Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Assurance Case”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Implementing an Objectives-Driven, Risk-Informed, and Case-Assured Approach to Safety and Mission Success at NASA

NASA is developing a “Standard for Assurance of Space Flight Safety and Mission Success” that implements an objectives-driven, risk-informed, and case-assured approach to safety and mission success (S&MS) for NASA space flight programs and projects. The standard aligns with the philosophy of risk leadership that has recently been established in NASA policy to assure acceptable levels of flight crew safety and mission success risk. It is consistent with existing NASA risk management requirements and is compatible with NASA program management and systems engineering requirements. The methodology described in the standard is presented in terms of an S&MS assurance framework that is designed to allow substantial flexibility in the specific means by which programs and projects achieve acceptable mission S&MS risk. Such flexibility is necessary to accommodate the increasingly broad range of acquisition strategies employed by NASA, including commercial transportation services, as well as to accommodate the increasingly rapid evolution of space flight-related technologies and practices. A key feature of the S&MS assurance framework is the specification of S&MS success criteria for each life-cycle review (LCR). The S&MS assurance case is structured around these criteria, the satisfaction of which indicates that the program/project is adhering to the S&MS risk posture. This enables the evolving S&MS assurance case to be used as a fundamental program/project submittal at each LCR, where its inherent structure of argument, supported by evidence, directly supports the evaluation of the program/project with respect to the S&MS success criteria, and by extension, the S&MS risk posture. As such, the S&MS assurance case is integral to program/project systems engineering, risk management, and S&MS oversight activities, and provides the principal basis for S&MS risk acceptance by the Decision Authority throughout the program/project life cycle.

42 ENGINEERING↗
DOE OSTI2022

APPLICATION OF OBJECTIVES-DRIVEN ASSURANCE CASES TO SYSTEM DEVELOPMENT IN AN EVOLVING ACQUISITION MODEL

System properties such as “safety” and “dependability” cannot, in practice, be proven, and must be argued in an “assurance case” aimed at supporting risk-acceptance decisions that have to be made by system acquirers and/or regulatory authorities. The paper is concerned with applications of the “assurance case” idea early in design and development of new systems, when (apart from dedicated testing) the only available operating experience information derives from previous (non-identical) systems. Much of the discussion is based on an evolving acquisition model at the US National Aeronautics and Space Administration; previously, most major systems were developed in-house, but some major systems will now be developed by and acquired from commercial providers. Key points discussed include the following. (1) By promoting a particular kind of focused discussion between acquirers and providers, the use of assurance cases should be particularly valuable under the new acquisition model. (2) In principle, objectives-driven (sometimes called “performance-based”) approaches to assurance of performance have significant advantages in cases where they are applicable. (3) For truly novel systems, completeness of the safety analysis is a significant issue; it is important for the assurance case to include a commitment by the provider (or applicant) to seriously pursue analysis of operating experience, so that previously unrecognized hazards can be identified and addressed. (4) Inquiries into major accidents often point to deficiencies in management oversight in all parts of the life cycle; management processes need to be addressed in the formulation and the implementation of an assurance case. Under the new acquisition model, these considerations imply a serious reconsideration of the way in which the development process is managed by both providers and acquirers.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Application of Objectives-Driven Assurance Cases to System Development in an Evolving Acquisition Model

System properties such as “safety” and “dependability” cannot, in practice, be proven, and must be argued in an “assurance case” aimed at supporting risk-acceptance decisions that have to be made by system acquirers and/or regulatory authorities. The paper is concerned with applications of the “assurance case” idea early in design and development of new systems, when (apart from dedicated testing) the only available operating experience information derives from previous (non-identical) systems. Much of the discussion is based on an evolving acquisition model at the US National Aeronautics and Space Administration; previously, most major systems were developed in-house, but some major systems will now be developed by and acquired from commercial providers. Key points discussed include the following. (1) By promoting a particular kind of focused discussion between acquirers and providers, the use of assurance cases should be particularly valuable under the new acquisition model. (2) In principle, objectives-driven (sometimes called “performance-based”) approaches to assurance of performance have significant advantages in cases where they are applicable. (3) For truly novel systems, completeness of the safety analysis is a significant issue; it is important for the assurance case to include a commitment by the provider (or applicant) to seriously pursue analysis of operating experience, so that previously unrecognized hazards can be identified and addressed. (4) Inquiries into major accidents often point to deficiencies in management oversight in all parts of the life cycle; management processes need to be addressed in the formulation and the implementation of an assurance case. Under the new acquisition model, these considerations imply a serious reconsideration of the way in which the development process is managed by both providers and acquirers.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2023

