#1284 1980 · US Nuclear Regulatory Commission · Energy and nuclear power
After Three Mile Island, regulators stopped licensing reactor operators on written exams
问题
Operators who passed every written test still misread the instruments and shut off cooling during a real accident
背景
On March 28, 1979, operators at the Three Mile Island Unit 2 reactor near Harrisburg, Pennsylvania misread a stuck-open relief valve and a misleading instrument reading, and manually shut off emergency core cooling water during a real loss-of-coolant event, turning a manageable malfunction into a partial meltdown.
Every operator on shift that night held a valid license, earned mainly through written exams on plant systems and thermodynamics — tests that had never once put a candidate in front of a simulated version of the exact failure they later faced for real.
换别人会怎么做
Tighten the written exam further — add more questions on thermodynamics and plant systems, the same instrument that had already certified every operator on shift the night of the accident.
他们看到了什么
Investigators saw the operators knew the textbook material and still acted on the wrong instinct under pressure — a written test measures memorized knowledge, not the rehearsed reflex the job actually demands.
那一手
In March 1980 the NRC's Harold Denton letter mandated that reactor and senior reactor operator licensing require hands-on qualification on a full-scale control-room simulator running realistic accident scenarios, not just a written exam, formalized that November in NUREG-0737, with the written passing grade also raised to 80 percent.
为什么管用
A full-scale simulator reproduces the actual failure sequence closely enough that an operator's response under it predicts their response to the real thing, because the pressure, the instrument readings, and the time constraint are all faithfully recreated — a written exam can only test recalled knowledge, never the pressured judgment call that knowledge has to survive contact with.
值了多少
Plants built $18-million simulators to test operators on the exact failure that caused the accident, now a permanent license requirement.
什么时候会失灵
Simulator training only transfers if the simulated scenarios are updated to cover failure modes regulators have actually seen or can anticipate; a simulator that only rehearses the last accident, not the next one, gives operators false confidence in scenarios nobody thought to build.
后来呢
Simulator-based licensing is now standard at every US nuclear plant and was adopted internationally, and the shift from purely written testing to realistic hands-on failure simulation is credited as one of the accident's most durable safety legacies, still shaping how safety-critical operators are certified today.
资料来源
- [1]Chronology of Significant Events in Operator Licensing Since Three Mile IslandUS Nuclear Regulatory Commission, 2009nrc.gov
- [2]Nuclear Worker TrainingUnion of Concerned Scientists, 2011blog.ucs.org