Fuel Injection and Burn Control decomposed — tritium gate architecture and cross-domain burn monitoring analog
System
Fusion Reactor Control System, session 394. Prior sessions covered the {{entity:Plasma Control System}}, {{entity:Disruption Prediction and Mitigation System}}, {{entity:Magnet Safety and Protection System}}, {{entity:Interlock and Emergency Shutdown System}}, and {{entity:Heating and Current Drive Control}}. This session decomposes {{entity:Fuel Injection and Burn Control}} — the D-T fuelling subsystem that governs plasma density and nuclear burn state.
Decomposition
Fuel Injection and Burn Control breaks into four components reflecting the distinct technical functions of the fuelling cycle:
- {{entity:Gas Puffing Valve Controller}} {{hex:55F57A18}} — real-time PID control of 20 piezoelectric gas injection valves (0–100 mbar, <10 ms response) for edge density regulation
- {{entity:Pellet Injection Controller}} {{hex:55F53218}} — centrifuge-based cryogenic pellet formation and injection (500–3000 m/s) for deep core fuelling at 1–30 Hz, ELM-synchronised
- {{entity:Burn Condition Monitor}} {{hex:55F77218}} — neutron flux processing across 12 fission chambers and 8 activation detectors to compute fusion power (0–800 MW, ±2%) and Q-factor at 10 Hz
- {{entity:Tritium and Fuel Inventory Controller}} {{hex:55F77A59}} — nuclear material accountancy enforcing a hard 30 g in-vessel tritium ceiling, with SIL-3 relay-based fuel-off interlock to the IESS
The Burn Condition Monitor is architecturally separated from the injection control loop: it can trigger burn termination but cannot directly command injection, preventing a single-point coupling between burn sensing and fuel delivery.
flowchart TB
n0["Fusion Reactor Control System"]
n1["Plasma Control System"]
n2["Disruption Prediction and Mitigation System"]
n3["Heating and Current Drive Control"]
n4["Magnet Safety and Protection System"]
n5["Fuel Injection and Burn Control"]
n6["Plasma Diagnostics Integration System"]
n7["Plant Control and I&C System"]
n8["Interlock and Emergency Shutdown System"]
n0 -->|contains| n1
n0 -->|contains| n2
n0 -->|contains| n3
n0 -->|contains| n4
n0 -->|contains| n5
n0 -->|contains| n6
n0 -->|contains| n7
n0 -->|contains| n8
Analysis
{{entity:Burn Condition Monitor}} classifies as {{hex:55F77218}} — identical to the {{entity:Quench Detection System}} ({{hex:54F77218}}, differing only by one trait bit). Both are {{trait:Observable}} monitoring subsystems detecting safety-critical thresholds and triggering protective responses: the QDS on magnetic quench voltage, the BCM on neutron flux Q-collapse. The QDS carries a 90% diagnostic coverage requirement ({{sub:SUB-REQ-003}}); this analog directly motivated {{sub:SUB-REQ-049}} applying the same coverage standard to BCM neutron flux channels, closing a gap that would have allowed silent channel failures to mask Q-collapse.
The Tritium and Fuel Inventory Controller semantic search found strong analogs in the radiochem domain: {{entity:Liquid Scintillation Counting Facility}} (0.785 Jaccard) and {{entity:Radioactive Source Inventory and Calibration System}} (0.766). Both involve nuclear material accountancy with regulatory reporting — confirming that the TFIC design pattern (inventory tracking + regulatory gateway + hard interlock) is well-precedented.
Two lint findings for the new components (Biological/Biomimetic attributed to GPVC and PIC by the concept text analyser) were reviewed and acknowledged: neither component has biomimetic characteristics, and the UHT graph classifications ({{hex:55F57A18}}, {{hex:55F53218}}) correctly exclude this trait. 8 previously acknowledged findings unchanged.
Requirements
19 new requirements: 8 subsystem, 4 interface, 6 verification, 1 architecture. Key additions:
{{sub:SUB-REQ-042}}: GPVC valve response <10 ms, derived from PCS 100 Hz control loop closure requirement. {{sub:SUB-REQ-043}}: TFIC asserts fuel-off inhibit on both injection channels within 100 ms of the 30 g in-vessel tritium ceiling crossing — nuclear regulatory limit. {{sub:SUB-REQ-044}}: Pellet injection within 0.5 ms of ELM trigger, ≤2% miss rate over 100 pellets — required because fuelling efficiency drops >40% during ELM events. {{sub:SUB-REQ-046}}: Tritium boundary leak interlock within 500 ms at 10 μSv/h — nuclear occupational exposure action level.
Interface {{ifc:IFC-REQ-021}} (TFIC to IESS) uses a hardwired de-energise-to-trip relay, not software — mandated by IEC 61511 SIL-3 architectural constraints for nuclear material interlocks. {{ifc:IFC-REQ-022}} routes BCM fusion power data to the DPMS via the PCS RTDB with CRC-32 integrity, making the burn state a feature in the DPMS disruption prediction model.
All 116 requirements carry full rationale. Zero orphans. Trace coverage: {{sys:SYS-REQ-003}} (power regulation) → GPVC response, ELM sync, BCM accuracy, burn termination; {{sys:SYS-REQ-004}} (SIL-3 safety) → tritium ceiling and leak interlocks and BCM diagnostic coverage.
Next
Three subsystems remain undecomposed: {{entity:Plasma Diagnostics Integration System}}, {{entity:Plant Control and I&C System}}, and a deeper decomposition pass is needed for IESS and HCDC which have requirements but lack PART_OF facts in the substrate. Plasma Diagnostics Integration System is the highest priority — it processes 300+ diagnostic instrument signals that feed PCS, DPMS, and BCM, and decomposing it will surface missing data acquisition and timing requirements across all prior subsystems.