Abstract

The OECD/NEA PSB-VVER project provided unique and useful experimental data for code validation from PSB-VVER test facility. This facility represents the scaled-down layout of the Russian-designed pressurized water reactor, namely, VVER-1000. Five experiments were executed, dealing with loss of coolant scenarios (small, intermediate, and large break loss of coolant accidents), a primary-to-secondary leak, and a parametric study (natural circulation test) aimed at characterizing the VVER system at reduced mass inventory conditions. The comparative analysis, presented in the paper, regards the large break loss of coolant accident experiment. Four participants from three different institutions were involved in the benchmark and applied their own models and set up for four different thermal-hydraulic system codes. The benchmark demonstrated the performances of such codes in predicting phenomena relevant for safety on the basis of fixed criteria.

1. Introductory Remarks

VVER reactors have some unique and specific features (e.g., large primary and secondary side fluid inventory, horizontal steam generators, and core design), which require dedicated experimental and numerical analyses in order to assess the performance of safety systems and the effectiveness of eventual accident management strategies. The predictive capabilities of computer codes used in reactor safety analysis needs be validated against relevant experimental data, prior to their application to simulate the behavior of a nuclear power plant. To this purpose a “VVER code validation matrix” [1] was developed in the framework of the OECD/NEA activities, based on the experience of the validation matrices for light water reactor already developed in the 80 and then extended in the 90 [25].

2. The PSB-VVER Project

The OECD/NEA PSB-VVER project (2003–2008) has been set with the objective to obtain the required experimental data not covered by the VVER validation matrix [1]. A test matrix was defined considering the inputs received by the Russian Safety Authority Gosatomnadzor [6]. Five tests were executed in PSB-VVER integral test facility, operated at Electrogorsk Research and Engineering Centre, Elektrogorsk (EREC) [7], which are briefly outlined below and summarized in Table 1. The main objectives of the experiments were as follows:(i)to generate experimental data in order to validate computer codes for transient analysis of VVER reactors,(ii)to address the scaling issue,(iii)to contribute to the investigations of postulated accident scenario and actual phenomena occurring VVER-1000,(iv)to support safety assessments for VVER-1000 reactors.

The first experiment is an intermediate break loss of coolant accident, that is, 11% upper plenum break. It simulates a rupture on one upper plenum accumulator line and it is a “similar test” performed in another facility, ISB-VVER, which is scaled down 1 to 2000. It was also used as shake-down test for the PSB-VVER facility, namely, to check the instrumentation and the system behavior [8]. The comparison with the data of the integral ISB-VVER facility provided feedbacks about the scaling effects on the accident behavior. The transient is initiated by an intermediate break simulating the rupture of one hydroaccumulator line located in upper plenum. The high-pressure injection system (HPIS), connected to one hot leg, is available only in one loop. The onset of the injection of hydroaccumulator systems occurs shortly before the fuel rod simulator bundle heat up starts. Then, continuous heat up and rewet of fuel rod simulators is experienced during the transient, because the stepwise intervention of the hydroaccumulators.

The second experiment is a natural circulation test [9]. The design of the experiment is aimed to obtain a set of data in natural circulation. The test consists in step wise reduction of the primary side mass inventory. Between two consecutive drainage phases, “quasi” stationary conditions are achieved in the system. These conditions are suitable to investigate main modes of operation, which might occur during a small break LOCA. In particular, the phenomena connected with the single- and two-phase natural circulation, boiler condenser mode up to the dryout occurrence are studied at various primary coolant inventories in a VVER-1000 configuration.

A small break LOCA is the third experiment [10]. It is a “counterpart test” of the experiments carried out in LOBI, SPES, BETHSY, and LSTF facilities. The experiment is a 4.1% cold leg break test aimed at providing data on the scaling criteria of the facility and its performance in comparison with the other integral test facilities simulating different pressurized water reactor designs. Starting from the past experiments, the design of the small break LOCA test has been a collaboration between EREC and University of Pisa. The boundary and initial conditions, and the imposed sequence of events have been defined on the basis of well-defined scaling laws in order to carry out a correct “counterpart test” [11]. Focus is also given on the identification and verification of the thermal hydraulic phenomena, according with the validation matrices for transients [13]. Similarities and differences of the processes/phenomena running in the PSB-VVER and LOBI test facilities have been also analyzed.