Energy Resilience for Mission Assurance: Case Study Scoping Document

The Energy Resilience for Mission Assurance (ERMA) project—a Department of Energy Grid Modernization Lab Consortium effort carried out via a partnership among five national laboratories— seeks to develop metrics to quantify how improvements to energy system resilience translate to improved Department of Defense (DoD) mission assurance (MA) during wide-scale, long-duration outages of the bulk power system. DoD missions are integral to national security and highly dependent on electric power. However, energy system planners—both civilian and military—lack a clear and quantifiable mapping between electric power system resilience and MA, leaving a gap in their ability to understand and consider national security outcomes within their planning efforts. The ERMA project seeks to fill this gap, providing stakeholders with new capabilities to understand the impact of electric power system resilience on MA during hazard scenarios.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Safety Assurance Framework for Nuclear Digital Instrumentation and Control Software

Software in digital instrumentation and control (D&C) systems poses unique challenges for the safety assurance of nuclear power plants. Through a literature survey of 21 sources, we analyzed various claims, arguments, and evidence used in safety assurance cases across industries. These were organized into a Goal Structuring Notation (GSN) safety assurance case framework to organize and visualize the various arguments for DI&C safety. We developed a classification for the levels of the framework, which can be used in other safety assurance cases to improve clarity.

46 - INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AN↗
DOE OSTI2026

Watching the Watchers with Verified Formal-Assurance Tools (Abbreviated Final Report)

The “Watching the Watchers” project studied the problem of establishing assurance cases for tools that are used to assure other things. Specifically, we were interested in understanding the tools and techniques one could apply to software to build an assurance case to evaluate their applicability, difficulty, level of assurance provided, and scalability. To do so we chose a set of use cases of relevance to LLNL and our various DOE and non-DOE partners and developed demonstrators to perform this evaluation. Our key focal point was around additive manufacturing problems and assurance gaps that we identified in the additive manufacturing workflow from start to completion. We also explored other areas related to AI, data analysis, and concurrent programming. Follow-on research is planned to take our prototypes from this project and adapt and mature them to fit LLNL mission applications.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Safety Assurance of Software and Machine Learning Development for Nuclear Instrumentation and Controls

Digital instrumentation and control (DI&C) systems monitor and control parameters in nuclear power plants. Ensuring their safety is a critical part of ensuring overall plant safety. Nuclear power plant licensing generates thousands of safety documents that could be organized more effectively using a safety assurance case (SAC). We conducted a literature survey of SACs and created a SAC framework for DI&C software using Goal Structuring Notation (GSN). This framework focuses on four software development processes: management & assurance, pre-developed software (PDS) qualification, the Software Development Life Cycle (SDLC), and the Machine Learning Development Life Cycle (MLDLC). We organized our framework using a novel level structure that can be applied to other SACs to improve their clarity. Finally, we demonstrate how our framework can be incorporated as part of a SAC for a larger reactor system.

46 - INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AN↗
DOE OSTI2025

Theorems in Service of Sound Composition, Rapid Modeling and Scalable Analysis

This project extends the state of the art in formal verification modeling with modules and automatically checkable data-sharing patterns such that component modules can retain their assurance case when composed within a larger system. For users, smaller models make reasoning easier and help to ensure they accurately reflect text specifications. For automated methods, smaller models give exponential benefits for verification algorithm execution time.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2015

SU-E-T-149: Brachytherapy Patient Specific Quality Assurance for a HDR Vaginal Cylinder Case

Purpose: Commonly Ir-192 HDR treatment planning system commissioning is only based on a single absolute measurement of source activity supplemented by tabulated parameters for multiple factors without independent verification that the planned distribution corresponds to the actual delivered dose. The purpose on this work is to present a methodology using Gafchromic film with a statistically valid calibration curve that can be used to validate clinical HDR vaginal cylinder cases by comparing the calculated plan dose distribution in a plane with the corresponding measured planar dose. Methods: A vaginal cylinder plan was created with Oncentra treatment planning system. The 3D dose matrix was exported to a Varian Eclipse work station for convenient extraction of a 2D coronal dose plane corresponding to the film position. The plan was delivered with a sheet of Gafchromic EBT3 film positioned 1mm from the catheter using an Ir-192 Nucletron HDR source. The film was then digitized with an Epson 10000 XL color scanner. Film analysis is performed with MatLab imaging toolbox. A density to dose calibration curve was created using TG43 formalism for a single dwell position exposure at over 100 points for statistical accuracy. The plan and measured film dose planes were registered using a known dwell position relative to four film marks. The plan delivered 500 cGy to points 2 cm from the sources. Results: The distance to agreement of the 500 cGy isodose between the plan and film measurement laterally was 0.5 mm but can be as much as 1.5 mm superior and inferior. The difference between the computed plan dose and film measurement was calculated per pixel. The greatest errors up to 50 cGy are near the apex. Conclusion: The methodology presented will be useful to implement more comprehensive quality assurance to verify patient-specific dose distributions.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2018

Performing Work at Sandia (FY18 Revision)

