05000391/LER-2016-002, Regarding Turbine Driven Auxiliary Feedwater Pump Inoperable for Longer than Allowable Outage Time Due to Turbine Speed Control Failure
| ML16193A545 | |
| Person / Time | |
|---|---|
| Site: | Watts Bar  (NPF-096) |
| Issue date: | 07/11/2016 |
| From: | Simmons P Tennessee Valley Authority |
| To: | Document Control Desk, Office of New Reactors |
| References | |
| LER 16-002-00 | |
| Download: ML16193A545 (9) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2) |
| 3912016002R00 - NRC Website | |
text
Tennessee Valley Authority, Post Office Box 2000, Spring City, Tennessee 37381 July 11, 2016 10 cFR 50.73 ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, D.C. 20555-0001 Watts Bar Nuclear Plant, Unit 2 Facility Operating License No. NPF-96 NRC Docket No. 50-391 Subject: Licensee Event Report 391/2016-002-00, Turbine Driven Auxiliary Feedwater Pump lnoperable for Longer than Allowable Outage Time due to Turbine Speed Control Failure This submittal provides Licensee Event Report (LER) 391/2016-002-00. This LER documents an incident where the Technical Specification Limiting Condition for Operation (LCO) 3.7.5tor the Auxiliary Feedwater System was not met. This report is being submitted in accordance with 10 CFR 50.73(a)(2)(iXB). A supplement to this LER is expected to be submitted by September 2,2016 There are no regulatory commitments in this letter. Please direct any questions concerning this matter to Gordon Arent, WBN Licensing Director, at (423) 365 2004.
Respectfully, Paul Simmons Site Vice President Watts Bar Nuclear Plant Enclosure cc: See Pag e 2
U.S. Nuclear Regulatory Commission Page2 July 11, 2016 cc (Enclosure):
NRC Regional Administrator - Region ll NRC Senior Resident Inspector - Watts Bar Nuclear Plant
NRC FORTUI 366 U.S. NUCLEAR REGULATORY COMTIISSION (11-2015)
- - o{*"'u!,
iw:
Z:-O.]d LICENSEE EVENT REPORT (LER}
', t**a APPROVED BY OillB: NO.3l50-0104 EXPIRES: {013112018 Estimated burden per response to comply with this mandatory collection request 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />, Reportd lessons learned are incorporated into the licensing process and Gd bmk to indusfy.
Send commenE regarding burden estimate b the FOIA, Privacy and lnbrmation Collections Branch (T-5 F53), U.S. Nuclear Regulatory Commission, Washington, DC 2055S0001, or by intemet e-mail to lnbcollects,Resource@nrc.gov, and to the Desk Officer, Office of lnfurmation and Reguldory Affairs, NE0B-10202, (3150-0104), Office of Management and Budget, Wahington, DC 20503. lf a means used to impose an inbrmation mllection does not display a cunenUy valid OMB contnol number, the NRC may not conduct or sponsor, and a person is not required to respond to, the inbrmation collec'tion.
