05000260/LER-2002-003
Browns Ferry Nuclear Plant Unit 2 . | |
Event date: | 11-22-2002 |
---|---|
Report date: | 01-21-2003 |
Reporting criterion: | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
2602002003R00 - NRC Website | |
I. PLANT CONDITION(S)
At the time of discovery of this condition, Unit 2 and Unit 3 were at 100 percent power. Unit 1 was shutdown and defueled.
II. DESCRIPTION OF EVENT
A. Event:
On November 22, 2002, General Electric (GE) notified TVA of a 10 CFR Part 21 condition potentially affecting Browns Ferry (BFN) related to the use of a non-conservative Tmin value in the Oscillation Power Range Monitor (OPRM) [IG] system algorithm. TVA confirmed that the condition was applicable to BFN. At 1630 hours0.0189 days <br />0.453 hours <br />0.0027 weeks <br />6.20215e-4 months <br /> Central Standard Time (CST) on November 22, the OPRM upscale trip function was declared inoperable on Unit 2 and Unit 3.
Technical Specifications (TS) Limiting Condition for Operation (LCO) 3.3.1.1 Condition I was entered, and Required Action 1.1 was taken to initiate within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> an alternate method to detect and suppress thermal-hydraulic instability oscillations.
At approximately 1730 hours0.02 days <br />0.481 hours <br />0.00286 weeks <br />6.58265e-4 months <br /> CST the plant operators commenced testing to demonstrate that reactor thermal power and core flow were within appropriate parameter limits to prevent uncontrolled power oscillations. This testing was commenced on Unit 2 at 1730 hours0.02 days <br />0.481 hours <br />0.00286 weeks <br />6.58265e-4 months <br /> via the performance of procedure 2-SR-3.3.1.1.I, Core Thermal Hydraulic Stability. The test was satisfactorily completed at 1736 hours0.0201 days <br />0.482 hours <br />0.00287 weeks <br />6.60548e-4 months <br />. On Unit 3, using procedure 3-SR-3.3.1.1.I, plant operators commenced testing at 1755 hours0.0203 days <br />0.488 hours <br />0.0029 weeks <br />6.677775e-4 months <br /> and the testing was satisfactorily completed at 1910 hours0.0221 days <br />0.531 hours <br />0.00316 weeks <br />7.26755e-4 months <br />.
The OPRM module of the GE Power Range Neutron Monitoring System (PRNMS) [IG] was installed to satisfy TVA's long-term solution regarding reactor core stability. Browns Ferry has implemented the long-term stability solution designated as Option III in NEDO-31960, Supplement 1, 'BWR Owners' Group Long-Term Stability Solution Licensing Methodology.
This is accomplished by the PRNMS OPRM upscale trip function. This trip function was enabled In May 1999 on Unit 2 and in May 2000 on Unit 3. The OPRM upscale trip function provides protection against exceeding the fuel minimum critical power ratio (MCPR) Safety Limit should thermal-hydraulic power oscillations occur.
Because this condition has existed on Unit 2 since May 1999 and on Unit 3 since May 2000, TVA is reporting this event, pursuant to 10 CFR 50.73(a)(2)(i)(B), as any operation or condition which was prohibited by the plant's Technical Specifications.
B. Inoperable Structures, Components, or Systems that Contributed to the Event:
None
C. Dates and Approximate Times of Maior Occurrences:
May 1999 May 2000 November 22, 2002 November 22, 2002 November 22, 2002 November 22, 2002 GE notified TVA of a 10 CFR 21 condition potentially affecting BFN related to the use of non-conservative setpoints within the OPRM system algorithm.
1630 hours0.0189 days <br />0.453 hours <br />0.0027 weeks <br />6.20215e-4 months <br /> CST � After evaluating the information, TVA concluded that the 10 CFR 21 condition was applicable to BFN and entered the required TS Actions on Unit 2 and Unit 3.
D. Other Systems or Secondary Functions Affected
None
E. Method of Discovery
GE notified TVA via a 10 CFR 21 report of the use of a setpoint value for the OPRM Trnin parameter that resulted in potentially non-conservative system operation.
F. Operator Actions
Following the conclusion that the OPRM function was no longer operable because of the Tmin value used, the OPRM channels were formally declared Inoperable. The necessary TS actions were taken within the appropriate time frame.
G. Safety System Responses
None required
III. CAUSE OF THE EVENT
A. Immediate Cause
The immediate cause of exceeding the TS LCO times for reactor operation with an inoperable OPRM function was the specification of a non-conservative value for the Tmin parameter in the OPRM system algorithm. Because of the Tmin value in use, computations performed by the OPRM channels could not be shown as conservative for all reactor operational conditions.
B. Root Cause
The root cause of this event was a flawed original GE design of the OPRM system algorithm. As described in the 10 CFR 21 report, the system algorithm has been determined to be inadequate if a Tmin value greater than 1.2 seconds is used. The OPRM system design procured from GE and installed by BFN on Unit 2 and Unit 3 used Tmin values of 1.4 seconds.
