05000373/LER-2017-004, Regarding Secondary Containment Inoperable Due to Interlock Doors Open
| ML17107A089 | |
| Person / Time | |
|---|---|
| Site: | LaSalle  |
| Issue date: | 04/17/2017 |
| From: | Trafton W Exelon Generation Co |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| RA17-036 LER 17-004-00 | |
| Download: ML17107A089 (5) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(viii)(B) 10 CFR 50.73(a)(2)(ix)(A) 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) |
| 3732017004R00 - NRC Website | |
text
Exelon Generation,,
RA17-036 April 17, 2017 U.S. Nuclear Regulatory Commission A TIN: Document Control Desk Washington, DC 20555-0001 LaSalle County Station, Unit 1 Renewed Facility Operating License No. NPF-11 NRC Docket No. 50-373 LaSalle County Station 2601 North 21 51 Road Marseilles, IL 61341 815-415-2000 Telephone
- www.exeloncorp.com 10 CFR 50.73
Subject:
Licensee Event Report 2017-004-00, Secondary Containment Inoperable Due to Interlock Doors Open In accordance with 10 CFR 50.73(a)(2)(v)(C) and 10 CFR 50.73(a)(2)(v)(D), Exelon Generation Company, LLC (EGC) is submitting Licensee Event Report (LER)
Number 2017-004-00 for LaSalle County Station, Unit 1.
There are no regulatory commitments in this letter. Should you have any questions concerning this report, please contact Mr. Guy V. Ford, Jr., Regulatory Assurance Manager, at (815) 415-2800.
Respectfully,
- j;tL r
- tA L_
William J. f rafton(
Site Vice President LaSalle County Station
Enclosure:
Licensee Event Report cc:
Regional Administrator-NRC Region Ill NRC Senior Resident Inspector - LaSalle County Station
NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104 EXPIRES: 03/31/2020 (04-2017)
, the htti;i://www.nrc.gov/reading-rm/doc-collections/nu.&.. m>/staff/sr1022/r3/)
NRC may nol conduct or sponsor, and a person is not required to respond to, the information collection.
- 3. PAGE LaSalle County Station, Unit 1 05000373 1 OF 4
- 4. TITLE Secondary Containment lnorerable Due to Interlock Doors Open
- 5. EVENT DATE
- 6. LEA NUMBER
- 7. REPORT DATE
- 8. OTHER FACILITIES INVOLVED YEAR I SEQUENTIAL I REV FACILITY NAME DOCKET NUMBER MONTH DAY YEAR NUMBER NO.
MONTH DAY YEAR LaSalle Country Station, Unit 2 05000374 FACILITY NAME DOCKET NUMBER 02 16 2017 2017 -
004
- - 00 04 17 2017 NA NA
- 9. OPERATING MODE
- 11. THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply)
D 20.2201 (bl D 20.2203(a)(3Hil D 50.73(a)(2)(ii)(A)
D 50.73(a)(2)(viii)(A)
D 20.2201 (dl D 20.2203(a)(3)(iil D 50.73(a)(2)(ii)(B)
D 50.73(a)(2)(viii)(B) 2 D 20.2203(a)(1 l D 20.2203(a)(4)
D so.13(a)(2)(m)
D 50.73(a)(2)(ix)(A)
D 20.2203(a)(2)(il D 50.36(c)(1 )(i)(A)
D 50.73(a)(2)(iv)(A)
D 50.73(a)(2)(x)
- 10. POWER LEVEL D 20.2203(a)(2)(iil D 50.36(c)(1 )(ii)(A)
D 50.73(a)(2)(v)(A)
D 13.11(a)(4)
D 20.2203(a)(2)(m)
D so.3s(c)(2)
D 50.73(a)(2)(v)(B)
D 13.11 (a)(s)
D 20.2203(a)(2)(iv)
D so.4s(a)(3)(iil [gl 50.73(a)(2)(v)(C)
D 13.11(a)(1) 005 D 20.2203(a)(2)(v)
D 50.73(a)(2)(i)(A)
[gl 50.73(a)(2)(v)(D)
D 13.11(a)(2)(il D 20.2203(a)(2)(vi)
D 50.73(a)(2)(i)(B)
D 50.73(a)(2)(vii)
D 13.11(a)(2)(iil D 50.73(a)(2)(i)(C)
D OTHER Specify In Abstract below or In SEQUENTIAL NUMBER 004 REV NO.
