09-07-2016 | During plant cooldown in response to conditions reported to the NRC on July 23, 2015 in Event Notification 51253, Callaway was in Mode 3 (Hot Standby) and on the way to Mode 5 (Cold Shutdown). In accordance with cooldown procedures, Callaway was operating with one Main Feedwater Pump ( MFP) when the pump speed unexpectedly lowered to 0 RPM. The pump was manually tripped in response to the condition. This led to a decrease in water level in the steam generators. Operators manually activated the Auxiliary Feedwater System to maintain water level in the steam generators. This system actuation is reportable per 10CFR50.73(a)(2)(iv)(A).
Fault tree analysis and subsequent testing identified the most probable cause for the loss of the 'B' MFP is a software defect introduced during the software development process for the digital feedwater control system installed in 2013. Plant operating procedures have been revised to allow for a rapid start of the startup MFP during a plant shut down. Additionally, procedures were revised to allow for the startup MFP to be placed in a ready state when only one MFP is required based on power level.
These procedure revisions will provide defense in-depth against unnecessary Auxiliary Feedwater System actuations in the future. |
---|
|
---|
Category:Letter
MONTHYEARIR 05000483/20240032024-10-23023 October 2024 Integrated Inspection Report 05000483/2024003 IR 05000483/20240132024-10-21021 October 2024 Design Basis Assurance Inspection (Programs) Inspection Report 05000483/2024013 IR 05000483/20244012024-10-0909 October 2024 Material Control and Accounting Program Inspection Report 05000483/2024401 Public ULNRC-06901, Concurrent Inoperability of Control Room Air Conditioning System Train and Opposite Train Emergency Diesel Generator Results in Condition Prohibited by Technical Specifications Limiting (Letter)2024-10-0101 October 2024 Concurrent Inoperability of Control Room Air Conditioning System Train and Opposite Train Emergency Diesel Generator Results in Condition Prohibited by Technical Specifications Limiting (Letter) ML24247A3042024-09-11011 September 2024 Regulatory Audit Questions for License Renewal Commitments 34 and 35 (EPID L-2024-LRO-0009) - Non-Proprietary IR 05000483/20244032024-08-28028 August 2024 Security Baseline Inspection 05000483-2024-403 IR 05000483/20240052024-08-14014 August 2024 Updated Inspection Plan for Callaway Plant (Report 05000483/2024005) IR 05000483/20253012024-08-0505 August 2024 Notification of NRC Initial Operator Licensing Examination 05000483/2025301 ML24212A2822024-08-0202 August 2024 Regulatory Audit Summary Concerning Review of Request No. C3R-01 for Proposed Alternative to ASME Code, Section XI Requirements for Containment Building Inspections IR 05000483/20240022024-07-18018 July 2024 And Independent Spent Fuel Storage Installation Integrated Inspection Report 05000483/2024002 and 07201045/2024001 ML24185A1032024-07-16016 July 2024 2024 Biennial Problem Identification and Resolution Inspection Report ULNRC-06892, Independent Spent Fuel Storage Installation Registration of Dry Spent Fuel Storage Canister HGMPC00062024-06-26026 June 2024 Independent Spent Fuel Storage Installation Registration of Dry Spent Fuel Storage Canister HGMPC0006 ULNRC-06891, Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC00052024-06-26026 June 2024 Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC0005 ULNRC-06884, Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC00022024-06-12012 June 2024 Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC0002 ULNRC-06886, Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC00042024-06-12012 June 2024 Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC0004 ULNRC-06885, Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC00032024-06-12012 June 2024 Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC0003 ML24144A0492024-06-11011 June 2024 Requests for Relief from ASME OM Code Pump and Valve Testing Requirements for Fifth 120-Month Inservice Testing Interval ML24178A1132024-06-0606 June 2024 Ameren Missouris Intent to Adopt Revision 1 to Amendment 0 of Certificate of Compliance No. 1040 as Applicable to the ISFSI at the Callaway Plant Site ML24158A5222024-06-0606 June 2024 Application to Revise Technical Specifications to Adopt Tstf-569, Rev. 2, Revise Response Time Testing Definition (LDCN 24-0008) ML24143A1632024-05-23023 May 2024 Independent Spent Fuel Storage Installation Registration of Dry Spent Storage Canister HGMPC0001 ULNRC-06882, Independent Spent Fuel Storage Installation Registration of Dry Spent Fuel Storage Canister HGMPC00122024-05-16016 May 2024 Independent Spent Fuel Storage