05000400/LER-2007-002
Harris Nuclear Plant - Unit 1 | |
Event date: | 06-12-2007 |
---|---|
Report date: | 08-13-2007 |
Reporting criterion: | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
4002007002R00 - NRC Website | |
I. DESCRIPTION OF EVENT
At 12:46 EDT on June 12, 2007, with the reactor at approximately 100 percent power, surveillance test OST-1005, "Control Rod and Rod Position Indicator Exercise Quarterly Interval Mode 1-3," was commenced to satisfy Technical Specification (TS) 4.1.3.1.2 where each operable shutdown and control rod not fully inserted into the core is determined to be operable by movement of at least 10 steps in any one direction at least once per 92 days.
While inserting Shutdown Bank "A" (SBA) rods, the first bank of rods selected for testing, Rod Control Urgent Alarm ALB13/7-1 was received at 13:10 EDT. This alarm originated in the logic cabinet and automatically stopped rod motion, as designed. SBA step group counters both indicated 227 steps. As required, Operators suspended OST-1005 and entered procedure AOP-001, "Malfunction of Rod Control and Indication System." TS 3.1.3.1. ACTION C and TS 3.0.3 were entered since compliance with TS 3.1.3.5, requiring all shutdown banks be fully withdrawn, was not possible.
At 13:30 EDT maintenance commenced troubleshooting. At 16:15 EDT the Rod Control Urgent Alarm was cleared and the Master Cycler was subsequently reset at 16:38 EDT. T.S. 3.0.3 was exited at 16:41 EDT with SBA withdrawn to 228 steps. The plant was in TS 3.0.3 for 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> and 31 minutes. TS 3.1.3.1 Action C (be in hot standby within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> with more than one rod inoperable due to a rod control urgent failure alarm) was exited at 16:54 EDT on June 12, 2007.
On June 25, 2007, recording equipment was installed in the rod control logic cabinet in support of troubleshooting scheduled on June 26, 2007. These recorders resulted in isolating the cause of the trouble to either the A105 Master Cycler Logic card or the A104 Master Cycler Counter card in the Westinghouse Rod Control System [AA], both of which were replaced on June 26, 2007.
Testing on removed Master Cycler Counter Card (Printed Wiring Assembly part number 3360C94G01, s/n WSN0595) on July 16, 2007, revealed that some of the Motorola High Threshold Logic (MHTL) chips (Z13 and Z15) exhibited a noisy response and were unreliable, depending on the switching speed, affecting proper counter operation. The most likely mechanism for this failure is component aging of the logic chip.
This action is being reported as a condition prohibited by Technical Specifications in accordance with 10 CFR 50.73(a)(2)(i)(B).
Energy Industry Identification System (EIIS) codes are identified in the text within brackets [ ].
Harris Nuclear Plant — Unit 1 05000400 MIL, 1- VIIM Jb10/1 11.11) 19
II. CAUSE OF EVENT
The cause was faulty MHTL logic chips in the Master Cycler Counter Card (Printed Wiring Assembly part number 3360C94G01, s/n WSN0595) in the Westinghouse Rod Control System [AA]. Testing revealed that some of these MHTL Z13 and Z15 logic chips exhibited a noisy response and were unreliable depending on switching speed. Component aging is the most likely mechanism for this failure, given that the date code of the failed chip is 1972.
III. SAFETY SIGNIFICANCE
This event has no actual safety significance.
Actual Safety Consequences:
The rod control malfunction during OST-1005 was an urgent failure originating in the rod control logic cabinet. The malfunction precluded motion of all control banks and Shutdown Banks A and B. Shutdown Bank C could have been moved using the "bank select" mode since its motion is not controlled through the standard rod control circuits. Shutdown Bank A was the first rod bank selected for movement. At the time of the failure, both groups of Shutdown Bank A rods were positioned at 227 steps. TS LCO 3.1.3.5 normally requires all shutdown bank rods be fully withdrawn; however, a Special Test Exception is provided by the LCO to allow the performance of this rod exercise surveillance test. The actual consequence of the rod control malfunction was the inability to insert or withdraw all control bank and shutdown bank rods except Shutdown Bank C. This condition rendered all affected rods inoperable and required entry into TS 3.1.3.1 Action C, which provided 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> to correct the condition. Additionally, Operations personnel entered TS 3.0.3 based on the fact the Special Test Exception was no longer valid and the applicable Action statement for TS 3.1.3.5 allows only one rod not fully withdrawn. TS 3.0.3, which provides one hour to correct and then six hours to be in Hot Standby, was exited prior to any load reduction or other plant impact.
Although the affected rods were inoperable, all control and shutdown bank rods were capable of inserting into the core to shutdown the reactor.
Potential Safety Consequences:
The minimal insertion of the Shutdown Bank A rods did not impact core shutdown margin, neutron flux distribution or any core operating limits or peaking factors that might be assumed in the initial condition of any transient or accident analysis. Axial flux difference did not change significantly during the entire performance of the surveillance test. The inability to move the control rods had the potential to impact core response should a reactor shutdown become required, or a transient such as a turbine runback been imposed on the plant. Various computer generated reactivity plans projected that any shutdown performed with control rods at the height during this event would result in the indicated Axial Flux Difference (AFD) turning in the positive direction and exceeding the bands prescribed in Technical Specifications. The short term operation beyond TS AFD limits would have no adverse impact on the fuel pellets or rods during either a planned downpower or in subsequent power operations. Throughout this event all rods would have been capable of manually or automatically inserting into the core to shutdown the reactor.
This condition is being reported as a condition prohibited by Technical Specifications in accordance with 10 CFR 50.73(a)(2)(i)(B).
III. PREVIOUS SIMILAR EVENTS
Cabinet Card failure. Diagnostic tests and visual examinations were completed for the installed Power Cabinet Cards but not for the Logic Cabinet Cards. However, this type of test is static in nature and it is unlikely that it would have predicted or detected the type of age related failure associated with the Master Cycler Counter Card.
Logic Card in the Westinghouse Rod Control System. The most likely mechanism for the Slave Cycler Logic Card failure is aging of a Z4 chip. A planned corrective action is to establish a structured program of card replacements.
IV. CORRECTIVE ACTIONS
Completed corrective actions included the replacement of the failed A104 Master Cycler Counter Card on June 26, 2007. A planned corrective action is to establish a structured program of card replacements and to ensure the appropriate equivalency evaluations are completed. This action is being tracked through the corrective action program.
V. COMMITMENTS
This document contains no new regulatory commitments.