The fourth experiment of the test matrix is related to the primary-to-secondary leak issue [12]. The initiating event is the opening of the steam generator header lid with an equivalent break size of about 100 mm, that is, an intermediate break. This scenario is relevant for VVER safety analysis, because it occurred in Rovno nuclear power plant. In this scenario, the primary liquid can be released into the containment through the steam generator relief valves and, without actions of the operator, might be the cause of core degradation. The experiment is executed accounting also for the single failure. It consists in the occurrence of the relief valve stuck open in the affected steam generator. This test is selected by the OECD/NEA PSB-VVER project participants as one for analytical exercise (blind test). Five countries with six codes participated to the blind test, and four countries with five codes performed the posttest calculations [13].

The last test is a large cold leg break LOCA. The test is a double-ended guillotine break in cold leg, between pump and pressure vessel, downstream of the emergency core cooling injection to be performed at “full power” [14]. This corresponds to 10 MW in PSB-VVER integral test facility (ITF) that is scaled one to three hundred. Nevertheless, the fuel core is simulated with indirect electric heated cans, which are not able to withstand to such power. Therefore, the test is performed at “low” power (1.5 MW) and has been used for a benchmark activity, hereafter described [15].

3. The Experiment

3.1. PSB-VVER Facility Description

PSB-VVER is an integral test facility [7] simulating the Russian-designed pressurized light water reactor VVER-1000 v320 (see Figure 1). It is installed at the Electrogorsk Research and Engineering Centre, near Moscow (Russia). The role of such integral test facility in accident analysis, within the nuclear reactor safety technology framework, is primarily to confirm the predictive capabilities of thermal-hydraulic system codes and to trigger the process of code improvement, if needed. The PSB-VVER is characterized by the “time-preserving,” “full-pressure,” “full-height,” “full-linear-heat-generation-rate,” and “power-to-volume” scaling laws, such as other experimental facilities (i.e., PKL, LOBI, SPES, BETHSY, LSTF, PMK, SEMISCALE, and LOFT). It is designed and constructed with the following purposes:

(i)obtain experimental data for studying phenomena and processes specified in the validation matrices developed for VVER nuclear power plants,(ii)assess the efficiency of the existing safety systems and verify engineering approaches proposed in new VVER nuclear power plants designs,(iii)check and evaluate the existing accident management recommendations and procedures,(iv)expand the experimental database used for thermal-hydraulic code validation for VVERs.

The PSB-VVER facility is scaled down 1 to 300. It models the entire primary system and most of the secondary system (except turbine and condenser). The facility allows the modeling and representation of phenomena and physical phases that are relevant to VVER-1000 reactor under transient and emergency conditions and to investigate the regimes in accordance with accident management. It is equipped with a data acquisition system that includes more than 1000 measuring channels with a sampling frequency up to 100 Hz. The complete description of the PSB-VVER facility can be found in [7, 16, 17]. The scaling concepts fulfill the requirements needed to simulate the overall thermal-hydraulics behavior of the full-scale power plant. Relevant features are hereafter listed:(i)facility elements scaled in elevation 1 : 1;(ii)power, volume, and cross-sectional area scaling factor of 1 : 300;(iii)full pressure of the primary and secondary systems;(iv)simulation of all four loops;(v)fuel rod and horizontal SG tubes scaled in length 1 : 1.

3.2. Test 5a “CL-2x100-01” Description

The main objectives of the test 5a, identified as “CL-2x100-01”, are as follows [14, 18]:(i)to obtain experimental data not covered by the VVER validation matrix,(ii)to investigate the thermal-hydraulic response of the VVER-1000 primary system during a double-ended guillotine break in cold leg;(iii)to obtain experimental data for validation of thermal-hydraulic system codes applied to LB-LOCA analysis of VVER-1000;(iv)to evaluate the capability of the PSB-VVER facility to simulate the LB-LOCA in VVER-1000.

The experiment starts with the ruptures of the membranes in cold leg number 3 and the closure of the valve located between the two break devices, simulating the occurrence of the double-ended guillotine break in the facility. Six phenomenological windows are distinguished in the experiment, which are hereafter outlined.

