System Requirements Specification (SyRS) — ISO/IEC/IEEE 15289 — Specification | IEEE 29148 §6.2–6.4
Generated 2026-03-27 — UHT Journal / universalhex.org
| Standard | Title |
|---|---|
| BS EN 14175 | — |
| BS EN 1822 | — |
| BS EN 61511 | — |
| IEC 17025 | — |
| IEC 61511 | Functional safety — Safety instrumented systems for the process industry sector |
| ISO 11929 | — |
| ISO 14644-1 | — |
| ISO 17025 | — |
| ISO 29463 | — |
| Acronym | Expansion |
|---|---|
| ARC | Architecture Decisions |
| CCCS | Completeness, Consistency, Correctness, Stability |
| EARS | Easy Approach to Requirements Syntax |
| GUM | Guide to the Expression of Uncertainty in Measurement |
| IFC | Interface Requirements |
| STK | Stakeholder Requirements |
| SUB | Subsystem Requirements |
| SYS | System Requirements |
| UHT | Universal Hex Taxonomy |
| VER | Verification Plan |
| Ref | Requirement | V&V | Tags |
|---|---|---|---|
| STK-NEEDS-001 | The Radio Chemistry Laboratory SHALL provide analytical results for primary coolant samples within 24 hours of sample receipt to support submarine reactor maintenance decision-making. Rationale: Submarine reactor maintenance campaigns operate on tight schedules driven by fleet operational readiness. Primary coolant chemistry results (fission product activity, corrosion product concentrations, boron assay) directly inform reactor restart decisions. A 24-hour turnaround enables the maintenance programme to proceed without delay; exceeding this window stalls reactor plant operations and impacts submarine availability. This reflects standard UK naval dockyard practice where the radiochemistry lab is on the critical path for reactor maintenance. | Demonstration | stakeholder, session-225 |
| STK-NEEDS-002 | The Radio Chemistry Laboratory SHALL comply with all conditions of the Nuclear Site Licence and Defence Nuclear Safety Regulator authorisations applicable to radiochemistry operations. Rationale: UK nuclear site licence conditions (enforced by ONR) and DNSR authorisations are legally binding. Non-compliance can result in enforcement action, facility shutdown, or prosecution. For a Ministry of Defence nuclear dockyard, DNSR authorisations impose additional defence-specific safety requirements beyond the civil nuclear regime. This is a non-negotiable regulatory baseline. | Inspection | stakeholder, session-225 |
| STK-NEEDS-003 | The Radio Chemistry Laboratory SHALL ensure all gaseous and liquid radioactive discharges remain within the limits specified in the site's Environmental Permit issued by the Environment Agency. Rationale: The Environmental Permit sets legally enforceable radionuclide discharge limits based on the site's radiological impact assessment. Exceeding permitted discharge limits triggers Environment Agency enforcement action and potential prosecution under the Environmental Permitting Regulations 2016. The radiochemistry lab generates both liquid effluent (from dissolution, separation, and decontamination processes) and gaseous discharges (from hot cell ventilation and fume cupboards) that must be controlled within these limits. | Test | stakeholder, session-225 |
| STK-NEEDS-004 | The Radio Chemistry Laboratory SHALL maintain individual occupational radiation doses as low as reasonably practicable (ALARP) and below the statutory dose limit of 20 mSv per year effective dose. Rationale: The 20 mSv/year effective dose limit is set by the Ionising Radiations Regulations 2017. ALARP is the UK legal duty under IRR17 and the Health and Safety at Work Act. Radiochemistry laboratory staff handle open radioactive sources including high-activity reactor coolant samples, fission products, and actinides, making dose management a primary design driver for shielding, containment, ventilation, and operating procedures. | Inspection | stakeholder, session-225 |
| STK-NEEDS-005 | The Radio Chemistry Laboratory SHALL demonstrate analytical measurement capability through accreditation to ISO/IEC 17025 and participation in national and international proficiency testing schemes. Rationale: ISO/IEC 17025 accreditation is the internationally recognised standard for laboratory competence and is required by DNSR and ONR for safety-related measurements. Proficiency testing (e.g., NPL, IAEA schemes) provides independent validation that measurement results are accurate and comparable with other laboratories. Without accreditation, analytical results cannot be used for regulatory compliance reporting, waste characterisation, or reactor safety decisions. | Inspection | stakeholder, session-225 |
