12-11-2009 | On 10/15/09, Waterford 3 discovered Technical Specification (TS) 3.3.1 requirements of Table 3.3-1, note C, were not met with logarithmic power inoperable. The Reactor Protection System ( RPS) trip channel bistable for Reactor Coolant System ( RCS) Flow Low was not bypassed or placed in tripped condition within one hour when the associated RPS channel Logarithmic (Log) Power Excore' Nuclear Instrumentation (ENI) was rendered INOPERABLE.
This condition is reportable under 10 CFR 50.73(a)(2)(i)(B), resulting from the operation or condition prohibited by Technical Specification which exceeded the Limiting Condition for Operation (LCO) allowed outage time.
The cause was determined to be inadequate interpretation and wording of the TS requirements associated with TS Table 3.3.-1.D 'D . |
---|
BACKGROUND
The Reactor Protective System (RPS) portion of the Plant Protection System (PPS) [JC] consists of sensors, calculators, logic, and other equipment necessary to monitor selected Nuclear Steam Supply System (NSSS) and containment conditions and to effect reliable and rapid Control Element Assembly (CEA) insertion (reactor trip) if any or a combination of the monitored conditions approach specified safety system settings.
The system's functions are to protect the core and Reactor Coolant System (RCS) [AB] pressure boundary for defined anticipated operational occurrences (AOOs) and also to provide assistance in limiting the consequences for certain postulated accidents. Manual reactor trip is also provided.
Some reactor trip signals are provided with operating bypasses that are required to allow reactor startup.
The High Logarithmic Power (HLP), High Local Power Density (LPD), Low Departure from. Nucleate Boiling Ratio (DNBR), and Low RCS Flow trips are allowed to be bypassed at prescribed Modes or power levels since these trips would otherwise generate an unnecessary trip signal during reactor startup and power increase. The LPD, DNBR, and RCS Flow Low operating bypasses are required to be automatically removed by the respective channel Log Power excore nuclear instrumentation (ENI) [IG] signal at 1E-4% power (increasing) to ensure the channel function is available to trip the reactor.
Technical Specification (TS) 3.3.1 requires a minimum of 3 out of the 4 Log Power trip channels to be OPERABLE when Log Power is below 1E-4% power in Mode 2, and also in Modes 3, 4 and 5 when CEAs are capable of withdrawal. However, the TS does not require the Log Power trip channels to be OPERABLE while in Mode 1 or above 1E-4% power, even though the DNBR, LPD, and RCS Flow Low trip channels with Log Power dependent operating bypasses are required to be OPERABLE in Modes 1 and 2.
TS 3.3.1, Table 3.3-1 note C requires the PPS operating bypasses for LPD, DNBR, and RCS Flow Low be automatically removed when at or above1E-4% power. This automatic function is dependent upon the Log Power output signal andassociated 1E-4% power bistables on the same PPS train. When the Log Power ENI is rendered inoperable, TS Table 3.3-1 note C is not met verbatim for LPD, DNBR, and RCS Flow Low on the same train, even though these operating bypasses are manually defeated by key switch, with their keys removed.
With one or two DNBR, LPD and/or RCS Flow trip channels inoperable, TS 3.3.1 Table 3.3-1 ACTIONs require the inoperable channel(s) to be placed in the bypassed or tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
EVENT DESCRIPTION
On 8/20/09, the NRC Resident inspector challenged the Waterford 3 application of the TS 3.3.1 associated with the PPS operating bypasses when the Log Power channel (B) was considered inoperable while in Mode 1. At the time, PPS Log Power channel B was considered inoperable; however, DNBR, LPD, and RCS Flow Low were not considered inoperable based on the understanding that PPS Log Power channels were not required in Mode 1 and there was no reliance on Log Power channels for the automatic removal of operating bypasses since these operating bypasses were not being utilized and were secured in the unbypass position with keys removed from the keyswitches. In response, Waterford 3 applied literal TS 3.3.1 Table 3.3-1 note C wording, which required these operating bypasses to be "automatically removed", declared DNBR, LPD, and RCS Flow Low trip channels inoperable, entered TS 3.3.1 ACTION 2, and placed these trip channels in bypass.
Historical applications of TS 3.3.1 were the following:
The channel B PPS Log Power ENI had been declared inoperable 9/1/2008 since the previous reactor startup, due to elevated power indication at very low power levels due to external induced noise while significantly below power levels typical for approaching reactor criticality. Further evaluation resulted in determination that the Log Power channel B had been Operable, but degraded, fully capable of performing the'function to automatically remove the operating bypasses of LPD, DNBR, RCS Flow and Log Power PPS chalinels: The TS 3.3.1 ACTION 2 was exited, and the trip channels were restored.
