Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS1991

Cognitive consequences of clumsy automation on high workload, high consequence human performance

The growth of computational power has fueled attempts to automate more of the human role in complex problem solving domains, especially those where system faults have high consequences and where periods of high workload may saturate the performance capacity of human operators. Examples of these domains include flightdecks, space stations, air traffic control, nuclear power operation, ground satellite control rooms, and surgical operating rooms. Automation efforts may have unanticipated effects on human performance, particularly if they increase the workload at peak workload times or change the practitioners' strategies for coping with workload. Smooth and effective changes in automation requires detailed understanding of the congnitive tasks confronting the user: it has been called user centered automation. The introduction of a new computerized technology in a group of hospital operating rooms used for heart surgery was observed. The study revealed how automation, especially 'clumsy automation', effects practitioner work patterns and suggest that clumsy automation constrains users in specific and significant ways. Users tailor both the new system and their tasks in order to accommodate the needs of process and production. The study of this tailoring may prove a powerful tool for exposing previously hidden patterns of user data processing, integration, and decision making which may, in turn, be useful in the design of more effective human-machine systems.

Cook, Richard I.↗
NASA NTRS2001

Consequences of contamination of the spacecraft environment: immunologic consequences

Long-term space voyages pose numerous known and unknown health hazards, to the human immune system. Well-studied clinical examples of secondary immunodeficiencies created on Earth, lead one to predict that the conditions of prolonged space flight would weaken the human immune responses that normally hold infection and cancer in check. From evidence gathered from humans flown for prolonged periods in space and from human models of space flight studied on Earth it is reasonable to suspect that space travelers to the planet Mars would experience a weakening of immunity. Subtle defects of immune cell structure and function have been observed in astronauts, such as weakening of specific T-lymphocyte recall of specific antigens. Ground-based models also have demonstrated alterations of immune function, such as the elevation of neuroendocrine immune system messengers, interleukin-6, and soluble tumor necrosis factor-alpha receptor in sleep deprivation. Since severe immune compromise the clinical consequences of reactivation of latent virus infections and the development of cancer, has yet to be seen in space flight or in the Earth models, it is extremely important to begin to quantify early changes in immunity to predict the development of immune system collapse with poor clinical outcomes. This approach is designed to validate a number of surrogate markers that will predict trouble ahead. Inherent in this research is the development of countermeasures to reduce the risks of infection and cancer in the first humans going to Mars.

Non-NASA Center↗
NASA NTRSDate not supplied

Detecting And Characterizing Archetypes of Unintended Consequences in Engineered Systems

When designing engineered systems, the potential for unintended consequences of design policies or design decisions exists despite best intentions. Conditions that might cause the formation of unintended consequences are often known only in hindsight. However, since these conditions are associated with a single event, it is difficult to uncover the general patterns of conditions leading to unintended consequences. In this research, patterns of conditions associated with unintended consequences are learned from historical data and represented in the form of archetypes. While previous work using systems theoretic modeling has identified high-level archetypes, this work leverages a self-organizing map to learn archetypes of unintended consequences from human-tagged risk factors in a large data set of lessons learned from adverse events at NASA. The sixty-six identified archetypes contain patterns of conditions such as complexity and human-machine interaction associated with the formation of unintended consequences. To validate the archetypes, a sample of the archetypes is represented using system dynamics in order to illustrate that the identified archetypes are specialized versions of known high-level archetypes of unintended consequences. While the research is based upon a specific dataset, the archetypes apply to any engineered system and the pattern of leading indicators open a new path to manage unintended consequences and mitigate the magnitude of potentially adverse outcomes.