- 1. FACILITY NAME Watts Bar Nuclear Plant, Unit 2
- 2. DOCKET NUII'IBER 0500039 1
- 3. PAGE 10F7
- 4. TITLE Turbine Driven Auxiliary Feedwater Pump lnoperable for Longer than Allowable Outage Time due to Turbine Speed ControlFailure
- 5. EVENT DATE
- 6. LER NUTUBER
- 7. REPORT DATE
- 8. OTHER FACILITIES INVOLVED MONTHI DAY IYEAR YEAR lt=-t'r=$J$'- lftEY MONTH I DAY YEAR FACILITY l\\lAME I
DOCKET NUMBER N/A lr,rn 05 11 I 2016 2016 - 002 00 071 11 2016 FACILIW r.lAME I
DOCKET NUMBER N/A lr.rn
- 9. OPERATING TUIODE II.THISREPORTISSUBilITTEDPURSUANTTOTHEREQUIREilENTSOFI0CFRS: (Ch*kallthatapptfl 3
n 2o.z2o1(b) tr 2o.22os(aX3Xi) tr 50.73(aX2Xii)(A) tr 50.73(aX2XviiiXA) tr 2o.z2o1(d) tl 2o.z2o3(aX3Xii) tr 50.73(aX2XiiXB) t] 50.73(aX2Xvii.XB) tr zo.22os(aXl) tr 20.2203(aX4) tr s0.73(ax2xiii) n s0.73(aX2XixXA) tr zo.z2o3(aX2Xi) tr s0.36(cxl XIXA) tr 50.73(aX2XivXA) n 50.73(aX2Xx)
- 10. POWER LEVEL tr zo.2zo3(aX2Xii) n s0.36(cxl xiixA) tr s0.73(aX2XvXA) n rc.11(aX4) tr zo.2zo3(aX2xiii) n s0.36(cX2) tr s0.73(aX2XvXB) tr rs.tl (aXs) n 20.2203(aX2Xiv) tr 50.46(ax3xii) tr s0.73(aX2XvXc) tr nlt(a)(ll tr 2o.22as(aX2Xv) tr s0.73(ax2xixA) tr s0.73(aX2XvXD) tr B.tr(aX2Xi) tr zo.2zo3(aX2Xvi)
X 50.73(aX2XiXB) tr s0.73(aX2Xvii) tr B.TT(aX2XI.)
tr s0.73(aX2XiXc) tr OTHER Specify in Abstract below or in B. lnoperable Structures, Components, or Systems that Contributed to the Event There were no additional structures, components or systems that contributed to this event.
C. Dates and Approximate Times of Occurrences
Date Time (EDT) Event 03129116 1659 2A-A MDAFWP oil leak identified by system engineering 03/30/16 1710 2A-A MDAFWP oil leak repaired 03/30/16 2314 Entered Mode 3 with INOPERABLE TDAFWP 04102116 0629 Entered Mode 4 04108116 1244 Re-entered Mode 3 with INOPERABLE TDAFWP 04114116 0016 Commenced and aborted testing of TDAFWP due to low rpm 04114116 0057 TDAFWP trips on spurious overspeed 04115116 2113 TDAFWP speed controller replaced and pump placed in standby alignment 04117116 0338 Entered Mode 4 for repairs to TDAFWP - steam leaks 04117116 0906 2A-A MDAFWP considered INOPERABLE for tracking due to a loss of oil 04120116 1256 2A-A MDAFWP exits tracking LCO 05104116 1414 TDAFWP Surveillance completed successfully 05t11t16 Past OPERABILITY Evaluation determined TDAR /P was INOPERABLE D. Manufiacturer and Model Number of Components that Failed There were no component failures. The TDAFWP inoperability was due to a loose wire in the speed control circuit likely caused by a human performance error.
E. Other Systems or Secondary Functions Affected
No other systems or functions were affected.
F. Method of discovery of each Component or System Failure or Procedural Error
The inboard bearing vent cap leak was discovered by auxiliary unit operators during routine building rounds. The oil bubbler was also reported as empty by system engineering.
The failure of the TDAFWP to achieve rated speed and the subsequent TDAFWP trip on electrical overcpeed were discovered during surveillance testing on April 14,2016.
G. Failure Mode and Effect of Each Failed Component The initial evaluation of the oil leakage on the inboard bearing housing vent cap of the 2A-A MDAFWP concluded that the leakage did not result in the failure of the pump to perform its safety function. The 2A-A MDAFWP was operated throughout the time in question. Monitoring and oil
additions were performed and the 2A-A MDAFWP was considered OPERABLE. Confirmation of this position is currently being re-evaluated and a supplement to this report will be provided with the finalconclusion.
As noted in the Description of Event, a loose wire was present in the power supply to the electronic overcpeed trip circuit to the TDAFW pump. This condition was present through the entire period that Unit 2 was in Mode 3 from 3/30/16 to 412116 and 418116 to 4117116. As such, while the pump was determined to be capable to produce required flow and head at reduced speeds, a spurious overspeed trip could have occurred at any time during this period. ln accordance with the WBN Unit 2 Final Safety Analysis Report, failure of the TDAFWP from a mechanical failure or spurious control signal will be addressed through the operation of the 2A-A &
2B-B MDAFWP that provide auxiliary feedwater flow to all 4 Steam Generators.