On 10/15/09, while performing reviews of plant procedures and historical log entries, Waterford 3 plant personnel discovered Technical Specification (TS) 3.3.1 requirements of Table 3.3-1, note C, were not met during past maintenance testing. Specifically, on 7/5/09, during PPS channel C Log Power calibration test, DNBR and LPD trip channels on the associated channel being tested (C) were bypassed, however, the RCS Flow Low trip channel was not placed in bypass or in tripped condition, or otherwise declared inoperable.
On 11/28/07, during the channel (C) calibration test while D channel ENI Log Power was concurrently inoperable, DNBR and LPD trip channels on the associated channel being tested (C) were bypassed. LPD and DNBR was placed in the tripped condition on the associated channel already inoperable (D). However, RCS Flow Low trip channels were not placed in bypass or in tripped condition, or otherwise declared inoperable on either train (C or D). The Operations procedure for Plant Protection System provides requirements for testing Excore/CPC channel while another channel is already inoperable; however, this procedure does not address the RCS Flow Low trip channel.
Compliance was not met for TS 3.3.1 Table 3.3-1 Action 2, Action 3, nor TS 3.0.3.
CAUSAL FACTORS
NRC issuance of Amendment No. 40 (ADAMS Accession No. ML021760266) changed the Technical Specifications by removing the operability and surveillance requirements for Log Power Channels when reactor power is above 1E-4% of rated thermal power. The NRC Safety Evaluation Report explicitly stated that the operation of the Log Power Level Channels at power levels above 1E-4% of rated thermal power (RTP) is recognized to be inappropriate for technical specification requirements since on startup, the trips are bypassed. This led to the philosophy that above 1E-4% RTP with the DNBR, LPD, and RCS Flow trips enabled and able to perform their specified safety functions that a log power issue did not affect DNBR, LPD, and RCS Flow trip operability. The 1E-4% bistable which is actuated by log power has no adverse impact on DNBR, LPD, and RCS Flow trips above 1E-4% once the trips are enabled.
NRC issuance of Amendment No. 145 (ADAMS Accession No. ML0217904720) was intended to clarify the known TS Table 2.2-1 and 3.3-1 verbatim compliance issues associated with TS Table 3.3-1 log power. This change clarified the 1E-4% power level is associated with neutron power and not thermal power. This amendment did not change the NRC Amendment No. 40 philosophy.
The Maintenance Instrumentation procedures for Log Power testing and maintenance address the need to consider bypassing LPD and DNBR trip channel; however, the procedures do not specifically address the need to consider RCS Flow Low trip channel operability. The DNBR and LPD were included, not because their operability were believed to be affected, but as a conservative action because of the integrated circuitry could potentially cause an unnecessary DNBR and LPD bistable trip while performing test or maintenance activities on the associated Log Powel' channel. This requirement in TS Table 3.3-1 note C for operating bypasses to be automatically removed had been interpreted as being satisfied, not requiring the Log Power channel, when these operating bypasses are removed and disabled by their key switches removed.
CORRECTIVE ACTIONS
Operations Standing Order was put in place 8/31/09 to ensure that LPD, DNBR, and RCS Flow is bypassed or placed in trip condition when the associated Log Power channel is rendered inoperable in Modes 1 and 2, regardless if Log Power trip channel is required or if the operating bypasses are utilized.
A TS amendment request was submitted to NRC via Entergy Letter No. W3F1-2009-0045 (ADAMS Accession No. M L092990199) to clarify the TS related requirement of operating bypass to read, "shall be capable of automatic removal whenever the operating bypass is enabled and logarithmic power is above the 1E-4% bistable setpoint.
Changes to the maintenance procedures for Log Power are being finalized to address bypassing or placing RCS Flow Low in trip condition to ensure compliance with TS when the associated Log Power channel is rendered inoperable due to maintenance testing.
Changes to the PPS Operations procedure are being made to address bypassing or placing RCS Flow Low in trip condition to ensure compliance with TS when the associated Log Power channel is rendered inoperable due to maintenance testing while a second Log Power channel is already inoperable.
SAFETY SIGNIFICANCE
Four PPS measurement channels with electrical and physical separation are provided for each parameter used in the direct generation of trip signals. A two-out-of-four coincidence of like trip signals is required to generate a reactor trip signal. The fourth channel is provided as an installed spare and allows bypassing of one channel while maintaining a two-out-of-three logic protection system. In these cases, where RCS Flow channel was not bypassed or placed in trip condition, the operating bypasses were not utilized, but maintained locked in the un-bypassed condition with key removed, such that the trip function was not affected by the associated log power channel being inoperable. Accordingly, there were no safety consequences associated with this condition.
