Design criteria for safe shutdown following selected design basis events in light water reactors. (ANS, 1995)