Email Record: Safe shutdown potentially challenged by unanalyzed internal flooding events and inadequate design.