SIMILAR EVENTS
A review of previous events was performed to identify similar licensee events at Waterford 3 reported in the last three years. There were no similar licensee events identified.
ADDITIONAL INFORMATION
Energy industry identification system (EllS) codes are identified in the text within brackets [ ].
|
---|
|
|
| | Reporting criterion |
---|
05000410/LER-2009-001 | Momentary Loss of Control Power to High Pressure Core Spray, Pump Due to Degraded Fuse Block Connection | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000266/LER-2009-001 | Component Coolina Water PumD Inoperable In Excess of Technical Specification Allowed Completion Time | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000263/LER-2009-001 | Containment Overpressure Not Ensured in the Appendix R Analysis | 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition | 05000250/LER-2009-001 | Procedure Inadequacy Causes Control Room Ventilation Isolation Technical Specification Noncompliance | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000237/LER-2009-001 | Common Mode Failure of Reactor Building Isolation Dampers | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000530/LER-2009-001 | Manual Reactor Trip Due to a Loss of Instrument Air to the Containment Building | | 05000457/LER-2009-001 | Reactor Trip on Over Temperature Delta Temperature due to a Signal Spike on One Channel With Another Channel Placed in the Tripped Condition for Surveillance Testing | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000413/LER-2009-001 | Both Trains of Chemical and Volume Control, Auxiliary Feedwater and Containment Spray Systems were Inoperable due to a Component Failure | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000412/LER-2009-001 | Equipment Operability for Steam Generator Tube Rupture Safety Analysis Not Met | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vi) | 05000461/LER-2009-001 | Safety Function Lost Due to Capacitor Failure on Circuit Card | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000382/LER-2009-001 | Waterford 3 Steam Electric Station 05000382 1 OF 3 | | 05000370/LER-2009-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000346/LER-2009-001 | Containment Air Cooler Fans Inoperable Due to Misapplication of Potter and Brumfield Rotary Relays | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000336/LER-2009-001 | Reactor Trip Due to High Pressurizer Pressure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000305/LER-2009-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000281/LER-2009-001 | Manual Reactor Trip Initiated to Replace a Rod Control Data Logging Card | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000261/LER-2009-001 | Emergency Diesel Generator Inoperable in Excess of Technical Specifications Allowed Completion Time | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000220/LER-2009-001 | Failure to Implement Required Technical Specification Actions Associated with Failed Surveillance Test | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000389/LER-2009-001 | Unit 2 Main Feedwater Isolation Valves Stroke Time Potentially Affected by Temperature | 10 CFR 50.73(a)(2)(I)(B) | 05000321/LER-2009-001 | Pump Suction Swap for HPCI and RCIC Non-Conservative With Respect To Technical Specification Requirements | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000334/LER-2009-001 | Surveillance Test Inadvertently Violates Technical Specification 3.6.1 for Containment Operability | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000369/LER-2009-001 | III Duke Energy® BRUCE H HAMILTON Vice President McGuire Nuclear Station Duke Energy Corporation MGO1VP / 12700 Hagers Ferry Road Huntersville, NC 28078 704-875-5333 704-875-4809 fax bhhamilton@duke-energy.com June 24, 2009
U.S. Nuclear Regulatory Commission
ATTENTION: Document Control Desk
Washington, D.C. 20555
Subject: Duke Energy Carolinas, LLC
McGuire Nuclear Station, Units 1 and 2
Docket Nos. 50-369, 50-370
Licensee Event Report 369/2009-01, Revision 0
Problem Investigation Process (PIP) M-09-02216
Pursuant to 10 CFR 50.73 Sections (a) (1) and (d), attached
is Licensee Event Report 369/2009-01, Revision 0, regarding
the past inoperability of the Nuclear Service Water System
"A" Trains due to potential for strainer fouling.
This report is being submitted in accordance. with 10 CFR
50.73 (a) (2) (i)- (B), an Operation Prohibited by Technical
Specifications, and 10 CFR 50.73 (a) (2) (v) (B), any Event.
or Condition That Could Have Prevented Fulfillment of the
Safety Function.
This event is considered to be of no significance with
respect to the health and safety of the public. There are
no regulatory commitments contained in this LER.
If questions arise regarding this LER, contact Rick Abbott
at 980-875-4685.
