Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “PENELOPE”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

18 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS1995

Introduction to Penelope

A formal program verification is a (mathematical) proof that a program executed according to its intended model meets some specification. This proves that the algorithm defined by the program is correct in the precise technical sense of being consistent with a particular specification. A program correct in this sense is free from a large and important class of errors, even though its behavior may still produce unintended results--either because the implementation of the programming language itself does not match the model of execution, or because the specification does not correctly express the user's intentions. Penelope is a prototype system for interactively developing and verifying programs that are written in a rich subset of sequential Ada. Penelope can be used to develop a program and its correctness proof incrementally, and in concert with one another. Incrementality is used in a number of ways to help make verification more tractable and more productive. For example, if an already-verified program is modified, one can attempt to prove the modified version by replaying and modifying the original verification. Penelope's specification language, Larch/Ada, belongs to the family of Larch interface languages. Larch/Ada scales up properly, in the sense that it is demonstrably sound to decompose a system hierarchically and reason locally about the implementation of each piece. Penelope has been applied in various demonstration projects--for specification (guidance control, distributed operating systems), verification (of off-the-shelf code), and formal development (by non-expert as well as expert users). Some features of Penelope have been embodied in Ada Wise, a lint-like non-interactive tool that warns of the potential for certain dynamic semantic errors in Ada programs.

Guaspari, David↗
NASA NTRS1993

Using Penelope to assess the correctness of NASA Ada software: A demonstration of formal methods as a counterpart to testing

Life-critical applications warrant a higher level of software reliability than has yet been achieved. Since it is not certain that traditional methods alone can provide the required ultra reliability, new methods should be examined as supplements or replacements. This paper describes a mathematical counterpart to the traditional process of empirical testing. ORA's Penelope verification system is demonstrated as a tool for evaluating the correctness of Ada software. Grady Booch's Ada calendar utility package, obtained through NASA, was specified in the Larch/Ada language. Formal verification in the Penelope environment established that many of the package's subprograms met their specifications. In other subprograms, failed attempts at verification revealed several errors that had escaped detection by testing.

Eichenlaub, Carl T.↗
DOE OSTI2025

PUFFIn Software Modeling for Quality Management

PUFFIn (PENELOPE User Friendly Fast Interface) was designed as a fast and simple Monte Carlo simulation tool for the transport of photons and electrons, with a primary purpose as a learning and education tool for a broad range of static configurations in the radiation processing industry. Development of the PUFFIn software is funded by the Office of Radiological Security (ORS) within the United States National Nuclear Security Administration (NNSA). PUFFIn helps fill the education and knowledge gaps in the industry, as identified in reports by Fermilab (2017) and the IAEA (2020). PUFFIn uses the PENELOPE (NEA-2023) physics engine to perform simulations on static configurations. PUFFIn has support for multiple geometry types from simple, single material simulations to full 3D configurations created from CAD input files or images from X-Ray Tomography scans. PUFFin was designed to be easy for the novice user, it will generate the input and geometry files required by PENLOPE and will display the output plots within the PUFFIn interface. PUFFin is distributed for free but requires a free workshop so users can be adequately trained in its use. Workshops have been presented in the past at Texas A&M university, the Aerial-CRT facility in Strasbourg France and Jakarta Indonesia. PUFFIn simulations have been validated by 10 MeV ebeam experiments done at Aerial-CRT in France (Radiation Physics and Chemistry 222 (2024) 111774). Further user experimental comparisons were made at the medical product hands on workshop at Texas A&M in October 2024.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
NASA NTRS1991

Formal specification and verification of Ada software

The use of formal methods in software development achieves levels of quality assurance unobtainable by other means. The Larch approach to specification is described, and the specification of avionics software designed to implement the logic of a flight control system is given as an example. Penelope is described which is an Ada-verification environment. The Penelope user inputs mathematical definitions, Larch-style specifications and Ada code and performs machine-assisted proofs that the code obeys its specifications. As an example, the verification of a binary search function is considered. Emphasis is given to techniques assisting the reuse of a verification effort on modified code.

Hird, Geoffrey R.↗
DOE OSTI2024

Geant4 Introduction and Applications Workshop

This workshop talk overviews "Introduction to Geant4 simulation toolkit" which is consist of 1) Geant4 physics coverage, 2) Connecting to external physics engines such as Penelope and FLUKA and 3) Prospect toward heterogeneous computing with GPUs.