| STK-NEEDS-006 | The Radio Chemistry Laboratory SHALL characterise all radioactive waste packages with sufficient radionuclide-specific data to meet the waste acceptance criteria of the receiving disposal facility. Rationale: Radioactive waste acceptance at UK disposal and storage facilities (LLWR, GDF, interim stores) requires waste packages to meet characterisation criteria defined by the receiving facility's environmental safety case. Insufficient radionuclide characterisation leads to waste package rejection, requiring costly recharacterisation or repackaging. The radiochemistry laboratory is the primary source of radionuclide-specific activity data used to populate waste records and demonstrate compliance with waste acceptance criteria. | Test | stakeholder, session-225 |
| STK-NEEDS-007 | The Radio Chemistry Laboratory SHALL prevent the uncontrolled accumulation of fissile material in any location within the facility sufficient to create a criticality risk. Rationale: Criticality prevention is a fundamental nuclear safety requirement. The laboratory processes fissile material (U-235, Pu-239, Pu-241) from reactor coolant samples and fuel-related analysis. Although individual sample quantities are small, accumulation over time in drains, evaporators, or waste containers could approach critical mass if not controlled. This requirement drives fissile material accountancy, mass limits per location, and engineered controls such as geometrically safe vessels. | Analysis | stakeholder, session-225 |
| STK-NEEDS-008 | The Radio Chemistry Laboratory SHALL maintain operational availability of at least 95% during scheduled submarine reactor maintenance campaigns. Rationale: Submarine reactor maintenance campaigns are scheduled events with defined programme milestones. If the radiochemistry laboratory is unavailable, reactor coolant sampling and analysis cannot proceed, stalling the maintenance programme and delaying submarine return to operational service. The 95% availability target during campaigns reflects the need for high reliability during these critical periods while allowing for scheduled maintenance and calibration of laboratory equipment. | Demonstration | stakeholder, session-225 |
| STK-NEEDS-009 | The Radio Chemistry Laboratory SHALL be designed, constructed, and operated such that it can be safely decommissioned at the end of its operational life, with all radioactive materials removed and the facility returned to a condition suitable for unrestricted reuse or demolition. Rationale: Nuclear Site Licence Condition 35 (decommissioning) and the Energy Act 2004 require all nuclear facilities to have a decommissioning strategy from the design phase. Dockyard radiochemistry laboratories handle fission products and activation products from submarine reactor samples; failure to design for decommissioning creates disproportionate waste volumes and worker dose during end-of-life operations. The requirement ensures ALARP dose during decommissioning and prevents creation of legacy waste liabilities. | Analysis | stakeholder, decommissioning, session-238 |
| STK-NEEDS-010 | The Radio Chemistry Laboratory SHALL implement physical protection measures sufficient to prevent unauthorised access to, or removal of, nuclear materials held within the facility, in accordance with Nuclear Industries Security Regulations 2003 and applicable DNSR security authorisations. Rationale: Nuclear Industries Security Regulations 2003 and the DNSR Security Authorisation Conditions mandate physical protection of nuclear materials at defence nuclear sites. A radiochemistry laboratory holds accountable nuclear materials including irradiated fuel fragments and fissile material standards. Failure to implement adequate physical protection would breach regulatory requirements and could enable diversion or sabotage. | Inspection | stakeholder, security, session-238 |
