---
title: "Tight Enough"
subtitle: "Hermetic is not a number. It is a network held below its threshold."
date: 2026-06-17
canonical: https://pierreribault.com/essays/tight-enough/
---

import Spec from '../../components/Spec.astro';
import Equation from '../../components/Equation.astro';
import Callout from '../../components/Callout.astro';
import U from '../../components/U.astro';

One morning I had two brazed joints under the microscope, side by side. Ceramic sealed to metal with an active braze, the kind that has to hold ultra-high vacuum and never let the outside in. Both had passed the same helium leak test. Both carried the same stamp on the traveller, the same number under the same bar. Leak tight.

Under the objective they were nothing alike. One was a dense, tangled lattice, the braze and its reaction product woven into a mesh with no way through. The other, at the same magnification, showed a channel. A clear path running where the ceramic met the metal, fine but continuous. Same certificate. Opposite insides.

The field keeps a tidy definition of tight. A leak rate, a figure in Torr·L/s, measured below some threshold, written down as a pass. It is a single number, and a single number is easy to trust, because it sorts. You can always say one seal leaks less than another, rank them, set the value in a cell and sign. But the stamp hides what the microscope shows. Two joints under the same stamp can be built on opposite topologies, and the difference is not how much braze, but how the braze is connected.

<Callout value="1&#215;10<sup>&#8722;9</sup>" unit="Torr·L/s">One number, stamped on both joints. The networks behind it are opposites.</Callout>

So start where the field starts, at the leak, and notice that the leak is only the easy case. A leak is a hole, a channel that is short and almost straight, and gas pours through it the way water finds a crack. We have a word for how twisted a path is. Tortuosity. A clean hole has a tortuosity near one. Everything else, every real seal, lives somewhere on the long road between that hole and solid matter that has no hole at all.

![A leak, a porous seal, and a solid wall are one axis. Tortuosity runs its length.](../../assets/essays/tight-fig2-axis.png)

A joint is a network. I have spent years reading the network that titanium builds inside an active braze, the reaction product it grows against the ceramic, and I can tell you that whether a joint seals has almost nothing to do with how much metal is in it. It has to do with connectivity. Picture the empty space in the joint, the pores and the microcracks, as a network of its own. As that network thins out, there comes a point, sharp and sudden, where no continuous path crosses from one face to the other. Below it, gas has nowhere to travel and the joint holds. Above it, a single thread of connected voids spans the gap and the joint leaks. Physicists who study disordered media have a name for that point. The percolation threshold. It is not a gradual thing. It is a geometric phase transition, a switch between a network that crosses and a network that does not. More braze can sit above the threshold and leak. Less can sit below it and hold. Tightness is a property of the network, not of the amount.

![Below the threshold no path crosses. Above it, one connected channel is enough.](../../assets/essays/tight-fig3-percolation.png)

Here is the part that is harder, and it is the part I work on. There is not one network in the joint. There are two, laid over each other. The first is the network of voids I just described, the gas-phase path, governed by percolation, the one that decides whether a molecule of helium can find its way through open space. The second is the network the titanium itself draws, the reaction product and the boundaries between phases, and this network is always connected, by construction, because it is the thing that bonds the ceramic to the metal. And a connected solid network can be a highway. Atoms do not need an open pore to cross a solid. They can dissolve into it and move along the interfaces, the grain boundaries, the interphases, faster there than through the bulk. So the same titanium mesh that seals the joint against open flow can, at the same time, short-circuit transport at the atomic scale. Density and tortuosity cut both ways, and which way depends on the gas you are asking about and the regime it travels in. A joint that is tight to helium at the detector can be a fast path for hydrogen, or for permeation creeping along the very seam that makes it strong.

![Two networks in one joint. Voids decide gas-phase leakage; the titanium mesh can carry atoms along its own seams.](../../assets/essays/tight-fig4-two-networks.png)

Push that to its end and the two questions become one. When the void network is pushed below its threshold, when there is no open path left at all, gas does not stop crossing. It crosses through the solid. It dissolves into the lattice and diffuses through the spaces between atoms, the interstitial network of the crystal itself. That is permeation, and it is not a different physics. It is the same network problem at the smallest scale there is. The wall is just the densest, most tortuous network of all, the last one, the one made of atoms. A leak, a porous seal, and a flawless wall are not three things. They are one continuous axis, and tortuosity is the single variable that runs the length of it, from the open hole to the lattice.

<Equation
  tag="Permeation"
  expr="<i>&#934;</i> = <i>S</i> &#183; <i>D</i>"
  legend="When no open pore is left, gas still crosses the solid: it dissolves into the lattice (<b>S</b>) and diffuses through it (<b>D</b>). Permeation is percolation through the last network there is, the one made of atoms."
/>

Which is why aluminium nitride and alumina are not a choice from a catalogue. They are a natural experiment. Take the same silver-copper-titanium braze and put it against each. Against alumina the titanium reacts with oxygen and grows oxides and titanates. Against nitride it reacts with nitrogen and grows titanium nitride. Different reaction product, different continuity, different network. And the thermal expansions do not match the same way, alumina near <U n="7–8" unit="ppm/°C" />, nitride near <U n="4.5" />, the braze near <U n="19" />, so on cooling each builds a different field of residual stress, and stress is what seeds the cracks that become the void network. Change the ceramic and you change the mesh you get. The ceramic you choose is the network you inherit. You do not pick a material. You pick the seal it allows you to build.

