The Kronos Safety Case in One Page

Fusion is safe not because of what operators do, but because of what the plasma physically cannot do.

The Kronos safety case rests on a single structural fact: a fusion plasma sits far from any self-sustaining energy release. To hold conditions for fusion the machine must actively confine, heat, and fuel a few grams of hydrogen isotopes at once. Remove any one of those inputs and the reaction ends on its own — there is no stored fuel and no runaway mechanism to carry it forward.

This is inherent safety: the favorable outcome follows from physics, not from a correctly operating safety system. Both Kronos machines share it. The breeder (Hyperion) is a D–T spherical tokamak; the burner (Aegis / MetroVolt) is a D–³He tandem-mirror generator. Neither uses a fission core, neither contains fissile material, and neither can sustain a chain reaction.

What the physics gives us for free

• Cannot melt down: no decay-heat inventory large enough to melt the core after shutdown.
• Cannot run away: the burn is self-limiting — any excursion cools and quenches the plasma.
• Tiny fuel inventory: grams in the chamber, not years of fuel sealed inside.
• No long-lived spent fuel: the products are helium and neutrons, not actinides.
• Almost no water: direct energy conversion in the burner avoids a large steam cycle.

What still needs engineering

Inherent safety is the foundation, not the whole story. Tritium is radioactive and mobile, so it is contained and monitored; the magnets store large energy that must be handled safely; 14 MeV neutrons activate structures and require shielding and remote maintenance. Each of these is a well-understood, bounded hazard addressed by defense in depth. Crucially, none of them can drive a large off-site release.