43 PARTICLE ACCELERATORS↗
DOE OSTI2025

EM Physics

Geant4 provides a comprehensive set of electromagnetic (EM) processes and models for electron/positron, gamma and long-lived charged particles, spanning energies from 100 eV to 100 TeV. Covering diverse energy regions often requires multiple models, which can be constructed using pre-packaged or user-defined EM physics constructors. Geant4 also supports detailed low-energy EM physics through models like Livermore, Penelope, and ICRU73, offering extensive data for elements across a wide energy range (250 eV–100 GeV). Application domains include space, medical, and radiobiology simulations. Additionally, Geant4 provides robust options for simulating complex optical photon production and transportation processes, enhancing its versatility in physics research and applications.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
NASA NTRS1990

Photometric geodesy of main-belt asteroids. III - Additional lightcurves

A total of 107 complete or partial lightcurves are presented for 59 different asteroids over the 1982-1989 period. Unusual lightcurves with unequal minima and maxima at large amplitudes are preferentially seen for M-type asteroids. Some asteroids, such as 16 Psyche and 201 Penelope, exhibit lightcurves combining large amplitude with very unequal brightness for both maxima and both minima, even at small phase angles. An M-type asteroid is believed to consist of a metal core of a differentiated parent body that has had its rocky mantle completely removed by one or more large impacts.

Weidenschilling, S. J.↗
NASA NTRS1990

Formally specifying the logic of an automatic guidance controller

The following topics are covered in viewgraph form: (1) the Penelope Project; (2) the logic of an experimental automatic guidance control system for a 737; (3) Larch/Ada specification; (4) some failures of informal description; (5) description of mode changes caused by switches; (6) intuitive description of window status (chosen vs. current); (7) design of the code; (8) and specifying the code.

Guaspari, David↗
NASA NTRS1991

Integrity and security in an Ada runtime environment

A review is provided of the Formal Methods group discussions. It was stated that integrity is not a pure mathematical dual of security. The input data is part of the integrity domain. The group provided a roadmap for research. One item of the roadmap and the final position statement are closely related to the space shuttle and space station. The group's position is to use a safe subset of Ada. Examples of safe sets include the Army Secure Operating System and the Penelope Ada verification tool. It is recommended that a conservative attitude is required when writing Ada code for life and property critical systems.

Bown, Rodney L.↗
NASA NTRS1993

Formalizing structured file services for the data storage and retrieval subsystem of the data management system for Spacestation Freedom

A brief example of the use of formal methods techniques in the specification of a software system is presented. The report is part of a larger effort targeted at defining a formal methods pilot project for NASA. One possible application domain that may be used to demonstrate the effective use of formal methods techniques within the NASA environment is presented. It is not intended to provide a tutorial on either formal methods techniques or the application being addressed. It should, however, provide an indication that the application being considered is suitable for a formal methods by showing how such a task may be started. The particular system being addressed is the Structured File Services (SFS), which is a part of the Data Storage and Retrieval Subsystem (DSAR), which in turn is part of the Data Management System (DMS) onboard Spacestation Freedom. This is a software system that is currently under development for NASA. An informal mathematical development is presented. Section 3 contains the same development using Penelope (23), an Ada specification and verification system. The complete text of the English version Software Requirements Specification (SRS) is reproduced in Appendix A.

Jamsek, Damir A.↗
DOE OSTI2025

Status and Challenges in the MQXFB Nb 3 Sn Quadrupoles for the HL-LHC

The inner triplet (or low-β) quadrupole magnets are among the components to be upgraded in LHC interaction regions for the HL-LHC project. The new quadrupole magnets, called MQXF, are based on Nb 3 Sn superconducting magnet technology, with a conductor peak field of 11.3 T. CERN is in charge of the fabrication of the MQXFB variant, the longest Nb 3 Sn accelerator magnets designed and manufactured up to now, with a magnetic length of 7.2 m. Two magnets, MQXFBP3 and MQXFB02, reached the HL-LHC project requirements. However, they still exhibited a limitation at 4.5 K with a phenomenology similar to the one observed on the first two prototypes. After improvements on the cold mass (longitudinal welding) and magnet assembly (elimination of overstress on the conductor during loading) procedures, a series of modifications were implemented in MQXFB03 at the level of the coil fabrication to address and/or reduce weaknesses in the coils. The magnet was tested and was the first to achieve performance requirements at both 1.9 K and 4.5 K, with no signs of conductor limitation at 4.5 K. MQXFB is now in the series production phase, with around 2/3 of the coils completed and half of the magnets assembled. We provide in this paper an overview of the MQXFB program, with a summary of the main recent achievements and an overall status of the fabrication.