Operator Actions
Due to the failure of TDAFWP to achieve a speed greater than 3925 rpm per procedure 2-Sl 923-5, the operators entered Technical Specification (TS) Limiting Condition for Operation (LCO) 3.7.5, Condition B, "One AFW train INOPEMBLE in MODE 1,2, or 3 for reasons other than Condition A.'
Automatically and Manually lnitiated Safety System Responses The condition described in this report did not result in any automatic or manual safety systems activation.
CAUSE OF THE EVENT
A. The cause of each component or system failure or personnel error, if known.
The inability of the TDAFWP to achieve rated speed acceptance criterial was the result of maintenance practices that incorrectly calibrated the speed controller.
The TDAFW pump incurred a spurious overspeed trip as the likely result of maintenance practices.
A loose wire was discovered in the power circuit to the electronic overspeed trip module that resulted in the spurious trip. Work Order searches determined that no work was performed on the TDAFW pump overspeed circuit following entry into Mode 3, which indicates that the condition existed prior to entering Mode 3 and as early as November 2015.
B. The cause(s) and circumstiances for each human performance related root cause.
Troubleshooting identified a loose connection at the power supply to the overcpeed trip module.
The connection on the test block is a flat plate over bare wire type termination. The technicians performing the troubleshooting reported finding the flat plate visibly loose, requiring approximately one quarter tum of the screw before the plates began to snug on the wire. A review of Vendor Manual revealed that overspeed trip module has an internal, normally energized relay that de-energizes to trip the TDAFWP. As such, it was verified that momentary loss of power due to a loose termination could cause a spurious TDAFWP overspeed trip. Subsequent testing of the H.
l.
ilt.
speed switch following proper termination did not identify any deficiencies associated with the switch.
ANALYSIS OF THE EVENT
The Auxiliary Feedwater (AFW) system's {EllS:BA} function is to supply, in the event of a loss of the main feedwater supply, sufficient feedwater to the steam generators to remove primary system residual heat and core decay heat. lt may also be required in some other circumstances such as the evacuation of the Main Control Room (MCR), cooldown after a Loss of Coolant Accident (LOCA) for a small break, maintaining a water head in the steam generators following a LOCA, a flood above plant grade, Anticipated Transient Wthout Scram (ATWS) event, 10 CFR 50, Appendix R, Fires and to support normalcooldown.
The TDAFW pump assembly along with the motor driven (MDAFW) pump assemblies provide the motive pressure to ensure adequate flow gets to the steam generators for decay heat removal.
The Design Basis Events that establish AFW system safety function requirements are:
Loss of Normal Main Feedwater (LONF) (including Loss of Offsite Power)
Main Feedline or Main Steamline Breaks (MFLB or MSLB)
Large Break Loss of Coolant Accident (LOCA)
Small Break Loss of CoolantAccident (SBLOCA)
Technical Specification 3.7.5, Auxiliary Feedwater (AFVV) System requires all three trains of AFW to be OPERABLE in Modes 1, 2, and 3. Additionally, one train of AFW is required OPERABLE in Mode 4 when the Steam Generators are used for Heat Removal. With one of the required AFW trains (pump or flow path) INOPERABLE in MODE 1,2, ot 3 for reasons other than Condition A, action must be taken to restore to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. This Condition includes the loss of two steam.supply lines to the turbine driven AFW pump. The72 hour Completion Time is reasonable, based on redundant capabilities afforded by the AFW System, time needed for repairs, and the low probability of a Design Basis Accident (DBA) occurring during this time period.
During the timeframe that the TDAFWP was INOPERABLE while in Mode 3, both MDAFWPs were OPERABLE and capable of performing their design function. As a result, sufficient AFW system capability was available. Both MDAFWPS were in-service during the time that the TDAFWP was INOPERABLE.
Additionally, while the TDAFWP could not achieve rated speed acceptance criteria, it was capable of meeting Technical Specification flow and pressure requirements at the reduced speed.
ASSESSMENT OF SAFETY CONSEQUENCES
A. Availability of systems or @mponents that could have performed the same function as the components and systems that failed during the event.
