Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “fault injection sampling”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Characterization of fault recovery through fault injection on FTMP

The development of fault-injection procedures and statistical analysis techniques to characterize the fault recovery of fault-tolerant systems is described. Pin-level fault-injection was conducted on a fault-tolerant microprocessor computer in order to generate data to assess the utility of current fault-injection sampling methods. The validity of common reliability-modeling assumptions concerning the statistical distribution of recovery times is investigated. A multiple comparison analysis for detecting behavior variations, and a distribution fitting for determining the best fit for the data were conducted. It is observed that the detection behavior is not homogeneous across all data sets, and that none of the factors under experimental control can account for the observed groupings of behavior. It is determined that no single distribution fits all the data sets, and that stratified random sampling and statistically robust parameter-estimation techniques are required to characterize fault detection time.

Finelli, George B.↗

SpotSDC: Revealing the Silent Data Corruption Propagation in High-Performance Computing Systems

We report the trend of rapid technology scaling is expected to make the hardware of high-performance computing (HPC) systems more susceptible to computational errors due to random bit flips. Some bit flips may cause a program to crash or have a minimal effect on the output, but others may lead to silent data corruption (SDC), i.e., undetected yet significant output errors. Classical fault injection analysis methods employ uniform sampling of random bit flips during program execution to derive a statistical resiliency profile. However, summarizing such fault injection result with sufficient detail is difficult, and understanding the behavior of the fault-corrupted program is still a challenge. In this article, we introduce SpotSDC, a visualization system to facilitate the analysis of a program's resilience to SDC. SpotSDC provides multiple perspectives at various levels of detail of the impact on the output relative to where in the source code the flipped bit occurs, which bit is flipped, and when during the execution it happens. SpotSDC also enables users to study the code protection and provide new insights to understand the behavior of a fault-injected program. Based on lessons learned, we demonstrate how what we found can improve the fault injection campaign method.

97 MATHEMATICS AND COMPUTING↗

Utah FORGE: Fault Reactivation Through Fluid Injection Induced Seismicity Laboratory Experiments

Included are results from shear reactivation experiments on laboratory faults pre-loaded close to failure and reactivated by the injection of fluid into the fault. The sample comprises a single-inclined-fracture (SIF) transecting a cylindrical sample of Westerly granite. All experiments are conducted at ambient temperature and follow a similar protocol: (i) application of confining stresses (3MPa) on the fault fully saturated with DI water, (ii) shear-mobilization through the increase of axial loading at a constant displacement rate until a post-peak steady-state condition is reached, (iii) reduction of axial loading and related shear stress to a prescribed fraction of the peak steady-state frictional strength (typically 60% to 90%, representing intermediate to high magnitudes) and (iv), fault reactivation triggered by a stepwise increase of pore pressure on the fault in 0.1 MPa increments held constant for 1-5 minutes. Mechanical data from three ISCO pumps connected to a Temco pressure vessel measure axial, confining, and fault-related parameters, including fluid pressure (kPa), fluid flow rate (mL/min), and axial displacement (mm). See included code for initial data analysis and visualization for select experiments. Resource names represent experiment numbers found in the "Read Me" file, which describes each experimental setup and parameters.

15 GEOTHERMAL ENERGY↗

Two-Phase Flow Mechanisms Controlling CO2 Intrusion into Shaly Caprock

Abstract Geologic carbon storage in deep saline aquifers has emerged as a promising technique to mitigate climate change. CO 2 is buoyant at the storage conditions and tends to float over the resident brine jeopardizing long-term containment goals. Therefore, the caprock sealing capacity is of great importance and requires detailed assessment. We perform supercritical CO 2 injection experiments on shaly caprock samples (intact caprock and fault zone) under representative subsurface conditions. We numerically simulate the experiments, satisfactorily reproducing the observed evolution trends. Simulation results highlight the dynamics of CO 2 flow through the specimens with implications to CO 2 leakage risk assessment in field practices. The large injection-induced overpressure drives CO 2 in free phase into the caprock specimens. However, the relative permeability increase following the drainage path is insufficient to provoke an effective advancement of the free-phase CO 2 . As a result, the bulk CO 2 front becomes almost immobile. This implies that the caprock sealing capacity is unlikely to be compromised by a rapid capillary breakthrough and the injected CO 2 does not penetrate deep into the caprock. In the long term, the intrinsically slow molecular diffusion appears to dominate the migration of CO 2 dissolved into brine. Nonetheless, the inherently tortuous nature of shaly caprock further holds back the diffusive flow, favoring safe underground storage of CO 2 over geological time scales.

