Design Verification

DOE-STD-6003-96

d. the provision for multiple means (inherent, passive, or active) for ensuring the public

safety functions for fusion facilities;

e. the use of basic design features, equipment, operating and administrative procedures

to prevent off-normal events and to control and mitigate off-normal events should they

occur;

f. the implementation of a rigorous and formalized QA program during the design, con-

struction, and operation phases on safety-class SSCs; it may be of benefit to apply

the QA program consistently to the entire fusion island or facility for investment pro-

tection and assurance of completing the programmatic mission;

g. use of emergency plans as required to mitigate the effects of radioactive and/or toxic

releases to the workers and the public;

h. additional levels of defense may be needed to compensate for technological

uncertainties.

A graded approach should be used in the implementation of the defense-in-depth concept

for fusion facilities depending on the level of hazard in the facility and the risk to on-site person-

nel and the public.

6.1.3.3 Design Verification

As stated in DOE-STD-6002-96, the applicability of the design methods shall be verified

and the methods validated. Computer codes or other computational methods supporting the

design of safety-class SSCs should have validation and verification (IEEE 1984) for the range of

normal operations and off-normal events, including design-basis events. This validation and

verification should support the use of the computational method in each intended application.

Furthermore, an equipment qualification procedure should be established for safety-class items

to confirm that the equipment is capable of meeting the public safety function for the facility

while subject to the environmental conditions (e.g., vibration, temperature, pressure, jet impinge-

ment, radiation, humidity, chemical attack, magnetic fields) existing at the time of need.

Experimental data used in the design process or in the safety analysis should undergo formal

certification. This general area is also discussed in Chapter 4 of this document.

6.1.3.4 Codes and Design Standards

Where appropriate, safety-class SSCs should be designed in accordance with recognized

industry standards such as the American Society of Mechanical Engineers (ASME) Boiler and

Pressure Vessel Code (ASME 1992) for mechanical or structural systems. The applicable code

and/or design standard should be identified for each safety-class SSC and its use justified by

the fusion facility project manager prior to initiating the detailed design phase of a project. If

different codes and standards are used for different aspects of the same part of a safety-class

SSC, the consistency among them, insofar as safety is affected, should be demonstrated. Areas

addressable by codes and standards may include but are not limited to the following: