“…In this view, a passive system fails to perform its function due to deviations from its expected behavior which lead the load imposed on the system (e.g., the peak value of the fuel cladding temperature during a LOCA transient) to overcome its capacity (e.g., a threshold value imposed by regulating authorities or by the mechanical properties of structural materials). This concept is at the basis of many works of literature, including (Jafari et al, 2003;Marquès et al, 2005;Pagani et al, 2005;Bassi and Marquès, 2008;Mackay et al, 2008;Mathews et al, 2008 andPatalano et al, 2008;Fong et al, 2009;Zio and Pedroni, 2009a and b); in these works, the passive system is modeled by a detailed, mechanistic T-H system code and the probability of not performing the required function is estimated based on a Monte Carlo (MC) sample of code runs which propagate the epistemic (state-of-knowledge) uncertainties in the model describing the system and the numerical values of its parameters/variables; because of these uncertainties, the system may not accomplish its mission, even if no hardware failure occurs.…”