(1) Blowdown Phase: from the start of the transient (SoT) up to reactor pressure vessel level increase. Once the break (double ended) is opened, the loss of offsite alternating current (AC) power is assumed simultaneously. This implies the following events: SCRAM occurrence, the onset of the main coolant pumps coastdown, the turbine valve, and the main feed water pumps closures. The loss of offsite AC power causes the inhibition of the active emergency core cooling system, up to 40 s (availability of the diesel generators). The primary pressure decreases fast (Figure 2), therefore the primary side coolant evaporates. Condition for critical heat flux occurs in the core. However, no dryout is observed in the experimental data due to the SCRAM at time 0 s and the low energy stored in the fuel. The accumulators start to inject in upper plenum and downcomer at about 10 s. At the end of this phase, the measured reactor pressure vessel collapsed level reaches a minimum.

(2) Refill Phase: up to the accumulators effectiveness ends. The refilling of the lower plenum is driven by the accumulators’ injections and later on, 40 s after the SoT, by the ECCS injection. During this phase a pool formation in upper plenum is observed and lasts until the end of this phase. The phase ends when the accumulators’ injections are less effective, because they are almost empty.

(3) Primary Side Mass Inventory Reduction Phase: up to the onset of core heatup. During this phase the reactor pressure vessel level decreases again because the accumulators are empty. The loop seals in the intact loops are completely emptied. The downcomer level increases at the beginning of the phase and then, oscillates at the end of the phase before the dryout phase starts (Figure 3).

(4) Dryout Phase: up to core quenching. The phase is characterized by the temperatures excursions in the fuel rod simulator bundle. During this phase, the primary system mass inventory slightly increases, because the positive mismatch between the active ECCS and the mass released through the break.

(5) Stable Safe Condition Phase: up to the active ECCS tanks emptying. This is a transition phase, since the safe conditions are achieved. The primary mass inventory continuously increases as well as the collapsed level in the riser-side of the reactor pressure vessel. Once the active ECCS have injected 1.86 m3 of water, according to the scenario specifications, the LPIS and HPIS pumps are switched off.

(6) Primary Side Mass Inventory Depletion Phase and End of Transient (EoT): the last phase is characterized by a slow empting of the primary system until the final dryout occurs. The test ends at 1477 s when the maximum core temperature measured reaches about 515°C.

The complete description of the test is available in the experimental data report, issued by EREC [18].

4. Benchmark on LB-LOCA Transient in PSB-VVER Facility

4.1. Objectives of the Activity

The OECD/NEA PSB-VVER Test 5a benchmark [15] is focused on the assessment of Western and Eastern thermal-hydraulic system codes in predicting large break LOCA phenomena occurring in VVER-1000 prototype reactor. The main objectives of the benchmark are as follows:(i)to assess the current capabilities of the thermal-hydraulic system codes on the domains of interest,(ii)to develop a common understanding and to promote an exchange of knowledge,(iii)to draw conclusions on the possible use of the codes for regulatory bodies and the industry.

4.2. Procedure for Code Assessment

The assessment of a thermal-hydraulic system code involves the availability of a qualified nodalization and of qualified experimental data from a qualified experimental facility. It also requires standard procedures and the fulfillment of specific criteria. In this context, references have been provided by University of Pisa to define the meaning of “qualified nodalization,” to develop the procedure and the criteria necessary for preparing a “qualified nodalization,” to perform the assessment activities, and, finally, to execute qualified computer code calculations.

The procedure for code assessment consists of three main steps, see also [1921].(1)The steady state results (i.e., “steady state qualification”), which may include the nodalization development phase (e.g., volume, heat transfer area, elevations, pressure drops distribution, etc.). This step is concluded with the simulation of the nominal steady state conditions against specific acceptability thresholds.(2)The reference calculation results (i.e., “on transient qualification”) that shall satisfy qualitative and quantitative accuracy-related criteria. According with this procedure, the reference calculation is not “the best” calculation achievable by the code.(3)The results from sensitivity study (which is also part of the “on transient qualification”) is carried out to demonstrate the robustness of the code calculations, to characterize the reasons for possible discrepancies between measured and calculated trends, to optimize code results and user options choices, and to improve the knowledge of the code by the user.

The comparative analysis, described in the following sections, is carried out on the basis of the steps 1 and 2 above.

4.3. Comparison among Participants Input Decks

The simulation of test 5a has been performed by four participants belonging to three different institutions with four different thermal-hydraulic system codes [15]. Gidropress (EDO-GP) submitted both pretest and posttest calculations. In details:(1)KORSAR-GP V9.027.004, pretest, and V9.031.000, posttest (GidropressRussia),(2)TECH-M (GidropressRussia),(3)ATHLET 2.1 Cycle A (Nuclear Research Institute ŘežCzech Republic);(4)RELAP5-3D©V2.4.2 (University of PisaItaly).