As discussed previously, during the timeframe that the TDAFWP was INOPERABLE while in Mode 3, both MDAFWPS were OPERABLE and capable of performing their design function. As a result, tv.
V.
vt.
sufficient AFW system capabili$ was available. Both MDAFWPs were in-service during the time that the TDAFWP was INOPERABLE. Additionally, while the TDAFWP could not achieve rated speed acceptance criteria, it was capable of meeting Technical Specification flow and pressure requirements at the reduced speed.
For events that occurred when the reactor was shut down, availabilig of systems or components needed to shutdown the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident At the time of this occurrence, Watts Bar Unit 2 had not achieved initial criticality. With the MDAFWPS in service and no decay heat on Unit 2, the ability to shut down the reactor and maintain a safe shutdown condition was not impacted. With no core decay heat, removalof residual heat is not an issue. With no irradiated fuel in the Unit 2 core, an uncontrolled release of radioactive material is not credible, The inoperability of the TDAFWP would not have adversely impacted the ability to mitigate the consequences of an accident.
For failure that rendered a train of a safety system INOPERABLE, an estimate of the elapsed time from the discovery of the failure until the train was returned to service.
Watts Bar Unit 2 entered Mode 3 on March 30, 2016 a12314 hours. The TDAFWP failed to achieve minimum speed acceptance criteria as required by the surveillance and subsequently tripped on electricaloverspeed at 0057 hours6.597222e-4 days <br />0.0158 hours <br />9.424603e-5 weeks <br />2.16885e-5 months <br /> on April 14, 2016. There were two timeframes of TDAFWP unavailability. The first occurred when Unit 2 entered Mode 3 at2314 hours on March 30, 2016 and then moved back to Mode 4 at 0629 hours0.00728 days <br />0.175 hours <br />0.00104 weeks <br />2.393345e-4 months <br /> on April 2, 2016. The second occurred when U2 reentered Mode 3 on AprilS, 2016 at1244 hours and subsequently moved back to Mode 4 on April 17,2016 at 0338 hours0.00391 days <br />0.0939 hours <br />5.588624e-4 weeks <br />1.28609e-4 months <br />. Based on the above, the unavailability window was 2 days, 7 hours8.101852e-5 days <br />0.00194 hours <br />1.157407e-5 weeks <br />2.6635e-6 months <br /> and 15 minutes and 7 days, 14 hours1.62037e-4 days <br />0.00389 hours <br />2.314815e-5 weeks <br />5.327e-6 months <br /> and 54 minutes respectively for a total exposure time 9 days, 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> and 9 minutes.
CORRECTIVE ACTIONS
This event was entered into the Tennessee Valley Authority Corrective Action Program and is being tracked under condition report (CR) 1163431.
I mmed iate Corrective Actions The TDAFWP speed controlwas initially inspected, the loose wire corrected. Subsequently, the speed changer module was replaced, the speed control module was calibrated and the TDAFWP successfully completed TS surveillance req u irements.
The 2A-A MDAFWP oil bubbler monitoring and oil additions were performed. Oil additions were continued daily (with the exception of April 11th and April 16th) from April4 through April 17, 2016.
Corrective Actions to Prevent Recurrence A strainer cup was installed on the 2A-A MDAFWP in the line containing the bearing cover cap.
This device prevents oil spray from blowing past the bearing cover cap and successfully stopped the oil leakage.
B.
VII. ADDITIONAL INFORMATION
A. Previous similar events at the same plant On May 14,2011, at 14:28 Eastern Daylight Saving Time (EDT), Watts Bar Nuclear Plant Unit 1 (WBN) entered Mode 3 with the Turbine Driven Auxiliary Feedwater (TDAFW) pump INOPERABLE following maintenance during the WBN Cycle 10 refueling outage. The INOPERABLE condition was identified during performance of Surveillance Requirement (SR) 3.7.5.2 on May 16,2011. The TDAFW pump failed SR 3.7.5.2 due to equipment failure, and the plant entered Limiting Condition for Operation (LCO) 3.7.5, Condition B. The faulty equipment was repaired and the TDAFW pump was re{ested in accordance with SR 3.7.5.2. The TDAFW pump met the acceptiance criteria within the allowable time and the plant exited LCO 3.7.5 at 17:45 on May 19,2011.