Installation Registration of Dry Spent Fuel Storage Canister HGMPC0012 ML24137A2342024-05-16016 May 2024 Independent Spent Fuel Storage Installation - Registration of Dry Spent Fuel Storage Canister HGMPC0011 ML24122A1502024-05-0707 May 2024 Audit Plan to Support Review of Steam Generator License Renewal Response to Commitment Nos 34 and 35 IR 05000483/20244022024-05-0606 May 2024 Security Baseline Inspection Report 05000483/2024402 (Full Report) ULNRC-06877, Final Safety Analysis Report Revision OL-27 and Technical Specification Bases Revision 252024-05-0606 May 2024 Final Safety Analysis Report Revision OL-27 and Technical Specification Bases Revision 25 IR 05000483/20240112024-05-0101 May 2024 NRC Post-Approval Site Inspection for License Renewal (Phase 2) Report 05000483/2024011 ULNRC-06856, CFR 50.59 and 10 CFR 72.48 Summary Report2024-05-0101 May 2024 CFR 50.59 and 10 CFR 72.48 Summary Report ML24122A1132024-04-30030 April 2024 Submittal of Callaway, Unit 1, 2023 Annual Radioactive Effluent Release Report ULNRC-06869, Submittal of Callaway, Unit 1, 2023 Annual Radiological Environmental Operating Report2024-04-30030 April 2024 Submittal of Callaway, Unit 1, 2023 Annual Radiological Environmental Operating Report ULNRC-06876, Registration of Dry Spent Fuel Storage Canister HGMPC00102024-04-25025 April 2024 Registration of Dry Spent Fuel Storage Canister HGMPC0010 ULNRC-06872, Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC00082024-04-17017 April 2024 Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC0008 ULNRC-06866, Submittal of Cycle 26 Commitment Change Summary Report2024-04-17017 April 2024 Submittal of Cycle 26 Commitment Change Summary Report ML24108A1082024-04-17017 April 2024 Independent Spent Fuel Storage Installation Registration of Dry Spent Fuel Storage Canister HGMPC0009 ULNRC-06871, Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC00072024-04-17017 April 2024 Independent Spent Fuel Storage Installation, Registration of Dry Spent Fuel Storage Canister HGMPC0007 IR 05000483/20240012024-04-16016 April 2024 Integrated Inspection Report 05000483/2024001 IR 05000483/20244042024-04-0909 April 2024 Cyber Security Inspection Report 05000483/2024404 ML24088A3212024-04-0101 April 2024 Notification of Commercial Grade Dedication Inspection (05000483/2024013) and Request for Information ML24086A5132024-03-26026 March 2024 CFR 50.46 Annual Report Regarding ECCS Evaluation Model Revisions ULNRC-06863, Submittal of Annual Exposure Report for 20232024-03-20020 March 2024 Submittal of Annual Exposure Report for 2023 ML24079A1622024-03-19019 March 2024 Re Nuclear Property Insurance Reporting ML24066A1932024-03-0707 March 2024 2024 Callaway Plant Notification of Biennial Problem Identification and Resolution Inspection and Request for Information ULNRC-06852, Owners Activity Reports (OAR-1 Forms) for Cycle/Refuel 262024-03-0505 March 2024 Owners Activity Reports (OAR-1 Forms) for Cycle/Refuel 26 IR 05000483/20230062024-02-28028 February 2024 Annual Assessment Letter for Callaway Plant Report 05000483/2023006 ML24052A3662024-02-26026 February 2024 Regulatory Audit Plan in Support of Proposed Alternative to ASME Code, Section XI Requirements for Containment Building Inspections ULNRC-06858, Completion of License Renewal Activities Prior to Entering the Period of Extended Operation2024-02-21021 February 2024 Completion of License Renewal Activities Prior to Entering the Period of Extended Operation ML24036A1712024-02-20020 February 2024 Exemption from Select Requirements of 10 CFR Part 73 (EPID L-2023-LLE-0079 (Security Notifications, Reports, and Recordkeeping and Suspicious Activity Reporting)) ULNRC-06853, Submittal of 2023 Fitness for Duty Performance Data Per Per 10 CFR 26.7172024-01-29029 January 2024 Submittal of 2023 Fitness for Duty Performance Data Per Per 10 CFR 26.717 ML24008A0552024-01-19019 January 2024 Acceptance of Requested Licensing Action - Proposed Alternative to the Requirements of the ASME Code (EPID L-2023-LLR- 0061) IR 05000483/20230042024-01-19019 January 2024 – Integrated Inspection Report 05000483/2023004 ML23353A1712024-01-18018 January 2024 Issuance of Amendment No. 237 to Clarify Support System Requirements for the Residual Heat Removal System and Control Room Air Conditioning System Under Technical Specifications 3.4.8, 3.7.11, and 3.9.6 2024-09-11
[Table view] Category:Licensee Event Report (LER)