C. Contributing Factors
None
IV. ANALYSIS OF THE EVENT
Browns Ferry has Implemented the long-term stability solution designated as Option III in NEDO-31960, Supplement 1, "BWR Owners' Group Long-Term Stability Solution Licensing Methodology.' This is accomplished via the PRNMS OPRM trip function. The trip function was enabled in May 1999 on Unit 2 and May 2000 on Unit 3. The OPRM trip function provides protection from exceeding the fuel MCPR Safety Limit should thermal-hydraulic power oscillations occur.
The OPRM is designed to detect reactor core thermal-hydraulic instability and provide readout, alarms, and trips associated with an instability event. The OPRM receives data from the PRNMS. A reactor scram is initiated if oscillatory changes in the neutron flux are detected.
The OPRM trip function is required to be operable when the plant Is in a region of power-flow operation where actual thermal-hydraulic oscillations might occur. When the reactor is operating in regions of the power/flow map where it has been determined that unstable power oscillations cannot occur, OPRM trips are automatically bypassed. Each OPRM channel provides an oscillation trip enable input to an alarm that Indicates when the reactor has entered the operating region where instability can occur and the trip is no longer bypassed.
If the OPRM trip function should become inoperable, as in the case described by this event report, the implementation of alternate methods to detect and suppress oscillations allow continued reactor operation. The TS allow reactor operation for an unlimited period of time while such alternate methods are being utilized. Procedures require the use of control room instrumentation and process computer [ID] outputs to determine the operating conditions to be plotted on the power flow map. By plotting the reactor power versus core flow, the operating staff can demonstrate the reactor is not operating under conditions where thermal-hydraulic Instability might occur.
According to the 10 CFR 21 report by GE, at core flow rates between approximately 60% and 63% of rated core flow, an oscillation period of less than 1.4 seconds is possible. Therefore, as currently configured, it cannot be assured that the BFN OPRM function on Unit 2 and Unit 3 would provide an automatic trip for all analytically possible thermal-hydraulic situations, and the function cannot be considered operable In accordance with the TS. Since both Unit 2 and Unit 3 at BFN have been operating for a period of years with an OPRM function that was inoperable, a TS non-compliance event resulted.
An earlier 10 CFR 21 Issue affecting the BFN OPRM function was reported to the NRC by BFN in for Unit 2 and Unit 3." Design reviews undertaken via the BWROG as a result of this previous event led to the discovery of the current Tmin issue.
V. ASSESSMENT OF SAFETY CONSEQUENCES
An inherent characteristic of a boiling water reactor is that, at relatively high core powers in conjunction with relatively low core flows and certain other core characteristics, it becomes possible for thermal-hydraulic oscillations to occur. Such oscillations have occurred in the past at both domestic and foreign commercial BWRs. However, the probability of such events is low for three primary reasons:
- operating procedures direct the avoidance of the susceptible region (high power/low flow) of the power flow map during routine power operation
- transients which result in unintentional operation in this region do not occur frequently
- core designs take the possibility of thermal-hydraulic instability into account such that even when high power/low flow core conditions occur, instability situations do not invariably ensue BFN has never experienced a thermal-hydraulic instability event. BFN operating procedures do not allow routine operation of BFN in high power/low flow regions of the power flow map where thermal-hydraulic instability becomes a possibility. An abnormal operating event, such as a dual reactor recirculation pump [AD] runback or pump trip, would have to occur to enter the region. Operating procedures dictate the actions necessary to exit the region should it be entered, and procedures also direct the control room crew in how to monitor for any evidence of instability while the reactor is operating in the region. The operating crews are trained on how to respond to such transients.
Additionally, during the time interval on Unit 2 and Unit 3 when the OPRM was not operable in accordance with the TS, the system would still have functioned in a majority of hypothetical instability scenarios, where the oscillation period was greater than 1.4 seconds. Also, as stated by GE in the 10 CFR 21 report, should an actual failure of the OPRM automatic detection function under these conditions have occurred, no fuel failures would have been expected.
Given that the probability of an Instability event is low, the operating staff Is well trained and Is equipped with good procedural guidance for such eventualities, and no fuel failure would have been expected, the TS inoperability of the automatic OPRM trip function is not significant. It is concluded that there is no adverse impact on safety as a result of this event.
VI. CORRECTIVE ACTIONS
A. Immediate Corrective Actions
TVA declared the OPRM function for Unit 2 and Unit 3 inoperable, and the TS required actions were implemented to initiate an alternate method of detecting and suppressing thermal-hydraulic oscillations.
B. Corrective Actions to Prevent Recurrence) The BFN Reactor Engineering section shall review the GE/BWR Owners' Group (BWROG) Detect and Suppress Committee Option III design reviews and recommendations to determine what corrective actions are required to resolve the OPRM problems identified in the November 22, 2002 10 CFR 21 notification.
VII. ADDITIONAL INFORMATION
A. Failed Components
None B. Previous LERs on Similar Events
C. Additional Information
None
D. Safety System Functional Failure Consideration:
This event did not result in a safety system functional failure.
E. Loss of Normal Heat Removal Consideration:
N/A This event did not involve a reactor scram.
VIII. COMMITMENTS
None WA does not consider these corrective actions as regulatory commitments. The completion of these actions will be tracked in TVA's Corrective Action Program.
- �