58 GEOSCIENCES↗

Error latency measurements in symbolic architectures

Error latency, the time that elapses between the occurrence of an error and its detection, has a significant effect on reliability. In computer systems, failure rates can be elevated during a burst of system activity due to increased detection of latent errors. A hybrid monitoring environment is developed to measure the error latency distribution of errors occurring in main memory. The objective of this study is to develop a methodology for gauging the dependability of individual data categories within a real-time application. The hybrid monitoring technique is novel in that it selects and categorizes a specific subset of the available blocks of memory to monitor. The precise times of reads and writes are collected, so no actual faults need be injected. Unlike previous monitoring studies that rely on a periodic sampling approach or on statistical approximation, this new approach permits continuous monitoring of referencing activity and precise measurement of error latency.

Young, L. T.↗

Experimental analysis of computer system dependability

This paper reviews an area which has evolved over the past 15 years: experimental analysis of computer system dependability. Methodologies and advances are discussed for three basic approaches used in the area: simulated fault injection, physical fault injection, and measurement-based analysis. The three approaches are suited, respectively, to dependability evaluation in the three phases of a system's life: design phase, prototype phase, and operational phase. Before the discussion of these phases, several statistical techniques used in the area are introduced. For each phase, a classification of research methods or study topics is outlined, followed by discussion of these methods or topics as well as representative studies. The statistical techniques introduced include the estimation of parameters and confidence intervals, probability distribution characterization, and several multivariate analysis methods. Importance sampling, a statistical technique used to accelerate Monte Carlo simulation, is also introduced. The discussion of simulated fault injection covers electrical-level, logic-level, and function-level fault injection methods as well as representative simulation environments such as FOCUS and DEPEND. The discussion of physical fault injection covers hardware, software, and radiation fault injection methods as well as several software and hybrid tools including FIAT, FERARI, HYBRID, and FINE. The discussion of measurement-based analysis covers measurement and data processing techniques, basic error characterization, dependency analysis, Markov reward modeling, software-dependability, and fault diagnosis. The discussion involves several important issues studies in the area, including fault models, fast simulation techniques, workload/failure dependency, correlated failures, and software fault tolerance.

Iyer, Ravishankar, K.↗

Fault Slip and Fluid Flow: Seismic Source Analysis to Assess Role of Multiple Slip Patches in Fault Permeability

The relationship between fault reactivation, microearthquakes (MEQs), and permeability evolution during fluid injection plays a critical role in energy harvesting and waste disposal. Recent studies have demonstrated the possibility of predicting fault permeability using cumulative seismic moments of MEQs quantitatively. To understand the underlying physical processes, we conduct fault reactivation experiments using Utah FORGE granitoid and analyze acoustic emission (AE) signals generated during stepwise increases in fluid injection pressure. Frequency analysis of thousands of calibrated AE signals reveals that fault reactivation produces multiple AE source patches with millimeter-scale radii—smaller than the sample fault radius. The cumulative area of the reactivated patches covers the fault multiple times over (∼10x–50x area) for each pressure step. These findings provide mechanistic insight that measured permeability enhancement is not driven by a single large slip event, but by the sequential and interacting activation of multiple slip patches that create a continuous flow pathway.

