RPS Pool Concept: fail-safe Stirling radioisotope power
Dynamic radioisotope power has one deep structural problem: in the usual paired architecture, the plutonium heat sources can only be cooled while the Stirling convertors keep running, so a mechanism failure becomes a fuel-safety failure. A 2015 NASA/JPL architecture proposal, the RPS Pool Concept, attacks that coupling directly with a shared liquid-metal heat pool, cold-spare convertors, and a radiator that dumps heat to space with every machine off.
Source: Radioisotope Power System Pool Concept (Rusick, NASA Glenn RPS Program Mission Assurance; Bolotin, JPL), Nuclear and Emerging Technologies for Space (NETS) 2015, Albuquerque, NASA NTRS 20150002849. Primary source. Read: the full 8-slide presentation PDF retrieved from NTRS, with the garbled text layer verified against rendered slide images.
What the work claims
This is an architecture proposal, and the record is explicit that it is a concept: the abstract says a "new dynamic Stirling cycle RPS architecture is proposed," motivated by the fact that Stirling conversion offers energy conversion efficiencies four times higher than heritage thermoelectric designs, but that in certain Stirling system architectures the radioisotope heat sources must be actively cooled by the dynamic operation of the convertors throughout the mission life cycle.1 The proposal: put N General Purpose Heat Source (GPHS) modules in a pool of liquid NaK (sodium-potassium alloy) inside a cylindrical pressure vessel, let N Advanced Stirling Convertors (ASCs) draw heat from that shared pool through their heater heads, and gain reliability from the sharing itself. The slides state a modular design variable in the number of convertors and heat sources, producing up to 1 kWe of DC power, with 18 convertors of 80 W or higher running in parallel given as the configuration that provides about 1 kWe.1
How it works
The building block is the Advanced Stirling Convertor, a free-piston engine with a Heater Head (HH) at the hot end and a Cold Side Adapter Flange (CSAF) at the cold end; the CSAF is cooled by a low-temperature space radiator and the HH is heated by the hot NaK.1 The architecture drawing shows a cylindrical pressure vessel roughly 1 m tall and 0.6 m in outer diameter with a central GPHS stack of about 0.4 m diameter, surrounded by a NaK pool annulus; electric-motor-driven mixers circulate the NaK to minimize temperature gradients.1 Because the vessel is held at low pressure, the pool can run hot without boiling: the slides state a ceiling of 785 C, NaK's boiling point, as the highest allowable NaK temperature.1 A high-temperature radiator lining the vessel can reject GPHS heat directly to space, and a thermal shadow shield opens fully to cool all GPHS modules if no convertors are running, or partially when some are running.1
The control architecture mirrors the redundancy. An Advanced Controller Unit (ACU) runs the N convertors and produces DC power, with one controller card per ASC plus spare cards; cards can be power-cycled to reset bit errors, and ASC control can be transferred from a failed card to a backup.1 Each ASC carries a vibration damper, so individual convertors can be switched on and off without inducing large spacecraft vibrations.1 The GPHS modules ride in a canister that can be inserted at the launch cape, so storage and spacecraft integration proceed without any convertor running.1
The strongest case for it
The steelman is that the concept converts the central liability of dynamic radioisotope power into an operations variable. If GPHS heat is shared through the pool, any single ASC can be a cold spare: the slides state that individual convertors can be turned on and off while others pick up the heat load, and that intermediate power levels are reached by staging convertors, dumping unused heat through the high-temperature radiator or using it to warm critical spacecraft components.1 That last option is genuinely elegant: waste heat, normally a disposal problem, becomes a thermal resource for the host spacecraft. The same sharing means the safe mode no longer depends on mechanism health: with all convertors and controllers off, the GPHS modules are passively cooled by the high-temperature radiator as long as stored energy is available on the spacecraft.1 Redundancy is bought with cheap elements (extra convertors, the slides suggest a 25 percent margin as an example) rather than duplicated heat sources, which are the expensive and scarce part.1
Where a skeptic should push
The most load-bearing assumption is that a shared pool reduces rather than relocates failure modes, and the record contains no evidence either way: eight slides, no test data, no mass breakdown, no stated conversion efficiency, no vibration measurement, and no thermal cycling results. Every reliability claim is an architectural argument. The pool adds hardware the thermoelectric baseline does not have: a pressure vessel, a NaK inventory that must survive launch, years of storage, and deep-space thermal cycling without freezing or leaking; moving mixers; a deployable thermal shield; and 18 mechanisms where an RTG has none.1 The 785 C NaK boiling ceiling caps how hot the convertor heater heads can run, and Stirling efficiency is set by hot-end temperature, so the pool's safety margin may cost exactly the efficiency that justifies a dynamic system at all; the slides give no number to settle that trade. TRL honesty matters here: this is a proposed architecture on slides, not a bench demonstration, and its own motivation (the ASRG effort) was a program whose flight hardware was built but never assigned a mission, which is a reminder that elegant Stirling architectures have historically died at the manifest, not in the converter.1
Shared heat pools rewrite dynamic RPS math
The non-obvious implication reaches beyond radioisotope systems: any heat-source-limited power architecture, including fission surface reactors, faces the same coupling between mechanism uptime and heat-source safety. A liquid-metal pool decouples them. Once the heat source lives in a circulating pool, converter count becomes an operations decision rather than a reliability ceiling, and converter lifetime becomes a consumable budget: run fewer machines during cruise and storage, spool up for high-power phases, and treat redundancy as cold spares sharing one heat source instead of parallel strings each needing its own.1 That reframes reliability engineering for dynamic space power from "build one machine that never stops" to "build a fleet you can rest."
