1. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Elements of Safety Applicable to the ESS 2013 January, 9 th Christine Darve

2. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Headlines ESS Cryomodule Design constraints ESS Standards and Safety Pressure vessel codes Preliminary application based on the SPL experience

3. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve ESS Cryomodule Design constraints Integrated hazards due to operating environment: – Radiation environment (high intensity proton beam) – Cryogenic temperature: 2 K (Helium II), cryogenic condition, pressure norms – Sub-atmospheric condition (31 mbar saturated), leak-tightness – Magnetic environment (14 mGauss) Preliminary ESS pressure vessel requirements based on existing experience  See Paulo Azevedo (CERN-TE/MSC) presentation

4. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve ESS Standards and Safety Culture Engineering standards SIS, Swedish Standard Institute CEN, European Committee for standardization ISO, International Organization for standardization  European Directive 97/23/EC; EN ISO 4126, PED  ESS guidelines for pressure vessel modeled after FNAL, CERN expertise Radio-Protection and Rad-hard equipment As low as reasonable achievable (ALARA) Passive and active safety measures (safety barrier) Personnel Protection System, Machine Protection System (IEC61508) Risk analysis and reliability study Safety reviews Quality Assurance

5. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Using e-nav [see ESS intranet] 5 https://enav.esss.lu.se/DesktopD efault.aspx?tabname=ICS-Koder

6. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 6 Using e-nav [see ESS intranet

7. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Conformity Assessment procedure PED - harmonized standards EN 13445 (old CODAP) EN 13458 (cryogenic vessels) Construction  Engineering design report (Risk Analysis)  Manufacturing  Inspection/controls (Project Engineer) Essential safety requirements Prevention :  Training  Operational procedure Protection :  Emergency procedures  Safety relief, CE marking Installation

8. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Reference based on Paulo Azevedo ‘s SPL study: EN ISO 4126: Safety devices for protection against excessive pressure (parts 1,6, and 7) EN 13648: Cryogenic vessels – Safety devices for protection against excessive pressure (part 3) EN 13458: Cryogenic vessels – Static vacuum-insulated vessels (part 2) Lehmann and Zahn; “Safety aspects for LHe cryostats and LHe transport containers” (1978) Cavallari et al; “Pressure protection against vacuum failures on the cryostats for LEP SC cavities” (1989) Boeckmann et al; “Experimental tests of fault conditions during the cryogenic operation of a XFEL prototype cryomodule” CERN Safety Commission; “Safety instruction IS 47: The use of cryogenics fluids”; CERN EDMS doc. 335812 Pressure vessel codes 8

9. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 9 Example of application of Pressure Equipment Directive Example

10. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 10 Example

11. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 11 Example

12. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 12 Example

13. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Safety analysis to be completed by CEA and IPNO for the cold linac cryomodules 13 The ESS expects that the safety analysis includes the following documents. This analysis will be completed in collaboration with the relevant ESS experts and will complete the functional analysis. 1 – System Design Documents 1.1 – System Description 1.2 – Flow Schematic 1.3 – Component – Valve – Instrumentation List 1.4 – Operating Control Loops and Interlock Systems 2 – System Operating Documents 2.1 – Operating Procedures 2.2 – Commissioning phase 2.3 – Qualification and Training Requirements 3 – Safety Analysis Documents 3.1 – FMEA 3.2 – What If Analysis 3.3 – Hazard Analysis 3.4 – Other ES&H Sections Compliance 4 – Engineering Documents 4.1 – Relief System Calculations 4.2 – Material Stress Calculations 5.0. Appendices

14. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve

15. Content of the Web-based site – Safety procedures (RP, ODH, electrical hazard, etc.. ) – Safety training (LOTO, ODH, electrical safety, etc..) – Access to safety manuals – Lessons learned, etc.. Tools for development : NEXT Community – Public, Project members area, incl. Developer admin, safety responsible example: Users Needs: – Design engineers Goals/what : – Want to access to ESS engineering guidance for pressure safety vessel Value: – To complete the design of a cryomodule E-Share: Web interface (Work in progress at ESS) 15

16. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Earlier development FNAL - CERN 16 By Nancy Grossmann FNAL ES&H Director

17. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 17

18. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 18 Preliminary application based on the SPL experience

19. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 19 Example

20. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 20 Example

21. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 21 Example

22. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve 22 Example

23. ESS Cryomodule Status Meeting – Elements of Safety | 2013-01-09 | Christine Darve Principles: Comply with the formality of safety procedure Similar to SPL approach (example) On-going: CEA/IPNO Safety analysis for a staged venting of the cryomodules MCI if cavities to be replaced - Risk analysis in progress Open questions: Define the heat load deposited for un-insulated vacuum vessel Proper selection of the temperature for the relieving scenario Conclusion 23