Defense in depth safety paradigm for nuclear reactor

A nuclear reactor includes a nuclear reactor core disposed in a pressure vessel and immersed in primary coolant water at an operating pressure higher than atmospheric pressure. A containment structure contains the nuclear reactor. A reactor coolant inventory and purification system (RCI) is connected with the pressure vessel by make-up and letdown lines. The RCI includes a high pressure heat exchanger configured to operate responsive to a safety event at the operating pressure to remove heat from the primary coolant water in the pressure vessel. An auxiliary condenser located outside containment also removes heat. The RCI also includes a pump configured to inject make up water into the pressure vessel via the make-up line against the operating pressure. An emergency core cooling system (ECC) operates to depressurize the nuclear reactor only if the RCI and auxiliary condenser are unable to manage the safety event.