A first invention describes a
molten salt nuclear reactor system and a method of controlling a
nuclear reactor, the
molten salt nuclear reactor housed in a closed vessel of the
molten salt nuclear
reactor system, the molten salt nuclear reactor comprising: a reactor core, a circulation pump, a
discharge tank, a controller, and a liquid circuit for circulating liquid through the reactor core, wherein the controller is configured to autonomously stop reactor operation by allowing liquid to be discharged into the
discharge tank under the influence of gravity if at least one reactor parameter differs from an acceptable operating value, and / or wherein the controller is configured to control the
discharge of the liquid into the discharge tank under the influence of gravity. The controller is configured to initiate reactor operation by activating the circulation pump to pump liquid from the discharge tank to the liquid circuit if all reactor parameters meet acceptable operating values. A second invention describes a molten salt nuclear reactor and a method for maintaining a continuous
nuclear fission chain reaction, the nuclear reactor comprising a vessel (1) having an interior (30, 35), the nuclear reactor further comprising inside the vessel: a
nuclear reactor core (2); the molten salt primary heat exchange loop (3) comprises a molten salt primary heat exchange medium pump; at least one sensor (9, 22, 41, 49) and a base, 59, 79), the at least one sensor being configured to provide a
signal representative of an operating state of the nuclear reactor; a primary
heat exchanger (10) through which the primary heat exchange circuit passes; and a
circuit breaker circuit arrangement (18, 28, 68) comprising a
circuit breaker (19, 29, 69) and configured to connect at least one of the electrical and / or electronic components (5, 15, 45) in the interior to a power source (53) within the container (1) and to connect at least one of the electrical and / or electronic components (5, 15, 45) in the interior to a
circuit breaker (19, 29, 69). 45) being disconnected from the power source (53) within the container; the circuit breaker (19, 29, 69) has an open state and a
closed state; the circuit breaker circuit arrangement (18, 28, 68) is connected to at least one sensor (9, 22, 41, 49, 59, 79); and the circuit breaker circuit arrangement (18, 28, 68) is configured to open the circuit breaker (19, 29, 69) when the
signal from the at least one sensor (9, 22, 41, 49, 59, 79) exceeds a safety threshold.