This report (390/2011-03) was subsequently retracted when TVA concluded that the TDAFWP was OPEMBLE when the plant first entered Mode 3 following Refueling Outage Cycle 10 and, therefore, did not violate LCO 3.0.4.
B. Additional lnformation None.
C. Safety System Functional Failure Consideration Based on the initialconclusion that the 2A-A MDAFWP could perform it design basis function with the existing oil leak, this condition did not result in a safety system functionalfailure because two MDAFWPS were capable of supplying AFW to all four steam generators. As discussed previously, confirmation of this position is currently being re-evaluated and a supplement to this report will be provided with the final conclusion.
D. Scrams with Complications Consideration There was no scram associated with this event.
VIII. COMMITMENTS
None.
t.
PLANT OPERATING CONDITIONS BEFORE THE EVENT
Watts Bar Nuclear Plant (WBN) Unit 2 was in Mode 3 atzero percent rated thermal power.
DESCRIPTION OF EVENT
A. Event On April 14,2016, during the performance of 2-Sl-3-923-S, Auxiliary Feedwater Pump 2A-S Comprehensive Pump Test, the Terry Turbine (ElIS:TRB) associated with the Turbine Driven Auxiliary Feedwater Pump (TDAFWP) failed to reach 3950 rpm t 25 rpm as required by the procedure. As a result, the test was suspended. Following research into the requirement, it was determined that the t 25 rpm was a conservative value rather than the t 1o/o ol speed (t 39 rpm) required by the ASME code. Following this 2-Sl-3-923-S was revised to incorporate a requirement of 3950 rpm t 39 rpm. The test was re-performed and while the pump did meet this speed requirement when the pump was started on mini-flow, the speed at full flow (814 gpm) was 3878 rpm which did not meet the minimum 3911 rpm speed requirement. As a result of the failure of the TDAFWP to satisff the surveillance requirements, the pump was declared INOPERABLE at 0016 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br /> on April 14,2016.
During the firct performance of the comprehensive pump test on April 14,2016, the TDAFWP experienced a spurious overspeed trip. The TDAFWP had failed to meet the required speed of 3925 rpm and was being used to fillthe steam generators (SGs). The TDAFW LevelControlValves
{EllS:LCV} were secured at 0057 hours6.597222e-4 days <br />0.0158 hours <br />9.424603e-5 weeks <br />2.16885e-5 months <br />, and with the turbine speed control still in Manual the speed rose to approximately 4100 rpm. The turbine speed control {EllS:SC} was returned to Auto and the speed dropped to approximately 3813 rpm as read by Maintenance and Test Equipment. At this time, the Main Control Room received alarm 60-A, AFW PMP A-S ELEC OVERSPEED TRIP. lt was confirmed at the pump that the TDAFWP had in fact tripped. The electronic overspeed setpoint for the turbine is 110% of rated speed, or 4345 rpm. As such, this trip was determined to be spurious. Trouble shooting performed on the TDAFWP determined that a loose connection existed at the power supply to the signal converter in the TDAFWP speed switch. Based on a review of the vendor manual, it was verified that a loose termination could cause a spurious TDAFWP overspeed trip.
On March 29,2016, system engineering reported that the oil level in the inboard bearing bubbler for the 2A-A Motor Driven Auxiliary Feedwater Pump (MDAFWP){EIlS:P} was empty. lt was determined that an oil leak through the inboard bearing housing vent cap was the cause. The initial response was to check the oil bubbler three times per shift and to add approximately 4 ounces of oil on a daily basis. On March 30, 2016, the vent cap was repaired and oil level remained stable. At 2000 hours0.0231 days <br />0.556 hours <br />0.00331 weeks <br />7.61e-4 months <br /> on March 30, 2016, checks of the oil bubbler were suspended. Oil additions were continued daily (with the exception of April 1 1th and April 16th) from April 4 through April 1 7, 2016. The MDAFWP was considered OPERABLE during this timeframe. On April 17, 2016, the 2A-A MDAFWP was considered INOPERABLE for tracking purposes due to increased oil consumption. At the time, Unit 2 was in Mode 4 and required only one train of auxiliary feedwater.