Hannah S Walsh↗
DOE OSTI2025

Consequence analyses of sabotage-induced radiological releases in high-temperature helium-cooled prismatic microreactors

Here, this study analyzes the radiological dose consequences of sabotage-induced accidents at three high-temperature helium-cooled prismatic microreactors (HTPMs) with thermal power ratings of 1, 10, and 50 MWt. Each HTPM employs uranium oxycarbide tristructural isotropic fuel enriched to 19.75 wt% high-assay low-enriched uranium. Simulations were conducted to estimate reactor core inventory at the point of fuel discharge––when the effective multiplication factor reduced to less than 1––representing peak radionuclide inventory. Postulated sabotage scenarios leading to reactor shutdown were analyzed at two intervals: immediately post-shutdown (0 h) and 3 days after shutdown using the SCALE code for radionuclide inventories and the RASCAL tool for dose consequences. Results show that although HTPMs benefit from inherent safety features and robust fuel design, radiological consequences scale with reactor power because of increased source term inventories. Smaller microreactors exhibited proportionally lower dose consequences. To support the economic and regulatory feasibility of microreactor deployment, this study emphasizes the value of a risk-informed, performance-based approach, as supported by regulations like 10 CFR Parts 100 and 53 in the United States. Microreactor developers should perform site-specific assessments of potential sabotage or low-probability, high-consequence events, especially when considering minimal on-site or full off-site emergency response.

Consequence↗
NASA NTRSDate not supplied

Extravehicular Activity on the Lunar Surface: Mapping Mitigation Risk Consequence for Crew Needing Assistance or Rescue

Extravehicular activity (EVA) on the lunar surface presents unique risks to crew with possibility for injury. Without appropriate assistance or rescue capability, inability to nominally ambulate and return to a lander, especially during early Artemis missions, could have catastrophic consequences. Mapping likelihood and consequence safety risk associated with identified injury scenarios establishes a baseline from which to assess potential mitigation solutions to ensure crew health and safety. Causes leading to the need for incapacitated crew rescue (ICR) during EVA on the lunar surface were previously identified and classified using an ICR/Acute Injury scenario spectrum. Severe scenarios are those when the affected astronaut requires either partial or full continuous assistance from the rescuer. Evaluation of these continual reliance conditions included calculating event probabilities (likelihoods) associated with an early Artemis mission and mapping them to established Exploration System Directorate (ESD) probability thresholds; safety consequences were analyzed and correlated to defined ESD personnel safety categories. These resulting likelihood and consequence values served as a baseline for assessing risk reduction of three mitigation capabilities: crew assistance (rescuer crew) only, walking assist devices, and a wheeled transport device. Of the twenty-five continual reliance conditions, ten were evaluated as “catastrophic” (Level 5, loss of life) during EVA on the lunar surface with probabilities ranging from moderate to very low during an early Artemis mission. Crew assistance only and walking assist devices showed similar potential for risk reduction, with four of the ten causes decreasing to Level 4. A wheeled transport device further increased risk reduction with six of the ten conditions decreasing to Level 4. Given the catastrophic consequence of several identified conditions, assessments should be performed to determine the feasibility of mitigation capabilities. It is currently unknown whether a rescuer astronaut could effectively provide continuous assistance to enable both crew to return safely to the lander from the standpoint of both suit geometry and human performance. Although resulting in an increase in resources, providing a wheeled transport provides the highest risk reduction potential, and walking assist devices may have prevention as well as mitigation benefits.

lunar surface↗
DOE OSTI2024

Addressing Consequence within Operational Risk (O.T. Gagnon III) 9-18-2024

Addressing Consequence within Operational Risk: Why threats and security are just not that important! When dealing with cyber or physical risk within any critical infrastructure (CI) environment, don’t concern yourself with vulnerabilities and threats, at least not at first! Also, don’t be overly fixated on “securing the systems” within the organization. The endeavor of tackling operational risk focused on consequences in any critical infrastructure environment to include the complex Aviation ecosystem is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure environment in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure environment as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space. When it comes to cyber risks, before an organization can consider vulnerabilities within and threats to its operations, it must first have a solid understanding of the consequences existing inside its infrastructure environment. Idaho National Lab’s Consequence-Driven, Cyber-Informed Engineering is offered as an example of this approach to effective and efficient cyber risk mitigation.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2026