Nurshal, M. E. M. [Pennsylvania State University, ↗

Utah FORGE: Fault Shear Reactivation Experimental Data for Fluid Injection-Rate Controls on Seismic Moment

Included are experimental data recorded from shear experiments that specifically explore the link between fluid-injection rate and seismic moment resulting from shear reactivation of laboratory faults. Raw mechanical data from three experiments are included alongside corresponding MATLAB scripts that import and plot the data, as well as use it to calculate shear and normal stress. Experiments are performed on 2.5-3 inch long granitoid cores from the Utah FORGE EGS demonstration site, containing a single inclined fracture with small-scale roughness added to the fracture surface. The raw data included here were recorded from an aluminum triaxial pressure vessel (TEMCO) configured with three independent servo-controlled pumps, with distilled water used as the working fluid. The pumps control confining pressure, upstream pore pressure, and axial pressure, with each pump connected to a LabView interface to record applied pressures, cumulative injected water volumes, and pump flow rates. The downstream outlet from the fracture is closed to allow pressurization, which is measured by an external pressure transducer. A linear variable differential transformer (LVDT) attached to the axial piston measures axial displacement, from which we calculate shear displacement along the fracture. Additionally, P-wave transducers are used to record acoustic signatures, where acoustic emission events and maximum amplitudes are compared against seismic moment and shear slip velocity. Fluid injection rates range between 0.05 mL/min, 0.25 mL/min, and 0.75 mL/min for each experiment. Along-fault pressure distributions are progressively less uniform as injection rates increase, representing a switch from steady-state to transient conditions. Triggered shear displacement is used as a proxy for seismic moment and is indexed against cumulative injection volume and rate. Each experiment is performed under constant shear stress conditions, and the sample is fully saturated with DI water. Axial and confining stresses are applied to 3 MPa through pressure-stepping in 500 kPa increments. The pore pressure is held constant at 200 kPa prior to initiating the experiment, and initial axial displacement is recorded. The axial stress is then increased to initiate shear mobilization during the loading phase (run-in) until a peak steady state is achieved. The initial shear stress is reduced to approximately 80% of the peak shear stress by decreasing the axial stress, then held constant for the duration of each experiment.

15 GEOTHERMAL ENERGY↗

Power Grid Reliability Estimation via Adaptive Importance Sampling

Electricity production currently generates approximately 25% of greenhouse gas emissions in the USA. Thus, increasing the amount of renewable energy is a key step to carbon neutrality. However, integrating a large amount of fluctuating renewable generation is a significant challenge for power grid operating and planning. Grid reliability, i.e., an ability to meet operational constraints under power fluctuations, is probably the most important of them. In this letter, we propose computationally efficient and accurate methods to estimate the probability of line overflow, i.e., reliability constraints violation, under a known distribution of renewable energy generation. To this end, we investigate an importance sampling approach, a flexible extension of Monte-Carlo methods, which adaptively changes the sampling distribution to generate more samples near the reliability boundary. The approach allows to estimate overload probability in real-time based only on a few dozens of random samples, compared to thousands required by the plain Monte-Carlo. Our study focuses on high voltage direct current power transmission grids with linear reliability constraints on power injections and line currents. Herein, we propose a novel theoretically justified physics-informed adaptive importance sampling algorithm and compare its performance to state-of-the-art methods on multiple IEEE power grid test cases.

power system faults↗

Uncovering Hazards Using a Multi-Objective Optimization to Explore the Faulty State-Space

