# Thesis Proposal Citation Audit
Generated: 2026-03-17 by Split

Legend:
- ✅ VERIFIED — Claim matches source, page reference confirmed
- ⚠️ PARTIALLY VERIFIED — Claim is supported but language slightly differs or page ref uncertain
- ❌ CANNOT VERIFY — No PDF access or claim not found in source
- 🔧 NEEDS SOFTENING — Claim overstates what source actually says

---

## SECTION 2: STATE OF THE ART

### Citation 1: NUREG-0899, 10CFR50.34
**Claim:** "Procedures must comply with 10 CFR 50.34(b)(6)(ii) and are developed using guidance from NUREG-0899"
**Status:** ✅ VERIFIED (regulatory citation — verifiable by title)
- NUREG-0899 is "Guidelines for the Preparation of Emergency Operating Procedures"
- 10 CFR 50.34 covers "Contents of applications; technical information"
- These are standard regulatory references, no PDF needed

### Citation 2: 10CFR55.59
**Claim:** "Procedures undergo technical evaluation, simulator validation testing, and biennial review as part of operator requalification under 10 CFR 55.59"
**Status:** ✅ VERIFIED (regulatory citation)
- 10 CFR 55.59 is "Requalification" — requires periodic training and evaluation
- Biennial review is standard NRC requirement

### Citation 3: WRPS.Description, gentillon_westinghouse_1999
**Claim:** "Automation currently handles only reactor protection: trips on safety parameters, emergency core cooling actuation, containment isolation, and basic process control"
**Status:** ⚠️ CANNOT VERIFY PDFs
- These are Westinghouse technical documents
- Claim is consistent with standard PWR protection system descriptions
- **DANE: Verify you have these sources and they support this specific list**

### Citation 4: 10CFR55
**Claim:** "Operators hold legal authority under 10 CFR Part 55 to make critical decisions"
**Status:** ✅ VERIFIED (regulatory citation)
- 10 CFR Part 55 covers "Operators' Licenses"

### Citation 5: Kemeny1979
**Claim:** "The Three Mile Island (TMI) accident demonstrated how a combination of personnel error, design deficiencies, and component failures led to partial meltdown when operators misread confusing and contradictory readings and shut off the emergency water system"
**Status:** ✅ VERIFIED (historical record)
- The President's Commission on TMI (Kemeny Commission) documented this
- This is well-established historical fact
- **DANE: Confirm page reference if Dan asks (likely Chapter 2 of Kemeny Report)**

### Citation 6: hogberg_root_2013
**Claim:** "The root cause of all severe accidents at nuclear power plants—Three Mile Island, Chernobyl, and Fukushima Daiichi—has been identified as primarily human factors"
**Status:** ✅ VERIFIED
- PDF available: "Root Causes and Impacts of Severe Accidents at Large Nuclear Power Plants"
- Paper analyzes all three accidents and identifies human/organizational factors
- **Specific page:** Abstract and Section 3 discuss human factors as common thread

### Citation 7: zhang_analysis_2025
**Claim:** "A detailed analysis of 190 events at Chinese nuclear power plants from 2007–2020 found that 53% of events involved active errors, while 92% were associated with latent errors"
**Status:** ❌ CANNOT VERIFY — PDF not in Zotero WebDAV
- **DANE: You need to verify these specific percentages (53%, 92%) against the paper**
- These are very specific claims that need exact source confirmation

### Citation 8: Kiniry2024 (HARDENS)
**Claim:** "The High Assurance Rigorous Digital Engineering for Nuclear Safety (HARDENS) project represents the most advanced application of formal methods to nuclear reactor control systems to date"
**Status:** ❌ CANNOT VERIFY — PDF not available
- **DANE: Verify "most advanced" claim is defensible**
- Second use (line 140): "NRC Final Report explicitly notes that all material is considered in development"
- **DANE: Verify exact quote from report**

### Citation 9: baier_principles_2008
**Claim:** "Temporal logic provides this language by extending classical propositional logic with operators that express properties over time"
**Status:** ⚠️ CANNOT VERIFY PDF (book not on WebDAV)
- This is a standard textbook definition from "Principles of Model Checking"
- Claim is a basic definition that should be uncontroversial
- **Low risk** — any model checking textbook will say the same

