Engineered safety features, environmental qualification and seismic qualification records
Commissioning software for nuclear safety systems where equipment qualification has to be proven for every safety-classified component, not assumed from a similar component down the hall.
Engineered safety features — emergency core cooling, containment isolation, emergency diesel generators, safety-related HVAC — depend on equipment qualified to survive the environment it is required to operate in during an accident, and that qualification basis has to be traceable component by component, not inferred by similarity. Deskely holds the qualification basis, the component test record and the safety function verification in one register, so a safety system's commissioning record is defensible against the harshest independent review.
- Assets
- ECCS, containment isolation, EDGs, safety HVAC
- Test
- Safety function test, EQ verification, seismic qualification
- Basis
- Design basis accident environmental envelope
- Gate
- Operational readiness of safety systems
Choose your project type
The problem
A safety system's qualification basis is component-specific, and 'it looks like the one we qualified last time' is not evidence.
Every component in an engineered safety feature — valves, cables, instruments, motors — is qualified to a specific environmental and seismic envelope defined by the design basis accident it has to survive, with qualification evidence often generated by a different vendor at a different time than the component's site installation.
When qualification certificates sit in a vendor archive disconnected from the component's site commissioning record, an independent reviewer cannot quickly confirm that the specific component actually installed carries the qualification claimed for it, rather than a similar but unqualified substitute.
Deskely links the qualification certificate directly to the installed component's tag, including its manufacturer, model and lot or serial number, so equipment qualification traceability is a query rather than a warehouse search.
Setting up the register
Safety systems and their qualification basis are tagged assets linking design basis, component and certificate.
Design basis accident environmental envelopes — temperature, pressure, radiation, humidity, seismic response spectra — are parsed into the register against the systems and components they apply to, establishing what each component actually has to prove before it is installed.
Qualification certificates, type test reports and analysis reports are attached directly to the component tag, capturing manufacturer, model and lot or serial number so the specific installed unit can be matched against the qualification evidence rather than a generic part number.
Safety function test templates are defined once per system type — such as ECCS injection, containment isolation closure or emergency diesel generator start and load acceptance — and instantiated across every train and division, so redundant trains are tested with identical rigour.
Execution
Safety function testing and qualification verification are proven train by train, division by division.
Safety function tests demonstrate each system performs its accident-mitigation function within the required response time, with results captured per train so a difference in performance between redundant trains is visible immediately rather than averaged away.
Equipment qualification verification confirms the as-installed component matches its qualified configuration — correct cable type, correct connector, correct mounting orientation — because a qualified component installed incorrectly no longer carries its qualification basis.
Emergency diesel generator testing includes start reliability, load acceptance and endurance run records captured per unit, with any degraded start time trended against the qualification and technical specification limits rather than reviewed in isolation.
Operational readiness of safety systems
Safety systems enter service from a defensible qualification record, not a filing cabinet of vendor certificates nobody has cross-checked against what was actually installed.
The operational readiness review draws on linked qualification certificates, as-installed verification and safety function test results for every train, giving the licensee's independent safety review committee a complete, traceable evidence package.
The qualification record transfers to the plant's maintenance and surveillance programme at the tag level, so future replacement-in-kind decisions can confirm continued qualification without re-researching the original basis from scratch.
Every qualification verification and safety function test carries a name, role and timestamp, which is the traceability an equipment qualification audit and a regulator's safety system inspection are both specifically designed to test.
The gap between a qualified part number and a qualified installation
A qualification certificate proves what was tested in a lab, not that the specific cable, connector and mounting bracket on-site were actually installed the way the qualification assumed.
Environmental and seismic qualification testing is performed on a representative sample under controlled laboratory conditions, and the qualification only transfers to the as-installed component if the field installation matches the qualified configuration exactly — the same cable type, the same connector, the same conduit seal, the same mounting orientation — because a qualified cable run installed with the wrong connector or an unqualified splice no longer carries the qualification the lab test established.
This is the single most common finding in an equipment qualification audit: not a missing certificate, but a certificate that does not match the field installation it is supposed to cover, discovered only when an inspector walks down the actual component and compares it against the qualification report's stated configuration.
Deskely requires an as-installed verification checklist against the specific qualification report's stated configuration before a component's EQ status is marked complete, so the walkdown an inspector would otherwise perform during an audit has already happened during commissioning, with the discrepancy caught and dispositioned rather than discovered years later.
The qualification evidence set
Six record types close the gap between a qualified part number on a shelf and a qualified installation in the plant.
Engineered safety features are only as qualified as their weakest installed record, and a part number's environmental or seismic qualification means nothing if the as-installed configuration does not match the qualified envelope. These records are what proves it does.
Equipment qualification (EQ) dossier entry
That a specific installed component matches the make, model and configuration covered by its environmental qualification test report, not just a similar part number.
Compiled at installation and reviewed before operational readiness.
Seismic qualification verification record
That an engineered safety feature component's anchorage, bracing and orientation as installed matches the configuration its seismic qualification analysis or test covers.
Checked during installation walkdown, before functional test.
Environmental qualification profile match record
That the installed location's temperature, humidity, pressure and radiation profile falls within the envelope the component's EQ basis was established for.
Confirmed as part of installation acceptance.
Engineered safety feature functional test record
That a safety system actuates correctly on its design-basis signal within its required response time, tested end to end from initiating signal to final actuated device.
Executed before the system is declared operationally ready.
Qualified life tracking record
That a component with a finite qualified life is tracked against its installation date, so replacement is scheduled before qualified life expires rather than discovered after.
Established at installation, reviewed on an ongoing basis.
Operational readiness certificate for a safety system
That EQ, seismic qualification and functional test evidence for every component in a safety system are complete and consistent before the system is relied upon.
Issued before the safety system supports plant operation.
How it runs
From qualification basis to operational readiness.
Safety system programmes reward linking the qualification certificate to the as-installed component from day one, because an EQ audit finds exactly the gap a disconnected record creates.
- 01
Map the qualification basis
Design basis accident environmental and seismic envelopes parsed into the register against affected systems and components.
- 02
Link certificates to installed components
Qualification certificates attached to the specific component tag, matched by manufacturer, model and serial number.
- 03
Template safety function tests
Test sequences defined once per system type, instantiated identically across every redundant train and division.
- 04
Gate readiness on linked evidence
Operational readiness reported from linked qualification, as-installed verification and safety function test records.
FAQ
Questions about Safety systems and qualification scopes.
Keep reading
Nuclear commissioning
The full sector view: safety classification, ITP hold points, QA records and the terminology behind them.
Read moreMaster data
Component and system registers aligned to the plant's configuration baseline instead of scattered vendor binders.
Read moreITR records
Test and inspection records defined once per component type and instantiated across every safety-classified system.
Read moreOther nuclear project types: New-build reactor commissioning, Small modular reactor (SMR) commissioning, Nuclear plant life extension commissioning, Nuclear outage and refuelling commissioning, Nuclear decommissioning and waste management commissioning, Nuclear fuel handling and storage commissioning, Nuclear balance-of-plant commissioning, Nuclear instrumentation and control (I&C) upgrade commissioning, Research reactor and fusion facility commissioning.
