5-26-2005 | Unit Status: At the time of the event, Unit 1 was in Mode 1 (Power Operation) at 100 percent power and Unit 2 was in Mode 6 (Refueling) at 0 percent power.
Event Description: On March 28, 2005, during core alterations on McGuire Unit 2, the Containment Air Release and Addition System (VQ) was aligned to reduce Containment pressure.TThis became necessary because the Containment Purge Ventilation System (VP) was temporarily out of service and isolated.
TSince Technical Specification (TS) 3.9.4 only allows the VP System to provide direct access from the Containment atmosphere to the outside atmosphere during core alterations or movement of irradiated fuel assemblies, this activity represented an operation prohibited by McGuire's Technical Specifications.
TThis event was not significant with respect to the health and safety of the public.
Event Cause:A The cause of this event was omission of relevant information in the VQ System operating procedure and the Bases for TS 3.9.4.TAlso, an inadequate procedure revision was performed in 2001 on the Containment Closure and Integrity procedure.TThis revision allowed the VQ System to be inservice during core alterations.
Corrective Actions: The Containment Closure and Integrity procedure for both units was placed on hold.TAll relevant procedures will be revised to prohibit VQ operation during the applicable modes of TS 3.9.4.TTS Bases 3.9.4 will be revised to clarify the use of automatic isolation valves. |
---|
LER-2005-003, Containment Closure Requirements Not Met During Core AlterationsDocket Number |
Event date: |
3-28-2005 |
---|
Report date: |
5-26-2005 |
---|
3702005003R00 - NRC Website |
|
BACKGROUND
Applicable Energy Industry Identification (EIIS) system and component codes are enclosed within brackets. McGuire unique system and component identifiers are contained within parentheses.
The purpose of the Containment Purge Ventilation System [VA](VP) is to reduce the airborne radioactivity levels in Containment by purging the Containment atmosphere to the environment via the unit vent during refueling when periods of personnel access are required. Two carbon filter units [FLT](HEPA) are included in the system to aid in reducing the airborne radioactivity levels. The VP system helps to control the consequences of a fuel handling accident in the Containment but is not required to be in operation provided the Containment penetrations are closed.
The purpose of the Containment Air Release and Addition System [BF](VQ) is to maintain Containment pressure between the Technical Specification limits of -0.3 to +0.3 psig. Increases in pressure during normal operation are controlled by venting the Containment through the VQ System filters [FLT].
Prior to release, the Containment atmosphere is sampled and analyzed. Based on station air release limits, valve .2 VQ-4 [FCV] is regulated to the desired purge rate and exhausts air to the unit vent. The VQ System does not contain any blowers [FAN]. The pressure differential between the outside atmosphere, Containment, and the Auxiliary Building produces natural flow. The VQ System filters are not credited in any radiological dose analyses.
Technical Specification (TS) 3.9.4, Refueling Operations, Containment Penetrations requires in part that during core alterations or movement of irradiated fuel assemblies within Containment, each penetration providing direct access from the Containment atmosphere to the outside atmosphere either be closed by a manual or automatic isolation valve, blind flange, or equivalent, or exhausting through an operable Containment Purge Exhaust System HEPA filter and carbon adsorber.
EVENT DESCRIPTION
At the time this condition was identified, McGuire Unit 2 was in Mode 6, refueling operations, and Unit 1 was in Mode 1 at 100% power. The Unit 2 VP System was out of service. No other systems, structures, or components were out of service at the time of this event which contributed to this event.
In 2001, a revision was made to the Containment Closure and Integrity procedure, PT/1&2/A/4200/002C, to allow the VQ System penetrations to be in service in Modes 5 and 6 for operational flexibility.
On March 28, 2005 McGuire was performing the Unit 2 Reactor core reloading evolution with the VP System in operation as is the normal practice.
At approximately 1638, it was communicated to the control room that the VP System had unexpectedly tripped. It was determined that the VP System had been tripped since 1600.
At approximately 1640, core reloading was suspended to troubleshoot the VP System problem and to review the requirements of TS 3.9.4.
At approximately 1815, core reloading was resumed after it was determined that TS 3.9.4 allowed core alterations or irradiated fuel movement without the VP System in service provided Containment Closure was in effect.