MONTHYEAR05000483/LER-2024-002, Concurrent Inoperability of Control Room Air Conditioning System Train and Opposite Train Emergency Diesel Generator Results in Condition Prohibited by Technical Specifications Limiting2024-10-0101 October 2024 Concurrent Inoperability of Control Room Air Conditioning System Train and Opposite Train Emergency Diesel Generator Results in Condition Prohibited by Technical Specifications Limiting . 05000483/LER-2024-001, Reactor Trip Due to Turbine Trip2024-04-0404 April 2024 Reactor Trip Due to Turbine Trip 05000483/LER-2022-003-01, Class 1E Electrical Air Conditioning System Thermal Expansion Valve Failure Resulted in Condition Prohibited by Technical Specifications2023-07-13013 July 2023 Class 1E Electrical Air Conditioning System Thermal Expansion Valve Failure Resulted in Condition Prohibited by Technical Specifications ULNRC-06398, Special Report 2017-02: Non-Functional Seismic Instrument for Greater than 30 Days2017-11-0808 November 2017 Special Report 2017-02: Non-Functional Seismic Instrument for Greater than 30 Days 05000483/LER-2017-0022017-10-13013 October 2017 Inadequate Protection from Tornado Missiles Identified Due to Nonconforming Design, LER 17-002-00 for Callaway Plant, Unit 1, Regarding Inadequate Protection from Tornado Missiles Identified Due to Nonconforming Design 05000483/LER-2017-0012017-08-15015 August 2017 Violation of Technical Specification 3.7.9 Due to Ultimate Heat Sink (UHS) Cooling Tower Train Inoperability, LER 17-001-00 for Callaway, Unit 1, Regarding Violation of Technical Specification 3.7.9 Due to Ultimate Heat Sink (UHS) Cooling Tower Train Inoperability 05000483/LER-2015-0012016-12-0202 December 2016 Completion of a Shutdown Required by the Technical Specifications - TS 3.4.13, LER 15-001-01 for Callaway Plant, Unit 1, Regarding Completion of a Shutdown Required by the Technical Specifications - TS 3.4.13 05000483/LER-2015-0022016-09-0707 September 2016 Manual Auxiliary Feedwater System Actuation, LER 15-002-00 for Callaway, Unit 1, Regarding Manual Auxiliary Feedwater System Actuation 05000483/LER-2016-0012016-06-20020 June 2016 Control Room Air Conditioning Inoperability Due To Essential Service Water Pressure Transient, LER 16-001-00 for Callaway, Unit 1, Regarding Control Room Air Conditioning Inoperability Due to Essential Service Water Pressure Transient 05000483/LER-2015-0032016-01-21021 January 2016 Reactor Trip Caused by Transmission Line Fault, LER 15-003-01 for Callaway, Unit 1, Regarding Reactor Trip Caused by Transmission Line Fault ULNRC-06162, Special Report 2014-05 Inoperability of Loose Parts Monitoring Instrument for Greater than 30 Day2014-12-11011 December 2014 Special Report 2014-05 Inoperability of Loose Parts Monitoring Instrument for Greater than 30 Day ULNRC-06142, SR-14-002 Callaway, Unit 1 - Special Report 2014-02-PAM Report Inoperability of Post Accident Monitoring (PAM) Instrument2014-09-16016 September 2014 SR-14-002 Callaway, Unit 1 - Special Report 2014-02-PAM Report Inoperability of Post Accident Monitoring (PAM) Instrument ULNRC-05991, Special Report 13-001-00 for Callaway, Unit 1, Inoperability of a Seismic Instrument for Greater than 30 Days2013-05-13013 May 2013 Special Report 13-001-00 for Callaway, Unit 1, Inoperability of a Seismic Instrument for Greater than 30 Days ULNRC-05932, Special Report 2012-02 - Pam Report: Inoperability of a Post Accident Monitoring (PAM) Instrument for Greater than 30 Days2012-11-14014 November 2012 Special Report 2012-02 - Pam Report: Inoperability of a Post Accident Monitoring (PAM) Instrument for Greater than 30 Days ULNRC-05824, Special Report 2011-01 for Callway, Unit 1 Regarding Inoperability of a Seismic Instrument for Greater than 30 Days2011-11-10010 November 2011 Special Report 2011-01 for Callway, Unit 1 Regarding Inoperability of a Seismic Instrument for Greater than 30 Days ULNRC-05721, Special Report, Inoperable Channel 8 of the Loose Parts Monitoring System (Lpms)2010-07-22022 July 2010 Special Report, Inoperable Channel 8 of the Loose Parts Monitoring System (Lpms) ULNRC-05374, Special Report 07-001 Re Historical Inoperability of Seismic Instrument SGAR00082007-03-0808 March 2007 Special Report 07-001 Re Historical Inoperability of Seismic Instrument SGAR0008 ML0413203792004-05-0303 May 2004 Special Report for Callaway Plant Unit 1 Regarding Inoperability of 60 Meter Meteorological Monitoring Instrumentation on the Primary Meteorological Tower 2024-04-04
[Table view] |
1. DESCRIPTION OF STRUCTURE(S), SYSTEM(S) AND COMPONENT(S):
The main feedwater system [EIIS System SJ] supplies feedwater to the secondary side of the steam generators [EIIS Component SG] in order to remove heat from the reactor coolant system (RCS) [EIIS System AB] during normal operations. The system consists of two main feedwater pumps (MFPs) [EIIS System SJ Component P] and one startup feedwater pump, which is only used for very low-power conditions.