Very truly yours,
Bruce H. Hamilton
Attachment
www.duke-energy.corn m U.S. Nuclear Regulatory Commission
Date
Page 2
CC: L. A. Reyes, Regional Administrator •U.S. Nuclear Regulatory Commission, Region.II
Sam Nunn Atlanta Federal Center
•61 Forsyth Street, SW, Suite 23T85
Atlanta, GA 30303
J. H. Thompson, Jr. (Addressee Only)
Senior Project Manager (McGuire)
U.S. Nuclear Regulatory Commission
Mail Stop 0-8G9A
Washington, DC 20555
J. B. Brady
Senior Resident Inspector
U.S. Nucle'ar Regulatory Commission-
McGuire Nuclear Station
B. 0. Hall, Section Chief
Radiation Protection Section
1645 Mall Service Center.
Raleigh, NC 27699
NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104t EXPIRES: 08/31/2010
(9-2007) Estimated burden per response to comply with this mandatory collection request: 50 hours. Repoded
lessons learned are incorporated into the licensing process and fed back to industry. Send comments
regarding burden estimate to the Records and FOIA/Privacy Service Branch (T-5 F52), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by internet e-mail to infocollects@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information (See reverse for required number of collection does not display a currently valid OMB control number, the NRC may not conduct or digits/characters for each block) sponsor, and a person is not required to respond to, the information collection. LICENSEE EVENT REPORT (LER) 1. FACILITY NAME 2. DOCKET NUMBER I 3. PAGE _McGuire Nuclear Station, . 0369 8 Unit 1 05000- OF 4. TITLE Nuclear Service Water System (NSWS)d
"A" Trains Past Inoperable when aligned
to the Standby Nuclear Service Water Pond due to'corrosion.
(SNSWP) | 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat | 05000456/LER-2009-001 | Steam Generator Tube Exceeding Plugging Criteria Remained In Service During Previous Cycle | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000395/LER-2009-001 | Inadequate Procedure Results In EDG Not Obtaining Maximum Load Required By Technical Specification | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000336/LER-2009-002 | Reactor Coolant System Pressure Boundary Leakage | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000373/LER-2009-002 | Loss of Shutdown Cooling Due to Spurious Closure of the Shutdown Cooling Suction Isolation Valve | 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat | 05000382/LER-2009-002 | Waterford 3 Steam Electric Station 05000382 10OF 4 | | 05000278/LER-2009-002 | Inoperable 'A' Wide Range Neutron Monitor Results in Condition Prohibited by Technical Specifications | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000287/LER-2009-002 | Unit 3 Trip Due to Generator Phase Differential Lockout | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000263/LER-2009-002 | | | 05000412/LER-2009-002 | Unacceptable Indications Identified During Reactor Vessel Head Inspection | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000354/LER-2009-002 | As Found Values for Safety Relief Valve Lift Setpoints Exceed Technical Specification Allowable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000346/LER-2009-002 | Vibration Induced Failure of Temperature Instrument Results in Operation above Licensed Power Limit | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000261/LER-2009-002 | Failure to Complete Technical Specifications Required Action Within the Allowed Completion Time | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000334/LER-2009-002 | Feedwater Isolation Initiates Auxiliary Feedwater System During Refueling Shutdown | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000254/LER-2009-002 | Quad Cities Nuclear Power Station Unit 1 05000254 1 OF 5 | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000305/LER-2009-002 | Steam Exclusion Door Blocked Open During Maintenance Activities | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000250/LER-2009-002 | Turkey Point Unit 3 05000250 1 of 10 | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000220/LER-2009-002 | High Pressure Coolant Injection System Initiation Following a Manual Turbine Trip Due to High Turbine Bearing Vibrations | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000298/LER-2009-002 | Manual Scram On Low Water Level Caused By Turbine Trip From Hydraulic Fluid Leak | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000305/LER-2009-003 | Containment Spray Pump A Inoperable At Degraded Voltage Protection Setpoint | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000395/LER-2009-003 | ..Potential Loss of Residual Heat Removal System Safety Function In Mode 4 Due To An Unanalyzed Condition0 | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability | 05000389/LER-2009-003 | RCP 2B2 Lower Seal Cavity Line Leak | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000323/LER-2009-003 | Containment Sump Recirculation Valve Position Interlock Failure Due to Inadequate Testing | | 05000263/LER-2009-003 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000261/LER-2009-003 | Manual Reactor Trip Due to Failure of 'A' Steam Generator Level Module | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000440/LER-2009-003 | Reactor Recirculation Pump Failure Results in Manual Reactor Protection System Actuation | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000361/LER-2009-003 | Pressurizer Auxiliary Spray Failed Inservice Test | 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat | 05000457/LER-2009-003 | Drain Procedure for ECCS Suction Line Creates an Unanalyzed Condition Due to Inadequate Configuration Requirements | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000237/LER-2009-003 | Emergency Diesel Generator Oil Leak | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
|