<Spec
  caption="Same braze, two ceramics"
  meta="Ag–Cu–Ti active braze"
  rows={[
    { k: "Against Al<sub>2</sub>O<sub>3</sub>", v: "Ti &#8594; oxides, titanates" },
    { k: "Against AlN", v: "Ti &#8594; titanium nitride" },
    { k: "CTE &#183; alumina", v: "7–8", unit: "ppm/°C" },
    { k: "CTE &#183; nitride", v: "4.5", unit: "ppm/°C" },
    { k: "CTE &#183; braze", v: "&#8776; 19", unit: "ppm/°C" },
  ]}
/>

![Same braze, two reaction products and two expansions, two different networks, two different seals.](../../assets/essays/tight-fig5-aln-alumina.png)

There is a turn here that still catches me, and it is about the looking itself. You cannot see tightness in a cross-section. A slice through the joint shows you a plane, and connectivity is a property of the volume. A void that looks sealed in the plane may be open just behind it, out of view. The one channel that percolates may pass through a corner the slice never touched. A two-dimensional section underestimates blockage every time, because it cannot see the connections that leave the plane, and it can call a joint tight that is not. Only the full volume sees the real path, or the integrated flux of a leak test, which adds up every route at once whether you can picture it or not. You do not see whether a thing is sealed. You see a plane, or you see a number, and you infer the rest. The measurement is itself an act of sealing off, a choice to sample a plane or to integrate a volume. The tomography I run is the instrument that settles what metallography could only suggest.

![A section samples a plane. Connectivity lives in the volume. The slice overestimates blockage.](../../assets/essays/tight-fig6-2d-3d.png)

Step back, and the difference is not about brazing at all. It is about what kind of thing tightness is. A leak rate is a point on a line, and a line lets you rank. A network refuses that. Two joints can fail in ways that do not compare, one with an open pore, one with a fast interface, and there is no honest sense in which one of them is simply tighter. There is no tight in the abstract. There is only tight enough, for this gas, for this long. The stamp on the traveller is the most honest version of the trap, because it tells you, exactly and truthfully, the one thing that was never quite the question. And the trap is not the brazer's alone. Anywhere a single number is trusted to stand in for a structure, a qualification that passed, a supplier that scored, a coverage that was met, the same thing hides in the same place. The work is always the same, to read the network the number cannot show.

And this same network sits under rooms I have never stood in. A fusion reactor cannot seal its tritium. Tritium is small and it permeates hot metal walls, and there is no wall thick enough or pure enough to stop it, only to slow it. So the field does not build a seal. It grows a barrier coating, an oxide a micron thick, alumina or erbium oxide, chosen because it raises the tortuosity of the path through the wall and drops the permeability by a factor of <U n="10³" /> to <U n="10⁵" />. Then it licenses the flux that remains and keeps the books on it. Containment, at the scale where a fuel is also a radiological hazard, is not a wall. It is tortuosity engineering plus accounting. And note the company that coating keeps, because the same machine carries another thing called a barrier, the thin titanium nitride on its radio-frequency surfaces, which stops nothing from permeating and instead lowers the secondary electron yield. One barrier of network, one barrier of surface, two physics under one word, in one chamber.

![Containment is not a wall. It is a tortuous coating and a flux on the books.](../../assets/essays/tight-fig7-barrier-verb.png)

A barrier is not a state you reach. It is a network you hold below its threshold, and a flux you agree to account for. A barrier is a verb. And once you see it as a verb you see it everywhere the same shape repeats, because knowledge percolates too. You do not seal a field of expertise behind an embargo. You raise its tortuosity, and you watch what crosses anyway. The lock that cannot be counted, the one no export list can name, is simply the one whose tortuosity is high enough that the flux is slow. The titanium network in my joint and the lock under the fab are the same picture at two scales. Neither is a wall. Both are a network, and a rate.

So the stamp says tight, and the number is true, the same way a pressure is a rate and a clean surface is a distribution. Each time, the scalar written on the traveller is the honest answer to a question just beside the one that mattered. Nothing seals. Things are made tortuous enough, for this gas, for this long, and the craft is knowing how much is enough.

## Sources

- Percolation as a geometric phase transition and the spanning-cluster threshold in disordered media: Stauffer & Aharony, Introduction to Percolation Theory; Sahimi, Applications of Percolation Theory.
- Effective transport through porous media scaling as porosity over tortuosity, and tortuosity as the governing variable for conductance: standard transport-in-porous-media literature; O'Hanlon, A User's Guide to Vacuum Technology (Wiley) for the leak, virtual leak, and permeation distinction.
- Permeation as dissolution and diffusion through the solid lattice, and short-circuit diffusion along grain boundaries and interphases: standard solid-state diffusion texts; permeation chapters in Redhead, Hobson & Kornelsen, The Physical Basis of Ultrahigh Vacuum.
- Active brazing of alumina and aluminium nitride with Ag-Cu-Ti, the titanium reaction product (oxides and titanates on alumina, titanium nitride on nitride), and the role of CTE mismatch in residual stress and microcracking: active-brazing and ceramic-to-metal joining literature; CuSil-ABA and TICUSIL data.
- Tritium permeation barriers in fusion, alumina and erbium oxide coatings, permeation reduction factors of 10³ to 10⁵, erbia chosen for compatibility with liquid lithium and Pb-Li breeders where alumina is attacked: Chikada et al., Nucl. Fusion 51 (2011); erbia coatings on EUROFER and RAFM steels (PRF up to 10⁵ at 873 K); EU DEMO breeding-blanket overview, Federici et al., Fusion Eng. Des. 141 (2019).
- Titanium nitride and low secondary-electron-yield coatings on radio-frequency and superconducting surfaces as a distinct, non-permeation barrier: SRF and klystron-window anti-multipactor literature.
- Helium as the gas that cannot be cryopumped at usual temperatures and cannot be excluded by permeation, and the pumping strategy that follows in cryogenic and quantum hardware: cryopumping and UHV practice.