This document introduces Sandia's quality assurance program and presents case studies illustrating how members of the workforce implement quality assurance as they perform work. Managers have a responsibility to ensure that work performed meets Sandia and customer expectations for delivering quality products and services consistently and predictably. Individuals are responsible for creating workflow processes and products that conform to corporate quality requirements.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2012

Thermochimica User Manual – v1.0

A new software library called Thermochimica has been developed that determines a unique combination of phases and their compositions at thermochemical equilibrium. The development of Thermochimica in this research is aimed at direct integration in multi-physics codes and to address several concerns with using commercially available software, including: licensing entanglements associated with code distribution, access to the source code, convenient incorporation into other codes with quality assurance considerations, and computational performance. In particular, significant research efforts have been dedicated to enhance computational performance through advanced algorithm development, such as improved estimation techniques and non-linear solvers. The overall goal of this undertaking is to provide an open source computational tool to enhance the predictive capability of multiphysics codes without significantly impeding computational performance. The purpose of this document is to describe the design of Thermochimica and the basic use of the software library. A brief background to computational thermodynamics and the conditions for thermodynamic equilibrium is given in §2, details of the code development is discussed in §3, details of building and compiling Thermochimica is given in §4, specific programming details for each subroutine in the library is given in the Appendix. The open license for Thermochimica is provided with the source code. As is always the case, software quality assurance (SQA) is an extremely important subject in software development. The importance of this warrants an independent document dedicated to SQA, which has been developed in parallel to this document. The subject of thermodynamic model validation is also of extreme importance in scientific computing and must be given careful attention. To be clear, this document is concerned with the development and use of a general thermodynamic solver and the validation of any models should be included in the discussion of the development of a thermodynamic model that is specific to a particular system.

36 MATERIALS SCIENCE↗
DOE OSTI2015

Postclosure assessment modelling of a deep geologic repository for low and intermediate level radioactive waste in Ontario, Canada - 15145

In 2011, Ontario Power Generation (OPG) submitted an Environmental Impact Statement and a Preliminary Safety Report (PSR) to the federal authorities in Canada to support an application for a site preparation and construction licence for a Deep Geologic Repository (DGR) for low and intermediate level radioactive waste (L and ILW). The DGR, which is proposed to be located close to the existing Western Waste Management Facility (WWMF) at the Bruce nuclear site, would receive L and ILW arising from the operation and refurbishment of OPG's nuclear reactors; the wastes are currently stored safely at the WWMF. The PSR is supported by postclosure safety assessment modelling, including a total-systems level model implemented in the AMBER compartment modelling software that draws directly on detailed groundwater and coupled groundwater and gas modelling using the FRA3DVS-OPG and TOUGH2 codes. A full suite of calculation cases is managed within a single AMBER model, which aided efficient management of the calculation files and quality assurance. Assessment of expected/normal evolution cases results in maximum calculated effective doses to humans that are more than five orders of magnitude below associated criteria. Assessment of conservative disruptive and 'what if' scenarios results in maximum calculated doses that are higher than those for the normal evolution cases, but which, when the low likelihood of occurrence is taken into account, remain significantly below the associated risk criterion. The assessment demonstrates that deep geologic repositories can provide a safe disposal option and provides an example of evaluating the safety of projects on long time scales. It shows how results from detailed groundwater and gas codes can be incorporated into assessment-level codes such as AMBER, thereby providing a single systems model that can be used to efficiently evaluate a wide range of scenarios and associated calculation cases. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

MASTODON: An Open-Source Software for Seismic Analysis and Risk Assessment of Critical Infrastructure

Seismic analysis and risk assessment of safety-critical infrastructure like hospitals, nuclear power plants, dams, and facilities handling radioactive materials involve computationally intensive numerical models and coupled multiphysics scenarios. They are also performed in a strict regulatory environment that requires high software quality assurance standards, and in the case of safety-related nuclear facilities, a conformance to the American Society of Mechanical Engineers Nuclear Quality Assurance (NQA-1) standard. This paper introduces the open-source finite-element software, MASTODON (Multi-hazard Analysis of Stochastic Time-Domain Phenomena), which implements state-of-the-art seismic analysis and risk assessment tools in a quality-controlled environment. MASTODON is built on MOOSE (Multi-physics Object-Oriented Simulation Environment), which is a highly parallelizable, NQA-1 conforming, coupled multiphysics, finite-element framework developed at Idaho National Laboratory. MASTODON is capable of fault rupture and source-to-site wave propagation using the domain reduction method, nonlinear site response, and soil-structure interaction analysis, implicit and explicit time integration, automated stochastic simulations, and seismic probabilistic risk assessment. When coupled with other MOOSE applications, MASTODON can also solve strongly and weakly coupled multiphysics problems. This paper presents a summary of the capabilities of MASTODON and some demonstrative examples.