43 PARTICLE ACCELERATORS↗
NASA NTRS1988

Absolute intensities of CO2 lines in the 3140-3410/cm spectral region

Absolute intensities for 430 transitions belonging to eleven rotation-vibration bands of (C-12)(O-16)2, (C-13)(O-16)2, and (O-16)(C-18)(O-18) in the 3140-3410/cm spectral region have been determined by analyzing spectra recorded at 0.01/cm resolution with the Fourier transform spectrometer in the McMath solar telescope complex at the National Solar Observatory on Kitt Peak. The data were recorded at room temperature and low pressures (less than 10 torr) using a natural sample of carbon dioxide. Intensities were derived using a nonlinear least-squares spectral fitting procedure, and the values obtained for each band have been analyzed to determine the vibrational band intensity and nonrigid rotor coefficients. An alternative mathematical formulation is shown in the case of bands for which the Coriolis effect is large and the Q-branch line intensities were not determinable either because they were severely blended or absent from the spectra. Comparison are made between the results obtained in this study and other published values.

Benner, D. Chris↗
NASA NTRS1988

The effects of fire on biogenic soil emissions of nitric oxide and nitrous oxide

Measurements of biogenic soil emissions of nitric oxide (NO) and nitrous oxide (N2O) before and after a controlled burn conducted in a chaparral ecosystem on June 22, 1987, showed significantly enhanced emissions of both gases after the burn. Mean NO emissions from heavily burned and wetted (to simulate rainfall) sites exceeded 40 ng N/sq m s, and increase of 2 to 3 compared to preburn wetted site measurements. N2O emissions from burned and wetted sites ranged from 9 to 22 ng N/sq m s. Preburn N2O emissions from these wetted sites were all below the detection level of the instrumentation, indicating a flux below 2 ng N/sq m s. The flux of NO exceeded the N2O flux from burned wetted sites by factors ranging from 2.7 to 3.4. These measurements, coupled with preburn and postburn measurements of ammonium and nitrate in the soil of this chaparral ecosystem and measurements of NO and N2O emissions obtained under controlled laboratory conditions, suggest that the postfire enhancement of NO and N2O emissions is due to production of these gases by nitrifying bacteria.

Levine, Joel S.↗
NASA NTRS1990

SHAPA: An interactive software tool for protocol analysis applied to aircrew communications and workload

As modern transport environments become increasingly complex, issues such as crew communication, interaction with automation, and workload management have become crucial. Much research is being focused on holistic aspects of social and cognitive behavior, such as the strategies used to handle workload, the flow of information, the scheduling of tasks, the verbal and non-verbal interactions between crew members. Traditional laboratory performance measures no longer sufficiently meet the needs of researchers addressing these issues. However observational techniques are better equipped to capture the type of data needed and to build models of the requisite level of sophistication. Presented here is SHAPA, an interactive software tool for performing both verbal and non-verbal protocol analysis. It has been developed with the idea of affording the researchers the closest possible degree of engagement with protocol data. The researcher can configure SHAPA to encode protocols using any theoretical framework or encoding vocabulary that is desired. SHAPA allows protocol analysis to be performed at any level of analysis, and it supplies a wide variety of tools for data aggregation, manipulation. The output generated by SHAPA can be used alone or in combination with other performance variables to get a rich picture of the influences on sequences of verbal or nonverbal behavior.

James, Jeffrey M.↗
NASA NTRS1989

Trace gases in the atmosphere of Mars - An indicator of microbial life

The detection of certain trace gases in the atmosphere of Mars would indicate the presence of microbial life on the surface. Candidate biogenic gases include CH4, NH3, N2O, and several reduced sulfur species. Chemical thermodynamic equilibrium and photochemical calculations preclude the presence of these gases in any measurable concentrations in the atmosphere of Mars in the absence of biogenic production. A search for these gases utilizing either high-resolution (spectral and spatial) spectroscopy from a Mars orbiter, such as the Mars Observer orbiter, and/or in situ measurements from a Mars lander or rover is proposed.

Levine, Joel S.↗
NASA NTRS1992

On the possibility of chemosynthetic ecosystems in subsurface habitats on Mars

Recent discoveries of nonphotosynthetic microbial ecosystems on earth have prompted the present reexamination of the prospects for microbial life on Mars, where well-protected subsurface niches associated with hydrothermal activity could have furnished a refuge after surface conditions became inhospitable. It is noted that extensive geological features attest to widespread ground ice-volcanism interactions. Attention is given to the possibility of anaerobic systems employing CO2 as the primary source of carbon, and liquid water furnished by melted subsurface permafrost. Gases from deep volcanic activity could effect reduction, thereby establishing a chemolithoautotrophic basis for a methanogenic or acetogenic and sulfur-based ecology microbial community.

Boston, Penelope J.↗
NASA NTRS1995

Auto-adaptive finite element meshes

Accurate capturing of discontinuities within compressible flow computations is achieved by coupling a suitable solver with an automatic adaptive mesh algorithm for unstructured triangular meshes. The mesh adaptation procedures developed rely on non-hierarchical dynamical local refinement/derefinement techniques, which hence enable structural optimization as well as geometrical optimization. The methods described are applied for a number of the ICASE test cases are particularly interesting for unsteady flow simulations.

Richter, Roland↗