00 The function of the secondary containment is to contain, dilute, and hold up fission products that may leak from the primary containment following a Design Basis Accident (OBA). A technical evaluation determined that the inadvertent simultaneous opening of secondary containment doors for less than 30 seconds are bounded by the existing drawdown analysis and dose calculations and will not result in a failure of a safety system function needed to control the release of radioactive material to the environment. The time that both doors were simultaneously opened for this event was approximately five seconds, which is bounded by the technical evaluation (reference Engineering Change (EC) 396711, "Safety System Functional Analysis for Unit 1
& 2 Secondary Containment Air-lock Doors.")
This event did not result in the reactor enclosure differential pressure dropping below the design bases set point of -0.25 inches vacuum water gauge. Both the inner and outer doors were promptly closed by station personnel, which ended the event. This event did not involve any kind of door or air-lock material condition preventing door closure. Additionally, both the inner and outer doors were closed by normal expected means and were capable of remaining closed as designed.
The computed dose for EC 396711 was based on the door opening during the 780 second time period prior to Standby Gas Treatment (SBGT) system drawdown and filtration. This discounts the initial 120 seconds of an event where no release takes place, in accordance with calculation L-003068, "Re-Analysis of Loss of Coolant Accident (LOCA) Using Alternative Source Terms."
The approximate five second opening of the secondary containment doors is bounded by calculation L-003068. Should an event occur, in which both secondary containment doors were open simultaneously for 30 seconds or less, it would result in a potential dose increase of approximately 3.85 percent. The 3.85 percent decrease in margin is inconsequential in comparison to the 1 O CFR 100 regulatory limits.
EC 396711 also evaluated the pressure impact on the secondary containment and the ability of the SBGT system to achieve the TS required negative pressure. The results of the evaluation show SBGT would restore secondary containment pressure within three minutes which is well below the 15 minute maximum drawdown time required by TS.
Based on the short duration of door opening (approximately five seconds), no material condition preventing door closure or maintaining the doors closed, and attendance by knowledgeable personnel who closed the doors immediately, the secondary containment safety function was maintainec;I.
CORRECTIVE ACTIONS
The door was satisfactorily tested by Mechanical Maintenance and returned to service on February 18, 2017. Numerous additional informal interlock door checks wer.e performed by the subject matter expert following the return to serv.ice of the door interlock, and the interlock circuitry performed as expected without issue.
Corrective actions from the previous causal investigations had been ongoing to upgrade interlock door circuit cards with ones that had improved relays. This door set used a circuit card from the improved lot supplied by the vendor that had been installed on this door set on February 10, 2017. The station continues to work with the circuit card vendor to evaluate the failure analysis and determine if additional actions are warranted.
PREVIOUS OCCURRENCES
The interlock that failed had the new style circuit card with improved relays replaced less than a week prior to this event as an action created from a previous failure. Corrective actions from previous events had been ongoing to upgrade interlock door circuit cards with ones that had improved relays. These corrective actions were the result of causal investigations with previous events as follows.
LER 2017-002-00:
On January 18, 2017, Unit 1 was in Mode 1 at 100 percent *power, and Unit 2 was in Mode 1 at 100 percent power with MIF in
- progress. At 2056 hours0.0238 days <br />0.571 hours <br />0.0034 weeks <br />7.82308e-4 months <br /> CST, both air-lock doors of the Unit 2 reactor building 710-foot elevation three-way air-lock opened simultaneously for approximately five seconds during personnel ingress. The most probable cause of the interlock failure was NAC the intermittent failure of the relays on the door controller circuit card based on previous history with these circuit boards.