The MFPs are controlled by a digital control system, which is operated via touch screen controls in the main control room.
The safety-related auxiliary feedwater (AFW) system [EIIS System BA] supplies feedwater to the steam generators to remove decay heat from the reactor coolant system upon the loss of the normal feedwater supply via either manual actuation or automatic response to an Auxiliary Feedwater Actuation Signal (AFAS). The auxiliary feedwater system may also be used following a reactor shutdown to cool the reactor coolant system to below approximately 350 degrees Fahrenheit and 400 psi gauge.
2. INITIAL PLANT CONDITIONS:
On July 23, 2015 at 0115, Callaway Plant operators initiated a shutdown required by Technical Specification (TS) 3.4.13, "RCS Operational Leakage," as reported to the NRC in Event Notification 51253. At 1357 Callaway was in Mode 3 (Hot Standby) and on the way to Mode 5 (Cold Shutdown). The plant was being operated per procedure with one MFP supplying feedwater flow to the steam generators. The startup feedwater pump was unavailable due to a fire protection requirement to have its breaker [EIIS Component BKR] in the racked out position.
3. EVENT DESCRIPTION:
On July 23, 2015, during a plant shutdown, main feedwater flow was lost to all four steam generators.
A manual actuation of the auxiliary feedwater system was performed to prevent a reactor trip signal and AFAS. As described in Section 2 above, the plant was in Mode 3 at the time of the manual actuation.
Prior to the AFW manual actuation, the balance of plant operator was lowering the 'B' Main Feedwater Pump (MFP) speed manually per procedure via the pump's digital control board to regulate pump differential pressure (dP). After performing the manual speed decrease, the operator turned his attention to other main control board indications. A 'B' MFP vibration annunciator returned the operator's attention to the digital feedwater control indications at 1333. He noticed that the discharge valve position and pump speed demand went to 0 percent and 0 RPM respectively and the pump was coasting down. No pump trip alarms were received.
An equipment operator was dispatched to investigate the '13' MFP and reported a metallic banging sound. This was later confirmed to be the main feedwater pump turbine 'EV low pressure steam line check valve. While the equipment operator was investigating the pump locally, the control room operator was able to control pump speed manually using both increase and decrease pushbutton commands. When the equipment operator reported to the control room that he heard an unusual noise at the pump, the decision was made to trip the pump at 1342.
The 'A' MFP had been tripped earlier during the plant down-power, per procedure. The startup feed pump is not maintained in a standby condition, so was unavailable. Therefore, following the 'IV MFP trip all main feedwater sources were unavailable. With none of the normal sources of main feedwater readily available and `D' steam generator level approaching 23%, the decision was made to put the AFW system in service to establish makeup to the steam generators.
Following the procedure for a manual AFW actuation, the operators manually closed all four AFW Discharge Control Valves (ALHV0005, ALHV0007, ALHV0009, and ALHVO011) to prevent unnecessary water hammer and thermal shock in the steam generators. When the operators attempted to reopen ALHVO011, the valve did not respond. After no response was received, the operator reduced the valve demand to 0% on the main control board. An equipment operator was dispatched to the valve to manually open the valve. The operator locally opened ALHVO011. After this local action, control was restored from the main control board.