The INOPERABILITY of the TDAFWP is being reported pursuant to 10 CFR 50.73(aX2Xi)(B), 'Any operation or condition which was prohibited by the plant's Technical Specifications.'
!t.
B. lnoperable Structures, Components, or Systems that Contributed to the Event There were no additional structures, components or systems that contributed to this event.
C. Dates and Approximate Times of Occurrences
Date Time (EDT) Event 03129116 1659 2A-A MDAFWP oil leak identified by system engineering 03/30/16 1710 2A-A MDAFWP oil leak repaired 03/30/16 2314 Entered Mode 3 with INOPERABLE TDAFWP 04102116 0629 Entered Mode 4 04108116 1244 Re-entered Mode 3 with INOPERABLE TDAFWP 04114116 0016 Commenced and aborted testing of TDAFWP due to low rpm 04114116 0057 TDAFWP trips on spurious overspeed 04115116 2113 TDAFWP speed controller replaced and pump placed in standby alignment 04117116 0338 Entered Mode 4 for repairs to TDAFWP - steam leaks 04117116 0906 2A-A MDAFWP considered INOPERABLE for tracking due to a loss of oil 04120116 1256 2A-A MDAFWP exits tracking LCO 05104116 1414 TDAFWP Surveillance completed successfully 05t11t16 Past OPERABILITY Evaluation determined TDAR /P was INOPERABLE D. Manufiacturer and Model Number of Components that Failed There were no component failures. The TDAFWP inoperability was due to a loose wire in the speed control circuit likely caused by a human performance error.
E. Other Systems or Secondary Functions Affected
No other systems or functions were affected.
F. Method of discovery of each Component or System Failure or Procedural Error
The inboard bearing vent cap leak was discovered by auxiliary unit operators during routine building rounds. The oil bubbler was also reported as empty by system engineering.
The failure of the TDAFWP to achieve rated speed and the subsequent TDAFWP trip on electrical overcpeed were discovered during surveillance testing on April 14,2016.
G. Failure Mode and Effect of Each Failed Component The initial evaluation of the oil leakage on the inboard bearing housing vent cap of the 2A-A MDAFWP concluded that the leakage did not result in the failure of the pump to perform its safety function. The 2A-A MDAFWP was operated throughout the time in question. Monitoring and oil
additions were performed and the 2A-A MDAFWP was considered OPERABLE. Confirmation of this position is currently being re-evaluated and a supplement to this report will be provided with the finalconclusion.
As noted in the Description of Event, a loose wire was present in the power supply to the electronic overcpeed trip circuit to the TDAFW pump. This condition was present through the entire period that Unit 2 was in Mode 3 from 3/30/16 to 412116 and 418116 to 4117116. As such, while the pump was determined to be capable to produce required flow and head at reduced speeds, a spurious overspeed trip could have occurred at any time during this period. ln accordance with the WBN Unit 2 Final Safety Analysis Report, failure of the TDAFWP from a mechanical failure or spurious control signal will be addressed through the operation of the 2A-A &
2B-B MDAFWP that provide auxiliary feedwater flow to all 4 Steam Generators.
Operator Actions
Due to the failure of TDAFWP to achieve a speed greater than 3925 rpm per procedure 2-Sl 923-5, the operators entered Technical Specification (TS) Limiting Condition for Operation (LCO) 3.7.5, Condition B, "One AFW train INOPEMBLE in MODE 1,2, or 3 for reasons other than Condition A.'
Automatically and Manually lnitiated Safety System Responses The condition described in this report did not result in any automatic or manual safety systems activation.
CAUSE OF THE EVENT
A. The cause of each component or system failure or personnel error, if known.
The inability of the TDAFWP to achieve rated speed acceptance criterial was the result of maintenance practices that incorrectly calibrated the speed controller.
The TDAFW pump incurred a spurious overspeed trip as the likely result of maintenance practices.