At approximately 2250, it became necessary to reduce Containment pressure (high pressure alarm received). Since the VP System was shutdown and all atmospheric penetrations were closed, Containment pressure was slowly increasing. After reviewing the applicable procedures and TS 3.9.4, it was determined to be acceptable to perform a VQ System release. The VQ System was aligned for a release through the VQ filters and out the unit vent.
On March 29 at approximately 0120, the Containment air release through the VQ System was terminated. The filtered release volume was 9,430 cubic feet of air with a duration of 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> and 30 minutes.
At approximately 0130, the VP System was returned to service following the replacement of a blown fuse.
At approximately 1340, Problem Investigation Process (PIP) M-05-01608 was written to evaluate the acceptability of performing a VQ System release during core alterations.
On April 4, 2005, a thorough review of TS 3.9.4 Bases and the UFSAR determined that only the VP system can provide direct access from the Containment atmosphere to the outside atmosphere during core alterations so a VQ System release represented an operation prohibited by McGuire's Technical Specifications.
CAUSAL FACTORS
Three causes were identified for this event:
1. The Containment Air Release and Addition System Operating Procedure, OP/2/A/6450/017, was performed during a time when Containment Closure was required by TS. 3.9.4 due to the omission of relevant information.
This operating procedure did not contain an initial condition that would have prohibited performing an air release using the VQ System from- Containment during core alterations or movement of irradiated fuel assemblies within Containment. A six year historical review of procedure revisions revealed that no such initial condition had existed.
2. An inadequate procedure revision was made to the Containment Closure and Integrity procedure, PT/1&2/A/4200/002C, in 2001 to allow the VQ System penetrations to be in service.
Discussions with personnel involved with the procedure revision revealed that this was thought to be an administrative change only and the intent of the procedure did not change nor did the method of maintaining Containment closure. Also, an adequate review of the UFSAR or Technical Specifications was not performed.
3. TS 3.9.4 and its Bases state that Containment Closure can be performed by an OPERABLE automatic isolation valve. This was interpreted as allowing a penetration, such as VQ, to be open as long as the associated valve was fully capable of automatic closure. This was determined to be an omission of relevant information in the TS Bases.
The term "automatic" isolation valve was added to TS 3.9.4 during the conversion to Improved Technical Specifications based upon the approved Westinghouse Standardized Technical Specifications. The LCO of TS Bases 3.9.4 requires any penetration providing direct access from the Containment atmosphere to the outside atmosphere to be closed except for those exhausting through the VP System filters. The McGuire dose analysis for a Fuel Handling Accident in Containment does not assume an automatic isolation of the VP System but credits the VP System filters to limit radioactivity.
All other atmospheric penetrations are assumed to be closed.
CORRECTIVE ACTIONS
Immediate:
1. PT/1&2/A/4200/002C were placed on technical hold.
Planned:
1. Revise OP/1&2/A/6450/017 to prohibit VQ System operation during the applicable modes of TS 3.9.4.
2. Revise PT/1&2/A/4200/002C to prohibit the VQ System penetrations to be in service during the applicable modes of TS 3.9.4.
Note: The 10 CFR 50.59 process at McGuire has fundamentally changed and improved since the 2001 revision to this procedure was performed.
Therefore, the corrective action associated with this cause was focused on barrier actions versus 10 CFR 50.59 process and training improvements.
3. Revise TS Bases 3.9.4 to explicitly state that if an automatic isolation valve is used to satisfy Containment Closure, it must be a closed automatic isolation valve.
SAFETY ANALYSIS
The VQ System isolation valves are required to close on a Containment isolation signal in Modes 1 through 4 to mitigate the radiological effects of a loss of coolant accident (LOCA). At the time of this event, the VQ System isolation valves were capable of automatic or manual closure. The Containment Closure and Integrity procedure had required the Containment radiation monitors to be available to provide an isolation signal in the event of a fuel handling accident (FHA). In addition, the VQ System filters, which consist of a particulate filter, absolute filter, and a carbon adsorber, were available to filter a release if necessary. Although there filters are not tested for efficiency, they are routinely inspected and replaced.