Comparative Assessment of Radiological Consequences from Sabotage-Induced Releases in Diverse Microreactor Designs

Many microreactor design developers are planning to reduce on-site physical protection measures and emergency planning zones by relying on robust fuel and reactor designs and leveraging passive safety systems. These reductions raise the risk of sabotage at these microreactors. To evaluate these requirements, this study assessed the radiological consequences of sabotage-induced accidents at microreactors. For the assessment, five diverse designs, each producing 30 MWt, were considered. These designs included pressurized water microreactors (PWMs), sodium-cooled fast microreactors (SFMs), high-temperature helium-cooled prismatic microreactors (HTPMs), heat pipe–cooled microreactors (HPMs), and molten salt–cooled microreactors (MSMs). For each design, two postulated sabotage-induced accidents were defined along with the associated release percentages of fission products. Additionally, consequences from the release of activation products were assessed. With regard to evaluating physical protection and emergency planning requirements, the consequences of sabotage-induced accidents for each design type were found to be comparable. The differences were primarily because of the distinct fuel forms (and associated release mechanisms), burnup, and neutron spectra of the different microreactor types. Future effort will further investigate the release percentages of fission products to perform accurate dose consequence assessment.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2011

Consequence and Resilience Modeling for Chemical Supply Chains

The U.S. chemical sector produces more than 70,000 chemicals that are essential material inputs to critical infrastructure systems, such as the energy, public health, and food and agriculture sectors. Disruptions to the chemical sector can potentially cascade to other dependent sectors, resulting in serious national consequences. To address this concern, the U.S. Department of Homeland Security (DHS) tasked Sandia National Laboratories to develop a predictive consequence modeling and simulation capability for global chemical supply chains. This paper describes that capability , which includes a dynamic supply chain simulation platform called N_ABLE(tm). The paper also presents results from a case study that simulates the consequences of a Gulf Coast hurricane on selected segments of the U.S. chemical sector. The case study identified consequences that include impacted chemical facilities, cascading impacts to other parts of the chemical sector. and estimates of the lengths of chemical shortages and recovery . Overall. these simulation results can DHS prepare for and respond to actual disruptions.

Stamber, Kevin L.↗
DOE OSTI2025

Consequence analyses of sabotage-induced radiological releases in sodium-cooled fast microreactors

Analysis of three sodium-cooled fast microreactors (SFMs) with thermal powers of 10, 30, and 50 MWt showed that smaller reactors result in lower radiological consequences during a postulated sabotage-induced event because of their reduced core inventory. All SFMs used U-10Zr metal fuel enriched to 15 wt% high-assay low-enriched uranium and operated until their respective effective multiplication factor (k eff ) reduced to less than 1 or until the end of their operational lifespan. Sabotage scenarios were simulated at this point, when the fuel inventory within the core contains the highest-level of radioactivity. Radionuclide core inventories were calculated using the SCALE code at shutdown and 3 days post-shutdown. Dose consequence analyses were performed for three sabotage scenarios using the RASCAL tool. As microreactor developers plan for minimal on-site or complete off-site emergency response, it remains essential to evaluate their physical protection needs and potential hazards, including assessing postulated sabotage-induced events that could become more relevant. SFM licensees should identify a credible worst-case, major accident, estimate release source terms, and perform dose consequence analyses to evaluate site-specific physical protection measures. In conclusion, this recommendation supports a risk-informed, performance-based approach, aligning with applicable regulatory requirements, i.e., 10 CFR Parts 100 and 53 rulemaking in the United States.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
NASA NTRS2019

Assessment and Validation of Collision "Consequence" Method of Assessing Orbital Regime Risk Posed by Potential Satellite Conjunctions