A loose wire was discovered in the power circuit to the electronic overspeed trip module that resulted in the spurious trip. Work Order searches determined that no work was performed on the TDAFW pump overspeed circuit following entry into Mode 3, which indicates that the condition existed prior to entering Mode 3 and as early as November 2015.
B. The cause(s) and circumstiances for each human performance related root cause.
Troubleshooting identified a loose connection at the power supply to the overcpeed trip module.
The connection on the test block is a flat plate over bare wire type termination. The technicians performing the troubleshooting reported finding the flat plate visibly loose, requiring approximately one quarter tum of the screw before the plates began to snug on the wire. A review of Vendor Manual revealed that overspeed trip module has an internal, normally energized relay that de-energizes to trip the TDAFWP. As such, it was verified that momentary loss of power due to a loose termination could cause a spurious TDAFWP overspeed trip. Subsequent testing of the H.
l.
ilt.
speed switch following proper termination did not identify any deficiencies associated with the switch.
ANALYSIS OF THE EVENT
The Auxiliary Feedwater (AFW) system's {EllS:BA} function is to supply, in the event of a loss of the main feedwater supply, sufficient feedwater to the steam generators to remove primary system residual heat and core decay heat. lt may also be required in some other circumstances such as the evacuation of the Main Control Room (MCR), cooldown after a Loss of Coolant Accident (LOCA) for a small break, maintaining a water head in the steam generators following a LOCA, a flood above plant grade, Anticipated Transient Wthout Scram (ATWS) event, 10 CFR 50, Appendix R, Fires and to support normalcooldown.
The TDAFW pump assembly along with the motor driven (MDAFW) pump assemblies provide the motive pressure to ensure adequate flow gets to the steam generators for decay heat removal.
The Design Basis Events that establish AFW system safety function requirements are:
Loss of Normal Main Feedwater (LONF) (including Loss of Offsite Power)
Main Feedline or Main Steamline Breaks (MFLB or MSLB)
Large Break Loss of Coolant Accident (LOCA)
Small Break Loss of CoolantAccident (SBLOCA)
Technical Specification 3.7.5, Auxiliary Feedwater (AFVV) System requires all three trains of AFW to be OPERABLE in Modes 1, 2, and 3. Additionally, one train of AFW is required OPERABLE in Mode 4 when the Steam Generators are used for Heat Removal. With one of the required AFW trains (pump or flow path) INOPERABLE in MODE 1,2, ot 3 for reasons other than Condition A, action must be taken to restore to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. This Condition includes the loss of two steam.supply lines to the turbine driven AFW pump. The72 hour Completion Time is reasonable, based on redundant capabilities afforded by the AFW System, time needed for repairs, and the low probability of a Design Basis Accident (DBA) occurring during this time period.
During the timeframe that the TDAFWP was INOPERABLE while in Mode 3, both MDAFWPs were OPERABLE and capable of performing their design function. As a result, sufficient AFW system capability was available. Both MDAFWPS were in-service during the time that the TDAFWP was INOPERABLE.
Additionally, while the TDAFWP could not achieve rated speed acceptance criteria, it was capable of meeting Technical Specification flow and pressure requirements at the reduced speed.
ASSESSMENT OF SAFETY CONSEQUENCES
A. Availability of systems or @mponents that could have performed the same function as the components and systems that failed during the event.
As discussed previously, during the timeframe that the TDAFWP was INOPERABLE while in Mode 3, both MDAFWPS were OPERABLE and capable of performing their design function. As a result, tv.
V.
vt.
sufficient AFW system capabili$ was available. Both MDAFWPs were in-service during the time that the TDAFWP was INOPERABLE. Additionally, while the TDAFWP could not achieve rated speed acceptance criteria, it was capable of meeting Technical Specification flow and pressure requirements at the reduced speed.
For events that occurred when the reactor was shut down, availabilig of systems or components needed to shutdown the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident At the time of this occurrence, Watts Bar Unit 2 had not achieved initial criticality. With the MDAFWPS in service and no decay heat on Unit 2, the ability to shut down the reactor and maintain a safe shutdown condition was not impacted. With no core decay heat, removalof residual heat is not an issue. With no irradiated fuel in the Unit 2 core, an uncontrolled release of radioactive material is not credible, The inoperability of the TDAFWP would not have adversely impacted the ability to mitigate the consequences of an accident.
