Three Mile Island Unit 2: Stuck-Open PORV Relief Valve & Deceptive Control Room Indicator
Telemetry indicator measured actuator electrical command rather than physical state. Decision_Nodes disabled high-pressure cooling Buffer_Reserve based on false closed-state telemetry, causing core fuel rod meltdown.
A pilot-operated relief valve (PORV) on the reactor pressurizer opened automatically after a feedwater pump trip but stuck physically open when pressure dropped. In the control room, a dashboard indicator light illuminated green when electrical power to the solenoid was cut, which operators interpreted as proof the valve was physically closed. Operators turned off emergency high-pressure injection cooling, causing the reactor core to boil dry and suffer partial meltdown.
Telemetry indicator measured actuator electrical command rather than physical state. Decision_Nodes disabled high-pressure cooling Buffer_Reserve based on false closed-state telemetry, causing core fuel rod meltdown.
Stuck open mechanically due to spring wear, venting 32,000 gallons of radioactive coolant
Showed "CLOSED" because electrical relay was de-energized, not measuring physical valve position
Interpreted rising pressurizer water level as overfilled reactor and manually throttled ECCS cooling pumps
Exposed to air, heated to 4,300°F, and melted through 50% of the core into the lower plenum
"The light on the panel showed that the signal to close the valve had been sent, but not that the valve had actually closed."
Cross-Domain Invariant Twin Failures (56)
Telemetry indicator measured actuator electrical command rather than physical state. Decision_Nodes disabled high-pressure cooling Buffer_Reserve based on false closed-state telemetry, causing core fuel rod meltdown.
State synchronization channel between physical grid nodes and Decision_Node locked up. Decision_Node assumed nominal state while physical Constraint_Boundary was violently violated, causing unmitigated cascading trip.
Telemetry indicator measured actuator electrical command rather than physical state. Decision_Nodes disabled high-pressure cooling Buffer_Reserve based on false closed-state telemetry, causing core fuel rod meltdown.
Asynchronous state divergence between physical maintenance state and control room Telemetry_Channel. Operators activated decommissioned Decision_Node without state verification, triggering immediate high-pressure explosive boundary breach.
Telemetry indicator measured actuator electrical command rather than physical state. Decision_Nodes disabled high-pressure cooling Buffer_Reserve based on false closed-state telemetry, causing core fuel rod meltdown.
Market design optimized purely for short-term marginal generation cost by eliminating capacity Buffer_Reserves. Extreme environmental shock tripped 48% of generation nodes, driving State_Telemetry to critical threshold and forcing emergency load shedding for 4.5M customers.