Considering resilience when designing complex engineered systems is crucial to ensure the system is safe under unexpected hazardous scenarios. Traditional risk-based approaches, such as Failure Modes and Effects Analysis (FMEA) are useful for designing the system to mitigate hazardous scenarios that can be identified by the designer, but often require experience or prior knowledge of system failures to generate. More recently, researchers have developed simulation tools that enable the designer to model large sets of hazardous scenarios (driven by both internal faults and external factors) through simulation. While these tools enable a wider scope of fault modes to be evaluated (e.g., by injecting combined set of fault modes or injecting modes at different times), the resulting assessments (like FMEA) still require knowledge of the specific modes to be evaluated. However, failure to analyze a wide variety of fault scenarios can lead to an incomplete picture of the system resilience, especially to "surprise events'' which may be difficult for the designer to identify and predict beforehand. To overcome this challenge, previous work developed a fault sampling approach for resilience simulations which would procedurally-generate a wide variety of potential faults by systematically perturbing the health states of the system. While the resulting fault modes generated covered a much larger space hazards than would be otherwise considered (and identified many unique failure trajectories which would not have otherwise been identified), it also significantly increased the computational cost of the analysis and resulted in the simulation and analysis of a large set of essentially duplicate scenarios. Additionally, as the number of dimensions in the faulty state-space increases, the full elaboration of possible modes becomes computationally infeasible, justifying the use of a more targeted search. To resolve this limitation, this work proposes the use of a multiobjective optimization algorithm to search the health state space for potential fault modes that are both (1) hazardous and (2) unique. To solve this type of problem, this work proposes the use of a cooperative co-evolutionary algorithm. To demonstrate this approach, it will be applied to a model of an autonomous rover which uses line markings to navigate, focusing on potential hazards in the drive system which could cause the rover to crash. To determine the merit of the approach, it will further be compared with the previously-presented range elaboration approach and a random mode generation approach on the basis of computational efficiency and found modes.

Resilience↗

Some methods of estimating a coverage parameter

To demonstrate the high reliability of fault-tolerant computing systems, experimental testing can be performed by injecting faults into their hardware and observing the times needed to detect and isolate failed components and reconfigure the good components. Coverage, a parameter measuring continued system success, is the probability that recovery occurs before other, perhaps catastrophic, component failures occur. Methods of estimating coverage are given for the case of randomly selecting a subset of the pins or chips for testing. Pin-level samples of times to recovery are treated by the Type I censoring model often used in life testing.

Lee, L. D.↗

Utah FORGE: Fluid Injection Induced Shearing Experiments on Fractured Granitoid at Elevated Temperatures

This repository contains experimental data from a series of fluid injection-induced shearing tests conducted on Utah FORGE granitoid. The experiments were performed using an aluminum triaxial pressure vessel (TEMCO) apparatus at Pennsylvania State University. The primary aim was to investigate the impact of temperature on fault seismicity and to explore how different pre-stress ratios influence shearing behavior. The data includes results from experiments conducted under varying conditions of temperature, pre-stress ratios, and pore pressure increments. The rock samples used in these experiments were 60-grit granitoid with a single inclined fracture oriented at 60 degrees with respect to the horizontal cross-section. The dataset also includes measurements of normal stiffness at different temperatures and images of the experimental apparatus. The included README file details each experiential setup and outlines which data files represent which experimental conditions.

15 GEOTHERMAL ENERGY↗

Machine Learning to Identify Geologic Factors Associated with Production in Geothermal Fields: A Case-Study Using 3D Geologic Data from Brady Geothermal Field and NMFk

In this paper, we present an analysis using unsupervised machine learning (ML) to identify the key geologic factors that contribute to the geothermal production in Brady geothermal field. Brady is a hydrothermal system in northwestern Nevada that supports both electricity production and direct use of hydrothermal fluids. Transmissive fuid-fow pathways are relatively rare in the subsurface, but are critical components of hydrothermal systems like Brady and many other types of fuid-fow systems in fractured rock. Here, we analyze geologic data with ML methods to unravel the local geologic controls on these pathways. The ML method, non-negative matrix factorization with k-means clustering (NMFk), is applied to a library of 14 3D geologic characteristics hypothesized to control hydrothermal circulation in the Brady geothermal field. Our results indicate that macro-scale faults and a local step-over in the fault system preferentially occur along production wells when compared to injection wells and non-productive wells. We infer that these are the key geologic characteristics that control the through-going hydrothermal transmission pathways at Brady. Our results demonstrate: (1) the specific geologic controls on the Brady hydrothermal system and (2) the efficacy of pairing ML techniques with 3D geologic characterization to enhance the understanding of subsurface processes. This submission includes the published journal article detailing this work, the published 3D geologic map of the Brady Geothermal Area used as a basis to develop structural and geological variables that are hypothesized to control or effect permeability or connectivity, 3D well data, along which geologic data were sampled for PCA analyses, and associated metadata file. This work was done using the GeoThermalCloud framework, which is part of SmartTensors (both are linked below).

