05000374/LER-2016-001, Regarding Secondary Containment Inoperable Due to Door Interlock Doors Open
| ML16109A215 | |
| Person / Time | |
|---|---|
| Site: | LaSalle |
| Issue date: | 04/18/2016 |
| From: | Vinyard H Exelon Generation Co |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| RA16-015 LER 16-001-00 | |
| Download: ML16109A215 (5) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2) 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(viii)(B) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(ix)(A) 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) |
| 3742016001R00 - NRC Website | |
text
_________
LaSatle County Station Exeton Generation 815-415-2000 Ieephone www.exeloncotp.com 10 CFR 50.73 RA16-015 April 18, 2016 U.S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555-0001 LaSalle County Station, Unit 2 Facility Operating License No. NPF-18 NRC Docket No. 50-374
Subject:
Licensee Event Report 2016-001-00, Secondary Containment Inoperable Due to Door Interlock Failure In accordance with 10 CFR 50.73(a)(2)(v)(C) and 10 CFR 50.73(a)(2)(v)(D), Exelon Generation Company (EGC), LLC, is submitting Licensee Event Report Number 2016-001-00 for LaSalle County Station, Unit 2.
There are no regulatory commitments in this letter. Should you have any questions concerning this report, please contact Mr. Guy V. Ford, Regulatory Assurance Manager, at (815) 415-2800.
Respectfully,
)JJ1J Harold T. Vinyard Plant Manager LaSalle County Station
Enclosure:
Licensee Event Report cc:
Regional Administrator NRC Region Ill NRC Senior Resident Inspector LaSaIle County Station
NRC FORM 366 U.S. NUCLEGULATORY COMMISSION APPROVED BY 0MB 3150-0104 EXPIRES: 10/31/2018 tll-2015)
V Estimated burden per response to comply with this mandstoly colteclion request: 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />.
I Reported lessons lesrned are incorporated into the licensing process and ted hack to industry.
V Send comments regarding burden estimate to the FOIA, Pnvacy and Information Collections
/ LICENSEE EVENT REPORT LER Branch (1-5 F53), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by I
internal e-mail to tnfocollects,Resource@nrc.gov, and to the Desk Officer, Office of Information and (See Page 2 for required number of Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, di
/ch raca rs f r e h bi DC 20503. It a means used to impose an information collection does not display a currently valid tt 1
0MB corrtroi number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
- 3. PAGE LaSalle County Station, Unit 2 05000374 1
OF 4
- 4. TITLE Secondary Containment Inoperable Due to Interlock Doors Open
- 5. EVENT DATE
- 6. LER NUMBER
- 7. REPORT DATE J
- 8. OTHER FACILITIES INVOLVED FACILITY NAME DOCKET NUMBER MONTH DAY YEAR YEAR SEQUENTiAL MONTH DAY YEAR N/A N/A FACILITY NAME DOCKET NUMBER 02 17 2016 2016 001 00 04 18 2016 N/A N/A
- 9. OPERATING MODE
- 11. THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply)
El 20.2201(b)
El 20.2203(a)(3)(i)
El 50.73(a)(2)ci)(A)
El 50.73(a)(2)(viii)(A)
El 20.2201(d)
El 20.2203(a)(3)(ii)
El 50.73(a)(2)(ii)(B)
El 50.73(a)(2)(viii)(B)
El 20.2203(a)(1)
El 20.2203(a)(4)
C] 50.73(a)(2)(iii)
El 50.73(a)(2)(ix)(A)
El 20.2203(a)(2)(i)
El 50.36(c)f 1 )(i)(A)
El 50.73(a)(2)(iv)(A)
C] 50.73(a)(2)(x)
- 10. POWER LEVEL C] 20.2203(a)(2)(ii)
El 50.36(c)(i)fii)(A)
C] 50.73(a)(2)(v)(A)
El 73.71(a)(4)
El 20.2203(a)(2)(iH)
El 5D.36(c)(2)
El 50.73(a)(2)(v)(B)
[1 73.71fa)(5)
El 20.2203(a)(2)(iv)
C] 50.46fa)f3)(ii) 50.73fa)(2)(v)(C)
C] 73.77(a)(i) 100 El 20.2203fa)f2)fv)
El 50.73fa)(2)fi)(A) 50.73(a)f2)fv)f0)
El 73.77fa)(2)fi)
El 20.2203(a)(2)(vi)
El 50.73(a)(2)(i)(B)
El 50.73(a)(2)(vii)
El 73.77(a)(2)(h)
C] 50.73(a)(2)(i)(C)
El OTHER Specity in Abstract below or in The computed dose for EC 39671 1 was based on the door opening during the 780 second time period prior to Standby Gas Treatment (SBGT) system drawdown and filtration. This discounts the initial 120 seconds of an event where no release takes place, per calculation L-003068, Re-Analysis of Loss of Coolant Accident (LOCA) Using Alternative Source Terms.