Table 2 provides information regarding the adopted code resources, the nodalization features, and the main code options.

4.4. Comparison and Evaluation of Steady State Results

The steady state results have been analyzed and compared. The procedure involves two main tasks, which are as follows: (i)the verification and evaluation of the geometrical fidelity of the model developed, also called the “nodalization development phase,” (ii)the capability of the analytical model to achieve stable steady state with the correct initial conditions.

Although the first task is outside of the scope of the activity, the participants provided relevant geometrical data with the objective to allow a more comprehensive understanding of the differences among the results of the codes [15].

The achievement of the steady state conditions (task two) deals with the comparisons between the experimental measurements and the calculated results at the start of transient (SoT). The selection of the key parameters for steady state verification is done taking into account the availability of the experimental data. Anyway, some parameters are compared, even though they are not available in the experimental database (i.e., steam generators power exchanged, maximum fuel centerline temperature, accumulators mass inventory, steam generators mass inventory, core and, upper head-downcomer bypass flow rates). No error is considered if the calculated value is inside the bands of the measurement accuracy. If it is outside, the error is calculated as difference between the calculated value and upper or lower limit of the measured value.

Figure 4 shows the verification of the pressure drops in the reactor pressure vessel and in the reactor coolant system. The verification of the pressure drop across the vessel reports two different set of experimental data: one (reported with the blue dashed line label “YC01DP16b” in Figure 4(a)) is the direct measure from inlet to outlet of the pressure drop and the second (black line) is calculated through the chain of the pressure drops measurements available in the reactor pressure vessel. Almost all calculated values are inside or close the experimental value (19.80 kPa) considering the measurement uncertainty (±1.5 kPa). On the other side the verification of the pressure drop in the loop seal number 3 shows larger discrepancy between the calculated values and the measurement trend. These differences can be attributed to the propagation of the errors connected with the chain of measured pressure drops used. Indeed, the final absolute value should be equal to the pressure drop across the reactor pressure vessel. The analysis [15], not detailed in the present paper, demonstrated that the codes results are in general acceptable, even though some errors exceed the acceptability thresholds [19].

4.5. Comparison and Evaluation of Reference Results

The analysis of the results is based on a comprehensive comparison between measured and calculated trends and values, aimed at demonstrating that the codes simulations are capable to reproduce the relevant thermal-hydraulic phenomena observed in the experiment. This is performed in four relevant checks.

The first check consists in comparing the values of quantities characterizing the sequence of events, and is part of the qualitative evaluation of the results (see Section 4.2 no. (2)). Table 3 reports the list of the relevant events and the timing of their occurrences.

The second check (qualitative evaluation) is the comparisons between experimental and calculated time trends on the basis of selected variables. The complete set of time trends used for the analysis is based on 55 parameters [15]. Among those parameters, 18 are selected for the quantification of the accuracy by the application of the FFTBM (check four, below). These represent the minimum number of quantities describing the experimental scenario and the code performances. The description of the parameter trends is provided by grouping the homogeneous quantities: that is, absolute pressures, coolant temperatures, mass flow rates, integral mass, pressure drops, levels, cladding temperatures, and powers. As sample, the time trends of the upper plenum pressures and of the maximum cladding temperatures provided by the participants are compared in Figure 5.

The primary pressure trend is well simulated by the codes, with the exception of a pretest calculation. The cladding temperatures reported in Figure 5(b) represent the code predictions at the height, where the experimental measure experiences the maximum cladding temperature (2.8–3.2 m from bottom of active fuel). The figure shows the first dryout occurrence and the maximum PCT well simulated by RELAP5 and the final core heat up by ATHLET. It should be noted that the maximum cladding temperature by ATHLET code is predicted at higher elevation and it is close to the experimental value (398°C instead of 428°C measured in the experiment), see [15].

The third check is the qualitative accuracy evaluation of the results on the basis of the relevant thermal-hydraulic aspects. These are derived from the analysis of the transient, its subdivision in phenomenological windows, and then the identification of the relevant phenomena following a rigorous approach [20].