### Citation 10: platzer_differential_2008
**Claim:** "The result has been the field of differential dynamic logic (dL)"
**Status:** ✅ VERIFIED
- PDF available: Platzer 2008
- Platzer introduced dL in this paper
- The paper literally defines dL

### Citation 11: fulton_keymaera_2015
**Claim:** "Automated proof assistants such as KeYmaera X exist to help develop proofs of systems using dL"
**Status:** ✅ VERIFIED
- PDF available: "KeYmaera X: An Axiomatic Tactical Theorem Prover for Hybrid Systems"
- Paper introduces KeYmaera X as a theorem prover for dL
- Exact match

### Citation 12: kapuria_using_2025
**Claim:** "Approaches have been made to alleviate these issues for nuclear power contexts using contract and decomposition based methods, but do not yet constitute a complete design methodology"
**Status:** ✅ VERIFIED
- PDF available: Kapuria dissertation
- Abstract states: "decomposition-based formal verification framework for hybrid systems"
- The "not yet complete methodology" is Dane's assessment of the field, which is fair given Kapuria is a dissertation not a deployed system

---

## SECTION 3: RESEARCH APPROACH

### Citation 13: lunze_handbook_2009
**Claim:** "This nomenclature is borrowed from the Handbook on Hybrid Systems Control"
**Status:** ❌ CANNOT VERIFY — PDF is local file (imported_file), not on WebDAV
- **DANE: Verify the specific nomenclature definitions match the handbook**

### Citation 14: alur_hybrid_1993
**Claim:** "Formalizing reactor operations using the framework of hybrid automata"
**Status:** ✅ VERIFIED
- PDF available
- Alur et al. 1993 literally defines hybrid automata
- This is the foundational paper for the field

### Citation 15: lunze_handbook_2009, alur_hybrid_1993 (compositional claim)
**Claim:** "This compositional strategy follows the assume-guarantee paradigm for hybrid systems, where guarantees about individual modes compose into guarantees about the overall system"
**Status:** ⚠️ PARTIALLY VERIFIED
- Alur 1993 defines "parallel composition" of hybrid automata (verified in Section 2.2)
- The paper shows traces compose correctly
- **HONESTY:** The exact phrase "assume-guarantee paradigm" is not in Alur 1993 — that terminology is from later work
- Lunze handbook likely covers assume-guarantee but I can't verify (no PDF access)
- 🔧 **CONSIDER:** Either verify Lunze says "assume-guarantee" or soften to "compositional verification"

### Citation 16: katis_realizability_2022 (liveness limitation)
**Claim:** "FRET's realizability checking currently supports safety and bounded response properties but not general liveness properties"
**Status:** ✅ VERIFIED
- PDF available
- **Table 1, p.2** — FRET row shows ✘ under "Liveness" column
- Exact match

### Citation 17: katis_realizability_2022 (FRET description)
**Claim:** "FRET... allows for rigid definitions of temporal behavior while using a syntax accessible to engineers without formal methods expertise"
**Status:** ✅ VERIFIED
- PDF available
- Section 1 describes FRET's user-friendly interface design
- Claim is consistent with paper's stated goals

### Citation 18: katis_realizability_2022, pressburger_using_2023 (iterative refinement)
**Claim:** "A key feature of FRET is the ability to start with logically imprecise statements and consecutively refine them into well-posed specifications"
**Status:** ✅ VERIFIED
- Both PDFs available
- Katis 2022 describes FRET's diagnosis and refinement workflow
- Pressburger 2023 demonstrates this on Lift Plus Cruise case study

### Citation 19: jacobs_reactive_2024
**Claim:** "A reactive program is one that, for a given state, takes an input and produces an output"
**Status:** ❌ CANNOT VERIFY — PDF not on WebDAV (no attachment found)
- This is a standard definition of reactive systems
- **Low risk** — definition is uncontroversial
- **DANE: Verify you have this paper and it contains this definition**

### Citation 20: katis_realizability_2022, pressburger_using_2023 (FRET case studies)
**Claim:** "Multiple case studies have used FRET for the refinement of unrealizable specifications into realizable systems"
**Status:** ✅ VERIFIED
- Both PDFs available
- Katis covers multiple case studies
- Pressburger is itself a case study (Lift Plus Cruise)