| STK-NEEDS-011 | The Radio Chemistry Laboratory SHALL maintain an emergency preparedness and response capability enabling safe shutdown of all active operations and protection of personnel within 15 minutes of a declared site emergency, consistent with the site emergency plan and REPPIR 2019 requirements. Rationale: REPPIR 2019 and Nuclear Site Licence Condition 11 (emergency arrangements) require demonstrated capability to protect workers and the public during radiological emergencies. The 15-minute safe shutdown target derives from site emergency plan requirements for facility-level response before site-level intervention. A radiochemistry laboratory handling open-source radioactivity must be capable of rapidly securing all dispersible materials to prevent escalation. | Demonstration | stakeholder, emergency, session-238 |
| Ref | Requirement | V&V | Tags |
|---|---|---|---|
| SYS-REQS-001 | The Radio Chemistry Laboratory SHALL achieve a minimum detectable activity of less than 1 Bq for gamma-emitting radionuclides in a 1-litre Marinelli beaker geometry with a 1-hour acquisition time. Rationale: 1 Bq MDA for gamma emitters in a 1L Marinelli geometry with 1-hour count is the standard performance benchmark for HPGe detector systems used in nuclear facility radiochemistry. This sensitivity is required to detect and quantify fission products (Cs-137, Co-60, Ce-144) in reactor coolant at concentrations relevant to fuel integrity assessment and discharge compliance reporting. Failure to achieve this MDA would render the laboratory unable to confirm coolant activity is within operational limits, blocking reactor restart decisions. Derives from STK-NEEDS-001 and STK-NEEDS-005. | Test | system, session-225 |
| SYS-REQS-002 | The Radio Chemistry Laboratory SHALL measure tritium activity concentrations in aqueous samples down to 5 Bq/L with a combined measurement uncertainty of less than 20% at the 95% confidence level. Rationale: Tritium is the dominant radionuclide in PWR primary coolant and the principal contributor to liquid discharge activity. 5 Bq/L MDA with 20% uncertainty at 95% confidence is achievable by liquid scintillation counting with electrolytic enrichment and is needed to quantify tritium at levels well below the discharge limit (typically ~20,000 Bq/L) for accurate cumulative discharge tracking. Without this sensitivity, the laboratory cannot provide the discharge data required by the Environmental Permit. Derives from STK-NEEDS-003. | Test | system, session-225 |
| SYS-REQS-003 | The Hot Cell Facility SHALL limit the radiation dose rate at any accessible external surface to less than 7.5 microsieverts per hour during maximum foreseeable sample handling operations. Rationale: 7.5 microsieverts/hour at accessible external surfaces corresponds to the IRR17 Supervised Area threshold. Limiting the hot cell to this dose rate at accessible surfaces means the surrounding laboratory can be designated as a Supervised rather than Controlled Area, reducing access restrictions and operational overhead for personnel working near the cell. The value is derived from the maximum foreseeable source term (1E14 Bq gamma sources during dissolution of irradiated fuel element samples) and shielding calculations. Derives from STK-NEEDS-004. | Test | system, session-225 |
| SYS-REQS-004 | The Ventilation and Containment System SHALL maintain fume cupboard face velocities at 0.5 metres per second plus or minus 10% and laboratory room negative pressure differentials of at least 10 Pa relative to adjacent non-active areas. Rationale: 0.5 m/s face velocity is the BS EN 14175 recommended minimum for containment of hazardous substances in fume cupboards. The 10% tolerance band ensures consistent containment performance without excessive energy consumption. The 10 Pa negative pressure differential prevents migration of airborne contamination from active to non-active areas, establishing the containment hierarchy required by IRR17 and the facility safety case. Derives from STK-NEEDS-004. | Test | system, session-225 |
| SYS-REQS-005 | The Active Effluent Treatment Plant SHALL reduce total alpha activity in liquid effluent to less than 0.1 Bq/L and total beta activity (excluding tritium) to less than 10 Bq/L prior to authorised discharge. Rationale: The discharge limits of 0.1 Bq/L total alpha and 10 Bq/L total beta (ex-tritium) are typical Environmental Permit conditions for nuclear site liquid discharges to sewer or controlled waterway. These values are derived from the site radiological impact assessment and represent the activity concentrations at which downstream dose to members of the public remains a small fraction of the dose constraint. The effluent treatment plant must reduce activity from incoming levels (potentially thousands of Bq/L from hot cell drains) to these levels before discharge can be authorised. Derives from STK-NEEDS-003. | Test | system, session-225 |