From a Probabilistic Risk Assessment (PRA) perspective, shutdown risk assessments focus on a loss of decay heat removal. Although a loss of decay heat removal did not occur, it was considered in concert with the VQ System air release to assess how the event affects core damage frequency. Results show that the occurrence of a loss of decay heat removal while performing a Containment air release with the VQ System does not represent a significant increase in risk. Isolating the VQ penetrations would not have been time critical during refueling operations due to the extended period of time to core boiling and uncovery with greater than 23 feet of water above the Reactor Vessel flange. Also, the risk of a loss of decay heat removal accident while this atmospheric penetration was open was very low.
The release from the VQ system during core alterations is bounded by the release modeled in the Design Basis Radiological Consequences Analysis of the Fuel Handling Accident (FHA). The VQ system release rate during this period was determined to be approximately 63 cubic feet per minute (cfm).
The VP system exhaust flow rate during fuel movement is approximately 21,000 cfm so the VQ release was small in comparison to the release modeled in the FHA. Also, even if this small VQ release was considered to be unfiltered, it would not be considered significant and would be within the guideline values specified in 10 CFR 100.
Therefore, at no time were the health and safety of the public or plant personnel affected as result of this event.
ADDITIONAL INFORMATION
A review of the electronic Control Room logs was performed since the Containment Closure procedure change was made in 2001. Six refueling outages, three per unit, have been completed since January 2001. The Control Room logs were reviewed each time the unit entered Mode 6 to perform refueling and core alterations when Technical Specification 3.9.4 would be applicable. No other occurrences of Containment air releases using the VQ System were found. Therefore, this event is not recurring.
|
---|
|
|
| | Reporting criterion |
---|
05000328/LER-2005-001 | Unit 2 Reactor Trip Following Closure of Main Feedwater Upon Inadvertent Opening of Control Breakers | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000388/LER-2005-001 | DDegradation of Primary Coolant Pressure Boundary due to Recirculation Pump Discharge Valve Bonnet Vent Connection Weld Flaw | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000423/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000455/LER-2005-001 | Unit 2 Automatic Reactor Trip Due to Low Steam Generator Level resulting from a Software Fault on the Turbine Control Power Runback Feature | | 05000370/LER-2005-001 | Automatic Actuation of Motor Driven Auxiliary Feedwater Pumps During Outage | | 05000244/LER-2005-001 | Failure of ADFCS Power Supplies Results in Plant Trip | | 05000247/LER-2005-001 | 0Technical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by an Inoperable Auxiliary Component Cooling Water Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000529/LER-2005-001 | REACTOR HEAD VENT AXIAL INDICATIONS CAUSED BY DEGRADED ALLOY 600 COMPONENT | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000336/LER-2005-001 | | | 05000266/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000269/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000289/LER-2005-001 | | | 05000293/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000298/LER-2005-001 | Reactor Scram due to Reactor Level Transient and Inadvertent Rendering of High Pressure Coolant Injection Inoperable | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000331/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000315/LER-2005-001 | Reactor Trip Following Intermediate Range High Flux Signal | | 05000316/LER-2005-001 | Reactor Trip from RCP Bus Undervoltage Signal Complicated by Diesel Generator Output Breaker Failure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000317/LER-2005-001 | Main Feedwater Isolation Valve Inoperability Due to Handswitch Wiring | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000323/LER-2005-001 | TS 3.4.10 Not Met During Pressurizer Safety Valve Surveillance Testing Due to Random Lift Spread | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000333/LER-2005-001 | Inoperable Offsite Circuit In Excess of Technical Specifications Allowed Out of Service Time | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000352/LER-2005-001 | Loss Of Licensed Material In The Form Of A Radiation Detector Calibration Source | | 05000353/LER-2005-001 | Core Alterations Performed With Source Range Monitor Alarm Horn Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000362/LER-2005-001 | Emergency Diesel Generator (EDG) 3G003 Declared Inoperable Due to Loose Wiring Connection on Emergency Supply Fan | | 05000263/LER-2005-001 | | | 05000456/LER-2005-001 | Potential Technical