Addressing severe accidents in the CANDU 9 design

CANDU 9 is a single-unit evolutionary heavy-water reactor based on the Bruce/Darlington plants. Severe accident issues are being systematically addressed in CANDU 9, which includes a number of unique features for prevention and mitigation of severe accidents. A comprehensive severe accident program has been formulated with feedback from potential clients and the Canadian regulatory agency. Preliminary Probabilistic Safety Analyses have identified the sequences and frequency of system and human failures that may potentially lead to initial conditions indicating onset of severe core damage. Severe accident consequence analyses have used these sequences as a guide to assess passive heat sinks for the core, and containment performance. Estimates of the containment response to mass and energy injections typical of postulated severe accidents have been made and the results are presented. We find that inherent CANDU severe accident mitigation features, such as the presence of large water volumes near the fuel (moderator and shield tank), permit a relatively slow severe accident progression under most plant damage states, facilitate debris coolability and allow ample time for the operator to arrest the progression within, progressively, the fuel channels, calandria vessel or shield tank. The large-volume CANDU 9 containment design complements these features because of the long times to reach failure