42 ENGINEERING↗
DOE OSTI2025

Design of MARCO, the New Solenoidal Detector Magnet for the ePIC Experiment at BNL

MARCO is the new superconducting solenoid for ePIC, the general-purpose detector capable of delivering the full scientific scope of the Electron-Ion Collider at Brookhaven National Laboratory. Here, this 3.84 m long solenoid, with a bore diameter of 2.84 m, will provide a magnetic field of 2.0 T at the center with a nominal current of 4 kA at 4.5 K, for a total stored energy of 45 MJ. Its conductor is a NbTi Rutherford in Copper Channel (RICC), specially designed to stand the high mechanical loads induced by the magnetic field. Its copper stabilizer will assure the protection in case of quench. The coils are wound into six layers inside a thin external mandrel in brass, with a triple role of mechanical reinforcement, cryogenic support for the thermosiphon circuit and quench-back propagator. With a cold mass average radial thickness of just 7 cm, the magnet fulfills all the criterions of transparency for the particles directed to the hadronic calorimeter forecast around the cryostat. In this paper, the design of MARCO is presented, with a specific focus on the magnetic and quench analysis.

Calvelli, Valerio [Commissariat a l'Energie Atomiq↗
DOE OSTI2018

Report of a Workshop on Nuclear Forces and Nonproliferation Woodrow Wilson International Center for Scholars, Washington, DC November 30, 2017

At a time which some view as the end of the post-Cold War era, geopolitics is increasingly fluid, complex and dangerous, including Russian and Chinese modernization of their nuclear and conventional forces nuclear and their increasingly aggressive foreign policies; North Korean nuclear and missile tests and provocations; Iran’s missile tests, regional ambitions and support for terrorism; Syria’s civil war and use of chemical weapons; and the growing global threat of Islamic terrorism. In this new security environment, potential adversaries are emboldened. Allies are reacting to more concrete and tangible threats. They are demanding greater assurances and, in some cases, questioning the credibility of the guarantees we offer and debating the pursuit of nuclear arms in ways we have not seen since the Treaty on the Nonproliferation of Nuclear Weapons (NPT) was created.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2022

Preliminary Thermal-Hydraulic Analysis of the UTA–2 Subcritical Linear Accelerator–Driven System

The National Nuclear Security Administration’s mission includes establishing a reliable supply of 99 Mo without highly enriched uranium. Oak Ridge National Laboratory (ORNL) supports this objective through collaborative research and development with industrial partners. Niowave Inc., a current partner, is currently designing a subcritical linear accelerator-driven system (ADS) and preparing for the US Nuclear Regulatory Commission’s licensing process. Niowave’s system has the potential to efficiently supply medical radioisotopes. The technology includes a superconducting electron accelerator and a pile of both natural and low-enriched uranium (LEU) targets. The process fissions uranium and many valuable isotopes can then be extracted from the targets. Niowave is currently iterating through conceptual and detailed design processes for several system sizes. This report discusses UTA–2, which is at the demonstration stage. UTA–2 will validate numerical modeling results with experimental measurements before progressing to the detailed design of UTA–3, the commercial-sized ADS. The thermal-hydraulic behavior of the UTA–2 core design was numerically investigated using STAR-CCM+, as described in this report. STAR-CCM+, a state-of-the-art computational fluid dynamics (CFD) software that was commercially developed by Siemens, has an extensive user base and a set of validation studies. It is also compliant with the American Society of Mechanical Engineers’ Nuclear Quality Assurance 1 standard. Three cases are investigated in this report. Case 1 quantified the temperature field within the UTA–2 assembly and water tank using only conduction as the method of thermal energy transport. This simplified approach was overly conservative and yielded wetted cladding temperatures above the coolant saturation temperature. In this case, the maximum temperature of the wetted cladding surface of the highest power rod exceeded the saturation temperature of water by 63.8°C. Because of the overly conservative approach taken in Case 1 and its negative subcooled margin, buoyancy-driven natural circulation flow physics were implemented in Case 2. Adding coolant motion significantly distributed the thermal energy of the system through convective heat transfer. This relatively small amount of convective heat transfer significantly reduced system temperatures and increased the subcooled margin from –63.8 to 61.3°C. This margin confirmed that no boiling was expected during normal operation of UTA–2 at 230 W. Case 3 had no additional physics models but considered an overpower event during which the power of each LEU and natural uranium rod was at its respective peak values. This resulted in a study with the total assembly power equal to 176% of the nominal power of 230 W considered in Cases 1 and 2. The resulting natural circulation flows were slightly enhanced. The subcooled margin decreased slightly to 46.3°C, which is still a significant margin to local boiling of the water within the tank. This margin confirmed that no boiling was expected during an abnormal operation of UTA–2 at 406 W.

07 ISOTOPE AND RADIATION SOURCES↗