Previous events and prior causal investigations have indicated degradations in the relays for these circuit cards, and the corrective actions to replace interlock door circuit cards was ongoing at the time this event occurred. The controller circuit card was replaced, which restored the interlock functionality on January 19, 2017.
LEA 2016-001-00:
00 On February 17, 2016, Unit 2 was in Mode 1 at 100 percent power and Unit 1 was in Mode 5 for a refueling outage with no fuel movements or operation with the potential to drain the reactor vessel (OPDAV} in progress. At 1035 hours0.012 days <br />0.288 hours <br />0.00171 weeks <br />3.938175e-4 months <br /> CST, both air-lock doors of the Unit 2 Chemistry Lab corridor to Unit 2 reactor building were open at the same time for approximately five seconds.
The cause was failure of the relays on the door controller circuit card. The controller circuit card was replaced, which restored the interlock functionality. Corrective actions included determination of the cause of vendor quality issues with the controller circuit card relays and procurement of a more reliable controller circuit card following cause identification of the relay failures from vendor analysis.
LEA 2015-003-00:
On February 17, 2015, Unit 1 was in Mode 1 at 100 percent power and Unit 2 was in Mod~ 5 for a refueling outage with no fuel movements in progress. Activities involving OPDAVs were in progress in the secondary containment on Unit 2. At 1145 hours0.0133 days <br />0.318 hours <br />0.00189 weeks <br />4.356725e-4 months <br /> CST, it was reported that both air-Jock doors between the Unit 1 diesel generator corridor and the Unit 1 reactor building were open at the same time for approximately five to ten seconds. The cause was a failure of a controller circuit card in the door interlock logic. The circuit card was replaced, which restored the interlock functionality. Corrective actions included a cause determination for the premature controller circuit card failures and replacing the card with more reliable models.
LEA 2015-001-00:
On December 12, 2014, both Units 1 and 2 were in Mode 1 at 100 percent power with no fuel movements in progress. At 1324 hours0.0153 days <br />0.368 hours <br />0.00219 weeks <br />5.03782e-4 months <br /> CST, it was reported that both air-lock doors between the Unit 2 diesel generator corridor and the Unit 2 reactor building were open at the same time for approximately ten seconds. The cause was a degradation of the door closure mechanism, and the contributing cause was a less than robust design of the door interlock assembly. Corrective actions from the previous occurrences to identify, procure and install a more robust interlock assembly design were in progress at the time of the event.
Additional corrective actions, including periodic preventative maintenance to inspect, tighten, and replace fasteners as necessary, were in place but did.not preclude this event. This event did not involve a door controller.circuitry reliability issue.
LEA 2014-001-00:
On February 18, 2014, Unit 1 was in Mode 5 with fuel moves in progress during a refueling outage, and Unit 2 was in Mode 1 at 100 percent power. At 1820 hours0.0211 days <br />0.506 hours <br />0.00301 weeks <br />6.9251e-4 months <br /> CST, it was reported that both air-lock doors between the Unit 2 diesel generator corridor and the Unit 2 reactor building were open at the same time for approximately three seconds. The cause of the event was degradation of the door closure mechanism and door frame seal. A contributing cause was a less than robust design of the door interlock assembly. Corrective actions from the previous occurrences to identify, procure and install a more robust interlock assembly design were still in progress at the time of the event. Additional corrective actions included creating a periodic preventative maintenance task to inspect, tighten, and replace fasteners as necessary. This event did not involve a door controller circuitry reliability issue.
COMPONENT FAILURE DATA
Manufacturer: Security Door Controls (SOC}
Device: UA2-4 Controller Card Component ID: 1695558 NAC FORM 366A (04*2017)
Page_4_ of _4_