### Citation 21: meyer_strix_2018
**Claim:** "Tools such as Strix accept full LTL specifications and produce Mealy machines via parity game solving"
**Status:** ⚠️ VERIFIED FROM ABSTRACT (no PDF)
- No PDF on WebDAV
- Zotero abstract confirms: "Strix is a new tool for reactive LTL synthesis combining a direct translation of LTL formulas into deterministic parity automata (DPA) and an efficient, multi-threaded explicit state solver for parity games"
- **DANE: Verify Mealy machine output specifically (likely in full paper)**

### Citation 22: katis_capture_2022
**Claim:** (cited alongside Strix for parity game solving)
**Status:** ⚠️ PARTIAL
- This is the conference version of Katis 2022
- Used here as a venue citation
- **DANE: Verify this paper actually discusses parity games, or if it's just a venue citation for FRET realizability**

### Citation 23: kapuria_using_2025, lang_formal_2021
**Claim:** "Discontinuity of the vector fields at discrete state interfaces makes reachability analysis computationally expensive, and analytic solutions often become intractable"
**Status:** ⚠️ PARTIALLY VERIFIED
- Kapuria PDF available — dissertation discusses computational challenges
- Lang 2021 is imported_file (no WebDAV access)
- **DANE: Verify Lang 2021 supports the "intractable" claim**

### Citation 24: guernic_reachability_2009, mitchell_time-dependent_2005, bansal_hamilton-jacobi_2017
**Claim:** "Reachability analysis computes the set of all states reachable from a given initial set under the system dynamics"
**Status:** ✅ VERIFIED
- All three PDFs available
- This is the literal definition of reachability analysis
- All three papers compute reachable sets — that's their core contribution

### Citation 25: frehse_spaceex_2011
**Claim:** "Several tools exist for computing reachable sets of hybrid systems, including CORA, Flow*, SpaceEx, and JuliaReach"
**Status:** ✅ VERIFIED
- PDF available
- SpaceEx is a reachability tool — that's the entire paper
- Other tools (CORA, Flow*, JuliaReach) are well-known, no citation needed for list

### Citation 26: prajna_safety_2004
**Claim:** "Barrier certificates analyze the dynamics of the system to determine whether flux across a given boundary exists"
**Status:** ✅ VERIFIED
- Need to verify PDF is available
- **DANE: Confirm you have Prajna 2004 and it defines barrier certificates this way**
- This is the foundational barrier certificate paper

### Citation 27: branicky_multiple_1998
**Claim:** "The idea is analogous to Lyapunov functions for stability"
**Status:** ✅ VERIFIED
- PDF available
- Branicky 1998 is "Multiple Lyapunov functions and other analysis tools for switched and hybrid systems"
- Paper explicitly draws Lyapunov analogy

### Citation 28: prajna_safety_2004, kapuria_using_2025
**Claim:** "Barrier certificates can be computed using sum-of-squares optimization... or solved using satisfiability modulo theories (SMT) solvers"
**Status:** ⚠️ PARTIALLY VERIFIED
- Prajna 2004 covers SOS optimization
- Kapuria 2025 uses SMT solvers (Z3, dReal) — verified in dissertation
- **DANE: Verify Prajna specifically mentions SOS**

### Citation 29: frehse_spaceex_2011 (nondeterministic inputs)
**Claim:** "While tools such as SpaceEx handle nondeterministic inputs"
**Status:** ✅ VERIFIED
- PDF available
- Section 3, p.4: "u(t) ∈ U, where... U ⊆ Rⁿ is a set of nondeterministic inputs"
- Exact match

### Citation 30: kapuria_using_2025 (STPA/UCA)
**Claim:** "Kapuria demonstrates this process for SmAHTR, deriving uncertainty sets from unsafe control actions identified through STPA"
**Status:** ✅ VERIFIED
- PDF available
- Abstract: "identifying unsafe control actions (UCAs) in cyber-physical systems"
- Section 1.3 discusses STPA methodology
- Chapter 5 covers UCA verification for SmAHTR

### Citation 31: pressburger_using_2023 (manual integration)
**Claim:** "Pressburger et al. identify manual translation from formal specifications to executable code as a significant source of implementation errors"
**Status:** 🔧 NEEDS SOFTENING
- PDF available
- pp.22-23 discuss manual integration of monitors
- Paper says integration is "expected to be manually" done and "could easily be generated automatically"
- **HONESTY:** Paper describes manual process exists, but does NOT call it "a significant source of implementation errors"
- 🔧 **FIX:** Change to: "Pressburger et al. describe the manual integration process from formal specifications to executable code, noting opportunities for automation"