Collision risk management theory requires a thorough assessment of both the likelihood and consequence of potential collision events. Satellite conjunction risk assessment has produced a highly-developed theory for assessing the likelihood of collision but neglects to account for the consequences of a given collision. While any collision may compromise the operational survival of a spacecraft, the amount of debris produced by the potential collision, and therefore the degree to which the orbital corridor may be compromised, can vary greatly among satellite conjunctions. Previous studies leveraged work on satellite collision modeling to develop a method to estimate whether a particular collision is likely to produce a relatively large or relatively small amount of resultant debris. The approximation of the number of debris pieces is dependent on a mass estimation process for the secondary objects utilizing the radar cross section of said object. This study examines the validity of the mass estimation process and establishes uncertainty bounds on the secondary object mass, which will be used to best approximate the possible consequences of a potential collision. This process is then applied to a large set of historical conjunctions to assess the frequency at which possible collisions may significantly augment the orbital debris environment in operational spacecraft.

Collision Consequence↗
NASA NTRS2023

Extravehicular Activity on the Lunar Surface: Mapping Mitigation Risk Consequence for Crew Needing Assistance or Rescue

The lunar environment offers unique challenges for human health and safety over the course of performing Extravehicular Activities (EVAs) during early Artemis missions. Driver medical conditions leading to an injured EVA crewmember needing assistance or rescue were analyzed and correlated to established, defined consequence categories. Catastrophic Drivers were identified, and three mitigation strategies were analyzed to determine if there was a potential change in consequence with their application. Risk consequence across the mitigations were compared with each other and the original risk without mitigations. Mitigations were further evaluated in a broader context with prospective preventions to understand the design and risk trade space associated with an early Artemis EVA.

Risk↗
NASA NTRS2023

Extravehicular Activity on the Lunar Surface: Mapping Mitigation Risk Consequence for Crew Needing Assistance or Rescue

The lunar environment offers unique challenges for human health and safety over the course of performing Extravehicular Activities (EVAs) during early Artemis missions. Driver medical conditions leading to an injured EVA crewmember needing assistance or rescue were analyzed and correlated to established, defined consequence categories. Catastrophic Drivers were identified, and three mitigation strategies were analyzed to determine if there was a potential change in consequence with their application. Risk consequence across the mitigations were compared with each other and the original risk without mitigations. Mitigations were further evaluated in a broader context with prospective preventions to understand the design and risk trade space associated with an early Artemis EVA.

Risk↗
DOE OSTI2025

Utility-Scale Operational Consequences for Solar Grid Services

This report delves into the critical aspects of grid services provided by solar inverter-based resources (IBRs), with an emphasis on the evolving landscape of microgrids, virtual power plants (VPPs), aggregators, and distributed energy resource management systems (DERMS). As the energy sector undergoes a transformative shift towards more decentralized and resilient grid architectures, understanding the multifaceted risks associated with these technologies becomes paramount. The report categorizes these risks into organizational, technical, and procedural domains, providing a thorough risk assessment framework that stakeholders can utilize to anticipate and mitigate potential issues. In addressing the increasing complexity of grid interconnections, the report highlights the importance of Cyber-Informed Engineering (CIE). By embedding engineering controls and cybersecurity measures into the early stages of system design, this approach aims to fortify grid infrastructure against emerging cyber threats. The analysis includes an exploration of best practices and strategies for integrating CIE principles to enhance grid security and resilience. To provide practical insights, the report conducts a detailed consequence analysis of various grid services and cyber mitigations that can be applied through the interconnection process. This analysis evaluates the potential impacts of different failure modes and vulnerabilities, offering a clear understanding of the consequences that could arise from disruptions within the energy grid. The findings are further enriched by a series of case studies that illustrate real-world scenarios and lessons learned from past incidents. Through this comprehensive examination of grid services and their criticality, the report aims to prepare industry professionals with the knowledge and tools necessary to navigate the complexities of modern energy systems. By providing a comprehensive approach that includes risk assessment, cybersecurity, and consequence analysis, solar stakeholders can more effectively guarantee the reliability, efficiency, and security of the energy grid.

