IR 05000293/1988007
| ML20154B026 | |
| Person / Time | |
|---|---|
| Site: | Pilgrim |
| Issue date: | 05/06/1988 |
| From: | Blough A NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION I) |
| To: | |
| Shared Package | |
| ML20154B016 | List: |
| References | |
| 50-293-88-07, 50-293-88-7, GL-82-12, GL-83-14, IEB-79-02, IEB-79-11, IEB-79-2, IEB-79-24, IEB-80-14, IEB-80-17, NUDOCS 8805170037 | |
| Download: ML20154B026 (30) | |
Text
-
,
.
'
.
e U. S. NUCLEAR REGULATORY COMMISSION
REGION I
Docket No.: 50-293 Report No.: 50-293/88-07 Licensee: Boston Edison Company 800 Boylston Street Boston, Massachusetts 02199 Facility: Pilgrim Nuclear Power Station Location: Plymouth, Massachusetts Dates: January 20 - March 5, 1988 Inspectors: C. Warren, Senior Resident Inspector J. Lyash, Resident Inspector T. Kim, Resident Inspecter R. Fuhrmeister, Reactor Engineer, RI C. Tinkler, Reactor Engineer, NRR S. Hou, Mechanical Engineer, NRR R. Lipinski, Civil Engineer, NRR Approved By:
A. Randy Ble&@h, Chief
]<I Y+8X Date Reactor Projects Section No. 3B Inspection Summary:
Areis Inspected: Routine resident inspection of plant operations, radiation protection, physical security, plant events, maintenance, surveillance, outage activities, and reports to the NRC. The inspection consisted of 575 hours0.00666 days <br />0.16 hours <br />9.507275e-4 weeks <br />2.187875e-4 months <br /> of direct inspection. Principal licensee management representatives contacted are listed in Attachment I to this repor The inspection findings identified in Augmented Inspection Team Report 50-293/87-53 have been summarized and assigned unresolved item numbers to facilitate NRC followup. This information was pro-vided to the licensee, and is included as Attachment I Results:
V..ratian: Failure to establish adequate procedures and to perform adequate technical review were evident during the blackout diesel generator testing and the plant process computer point tie-in activities (Section 3.b and 4.b, VIO 88-07-01).
8805170037 880506 PDR ADOCK 05000293
---_BL--- ---- - - - - - - - - - . - . - - - - - _ - - - - - - - - - - - - - - - - - - - - - - - - - - _ - - - - - -
_ ______ - - - _ _ _ _ _ _ _ _
.
l
,
- .
Inspection Summary (Continued) 2
.
Unresolved Items: Lif ting of leads in safety-related circuits, while conducting E203 activ-ities, may not be subject to adequate post work tests. (Section 4.h, UNR 88-07-02). Control and documentation of worker overtime does not appear to fully satisfy the intent of NRC guideline (Section 5, UNR 88-07-03).
Concern: Weaknesses in control of maintenance activities resulted in an unnecessary engineered safety feature actuation (Sections 4.f and 4.h).
Strength: Licensee self critique in response to the unusual event on February 11, 1988 was prompt, thorough and effective (Section 4.e).
e l
'
l
_ _ _ _ _ _ _ _ _ _ .
.______-__- _ _- __ - _
m a
' '
- -
.,
. 1 h ,
!
'
.
<
'
{
, a
'
TABLE OF CONTENTS Page [
1 ' Summary of Facility and NRC Activities...................... I r Followup on Previous Inspection F'indings, Violations, -!
e Unresolved Items............................. .............. 1
- Operational Safety Verification....................... ...... 4 Routine Observations t Plant Maintenance and Outage Activities I Cold Weather Protection ' Region I Temporary Instruction.87-08, licensee ~F1tness -i
.
for Duty Programs .i
- I.E. Temporary Instruction _2515/90, Scram Discharge *
l , Volume Capability ;
' Review of Plant 2 vents........_............................... 11 e
- Degraded Voltage Protection System Design Deficiency i Engineered Safety Feature Actuations During a i 4 . Computer Point Tie-in
, _ Secondary Containment Isolation Caused by a Failed Relay Coil Spurious Anticipated Transient Without Scram System
'
Actuation ; Declaration of an Unusual Event Due to a Fire in a i Machine Shop t Secondary Containment Isolation During an Electrical '
! Relay Replacement i ENS Notification of Inoperable SDV Isolation Valves '
!
L Spurious Reactor Water Cleanup Isolation ,
i- Missed Technical Specification Surveillance :
i Identified During a QA Audit Review of Licensee Overtime Contro1......................... 18 l .
! Technical Review of the Direct Torus Vent Modification...... 21
..