The genuine threat is the common-mode element the architecture introduces: one vessel, one liquid metal, one shield mechanism standing between the heat source and space. A leak or freeze event in the pool is a failure no amount of convertor redundancy covers, and the thermoelectric baseline simply does not have that failure surface.1 The opportunity is the pairing of modularity with thermal integration: the same slides that size the unit at up to 1 kWe describe dumping excess heat to warm critical spacecraft components, which is exactly the kind of power-thermal co-design that surface habitats and long-lived landers need, and the variable-N structure scales from a Discovery-class unit toward the kilowatt-class fission-dynamic systems NASA was already contemplating in the same period.1
The bottom line
Established by the record: a coherent, physically plausible architecture for sharing GPHS decay heat among a variable fleet of Stirling convertors, with explicit provisions for passive heat-source cooling, controller-level redundancy, and vibration-isolated unit switching, targeting up to 1 kWe. Claimed but undemonstrated: every reliability benefit, which are design intentions on eight slides without accompanying test data, mass, or efficiency figures. Confidence: moderate that heat pooling is the right direction for dynamic RPS reliability, because it removes the specific active-cooling coupling the abstract identifies; low that this configuration would fly without substantial breadboarding, since NaK plumbing, freeze-thaw behavior, and 18-unit vibration management are exactly the kind of details slide architectures get wrong. What would confirm it: a pumped or pool-loop brassboard running convertor on-off cycling and no-convertor heat rejection in vacuum; what would break it: a thermal analysis showing the 785 C ceiling erases the efficiency advantage over thermoelectrics, or a common-cause review showing the vessel dominates the failure budget.
Frequently asked questions
What problem is the Pool Concept trying to solve?
Stirling convertors convert heat to electricity at about four times the efficiency of thermoelectric couples, but in certain Stirling architectures the plutonium heat sources can only be cooled while the convertors are running. That makes a mechanism stoppage a heat-source safety event. The concept shares the heat among many convertors through a NaK pool so any one of them can stop while the others, or a dedicated radiator, keep the heat sources cool.
Why NaK, and what limits its temperature?
NaK is a sodium-potassium liquid metal used as a heat-transfer fluid, chosen here because it can carry the GPHS decay heat from a central stack to the convertor heater heads around it. The slides state the design keeps the vessel at low pressure with the highest NaK temperature below 785 C, NaK's boiling point, so the pool circulates as liquid without pressurization.
How much power does the concept target?
The slides describe a modular system in which a variable number of convertors and heat sources can be integrated to produce up to 1 kWe of DC power. The sizing example given is 18 convertors of 80 W or higher running in parallel for about 1 kWe, with intermediate power levels reached by switching convertors on and off and an example margin option of 25 percent extra convertors.
What happens if all the convertors stop?
Nothing catastrophic, by design. A high-temperature radiator can reject GPHS heat directly to space, and a thermal shadow shield opens completely when no convertors are running to fail-safe cool all the heat-source modules. The slides also describe a Stirling-generator safe mode with all convertors and controllers off, keeping the heat sources passively cooled as long as the spacecraft has stored energy.
How mature is the concept?
It is a 2015 architecture proposal presented at NETS 2015 by a NASA Glenn mission assurance manager and a JPL systems engineer. The record is an eight-slide presentation with no test data, mass estimate, or efficiency figure, so every reliability benefit should be read as a design intention, not a demonstrated result.
Why turn individual convertors on and off at all?
Three reasons given in the slides. First, redundancy: a cold spare convertor can be started if a running one fails. Second, lifetime: convertors can stay off during storage, launch-cape integration, and cruise phases, saving mechanism life for when power is needed. Third, margin and housekeeping: excess heat not used in the Stirling cycle is dumped through the high-temperature radiator or used to warm critical spacecraft components.
References
- J. J. Rusick and G. S. Bolotin. Radioisotope Power System Pool Concept. Nuclear and Emerging Technologies for Space (NETS) 2015, Albuquerque. NASA NTRS 20150002849. https://ntrs.nasa.gov/citations/20150002849. Accessed 2026-09-10.