The transient has been divided in 8 different RTA. They are break flow rate behavior, PRZ behaviour, first dryout occurrence, UP pressure behavior, accumulator behavior, ECCS (HPIS and LPIS) behavior, primary side mass behavior, and final dryout occurrence. Each RTA has been characterized by several quantities, which are used for evaluating the accuracy of the code simulations: that is, time sequence of event (TSE), integral parameter (IP), single value parameter (SVP), and nondimensional parameter (NDP). For each of these quantities an engineering judgment is provided according with the following criteria: (a)“E” mark: the code predicts qualitatively and quantitatively the parameter (excellent—the calculation result is within experimental data uncertainty band); (b)“R” mark: the code predicts qualitatively, but not quantitatively the parameter (reasonable—the calculation result shows only correct behavior and trends); (c)“M” mark: the code does not predict the parameter, but the reason is understood and predictable (minimal—the calculation result lies within experimental data uncertainty band and sometimes does not have correct trends); (d)“U” mark: the code does not predict the parameter and the reason is not understood (unqualified—calculation result does not show correct trend and behavior, reasons are unknown and unpredictable).

A positive overall qualitative judgment is achieved if “U” mark is not present. The qualitative accuracy evaluation supports the conclusion that the posttest calculations are qualitatively correct. Details of the results are not reported for sake of brevity and are available in [15].

The fourth check is the quantitative accuracy evaluation by using the fast fourier transform-based method (more details in [21]). This tool, developed at University of Pisa, is applied once the other checks, previously discussed, are positively fulfilled and the code results are judged satisfactory from the qualitative point of view. This tool provides an error function, which satisfies the following requirements: (i)at any time of the transient this function should remember the previous history,(ii)engineering judgment should be avoided or reduced, (iii)the mathematical formulation should be simple, (iv)the function should be nondimensional, (v)it should be independent from the transient duration, (vi)compensating errors should be taken into account (or pointed out), (vii)its values should be normalized.

The FFTBM is used for the quantification of the accuracy of the code results. This tool gives an accuracy coefficient (AA) and a weighted frequency (WF) for each variable and for the overall transient. The most significant information given by AA is the relative magnitude of the discrepancy coming from the comparison between the calculation and the corresponding experimental variable time history. When the calculated and the experimental data are equal, then the error function is zero (AA is also equal to zero), characterizing perfect agreement. The WF factor characterizes the kind of error, because its value emphasizes where the error has more relevance either at low or high frequencies. For instance, oscillations of the calculated values around an average trend can be readily identified by the method. Depending on the transient, high-frequency errors may be more acceptable than low (in thermal-hydraulic transient, better accuracy is generally represented by low AA values at high WF values), see also [22, 23].

The method was applied on the basis of 18 parameters (see Figure 6). They were selected as the minimum number relevant to describe the transient (see also step 2), considering the peculiarities of the transient, as well as the quality and availability of the experimental data. Then, those parameters are combined to give an overall picture of the accuracy of a given calculation (AAtot in Figures 6 and 7). The total average amplitude of the transient (AAtot) is the result of the sum of all the average amplitudes with their “weights.” The “weight” of each contribution is dependent on the experimental accuracy, the relevance of the addressed parameter, and a component of normalization with reference to the average amplitude evaluated for the primary side pressure (more details in [20, 24]). The reference results of the method are usually focused on two values: the average amplitudes of the primary pressure and of the global (or total) response.

Figure 6 summarizes the average amplitudes of the 18 selected parameters for each code calculation. Figure 7 provides the primary pressure amplitudes and total average amplitudes as function of each phenomenological windows, according to the description of the test.

The following main conclusions are derived by the quantitative evaluation of the results [15]. (i)Three out of six code applications (ATHLET, RELAP5-3D©, and TECH-M) have an average amplitude of the primary pressure equal to or lower than 0.1, which indicate high accuracy of the results. Among these, it should be highlighted the TECH-M simulation is a pretest. The KORSAR and the TECH-M (posttest) primary pressure trends are very close to this threshold. (ii)Poor accuracies are calculated for the pressure drops (the AA value is larger than 1), as showed in Figure 6. The parameters considered are the pressure drop trends across the core, the upper plenum (including the upper head), and the loop seal number 4. These parameters are qualitatively predicted by the ATHLET, REALP5, and TECH-M (posttest) simulations. (iii)The primary pressure and the total average amplitudes are lower during the first 100 s (PhW 1 and 2, according to Section 3.2), see Figure 7. (iv)Two out of six code applications (ATHLET, RELAP5-3D©) showed a good prediction of the experiment, having a total average amplitude lower than 0.4. The TECH-M simulation evidenced a fair prediction of the experiment, having a total average amplitude between 0.4 and 0.5.