4. ASSESSMENT OF SAFETY CONSEQUENCES:
The actual and potential safety consequences of the loss of the Main Feedwater system are not significant, as Main Feedwater is not a safety-related system. By design, the safety-related Auxiliary Feedwater system performs the credited function of supplying feedwater to the steam generators in the event of a postulated accident. In addition, the deterministic Accident Analysis includes evaluation of an assumed or postulated complete loss of feedwater supply from the Main Feedwater system to the steam generators. Thus, the loss of Main Feedwater delivery leading to the manual AFW actuation was consistent with the results contained in the Accident Analysis of record.
When called upon for this event, the Auxiliary Feedwater system was able to perform its specified safety function despite the anomalous behavior of the ALHVO011 valve. (The ALHVO011 issue, which itself is not reportable, was subsequently corrected). Postulating reasonable and credible alternative conditions, including normal plant operating conditions (Mode 1) and accident conditions, would have no impact on the significance of loss of Main Feedwater as these conditions are accounted for in the Accident Analysis of record.
5. REPORTING REQUIREMENTS:
This LER is submitted pursuant to 10 CFR 50.73(a)(2)(iv)(A) to report an Auxiliary Feedwater system actuation.
Specifically, 10 CFR 50.73(a)(2)(iv) states in part, "The licensee shall report:
(A) Any event or condition that resulted in manual or automatic actuation of any of the systems listed in paragraph (a)(2)(iv)(B) of this section...
(B) The systems to which the requirements of paragraph (a)(2)(iv)(A) of this section apply are:
(6) PWR auxiliary or emergency feedwater system.
The auxiliary feedwater system was manually actuated in response to a decrease in water level in the steam generators following the MFP trip. This fulfills the reporting requirement of 10 CFR 50.73(a)(2)(iv)(A) due to actuation of the system specified in 10 CFR 50.73(a)(2)(iv)(B)(6).
6. CAUSE OF THE EVENT:
The manual actuation of the auxiliary feedwater system was necessitated by the manual trip of the `13' MFP. Following the event, the main feedwater digital control touchscreen from the main control room was replaced. The touchscreen removed from the plant was tested and the failure could not be replicated. It is not likely that the touchscreen was the cause of this event. The most likely cause is a software malfunction. The software malfunction has only occurred once and was not able to be re- created after numerous tests to the on-site test system.
7. ACTIONS TAKEN:
In order to prevent a MFP digital control software defect from resulting in an AFW actuation in the future, operating procedures were revised to allow for a rapid start of the startup feedwater pump during a plant shutdown. Procedures were also revised to allow the startup feedwater pump to be kept in a ready state and/or the opposite MFP to be kept reset, as contingencies, when plant conditions require only one MFP to be in operation. These procedure revisions add defense in-depth against unnecessary AFW actuations during plant shutdown in the future by providing additional pumps to feed the steam generators in the event that the preferred pump experiences an automatic or manual trip. Additionally, a communication was issued to all operators to notify all crews of this condition.
8. PREVIOUS SIMILAR EVENTS:
An Operating Experience (OE) review for Callaway since the main feedwater digital control system was installed in 2013 revealed no other manual actuations of the auxiliary feedwater system due to failure of MFPs or their associated digital control system.
I
|
---|
|
|
| | Reporting criterion |
---|
05000483/LER-2015-001, Completion of a Shutdown Required by the Technical Specifications - TS 3.4.13 | Completion of a Shutdown Required by the Technical Specifications - TS 3.4.13 | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000483/LER-2015-001 | Completion of a Shutdown Required by the Technical Specifications - TS 3.4.13 LER 15-001-01 for Callaway Plant, Unit 1, Regarding Completion of a Shutdown Required by the Technical Specifications - TS 3.4.13 | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000483/LER-2015-002, Manual Auxiliary Feedwater System Actuation | Manual Auxiliary Feedwater System Actuation | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000483/LER-2015-002 | Manual Auxiliary Feedwater System Actuation LER 15-002-00 for Callaway, Unit 1, Regarding Manual Auxiliary Feedwater System Actuation | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000483/LER-2015-003, Reactor Trip Caused by Transmission Line Fault | Reactor Trip Caused by Transmission Line Fault | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000483/LER-2015-003 | Reactor Trip Caused by Transmission Line Fault LER 15-003-01 for Callaway, Unit 1, Regarding Reactor Trip Caused by Transmission Line Fault | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000483/LER-2015-004, Auxiliary Feedwater Control Valve Inoperable Due To Faulty Electronic Positioner Card | Auxiliary Feedwater Control Valve Inoperable Due To Faulty Electronic Positioner Card | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000483/LER-2015-004 | Auxiliary Feedwater Control Valve Inoperable Due To Faulty Electronic Positioner Card | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
|