15 GEOTHERMAL ENERGY↗

Multiwell Fiber Optic Sensing Reveals Effects of CO2 Flow on Triggered Seismicity

Induced seismicity is one of the main risks for gigaton-scale geological storage of carbon dioxide (⁠CO 2 ⁠). Thus, passive seismic monitoring is often recommended as a necessary component of the monitoring systems for CO 2 storage projects, with a particular forcus on risk mitigation. We present the first field study, CO2CRC Otway Project Stage 3 (Victoria, Australia), where distributed acoustic sensing (DAS) enabled high-precision tracking of the induced seismicity triggered by a small CO 2 injection and also informed the reservoir models. In 610 days of passive seismic monitoring of the Stage 3 injection, we detected 17 microseismic events (maximum moment magnitude Mw 0.1) using five deep boreholes equipped with enhanced-sensitivity optical fiber. The DAS array has sensitivity sufficient for detection and location of induced events with M w ~ ₋2 in a monitoring borehole located up to 1500 m away. Thanks to the dense spatial sampling by the DAS, we were able to estimate the focal mechanisms for events with M w > ₋1.5; although the monitoring boreholes provided very limited angular coverage. The main cluster of the events has the same location and source mechanism as the one triggered by the previous CO 2 injection at the Otway Project site, Stage 2C. Surprizingly, the Stage 2C and Stage 3 events closely followed the actual movement of the CO 2 saturation plume front (not the pressure front), as observed using controlled-source reflection seismic images. The nature of the plume-fault interaction remains unclear, but some alteration of the fault gouge by CO 2 might be responsible for the faults’ reactivation by the pressure perturbation. Importantly, the seismogenic fault could not be identified in the seismic images and was only revealed by DAS observations, which also demonstrated the signature of fluid–rock interaction, that may control the CO 2 flow.

58 GEOSCIENCES↗

Synthetic Failure Mode Generation for Resilience Analysis and Failure Mechanism Discovery

Traditional risk-based design processes seek to mitigate operational hazards by manually identifying possible faults and corresponding mitigation strategies—a tedious process which critically relies on the designer’s limited knowledge. Resilience-based design, on the other hand, seeks to embody generic hazard-mitigating properties in the system to mitigate unknown hazards, often by modelling the system's response to potential hazardous events. This work adapts this approach to the traditional risk-based design process to synthetically generate hazardous modes, by representing them as a unique combination of internal component health-states which can then be injected and simulated in a model of the system failure dynamics. The design process may then reduce the risk of unknown internal hazards by iteratively mitigating the effects of these modes. The performance of this approach is evaluated in a model of an autonomous rover, where cluster analysis shows that elaborating the space of synthetic faults in the drive system using this approach uncovers a wider range of possible hazardous trajectories and failure consequences within each trajectory. However, this increase in hazard information comes at a high computational expense, highlighting the need for advanced, efficient methods to search and sample the hazard space.

Simulation↗

Synthetic Failure Mode Generation for Resilience Analysis and Failure Mechanism Discovery

Traditional risk-based design processes seek to mitigate operational hazards by manually identifying possible faults and corresponding mitigation strategies—a tedious process which critically relies on the designer’s limited knowledge. Resilience-based design, on the other hand, seeks to embody generic hazard-mitigating properties in the system to mitigate unknown hazards, often by modelling the system's response to potential hazardous events. This work adapts this approach to the traditional risk-based design process to synthetically generate hazardous modes, by representing them as a unique combination of internal component health-states which can then be injected and simulated in a model of the system failure dynamics. The design process may then reduce the risk of unknown internal hazards by iteratively mitigating the effects of these modes. The performance of this approach is evaluated in a model of an autonomous rover, where cluster analysis shows that elaborating the space of synthetic faults in the drive system using this approach uncovers a wider range of possible hazardous trajectories and failure consequences within each trajectory. However, this increase in hazard information comes at a high computational expense, highlighting the need for advanced, efficient methods to search and sample the hazard space.