For failure that rendered a train of a safety system INOPERABLE, an estimate of the elapsed time from the discovery of the failure until the train was returned to service.
Watts Bar Unit 2 entered Mode 3 on March 30, 2016 a12314 hours. The TDAFWP failed to achieve minimum speed acceptance criteria as required by the surveillance and subsequently tripped on electricaloverspeed at 0057 hours6.597222e-4 days <br />0.0158 hours <br />9.424603e-5 weeks <br />2.16885e-5 months <br /> on April 14, 2016. There were two timeframes of TDAFWP unavailability. The first occurred when Unit 2 entered Mode 3 at2314 hours on March 30, 2016 and then moved back to Mode 4 at 0629 hours0.00728 days <br />0.175 hours <br />0.00104 weeks <br />2.393345e-4 months <br /> on April 2, 2016. The second occurred when U2 reentered Mode 3 on AprilS, 2016 at1244 hours and subsequently moved back to Mode 4 on April 17,2016 at 0338 hours0.00391 days <br />0.0939 hours <br />5.588624e-4 weeks <br />1.28609e-4 months <br />. Based on the above, the unavailability window was 2 days, 7 hours8.101852e-5 days <br />0.00194 hours <br />1.157407e-5 weeks <br />2.6635e-6 months <br /> and 15 minutes and 7 days, 14 hours1.62037e-4 days <br />0.00389 hours <br />2.314815e-5 weeks <br />5.327e-6 months <br /> and 54 minutes respectively for a total exposure time 9 days, 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> and 9 minutes.
CORRECTIVE ACTIONS
This event was entered into the Tennessee Valley Authority Corrective Action Program and is being tracked under condition report (CR) 1163431.
I mmed iate Corrective Actions The TDAFWP speed controlwas initially inspected, the loose wire corrected. Subsequently, the speed changer module was replaced, the speed control module was calibrated and the TDAFWP successfully completed TS surveillance req u irements.
The 2A-A MDAFWP oil bubbler monitoring and oil additions were performed. Oil additions were continued daily (with the exception of April 11th and April 16th) from April4 through April 17, 2016.
Corrective Actions to Prevent Recurrence A strainer cup was installed on the 2A-A MDAFWP in the line containing the bearing cover cap.
This device prevents oil spray from blowing past the bearing cover cap and successfully stopped the oil leakage.
B.
VII. ADDITIONAL INFORMATION
A. Previous similar events at the same plant On May 14,2011, at 14:28 Eastern Daylight Saving Time (EDT), Watts Bar Nuclear Plant Unit 1 (WBN) entered Mode 3 with the Turbine Driven Auxiliary Feedwater (TDAFW) pump INOPERABLE following maintenance during the WBN Cycle 10 refueling outage. The INOPERABLE condition was identified during performance of Surveillance Requirement (SR) 3.7.5.2 on May 16,2011. The TDAFW pump failed SR 3.7.5.2 due to equipment failure, and the plant entered Limiting Condition for Operation (LCO) 3.7.5, Condition B. The faulty equipment was repaired and the TDAFW pump was re{ested in accordance with SR 3.7.5.2. The TDAFW pump met the acceptiance criteria within the allowable time and the plant exited LCO 3.7.5 at 17:45 on May 19,2011.
This report (390/2011-03) was subsequently retracted when TVA concluded that the TDAFWP was OPEMBLE when the plant first entered Mode 3 following Refueling Outage Cycle 10 and, therefore, did not violate LCO 3.0.4.
B. Additional lnformation None.
C. Safety System Functional Failure Consideration Based on the initialconclusion that the 2A-A MDAFWP could perform it design basis function with the existing oil leak, this condition did not result in a safety system functionalfailure because two MDAFWPS were capable of supplying AFW to all four steam generators. As discussed previously, confirmation of this position is currently being re-evaluated and a supplement to this report will be provided with the final conclusion.
D. Scrams with Complications Consideration There was no scram associated with this event.
VIII. COMMITMENTS
None.