Passive Safety by Physics
Kronos safety leans first on inherent physical behavior, then on passive systems, and only last on active controls.
Safety engineers distinguish three tiers. Inherent safety means the hazard is absent or self-limiting by the laws of physics. Passive safety means protective functions work without power, signals, or operator action — by gravity, conduction, or natural circulation. Active safety needs powered systems and correct response. The strongest designs put the heaviest reliance on the first tier.
How Kronos maps onto the tiers
- Inherent: no chain reaction, self-limiting burn, grams of fuel — the reaction ends by itself on any upset.
- Passive: decay heat removed by conduction and radiation to structure; magnet energy dumped to resistors on a quench; confinement barriers that need no power to contain.
- Active: plasma control, tritium processing, and monitoring — important for operation, but not required to reach a safe state.
The design intent is that the safe end-state is reached even if active systems do nothing. Active systems make the plant productive and keep the plasma burning; they are not the thing standing between normal operation and a large release. That is the opposite of a design where a safety system must fire correctly to avert disaster.
Why this matters for licensing
When the safe state follows from physics and passive means, the required set of safety-grade active systems shrinks, and the consequences of their failure are bounded. This is the foundation for the right-sized emergency preparedness and the byproduct-material licensing case.
Passive safety is not a marketing posture here; it is a description of where the protection actually comes from.