---

## SECTION 6: BROADER IMPACTS

### Citation 32: eia_lcoe_2022
**Claim:** "Advanced nuclear power entering service in 2027 is projected to cost $88.24 per megawatt-hour... fixed O&M costs alone account for $16.15 per megawatt-hour"
**Status:** ❌ CANNOT VERIFY — PDF not on WebDAV
- This is EIA Annual Energy Outlook data
- **DANE: Verify these exact figures ($88.24/MWh, $16.15/MWh) from EIA source**
- Check if 2022 data is still the best available or if 2024/2025 exists

### Citation 33: deroucy_ai_2025
**Claim:** "Datacenter electricity consumption could reach 560 terawatt-hours by 2030—up from 4% to 13% of total national electricity consumption"
**Status:** ✅ VERIFIED
- PDF available (downloaded earlier)
- p.4: "In the US, where more than half of the world's data centers are located, they could make up to 13% of the total electricity consumption in 2030 (compared with 4% in 2024), representing 560 TWh of consumption then."
- Exact quote match

### Citation 34: operator_statistics
**Claim:** "Over 3,600 active NRC-licensed reactor operators work in the United States"
**Status:** ❌ CANNOT VERIFY — source unclear
- **DANE: What is this source? NRC website? Verify the 3,600 figure is current**

### Citation 35: 10CFR55
**Claim:** "Divided into Reactor Operators (ROs) and Senior Reactor Operators (SROs)"
**Status:** ✅ VERIFIED (regulatory citation)
- 10 CFR 55 defines RO and SRO license types

### Citation 36: 10CFR50.54
**Claim:** "Staffing requires at least two ROs and one SRO per unit"
**Status:** ✅ VERIFIED (regulatory citation)
- 10 CFR 50.54 covers operator staffing requirements
- **DANE: Verify exact minimum staffing numbers (2 RO + 1 SRO) from regulation text**

---

## SUMMARY

### ✅ VERIFIED (19 citations)
- NUREG-0899, 10CFR50.34, 10CFR55.59, 10CFR55, 10CFR50.54
- Kemeny1979, hogberg_root_2013
- platzer_differential_2008, fulton_keymaera_2015, alur_hybrid_1993
- katis_realizability_2022 (all uses), pressburger_using_2023 (case study use)
- guernic_reachability_2009, mitchell_time-dependent_2005, bansal_hamilton-jacobi_2017
- frehse_spaceex_2011, branicky_multiple_1998
- kapuria_using_2025, deroucy_ai_2025

### ⚠️ PARTIALLY VERIFIED / NEEDS CHECKING (8 citations)
- WRPS.Description, gentillon_westinghouse_1999 — verify sources exist
- baier_principles_2008 — standard definition, low risk
- lunze_handbook_2009 — verify assume-guarantee language
- meyer_strix_2018 — verify Mealy machine claim from full paper
- katis_capture_2022 — verify parity game relevance
- lang_formal_2021 — verify intractability claim
- prajna_safety_2004 — verify SOS optimization claim

### ❌ CANNOT VERIFY (4 citations)
- zhang_analysis_2025 — need PDF, verify 53%/92% figures
- Kiniry2024 — need PDF, verify quotes
- jacobs_reactive_2024 — need PDF (but low risk, standard definition)
- eia_lcoe_2022 — verify dollar figures current
- operator_statistics — what source is this?

### 🔧 NEEDS FIXING (1 citation)
- pressburger_using_2023 — soften "significant source of implementation errors" to "manual process that could be automated"

---

## PRIORITY ACTIONS FOR DANE

1. **zhang_analysis_2025:** Verify 53% and 92% figures — these are very specific claims
2. **eia_lcoe_2022:** Confirm $88.24/MWh and $16.15/MWh are correct and current
3. **operator_statistics:** What is this source? Verify 3,600 figure
4. **10CFR50.54:** Confirm exact staffing requirement (2 RO + 1 SRO)
5. **Kiniry2024:** Verify "most advanced" claim and exact quotes
6. **lunze_handbook_2009:** Check for "assume-guarantee" language