The approximate period of time the secondary containment doors were open is bounded by calculation L-003068. Should an event occur, in which both secondary containment doors were open simultaneously for 30 seconds or less, it would result in a potential dose increase of approximately 3.85 percent. The 3.85 percent decrease in margin is inconsequential in comparison to the 10 CFR 100 regulatory limits.
EC 396711 also evaluated the pressure impact on the secondary containment and the ability of the SBGT system to achieve the TS required negative pressure. The results of the evaluation show SBGT would restore secondary containment pressure within 3 minutes which is well below the 15 minute maximum drawdown time required by TS.
Based on the short duration of door opening (approximately 5 seconds), no material condition preventing door closure or maintaining the doors closed, and attendance by knowledgeable personnel who closed the doors immediately, the secondary containment safety function was maintained.
E.
Corrective Actions
The immediate corrective action taken by the station was replacement of the defective controller circuit card. Controller circuit cards with failed relays were sent to PowerLabs for analysis. They will next be sent to the vendors for further failure analysis.
Those analyses will be used to determine the cause of the premature controller relay failures and recommend actions to eliminate the less than desired circuit card service life, including procurement of more reliable controller circuit cards.
F.
Previous Occurrences
LER 2015-003-00 On February 17, 2015, Unit 1 was in Mode 1 at 100 percent power and Unit 2 was in Mode 5 with no fuel movements in progress. Operations with the potential to drain the reactor vessel (OPDRV5) were in progress in the secondary containment on Unit 2. At 1145 hours0.0133 days <br />0.318 hours <br />0.00189 weeks <br />4.356725e-4 months <br /> CST, it was reported that both air-lock doors between the Unit 1 diesel generator corridor and the Unit 1 Reactor Building were open at the same time for approximately 5 -10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared inoperable for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause was a failure of a controller circuit card in the door interlock logic. The circuit card was replaced, which restored the interlock functionality. Corrective actions include determining the cause premature controller circuit card failures and replacing the card with more reliable models.
LER 201 5-001-00 On December 12, 2014, both Units 1 and 2 were in Mode 1 at 100 percent power with no fuel movements in progress. At 1324 hours0.0153 days <br />0.368 hours <br />0.00219 weeks <br />5.03782e-4 months <br /> CST, it was reported that both air-lock doors of the Unit 2 Reactor Building 710 elevation between the Unit 2 diesel generator corridor and the Unit 2 Reactor Building were open at the same time for approximately 10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared inoperable for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause was a degradation of the door closure mechanism, and the contributing cause was a less than robust design of the door interlock assembly. Corrective actions from the previous occurrences to identify, procure and install a more robust interlock assembly design were in progress at the time of the event. Additional corrective actions, including periodic preventative maintenance to inspect, tighten, and replace fasteners as necessary, were in place but did not preclude this event.
LEA 2014-001-00 On February 18, 2074, Unit 1 was in Mode 5 with fuel moves in progress during refueling outage Li Ri 5, and Unit 2 was in Mode 1 at 100 percent power. At 1820 hours0.0211 days <br />0.506 hours <br />0.00301 weeks <br />6.9251e-4 months <br /> CST, it was reported that both air-lock doors of the Unit 2 Reactor Building 710 elevation between the Unit 2 diesel generator corridor and the Unit 2 Reactor Building were open at the same time for approximately 3 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared inoperable for the time that both interlock doors were open. TS 3.6.4.1 RA C.1 to suspend fuel movements on Unit 1 and RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> were entered and exited. The cause of the event was degradation of the door closure mechanism and door frame seal. A contributing cause was a less than robust design of the door interlock assembly. Corrective actions from the previous occurrences to identify, procure and install a more robust interlock assembly design were still in progress at the time of the event. Additional corrective actions included creating a periodic preventative maintenance task to inspect, tighten, and replace fasteners as necessary.