| SYS-REQS-006 | The Ventilation and Containment System SHALL incorporate HEPA filters with a minimum efficiency of 99.97% at the most penetrating particle size on all active extract ductwork upstream of the discharge stack. Rationale: 99.97% efficiency at MPPS (0.3 micron) is the defining performance standard for HEPA filters per BS EN 1822 / ISO 29463. This filtration efficiency is required by the facility safety case to ensure particulate radioactive discharges from the ventilation stack remain within Environmental Permit limits. HEPA filtration on all active extract ductwork is a standard nuclear facility containment measure and a defence-in-depth barrier. Derives from STK-NEEDS-003 and STK-NEEDS-004. | Test | system, session-225 |
| SYS-REQS-007 | The Radio Chemistry Laboratory SHALL limit fissile material holdings in any single laboratory area to a maximum of 50 grams fissile equivalent, enforced by both administrative controls and engineered features including safe-geometry vessels. Rationale: The 50g fissile equivalent limit per location is a standard UK criticality safety approach for laboratories handling small quantities of fissile material. It is well below the minimum critical mass for any credible configuration and provides a substantial safety margin. Both administrative controls (inventory tracking, batch limits) and engineered features (safe-geometry vessels that cannot achieve a critical configuration regardless of moderation or reflection) are required as defence-in-depth. Derives from STK-NEEDS-007. | Inspection | system, session-225 |
| SYS-REQS-008 | The Laboratory Information Management System SHALL maintain an unbroken chain-of-custody record for every sample from receipt to result authorisation, with all data entries attributed to identified users and timestamped. Rationale: Chain-of-custody is a fundamental requirement of ISO/IEC 17025 accreditation and is essential for the legal and regulatory defensibility of analytical results. For a nuclear dockyard radiochemistry laboratory, results are used for reactor safety decisions, discharge compliance, and waste characterisation — all of which require auditable traceability from sample receipt through to authorised result. User attribution and timestamping support regulatory audit and investigation of any anomalous results. Derives from STK-NEEDS-005. | Demonstration | system, session-225 |
| SYS-REQS-009 | The Radio Chemistry Laboratory SHALL characterise solid radioactive waste packages to quantify all radionuclides contributing more than 1% of the total activity or more than 1% of any waste acceptance criterion limit. Rationale: The 1% threshold for radionuclide quantification in waste packages ensures that all radiologically significant nuclides are captured in waste records. This threshold is derived from typical waste acceptance criteria (e.g., LLWR WAC, GDF disposal system safety case) which require demonstration that the sum of fractions of individual radionuclide activity limits does not exceed unity. Omitting radionuclides contributing more than 1% could cause the waste package to fail WAC compliance assessment. Derives from STK-NEEDS-006. | Test | system, session-225 |
| SYS-REQS-010 | The Radio Chemistry Laboratory SHALL continuously monitor the active ventilation extract stack for particulate alpha activity, particulate beta activity, and iodine-131, with alarm set-points triggering at 10% of the derived air concentration limit. Rationale: Continuous stack monitoring is required by the Environmental Permit and the facility safety case to detect abnormal airborne releases in real time. The 10% of DAC alarm set-point provides early warning well before occupational exposure limits or discharge limits are approached, allowing operator intervention (increasing ventilation, isolating the source, evacuating if necessary). Monitoring for alpha, beta, and I-131 specifically covers the three principal airborne hazard categories from radiochemistry operations on reactor samples. Derives from STK-NEEDS-003 and STK-NEEDS-004. | Test | system, session-225 |