Simulation↗

First Ever Polymer Flood Field Pilot to Enhance the Recovery of Heavy Oils on Alaska North Slope – Producer Responses and Operational Lessons Learned

The US Department of Energy and Hilcorp Alaska, LLC are jointly cosponsoring a field pilot project entitled “First Ever Field Pilot on Alaska’s North Slope to Validate the Use of Polymer Floods for Heavy Oil Enhanced Oil Recovery (EOR).” The objective of this pilot is to perform a field experiment to validate the use of an advanced polymer flooding technology to unlock the vast heavy oil resources on Alaska North Slope (ANS). Two pairs of horizontal injection and production wells have been deployed in an isolated fault block of the Schrader Bluff heavy oil reservoir at the Milne Point Field to conduct a polymer flood pilot which was designed to acquire field performance data to optimize polymer flood design in the Schrader Bluff heavy oil reservoirs on ANS. Hydrolyzed polyacrylamide (HPAM) polymer injection started on August 28, 2018 using a custom made polymer mixing and pumping unit. Polymer solution properties such as concentration, viscosity, and filter ratio, have been closely monitored and adjusted as necessary. Operational procedures have been improved to ensure adequate injectivity and polymer propagation through the formation. Oil and water production is tested frequently to monitor water cut performance, and produced water is sampled and analyzed for polymer content. Tracers were pumped pre and post polymer injection startup to compare polymer flood breakthrough timing and sweep efficiency. Polymer injectivity of the horizontal wells drilled in the Schrader Bluff NB sand is found to be sufficient to replace the reservoir production voidage although there were some declines as high viscosity polymer swept the near wellbore region. Production data show significant reduction in water cut and the oil production rate has stabilized. No polymer production has been confirmed from the two horizontal producers after 22 months of polymer injection into the two supporting horizontal injectors. Tracer data show very low sweep efficiencies with waterflood alone, whereas significant improvement has been achieved with polymer flood. Many operational lessons have been learned and improvements have been made regarding polymer mixing, pumping, and onsite quality control, particularly in a challenging Arctic environment. Adequate polymer injection rate can be achieved with diligent monitoring and quality assurance of the properties of the injected polymer solution.