5. Conclusions

The OECD/NEA PSB-VVER project provided unique and useful experimental data for code validation by the scaled-down integral test facility PSB-VVER. In this framework, four participants and three different institutions simulated the test 5a (identification CL-2x100-01), which is the last experiment of the project test matrix. The Western (i.e., ATHLET and RELAP5-3D©) and Eastern (KORSAR and TECH-M) advanced computer codes were applied in this context. The initiating event is the double-ended guillotine break in cold leg.

The objective of the activity is to collect, analyze, and document the numerical activity (posttest) performed by the participants, describing the performances of the codes simulations and their capability to reproduce the relevant thermal-hydraulic phenomena observed in the experiment. The objective is fulfilled through comprehensive comparisons based on the following steps: (i)comparison of the features of the analytical models applied, (ii)verification of the code performance “at steady state level,” (iii)assessment of the code performance at “on transient level” based on a qualitative and quantitative (FFTBM) accuracy evaluation of the results.

The analysis of the results demonstrates the following: (i)all code runs were able to predict the primary pressure trend with satisfactory accuracy; (ii)the core cladding temperature was predicted by all posttest analyses. In particular, the maximum cladding temperature was generally overestimated (posttest) with the exception of the ATHLET simulation that highlighted an excellent accuracy; (iii)the primary mass inventories predicted by the simulations resulted in general lower than the experimental (indirect) measurement.

The application of the FFTBM, related to the quantification of the accuracy, showed the following: (i)almost all code simulations have an average amplitude of the primary pressure equal or lower 0.1 and the others are very close to this threshold, (ii)all code simulations showed a good prediction of the experiment (total average accuracy lower than 0.4) or a fair prediction (0.4 < AAtot < 0.5), (iii)the parameter trends of the pressure drops during the transient and the timing of the final cladding temperature excursions affected the total average by increasing the final values.

In conclusion, the availability of the experimental data and the present benchmarking activity brought to the following achievements. (i)The experiment PSB-VVER test 5a, executed in the largest ITF currently available for VVER-1000 type reactors, contributes to extend the experimental database for code validation. (ii)The applications of the numerical models represent an enlargement of the validation activity for computer codes. In this connection, the comparison of Western and Eastern computer codes represent a further valuable achievement.

Nomenclature

AApp:Average amplitude primary pressure
AAtot:Average amplitude total
ACC:Hydraulic accumulator
CCFL:Counter current flow limiting
CL:Cold leg
CSNI:Committee on the Safety of Nuclear Installations
DC:Downcomer
DP:Pressure drop
ECCS:Emergency core cooling system
EDO-GP:EDO-Gidropress (the VVERs designer)
EoT:End of transient
ESA:Hexagon
FFTBM:Fast Fourier transform-based method
GP:Gidropress (the VVERs designer)
GRS:Gesellschaft für Anlangen—und Reaktorsicherheit
HL:Hot leg
HPIS:High-pressure injection system
INL:Idaho National Labs
ITF:Integral test facility
LB-LOCA:Large break-loss of coolant accident
LOCA:Loss of coolant accident
LP:Lower plenum
LPIS:Low-pressure injection system
LS:Loop seal
MCP:Main coolant pump
NEA:Nuclear Energy Agency
NRI:Nuclear Research Institute Czech Republic
OECD:Organization for Economic Cooperation and Development
PCT:Peak cladding temperature
PhW:Phenomenological windows
PMI:Primary mass inventory
PRZ:Pressurizer
RCS:Reactor coolant system
RPV:Reactor pressure vessel
RTA:Relevant thermalhydraulic aspect
SBLOCA:Small break loss of coolant accident
SG:Steam generator
SoT:Start of transient
TH-SYS:Thermal-hyrdraulic system
UH:Upper head
UNIPI:Università di Pisa
UP:Upper plenum
VVER:Russian-designed pressurized water reactor
WF:Weight frequency.

Acknowledgments

The Authors would like to acknowledge the OECD Nuclear Energy Agency (NEA) that promoted the PSB-VVER project, Jean Gauvain who managed the project, and the Institutions involved, which contributed to develop a common understanding and to promote an exchange of knowledge.