| SYS-REQS-011 | The Radio Chemistry Laboratory SHALL measure individual actinide isotope activities (Pu-238, Pu-239+240, Am-241, Cm-244) in aqueous samples to a minimum detectable activity of 0.01 Bq/L with isotope ratio determination. Rationale: Individual actinide isotope determination (Pu-238, Pu-239+240, Am-241, Cm-244) at 0.01 Bq/L MDA is required for waste characterisation (each isotope has different disposal limits and dose conversion factors) and for fuel integrity monitoring (isotope ratios indicate fuel burn-up and cladding condition). Alpha spectrometry after radiochemical separation is the standard technique. Without isotope-specific data, waste packages cannot be characterised to WAC requirements and coolant contamination sources cannot be diagnosed. Derives from STK-NEEDS-006 and STK-NEEDS-001. | Test | system, session-225 |
| SYS-REQS-012 | When a submarine reactor maintenance campaign is in progress, the Radio Chemistry Laboratory SHALL maintain at least one operational gamma spectrometry detector, one operational liquid scintillation counter, and sample preparation capability at all times. Rationale: During submarine reactor maintenance campaigns, the laboratory is on the critical path for reactor plant decisions. Loss of all gamma spectrometry, liquid scintillation counting, or sample preparation capability would halt the maintenance programme. Maintaining at least one operational unit of each key capability ensures the laboratory can continue to deliver priority results even during instrument failures or scheduled calibration. The EARS 'When' trigger scopes this requirement to campaign periods when the operational impact of laboratory unavailability is highest. Derives from STK-NEEDS-008. | Demonstration | system, session-225 |
| SYS-REQS-013 | The Radio Chemistry Laboratory SHALL incorporate an automatic fire detection and suppression system in all active areas, with fire detection in hot cell enclosures, waste stores, and fume cupboard extract ductwork, using detection and suppression agents that do not spread radioactive contamination or compromise containment integrity. Rationale: Fire in an active radiochemistry laboratory risks breaching containment and spreading contamination through thermal damage to gloveboxes, fume cupboard sashes, and HEPA filter banks. Standard aqueous suppression agents can spread contamination via runoff. The requirement for compatible detection and suppression derives from ONR Safety Assessment Principle EHA.1 (fire safety) and the need to maintain containment integrity during and after a fire event. Hot cell enclosures and ductwork are highest risk locations due to combustible materials and elevated dose rates limiting manual firefighting. | Test | system, fire-protection, session-238, duplicate-of-SYS-REQS-014 |
| SYS-REQS-014 | The Radio Chemistry Laboratory SHALL incorporate an automatic fire detection and suppression system in all active areas, with fire detection in hot cell enclosures, waste stores, and fume cupboard extract ductwork, using detection and suppression agents that do not spread radioactive contamination or compromise containment integrity. Rationale: DUPLICATE: This requirement duplicates SYS-REQS-013. Retained for traceability but superseded. See SYS-REQS-013 for the authoritative fire detection and suppression requirement. | Test | system, fire-protection, session-238 |
| SYS-REQS-015 | When mains electrical power is lost, the Radio Chemistry Laboratory SHALL maintain operation of all safety-critical monitoring systems including the stack discharge monitor, area gamma dose rate monitoring network, criticality warning system, and airborne contamination monitors on uninterruptible power supply for a minimum of 4 hours, with automatic changeover completing within 10 seconds. Rationale: Loss of mains power must not create a gap in safety monitoring. The stack discharge monitor provides the statutory evidence for environmental discharge compliance (RSA/EPR permit); area gamma monitors underpin worker dose assessments; the criticality warning system is a safety-critical alarm per Nuclear Site Licence Condition 26. The 4-hour UPS duration derives from typical site generator start-up plus margin for delayed diesel delivery. The 10-second changeover ensures no loss of monitoring data points at the typical 1-minute sampling interval. | Test | system, emergency-power, session-238 |