Ning, Samson↗

Autonomous Ocean World Exploration: Advancement of a Virtual Testbed

The search for life (extinct or extant) and potentially habitable bodies in our solar system and beyond is one of the 12 priority science questions outlined in the National Acadamies’ 2022 decadal survey [5]. Extraterrestrial destinations containing liquid water present an opportunity to search for life as we know it, and in recent years an increasing number of such locations have been discovered within our solar system. Several Jovian moons—Europa, Ganymede, and Callisto [10]—and the Saturnian moons Enceladus [8] and Titan [9] are known or suspected to harbor massive subsurface oceans. Of these "ocean worlds", Europa is the focus of at least one planned NASA orbiter mission, Europa Clipper [4], and an early lander mission concept, the Europa Lander [2, 3]. Whereas most robotic missions to the Moon and Mars (e.g. orbiters, rovers, landers) to date have had ground controllers on Earth tightly involved in mission operations, missions to more distant worlds will require a high degree of onboard autonomy due to long communication lags and blackouts, harsh environments (radiation, cold), and more limited battery and hardware life. The past decade has seen great advances in both AI technologies and computing scalability and performance that offer promising solutions for spacecraft autonomy and motivate the software system and research programs described in this paper. The Ocean Worlds Autonomy Testbed for Exploration, Research, and Simulation (OceanWATERS) [1], which has been in development at the NASA Ames Research Center since 2018, is a virtual environment for testing lander autonomy solutions. It is built on the Robot Operating System (ROS), runs on consumer-grade Linux workstations, and was released as open source in 2020. OceanWATERS provides a physical and visual simulation of a prototypical lander in a Europa-like environment (Figure 1). The lander was modeled after requirements and specifications made in JPL’s Europa Lander Study of 2016 [3]. Simulated lander systems include stereo cameras and spotlights mounted on an antenna mast that pans and tilts, a 6 degrees of freedom (DoF) robotic arm with a force-torque sensor and two interchangeable end effectors, and a battery pack power system. The environment consists of multiple terrain models including a highly detailed model sourced from the FROST dataset [11], simulation of surrounding planetary bodies based on an ephemeris model, and lighting from the sun with associated surface illumination, reflectance, and shadows. Operations supported by OceanWATERS include panoramic and directed imaging of the environment and lander workspace, Cartesian and joint-level arm commanding, grinding of the terrain surface (e.g. digging a trench), and scooping of ground material (Figure 2) which can be discarded or collected as science samples in a receptacle that can be emptied (science operations themselves are not simulated). These operations are realized as ROS Actions and are complimented by a wide selection of telemetry that is continually produced by each lander subsystem. The power system model is driven by the open-source Generic Software Architecture for Prognostics (GSAP) [11] that predicts the battery’s remaining useful life and other characteristics. As a testbed for high-level autonomy, OceanWATERS provides an execution framework based on PLEXIL [12], an open-source plan specification language and execution engine developed largely at Ames. NASA's initial development of OceanWATERS, as well the Ocean Worlds Lander Autonomy Testbed (OWLAT) [6], a complimentary physical testbed developed at JPL, was the first step in a plan for realizing candidate onboard autonomy solutions for such planetary landers. In 2020 NASA solicited applications for its Autonomous Robotics Research for Ocean Worlds (ARROW) program, and in 2021 the similar Concepts for Ocean worlds Life Detection Technology (COLDTech) program. Collectively six research teams, based in universities and companies across the United States, were awarded grants to develop and demonstrate autonomy solutions on OceanWATERS and OWLAT. These 1–2-year projects have now finished or are nearing completion, and a wide variety of autonomy challenges in ocean world surface missions were addressed. Prototyped and demonstrated solutions have included autonomous discovery, response and adaptation to system faults and unexpected environmental events, world model synthesis through perception, plan synthesis using learned models, methods to optimize sample target selection and prioritize science data transmission, extension of PLEXIL for stochastic decision-making, and an integration of a model of JPL’s mission-ready COLDArm [7]. Technologies used in these projects include many forms of machine learning, causal reasoning, automated planning, Markov decision processes, formal methods, and other advanced techniques. A more detailed summary of the ARROW and COLDTech projects is given herein. OceanWATERS has had significant enhancements since its open-source release in 2020. Many of its new features were driven or shaped by feedback from the ARROW and COLDTech teams and requirements of their projects. In support of enabling autonomous adaptation to spacecraft faults (a specific capability solicited by both programs), a fault injection and detection framework was developed that supports a wide and growing range of fault types such as locked joints, image loss, and battery failures. The power system model was completed and integrated into the simulator, starting as a single-cell battery model and later upgraded to a multi-cell model with associated faults such as cell disconnection. Arm/terrain interaction was improved by adding a force-torque sensor and associated faults, and an analytic dig force model based on the Balovnev bucket force equations. Environment fidelity was increased by modeling terrain deformation resulting from digging and scooping; visual improvements were made in textures, lighting, and shadows. To facilitate interoperation with OWLAT, a unified command and telemetry interface between the testbeds was developed at the ROS level, along with a PLEXIL interface. The number of lander operations was greatly expanded (e.g. with Cartesian-based arm and antenna movement), and a framework was designed for users to build their own lander actions. A GUI for PLEXIL plan selection was created (Figure 3), and an expansive set of plans were added, such as those that illustrate patterns for fault handling. This paper provides a self-contained high-level description of OceanWATERS, focusing on more detailed coverage of the aforementioned enhancements. It provides a high-level summary of the projects undertaken by participants in the ARROW and COLDTech programs and how these efforts have helped shape OceanWATERS. Finally, potential future work and directions for the testbed are listed, as likely informed by the recent planetary science decadal survey [5].

K Michael Dalal↗