NASA's 40 kW lunar fission program has a sensor problem first

What the work claims

This is a program-status and gap-analysis presentation, not a hardware result. The webinar, hosted by the Department of Energy's Idaho National Laboratory on August 26, 2025, reports three concrete institutional outcomes of NASA's 2024 Fission Instrumentation and Controls for Space (FICS) workshop: a live centralized database of candidate I&C devices called FSP-CINDI (Controls and Instrumentation Database Interface), a FICS working group organized around sensor needs, and a draft NASA I&C technology development path for the 40 kW fission surface power system.¹

The draft path is the substantive content. It assigns notional environmental conditions to each subsystem location on the power chain, from the PMAD bay through the conversion loop and control drums to in-core instrumentation, and it pairs that ladder with a reliability and validation matrix covering temperature, radiation, vibration, vacuum, sensitivity coefficients, response times, linearity, hysteresis, and offset stability. The presentation is explicit that this is maturation work for the 40 kW Space Technology Mission Directorate project, and it carries a clarification slide stating the material does not represent or promote the more recent NASA directive to procure a 100 kW FSP system.¹

How it works

The engineering logic starts from four reactor attributes that each convert directly into an instrumentation requirement: the system is compact, so instruments must be small, multifunctional, and fit within the form factor; it is autonomous, so instruments must support preemptive fault response and corrective action without ground operators in the loop; it has a 10-year operational life with no possibility of maintenance or replacement; and its reliability must be validated by protocol rather than by repair history. Instruments will sit both in-core and ex-core, and the stated de-risking strategy is layered redundancy aimed at a zero failure margin.¹

The gap analysis then quantifies the survivability problem. Across the 40 kW system the relevant environments span neutron fluence from 10^12 to 10^21 n/cm², gamma dose from 30 krad to 8x10^10 krad (silicon), and temperature from 350 to 1250 K.¹ On the draft development path, the ladder sharpens into per-location assignments: the PMAD bay faces 325 to 500 K, 10^8 n/cm²·s neutron flux, 10^12 n/cm² fluence, and 300 krad of gamma; the conversion loop, radiator, and heat exchangers sit near 10^8 flux, 10^14 fluence, and 10 Mrad; and in-core instrumentation faces above 1200 K, 10^12 n/cm²·s flux, 10^21 n/cm² fluence, and 8x10^10 krad. Every one of those path values carries the slide's own disclaimer: they are notional and do not represent any specific system requirement.¹

The sensor census behind the path lists fourteen instrument types, from in-core and ex-core radiation detectors, temperature, pressure, flow, strain, speed, position, vibration, tilt, and potentiometric sensors to hydrogen and electromagnetic sensors, each mapped to notional environmental ranges; pressure transducers, for example, are scoped for 900 to 1500 kPa at 900 to 1200 K, and flow sensors for 0.05 to 0.5 kg/s with no flow intrusion. The presentation notes the performance-characteristics column of that table is yet to be completed. CINDI supports the gap work by cataloging devices from the literature with sortable temperature and radiation fields and source attribution, and the working group is running a test case on sensor needs for a nuclear thermal propulsion reactor.¹

The strongest case for taking it seriously

The method is right. Treating instrumentation as a first-class subsystem with its own gap analysis, database, and working group is how mature industries close hard qualification problems, and the presentation leans deliberately on heritage: terrestrial nuclear power plant I&C requirements are described as largely the same as FSP's, with lessons from SNAP-10A and earlier space reactor instrumentation explicitly invoked to accelerate development.¹

Just as important is the honesty of the artifact. The environmental ladder is published with its notional disclaimer intact, the unfinished performance-characteristics column is admitted on the slide, and open questions are named rather than hidden, including which reliability standards to adopt or introduce, and whether to qualify by highly accelerated testing, reliability physics models, or both. The webinar agenda also shows the maturation work is coupled to real component-level activity: evaluation of unshielded silicon carbide pressure and temperature sensors, risk reduction on Stirling controllers, PMAD work, and lunar dust radiator testing were all on the same program.¹

Where a skeptic should push

The single most load-bearing assumption is that in-core sensing at 10^21 n/cm² and 8x10^10 krad (Si) is achievable at all with instruments that carry their own electronics. For calibration: the PMAD bay's 300 krad is already a hard space-radiation environment, and the in-core figure is roughly eight orders of magnitude beyond it. No commercial or space-qualified electronics approach the in-core number; if in-core instruments are to exist, they will likely be passive or minimally electronic transducers read from ex-core, which means measurement fidelity, calibration drift, and single-point-failure redundancy all degrade exactly where the reactor's safety case needs the most information. The draft path does not yet resolve this; its difficulty matrix colors control drums and in-core as the hardest cells, which is an admission, not a solution.¹

Second, a database of literature values is not qualification data. CINDI catalogs what has been reported; it does not irradiate parts. The 10-year, no-maintenance reliability protocol that the gap analysis calls for does not yet exist, and the presentation's own open question about standards shows the field has not decided how to validate a decade of drift-free operation on a system that cannot be serviced. Third, schedule context matters: this webinar covers maturation under the 40 kW STMD project and explicitly disclaims the newer 100 kW procurement directive, so none of this work should be read as evidence that a flight system's I&C is anywhere near ready. TRL honesty requires saying plainly: this is bench, literature, and workshop-stage infrastructure.¹

What reactor-grade sensing means for space power

The non-obvious implication is that radiation sets the control architecture, not just the component list. Because nothing electronic survives in-core, the control system of a lunar reactor must be designed around degraded sensing from day one: ex-core inference, passive in-core transducers, and layered redundancy that tolerates instruments failing silently over a decade. That pushes FSP's PMAD toward distributed, radiation-tolerant intelligence at the benign end of the ladder and dumb, robust sensors at the harsh end, with the hardest engineering problem being the software and physics models that reconstruct core state from incomplete measurements. The draft path's own structure, sensors mapped against subsystem locations, is effectively the first public sketch of that architecture.

The genuine threat is schedule inversion. Reactors historically mature on the pace of their hardest subsystems, and this record makes a strong case that I&C, not the core or the convertor, is the long pole: the performance column of the sensor census is empty, the reliability protocol is undefined, and the hardest environmental cells are unoccupied by any demonstrated device. A flight unit can be structurally complete while its control authority is still unqualified, and ten years of unattended operation is a requirement no space power system has ever met.

The opportunity is that the environmental ladder is a reusable procurement map. The rungs from 300 krad to 8x10^10 krad, each tied to a named subsystem location, give any sensor or electronics vendor a precise entry point matching their parts, and CINDI plus the working group lowers the coordination cost of filling the ladder across government and industry. Silicon carbide sensor work aimed at the hot, radioactive end of a fission loop has obvious carryover to any harsh-environment power electronics, from nuclear-electric propulsion to Venus surface power, so the database compounds in value beyond FSP itself.¹

The bottom line

Established, with high confidence: NASA has structured the FSP instrumentation problem seriously, with a quantified survivability range (neutron fluence 10^12 to 10^21 n/cm², gamma 30 krad to 8x10^10 krad (Si), 350 to 1250 K), a device database, a working group, and a draft development path whose notional status is openly flagged. Established, with high confidence: the in-core end of that ladder exceeds demonstrated electronics by orders of magnitude, so flight-ready in-core instrumentation does not exist today. Unresolved, and the crux: whether ex-core inference plus layered redundancy can deliver the safety case without true in-core smarts. What would confirm the path is irradiation and life-test data flowing into CINDI as qualification results rather than literature entries; what would break it is the 10-year reliability protocol failing to materialize, leaving the reactor design to freeze around sensors that cannot be validated.