LER 2013-007-01 On October 22, 2013, both Units 1 and 2 were in Mode 1 at 100 percent power. At 1129 hours0.0131 days <br />0.314 hours <br />0.00187 weeks <br />4.295845e-4 months <br /> CDT, it was reported that both air lock doors on the Unit 1 Reactor Building 710 elevation between the Chemistry Hot Lab and the Reactor Building were open at the same time for approximately 10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared INOPERABLE for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 for both Units 1 and 2 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause of the event was a less than robust design of the door interlock assembly. Troubleshooting found that the mounting fasteners that secure the entire locking assembly to the frame of door # 226 (Reactor Building side of the interlock) were loose, which prevented the electro-mechanical solenoid operated bolt from properly aligning with the door-mounted catch. This misalignment prevented the bolt from entering the catch on door # 226 when door # 225 (Chemistry Hot Lab side) was opened. This malfunction resulted in the capability to open both interlock doors at the same time, and was similar to a previous occurrence on February 28, 2013.
LEA 2013-001-02 On February 28, 2013, Unit 1 was in Mode 1 at 100 percent power and Unit 2 was in Mode 5 for refueling outage L2R14. At 0400 hours0.00463 days <br />0.111 hours <br />6.613757e-4 weeks <br />1.522e-4 months <br /> CST, it was reported that both air lock doors on the Unit 1 Reactor Building 710 elevation between the Chemistry Hot Lab and the Reactor Building were open at the same time for approximately 10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met for Unit 1, and secondary containment was declared INOPERABLE for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause of the event was determined to be a less than robust design of the door interlock assembly.
Troubleshooting found that the mounting fasteners that secure the entire locking assembly to the frame of door # 226 (Reactor Building side of the interlock) were loose, which prevented the electro-mechanical solenoid operated bolt from properly aligning with the door-mounted catch. This misalignment prevented the bolt from entering the catch on door # 226 when door
- 225 (Chemistry Hot Lab side) was opened. This malfunction resulted in the capability to open both interlock doors at the same time.
G.
Component Failure Data
Manufacturer: Security Door Controls (SDC)
Device: UR2-4 Controller Card Component ID: 1695558
A.
Condition Prior to Event
Unit(s): 1 / 2 Event Date: February 17, 2016 Event Time: 1035 CST Reactor Mode(s): 5 / 1 Mode(s) Name: Refueling Mode/Power Operation Power Level: 0 percent/i 00 percent B.
Description of Event
On February 17, 2016, Unit 2 was in Mode 1 at 100 percent power and Unit 1 was in Mode 5 for refueling outage L1R16 with no fuel movements, core alterations, or OPDRV in progress. At approximately 1035 hours0.012 days <br />0.288 hours <br />0.00171 weeks <br />3.938175e-4 months <br /> CST, Operating Department received a report that an employee entered a secondary containment interlock and identified that both doors of the Unit 2 Chemistry Lab corridor / Reactor Building interlock (door number 247 and door number 248) opened simultaneously.
The employee immediately secured both doors in the interlock and notified the Main Control Room Supervisor. Both doors in the interlock were open for approximately five seconds. With both doors open, TS SR 3.6.4.1.2 was not met for Unit 2. This rendered secondary containment inoperable in accordance with TS 3.6.4.1. Reactor Building differential pressure, as observed in the Main Control Room, remained less than -0.25 inches vacuum water gauge (w.g.) at all times. Administrative controls were put in place to ensure the doors remained closed pending repairs to the interlock.
An emergency notification system (ENS) report was made to the NRC at 1705 EST on February 17, 2016 (EN 51741) pursuant to 10 CFR 50.72(b)(3)(v)(C) and (D). This occurrence is reportable in accordance with 10 CFR 50.73(a)(2)(v)(C) and (D) as an event or condition that could have prevented the fulfillment of the safety function of the structures or systems that are needed to control the release of radioactive material and to mitigate the consequences of an accident. A technical evaluation has determined this event did not meet the NEI 99-02 definition of a Safety System Functional Failure (SSFF).