Specification (TS) 3.9.4 Violation Due to Imprecise Original TS and TS Bases Wording | | 05000454/LER-2005-001 | Failed Technical Specification Ventilation Surveillance Requirements During Surveillance Requirement 3.0.3 Delay Period | | 05000282/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000286/LER-2005-001 | Plant in a Condition Prohibited by Technical Specifications due to Error Making Control Room Ventilation System Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000400/LER-2005-001 | Reactor Auxiliary Building Emergency Exhaust System Single Failure Vulnerability | | 05000395/LER-2005-001 | Emergency Diesel Generator Start and Load Due To A Loss Of Vital Bus | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000382/LER-2005-001 | RCS Pressure Boundary Leakage Due to Primary Water Stress Corrosion Cracking of a Pressurizer Heater Sleeve | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000305/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000369/LER-2005-001 | Reactor Coolant System Leakage Detection Instrumentation Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000266/LER-2005-002 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000255/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-002 | Missing Taper Pins on CCW Valve Cause Technical Specification Required Shutdown | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000370/LER-2005-002 | Ice Condenser Lower Inlet Door Failed Surveillance Testing | | 05000353/LER-2005-002 | High Pressure Coolant Injection System Inoperable due to a Degraded Control Power Fuse Clip | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000263/LER-2005-002 | | | 05000454/LER-2005-002 | One of Two Trains of Hydrogen Recombiners Inoperable Longer Than Allowed by Technical Specifications Due to Inadequate Procedure | | 05000244/LER-2005-002 | Emergency Diesel Generator Start Resulting From Loss of Off-Site Power Circuit 751 | | 05000362/LER-2005-002 | Emergency Containment Cooling Inoperable for Longer than Allowed by Technical Specifications | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000247/LER-2005-002 | DTechnical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by Gas Intrusion from a Leaking Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000265/LER-2005-002 | Main Steam Relief Valve Actuator Degradation Due to Failure to Correct Vibration Levels Exceeding Equipment Design Capacities | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000286/LER-2005-002 | • Entergy Nuclear Northeast Indian Point Energy Center 450 Broadway, GSB P.O. Box 249Entergy Buchanan. NY 10511-0249 Tel 914 734 6700 Fred Dacimo Site Vice President Administration July 5, 2005 Indian Point Unit No. 3 Docket Nos. 50-286 N L-05-078 Document Control Desk U.S. Nuclear Regulatory Commission Mail Stop O-P1-17 Washington, DC 20555-0001 Subject:L Licensee Event Report # 2005-002-00, "Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure." Dear Sir: The attached Licensee Event Report (LER) 2005-002-00 is the follow-up written report submitted in accordance with 10 CFR 50.73. This event is of the type defined in 10 CFR 50.73(a)(2)(iv)(A) for an event recorded in the Entergy corrective action process as Condition Report CR-IP3-2005-02478. There are no commitments contained in this letter. Should you or your staff have any questions regarding this matter, please contact Mr. Patric W. Conroy, Manager, Licensing, Indian Point Energy Center at (914) 734-6668. Sincerely, 4F-/t R. Dacimo Vice President Indian Point Energy Center Docket No. 50-286 NL-05-078 Page 2 of 2 Attachment: LER-2005-002-00 CC: Mr. Samuel J. Collins Regional Administrator — Region I U.S. Nuclear Regulatory Commission U.S. Nuclear Regulatory Commission Resident Inspector's Office Resident Inspector Indian Point Unit 3 Mr. Paul Eddy State of New York Public Service Commission INPO Record Center NRC FORM 3660 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB NO. 3150-0104 EXPIRES: 06/30/2007 (6-2004) Estimated burden per response to comply with this mandatory collection request 50 hours.RReported lessons teamed are incorporated into the licensing process and fed back to Industry. Send comments regarding burden estimate to the Records and FOIA/Privacy Service Branch (T-5 F52), U.S. Nuclear Regulatory Commission, Washington, DC 29555-0001, or by InternetLICENSEE EVENT REPORT (LER) e-mail to Infocoilectsenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-l0202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person Is not required to respond to, the Information collection. 1. FACIUTY NAME 2. DOCKET NUMBER 3. PAGE INDIAN POINT 3 05000-286 10OF06 4. TITLE Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000287/LER-2005-002 | Unit 3 trip with ES actuation due to CRD Modification Deficiencies | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000336/LER-2005-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
|