14 SOLAR ENERGY↗
DOE OSTI2026

Integrated Security-Safety Consequence Study of a Heat Pipe Reactor

This report presents a preliminary demonstration of integrated security/safety consequence modeling to support potential physical security exemption justifications under the new Title 10 Code of Federal Regulations Part 53 licensing pathway, which allows exemptions if sabotage-induced radiological consequences do not exceed 25 rem at the site boundary two hours after release without mitigative actions. A hypothetical heat pipe microreactor subjected to direct sabotage by a 150 lbs. TNT-equivalent high-explosive device was analyzed using a simplified radionuclide release estimate based on DOE-HDBK-3010-94, implemented in the MELCOR severe accident analysis code to model release transport and attenuation through reactor/building compartments, with MELCOR outputs coupled to MACCS to compute offsite doses and the distance-to-threshold metric D 25rem . Six scenarios were evaluated to examine sensitivities to release pathway/building configuration and radionuclide form (vapor versus aerosols with different size distributions). Results show a positive correlation between leak path factor and D 25rem and indicate that reactor building compartmentalization can substantially reduce consequences (a single-story configuration reduced D 25rem by roughly an order of magnitude relative to a cavity-only configuration), while vapor versus aerosol assumptions had limited impact for the modeled two-story case on the spatial grid used.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2017

Consideration of Collision "Consequence" in Satellite Conjunction Assessment and Risk Analysis

Classic risk management theory requires the assessment of both likelihood and consequence of deleterious events. Satellite conjunction risk assessment has produced a highly-developed theory for assessing collision likelihood but holds a completely static solution for collision consequence, treating all potential collisions as essentially equally worrisome. This may be true for the survival of the protected asset, but the amount of debris produced by the potential collision, and therefore the degree to which the orbital corridor may be compromised, can vary greatly among satellite conjunctions. This study leverages present work on satellite collision modeling to develop a method by which it can be estimated, to a particular confidence level, whether a particular collision is likely to produce a relatively large or relatively small amount of resultant debris and how this datum might alter conjunction remediation decisions. The more general question of orbital corridor protection is also addressed, and a preliminary framework presented by which both collision likelihood and consequence can be jointly considered in the risk assessment process.

Hejduk, M.↗
NASA NTRS2016

State of the Carbon Cycle - Consequences of Rising Atmospheric CO2

The rise of atmospheric CO2, largely attributable to human activity through fossil fuel emissions and land-use change, has been dampened by carbon uptake by the ocean and terrestrial biosphere. We outline the consequences of this carbon uptake as direct and indirect effects on terrestrial and oceanic systems and processes for different regions of North America and the globe. We assess the capacity of these systems to continue to act as carbon sinks. Rising CO2 has decreased seawater pH; this process of ocean acidification has impacted some marine species and altered fundamental ecosystem processes with further effects likely. In terrestrial ecosystems, increased atmospheric CO2 causes enhanced photosynthesis, net primary production, and increased water-use efficiency. Rising CO2 may change vegetation composition and carbon storage, and widespread increases in water use efficiency likely influence terrestrial hydrology and biogeochemical cycling. Consequences for human populations include changes to ecosystem services including cultural activities surrounding land use, agricultural or harvesting practices. Commercial fish stocks have been impacted and crop production yields have been changed as a result of rising CO2. Ocean and terrestrial effects are contingent on, and feedback to, global climate change. Warming and modified precipitation regimes impact a variety of ecosystem processes, and the combination of climate change and rising CO2 contributes considerable uncertainty to forecasting carbon sink capacity in the ocean and on land. Disturbance regime (fire and insects) are modified with increased temperatures. Fire frequency and intensity increase, and insect lifecycles are disrupted as temperatures move out of historical norms. Changes in disturbance patterns modulate the effects of rising CO2 depending on ecosystem type, disturbance frequency, and magnitude of events. We discuss management strategies designed to limit the rise of atmospheric CO2 and reduce uncertainty in forecasts of decadal and centennial feedbacks of rising atmospheric CO2 on carbon storage.

Carbon Cycle↗