C.
Cause of Event
The cause of the event was the failure of the relays of the UR2-4 controller circuit card in the interlock door. The exact cause of the relay failures is currently unknown. However, corrective actions have been created to identify the cause and make changes to the card to eliminate the less than desired circuit card service life.
D.
Safety Analysis
The safety significance of this event was minimal. The Reactor Building-to-outside differential pressure remained negative throughout the period that the secondary containment was inoperable. This event did not result in the reactor enclosure differential pressure dropping below the design bases set point. Both the inner and outer doors were promptly closed by station personnel, which ended the event. This event did not involve any kind of door or airlock material condition preventing door closure. Additionally, both the inner and outer doors were closed by normal expected means and were capable of remaining closed as designed. The secondary containment was inoperable for approximately five seconds, which was significantly less than the four-hour Completion Time to restore the secondary containment to operable status allowed by TS 3.6.4.1 Required Action Al.
The function of the secondary containment is to contain, dilute, and hold up fission products that may leak from the primary containment following a Design Basis Accident (DBA). Engineering Change (EC) 396711 was performed to show that the event had no impact on the safety function associated with secondary containment. The time that both doors were simultaneously opened was approximately five seconds, which is bounded by the technical evaluation.
This event did not result in the reactor enclosure differential pressure dropping below the design bases set point of -0.25 inches w.g. Both the inner and outer doors were promptly closed by station personnel, which ended the event. This event did not involve any kind of door or airlock material condition preventing door closure. Additionally, both the inner and outer doors were closed by normal expected means and were capable of remaining closed as designed.
The computed dose for EC 39671 1 was based on the door opening during the 780 second time period prior to Standby Gas Treatment (SBGT) system drawdown and filtration. This discounts the initial 120 seconds of an event where no release takes place, per calculation L-003068, Re-Analysis of Loss of Coolant Accident (LOCA) Using Alternative Source Terms.
The approximate period of time the secondary containment doors were open is bounded by calculation L-003068. Should an event occur, in which both secondary containment doors were open simultaneously for 30 seconds or less, it would result in a potential dose increase of approximately 3.85 percent. The 3.85 percent decrease in margin is inconsequential in comparison to the 10 CFR 100 regulatory limits.
EC 396711 also evaluated the pressure impact on the secondary containment and the ability of the SBGT system to achieve the TS required negative pressure. The results of the evaluation show SBGT would restore secondary containment pressure within 3 minutes which is well below the 15 minute maximum drawdown time required by TS.
Based on the short duration of door opening (approximately 5 seconds), no material condition preventing door closure or maintaining the doors closed, and attendance by knowledgeable personnel who closed the doors immediately, the secondary containment safety function was maintained.
E.
Corrective Actions
The immediate corrective action taken by the station was replacement of the defective controller circuit card. Controller circuit cards with failed relays were sent to PowerLabs for analysis. They will next be sent to the vendors for further failure analysis.
Those analyses will be used to determine the cause of the premature controller relay failures and recommend actions to eliminate the less than desired circuit card service life, including procurement of more reliable controller circuit cards.
F.
Previous Occurrences
LER 2015-003-00 On February 17, 2015, Unit 1 was in Mode 1 at 100 percent power and Unit 2 was in Mode 5 with no fuel movements in progress. Operations with the potential to drain the reactor vessel (OPDRV5) were in progress in the secondary containment on Unit 2. At 1145 hours0.0133 days <br />0.318 hours <br />0.00189 weeks <br />4.356725e-4 months <br /> CST, it was reported that both air-lock doors between the Unit 1 diesel generator corridor and the Unit 1 Reactor Building were open at the same time for approximately 5 -10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared inoperable for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause was a failure of a controller circuit card in the door interlock logic. The circuit card was replaced, which restored the interlock functionality. Corrective actions include determining the cause premature controller circuit card failures and replacing the card with more reliable models.
