS and ATG show that as the aircraft load increases, so does the standard deviation and mean of the update rates which can be attributed to the performance of MACS and ATG applications. The analysis of the results of this study have proven that the overall system performance is dependent on the individual performance of each system component that is connected to TestBed, which subsequently propagates into the system. All TestBed characterization tests were conducted in SimLabs at NASA Ames Research Center in November 2019. This study addresses the need for a baseline TestBed characterization, and the results will serve as a reference for more complex simulation systems.

Air Traffic Management simulations↗

Evolution and resilience of the nuclear nonproliferation regime

This paper introduces the concept of systems resilience as a new framework for thinking about the future of the nonproliferation regime. Resilience refers to the ability of a system to maintain its vital functions in the face of continuous and unpredictable change. First, I make the case that the nonproliferation regime can be viewed as a complex system. Next, I discuss key themes from the literature on systems resilience and apply them to the nonproliferation system: the difference between resilience and stability; the need for evolution to maintain function; the importance of functional diversity; and the concept of the adaptive cycle. I show that most existing nonproliferation strategies are aimed at stability rather than resilience and that the current nonproliferation system may be over-constrained by the cumulative evolution of strategies. According to the literature on systems resilience, this increases its vulnerability to collapse. I argue that the resilience of the nonproliferation system can be enhanced by increasing international participation in setting the nonproliferation agenda, developing general international response capabilities, focusing on non-coercive approaches to decreasing demand, and applying systems thinking more rigorously to nonproliferation.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Lunar lander ground support system

The design of the Lunar Lander Ground Support System (LLGSS) is examined. The basic design time line is around 2010 to 2030 and is referred to as a second generation system, as lunar bases and equipment would have been present. Present plans for lunar colonization call for a phased return of personnel and materials to the moons's surface. During settlement of lunar bases, the lunar lander is stationary in a very hostile environment and would have to be in a state of readiness for use in case of an emergency. Cargo and personnel would have to be removed from the lander and transported to a safe environment at the lunar base. An integrated system is required to perform these functions. These needs are addressed which center around the design of a lunar lander servicing system. The servicing system could perform several servicing functions to the lander in addition to cargo servicing. The following were considered: (1) reliquify hydrogen boiloff; (2) supply power; and (3) remove or add heat as necessary. The final design incorporates both original designs and existing vehicles and equipment on the surface of the moon at the time considered. The importance of commonality is foremost in the design of any lunar machinery.

Source record↗

Thermal balance testing of MSAT 2 spacecraft

The present work reports on the recently completed infrared thermal balance/thermal vacuum testing of a MSAT satellite, the first satellite to provide mobile communications service for all of continental North America. MSAT is a two spacecraft program, using a three-axis stabilized Hughes HS-601 series Bus as the vehicle for the Canadian designed Payload. The thermal tests which were performed at the Canadian Space Agency's David Florida Laboratory in Ottawa, Canada, lasted approximately 35 days. The infrared (IR) heating rig was designed to provide radiant heat inputs into seven spacecraft zones during Thermal Vacuum (TV) testing. The TV test was divided into multiple phases. It began with a thermal balance cold phase, followed by a thermal cold cycle and a hot balance phase, complemented by a thermal hot cycle to finish with a thermal cycle with continuous monitoring of the Bus and Payload. The spacecraft's external heat fluxes were provided by IR lamp sources. To ensure flux uniformity, highly reflective baffles and IR East and West faces; the Earth facing (Nadir); and the inside of the thrust cylinder. The aft-end panel heat fluxes were provided by a heated LN2 shroud. The radiation flux intensity on the spacecraft zones from the various rig elements was measured using Monitored Background Radiometers (MBR's) and compared with direct calculations and with pretest predictions. The temperature measurement system was based on Uniform Temperature References (UTR's) located inside the chamber such that all feedthroughs were copper-copper. This system was devised to achieve a temperature measurement accuracy of plus/minus 0.5 C for over 850 thermocouples used in the test. A PC-(QNX-based) based real-time data acquisition system was utilized to provide continuous monitoring of all channels based on a 30-second time scan. In addition, the data acquisition system was able to retrieve telemetry stream from the Satellite Test Equipments (STE) station for real-time data manipulation. Preliminary results showed the test to be successful from both the thermal balance side and the electrical testing side.

Samson, Serge↗

Technical Reference Suite Addressing Challenges of Providing Assurance for Fault Management Architectural Design

Research into complexities of software systems Fault Management (FM) and how architectural design decisions affect safety, preservation of assets, and maintenance of desired system functionality has coalesced into a technical reference (TR) suite that advances the provision of safety and mission assurance. The NASA Independent Verification and Validation (IVV) Program, with Software Assurance Research Program support, extracted FM architectures across the IVV portfolio to evaluate robustness, assess visibility for validation and test, and define software assurance methods applied to the architectures and designs. This investigation spanned IVV projects with seven different primary developers, a wide range of sizes and complexities, and encompassed Deep Space Robotic, Human Spaceflight, and Earth Orbiter mission FM architectures. The initiative continues with an expansion of the TR suite to include Launch Vehicles, adding the benefit of investigating differences intrinsic to model-based FM architectures and insight into complexities of FM within an Agile software development environment, in order to improve awareness of how nontraditional processes affect FM architectural design and system health management.

Fitz, Rhonda↗

Technical Reference Suite Addressing Challenges of Providing Assurance for Fault Management Architectural Design

Research into complexities of software systems Fault Management (FM) and how architectural design decisions affect safety, preservation of assets, and maintenance of desired system functionality has coalesced into a technical reference (TR) suite that advances the provision of safety and mission assurance. The NASA Independent Verification and Validation (IV&V) Program, with Software Assurance Research Program support, extracted FM architectures across the IV&V portfolio to evaluate robustness, assess visibility for validation and test, and define software assurance methods applied to the architectures and designs. This investigation spanned IV&V projects with seven different primary developers, a wide range of sizes and complexities, and encompassed Deep Space Robotic, Human Spaceflight, and Earth Orbiter mission FM architectures. The initiative continues with an expansion of the TR suite to include Launch Vehicles, adding the benefit of investigating differences intrinsic to model-based FM architectures and insight into complexities of FM within an Agile software development environment, in order to improve awareness of how nontraditional processes affect FM architectural design and system health management. The identification of particular FM architectures, visibility, and associated IV&V techniques provides a TR suite that enables greater assurance that critical software systems will adequately protect against faults and respond to adverse conditions. Additionally, the role FM has with regard to strengthened security requirements, with potential to advance overall asset protection of flight software systems, is being addressed with the development of an adverse conditions database encompassing flight software vulnerabilities. Capitalizing on the established framework, this TR suite provides assurance capability for a variety of FM architectures and varied development approaches. Research results are being disseminated across NASA, other agencies, and the software community. This paper discusses the findings and TR suite informing the FM domain in best practices for FM architectural design, visibility observations, and methods employed for IV&V and mission assurance.

Fitz, Rhonda↗