| SYS-REQS-016 | The Radio Chemistry Laboratory SHALL be designed to the site-specific seismic qualification level such that all primary containment barriers, shielding structures, and safety-critical monitoring systems remain functional following a design basis earthquake with a return period of 10000 years. Rationale: ONR Safety Assessment Principle EHA.7 (seismic) requires nuclear facilities to withstand design basis earthquakes without loss of containment or safety function. The 10,000-year return period is standard for UK nuclear facilities handling intermediate-level waste quantities. Primary containment barriers (hot cell walls, biological shielding) and safety-critical monitoring must maintain structural integrity to prevent uncontrolled release of radioactive material during and after a seismic event. | Analysis | system, seismic, session-238 |
| SYS-REQS-017 | The Radio Chemistry Laboratory SHALL use surface finishes on all active area floors, walls, and ceilings that achieve a decontamination factor of at least 100 for the reference radionuclide mix (Cs-137, Sr-90, Co-60, Am-241) using standard decontamination procedures, and SHALL avoid embedded pipework or services within shielding structures where they would create decommissioning waste volumes disproportionate to the activity contained. Rationale: Decontamination factor of 100 ensures surfaces can be cleaned to free-release levels for the reference radionuclide mix encountered in submarine reactor chemistry analysis. Embedded pipework within shielding creates secondary waste during decommissioning that is disproportionate to the original contamination — a lesson from legacy UK nuclear facility decommissioning (e.g., Windscale laboratories). Surface-mounted, drainable services enable decommissioning without demolishing shielding structures, reducing both waste volume and worker dose. | Test | system, decommissioning, session-238 |
| SYS-REQS-018 | The Radio Chemistry Laboratory SHALL implement multi-layer physical access control comprising perimeter intrusion detection, building access control with biometric authentication, and nuclear material storage areas with dual-person access and real-time monitoring linked to the site security control room. Rationale: Multi-layer physical protection is required by NISR 2003 Category III material holding requirements and DNSR security policy. Biometric authentication prevents credential sharing. Dual-person access to nuclear material stores implements the two-person rule for accountable material, preventing single-person diversion. Real-time monitoring linked to the site security control room ensures immediate response to intrusion events, meeting ONR CNS expectations for detection-to-response timelines. | Inspection | system, security, session-238 |
| Source | Target | Type | Description |
|---|---|---|---|
| STK-NEEDS-004 | SYS-REQS-013 | derives | |
| STK-NEEDS-002 | SYS-REQS-013 | derives | |
| STK-NEEDS-010 | SYS-REQS-018 | derives | |
| STK-NEEDS-009 | SYS-REQS-017 | derives | |
| STK-NEEDS-002 | SYS-REQS-016 | derives | |
| STK-NEEDS-011 | SYS-REQS-015 | derives | |
| STK-NEEDS-002 | SYS-REQS-015 | derives | |
| STK-NEEDS-004 | SYS-REQS-014 | derives | |
| STK-NEEDS-002 | SYS-REQS-014 | derives | |
| STK-NEEDS-008 | SYS-REQS-012 | derives | |
| STK-NEEDS-006 | SYS-REQS-011 | derives | |
| STK-NEEDS-005 | SYS-REQS-011 | derives | |
| STK-NEEDS-003 | SYS-REQS-010 | derives | |
| STK-NEEDS-006 | SYS-REQS-009 | derives | |
| STK-NEEDS-002 | SYS-REQS-008 | derives | |
| STK-NEEDS-005 | SYS-REQS-008 | derives | |
| STK-NEEDS-007 | SYS-REQS-007 | derives | |
| STK-NEEDS-004 | SYS-REQS-006 | derives | |
| STK-NEEDS-003 | SYS-REQS-006 | derives | |
| STK-NEEDS-003 | SYS-REQS-005 | derives | |
| STK-NEEDS-004 | SYS-REQS-004 | derives | |
| STK-NEEDS-003 | SYS-REQS-004 | derives | |
| STK-NEEDS-004 | SYS-REQS-003 | derives | |
| STK-NEEDS-003 | SYS-REQS-002 | derives | |
| STK-NEEDS-001 | SYS-REQS-002 | derives | |
| STK-NEEDS-005 | SYS-REQS-001 | derives | |
| STK-NEEDS-001 | SYS-REQS-001 | derives |