LER 201 5-001-00 On December 12, 2014, both Units 1 and 2 were in Mode 1 at 100 percent power with no fuel movements in progress. At 1324 hours0.0153 days <br />0.368 hours <br />0.00219 weeks <br />5.03782e-4 months <br /> CST, it was reported that both air-lock doors of the Unit 2 Reactor Building 710 elevation between the Unit 2 diesel generator corridor and the Unit 2 Reactor Building were open at the same time for approximately 10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared inoperable for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause was a degradation of the door closure mechanism, and the contributing cause was a less than robust design of the door interlock assembly. Corrective actions from the previous occurrences to identify, procure and install a more robust interlock assembly design were in progress at the time of the event. Additional corrective actions, including periodic preventative maintenance to inspect, tighten, and replace fasteners as necessary, were in place but did not preclude this event.
LEA 2014-001-00 On February 18, 2074, Unit 1 was in Mode 5 with fuel moves in progress during refueling outage Li Ri 5, and Unit 2 was in Mode 1 at 100 percent power. At 1820 hours0.0211 days <br />0.506 hours <br />0.00301 weeks <br />6.9251e-4 months <br /> CST, it was reported that both air-lock doors of the Unit 2 Reactor Building 710 elevation between the Unit 2 diesel generator corridor and the Unit 2 Reactor Building were open at the same time for approximately 3 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared inoperable for the time that both interlock doors were open. TS 3.6.4.1 RA C.1 to suspend fuel movements on Unit 1 and RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> were entered and exited. The cause of the event was degradation of the door closure mechanism and door frame seal. A contributing cause was a less than robust design of the door interlock assembly. Corrective actions from the previous occurrences to identify, procure and install a more robust interlock assembly design were still in progress at the time of the event. Additional corrective actions included creating a periodic preventative maintenance task to inspect, tighten, and replace fasteners as necessary.
LER 2013-007-01 On October 22, 2013, both Units 1 and 2 were in Mode 1 at 100 percent power. At 1129 hours0.0131 days <br />0.314 hours <br />0.00187 weeks <br />4.295845e-4 months <br /> CDT, it was reported that both air lock doors on the Unit 1 Reactor Building 710 elevation between the Chemistry Hot Lab and the Reactor Building were open at the same time for approximately 10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met, and secondary containment was declared INOPERABLE for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 for both Units 1 and 2 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause of the event was a less than robust design of the door interlock assembly. Troubleshooting found that the mounting fasteners that secure the entire locking assembly to the frame of door # 226 (Reactor Building side of the interlock) were loose, which prevented the electro-mechanical solenoid operated bolt from properly aligning with the door-mounted catch. This misalignment prevented the bolt from entering the catch on door # 226 when door # 225 (Chemistry Hot Lab side) was opened. This malfunction resulted in the capability to open both interlock doors at the same time, and was similar to a previous occurrence on February 28, 2013.
LEA 2013-001-02 On February 28, 2013, Unit 1 was in Mode 1 at 100 percent power and Unit 2 was in Mode 5 for refueling outage L2R14. At 0400 hours0.00463 days <br />0.111 hours <br />6.613757e-4 weeks <br />1.522e-4 months <br /> CST, it was reported that both air lock doors on the Unit 1 Reactor Building 710 elevation between the Chemistry Hot Lab and the Reactor Building were open at the same time for approximately 10 seconds. While both interlock doors were open, TS SR 3.6.4.1.2 was not met for Unit 1, and secondary containment was declared INOPERABLE for the time that both interlock doors were open. TS 3.6.4.1 RA A.1 to restore secondary containment to OPERABLE status within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> was entered and exited. The cause of the event was determined to be a less than robust design of the door interlock assembly.
Troubleshooting found that the mounting fasteners that secure the entire locking assembly to the frame of door # 226 (Reactor Building side of the interlock) were loose, which prevented the electro-mechanical solenoid operated bolt from properly aligning with the door-mounted catch. This misalignment prevented the bolt from entering the catch on door # 226 when door
- 225 (Chemistry Hot Lab side) was opened. This malfunction resulted in the capability to open both interlock doors at the same time.
G.
Component Failure Data
Manufacturer: Security Door Controls (SDC)
Device: UR2-4 Controller Card Component ID: 1695558