, Background and Scope of Review i Review of System Issues i 4 Review of Mechanical Design :snues {
l
. Review of Structural Issues l Manegement Meetings......................................... 25 i
i Attachment I -
Persons Contacted
Attachment II - NRC Followup to AIT Inspection No. 50-293/87-53 i
f'
-
I
,
.- . - . - ...--.... - _ -.- - - _ , - - _ , . - - . . - . - . . - - _ . . - _
- - _ - ,
_t
\
. .
DETAILS 1.0 Summary of Facility Activities The plant has been shutdown for maintenance and to make progr.am improve-ments since April 12, 198 The reactor core was completely defueled on February 13, 1987 to facilitate extensive maintenance and modification of plant equipment. The licensee completed fuel reload on October 14, 193 Reinstallation of the reactor vessel internal components and the vessel head was followed by completion of the reactor vessel hydrostatic tes The primary containment integrated leak rate test was also cot.'pleted dur- *
ing the week of December 21, 198 During this report period, the licensee performed post-modification /
maintenance testing of plant equipment including the blackout diesel generator as described in Section .0 Followup on Previous Inspection Findings (Modules: 92701 and 92702)
(Closed) Violation 85-03-05, Failure to Test Scram Trip Logic and Alarms as Required by Technical Specification __ Table 4. Four instances of failure to perform adequate surveillance testing were identified and included in the violatio Specific corrective actions implemented by the licensee for each of the four instances are described belo In thei* response to Notice of Violation (NOV) 85-03-05, dated May 17, 1985, the licensee contested two of the examples; Item 2 and Item The inspector has reverified the original validity of the' violatio Further, the 1985 response does not appear to reflect current licensee management philosophy, and corrective actions implemented by the licensee appear to have addressed 'the deficiencies identified by Items 2 and 3 in NOV 85-03-0 The technical adequacy of surveillance testing was raised as a general area of concern during 1986. Since that time the licensee has implemented an extensive program to review and upgrade testing. NRC evaluation of this upgrade effort is the topic of existing unresolved item 50-293/86-21-0 Itemj: On December 24, 1984, and January 7,1985, the APRM inoperative scraa trips were not functionally tested prior to declaring them operable, while the reactor was in the startup mode. A functional test was even-tually performed on January 13, 1985. In response to the violation the licensee revised procedure 8.M.1-3.1, APRM Setdown Functional Test. This test is performed weekly when the mode switch is not in run, and prior to reactor startu It was modified to include verification that APRM inoperative trips are functional and that the trips result in a half scram. This revised testing appears to satisfy Technical Specification requirements. The inspector had no further question .
+
.
W P
h
-
.
.
. Item 2: The licensee restarted the plant and placed the reactor mode switch in run on December 29, 1984. The APRM high flux scram trips were
not functionally tested until January 4,198 The Technical Specifica-tions require testing "as soon as practicable after returning to the run-mode." In their response dated May 17, 1985 the licensee denied the vio-lation based on a non-conservative interpretation of "as soon as practi-i cable", and the contention that procedure 2.1.1, Startup from S5utdown,-
did not require performance of the testing until 60 percent power and this
.
power level had not been reached. While the Technical Specification
requirement is not specific, a five day delt./ fn t;arformance of this test-ing is clearly not consistent with the intent of the specification. There-fore, .af ter consulting with NRC Region I management, the inspector con-
-
cluded that issuanto of this violation had been justified.
i The -licensee has revised procedure 2.1.1 to require performance of this testing at less than 40 percent power, or within four hours of entering the run mode. This revision should ensure that the testing is performed in a timely manne The inspector discussed this nonconservative Tech-
^
nical Specification interpretation with licensee management. During the inspectors' exit, the Site Ofrector stated that the nonconservative inter-
.
pretation was not consistent with current . man 6gement philosophy. The
inspector had no further question Item 3: The APRM downscale scram trips are required to be operable with the mode switch in ru The licensee restarted the plant on December 29, 1984, and again on January 9, 1985. The APRM downscale scram
- trips however, were not functionally tested prior to declaring them oper-
_
able while the reactor was in the run mode on either occasion. In their
, response dated May 17, 1985, the licensee denied this violation and cited
! surveillance procedure 8.M.1-3.1, APRM Setdown Functional, as having satisfieo the test requirement prior to placing the mode switch in run.
,
'
Review of the revision ~ of procedure 8.M.1-3.1 in effect at the time indi-cates that only functioning of the downscale light on the APRM panel was
.
tested. The functioning of the output relay and subsequent output relay
! contact closure in the reactor protection system (RPS) was not tested.
j The definition of instrument functional testing states that instrument
- channel response, alarm and initiating action should be verified. Obser-1 vation of a local alarm light is not adequate verification of the initia-
! ting action. Therefore, after consulting with NRC, Region I management, the inspector concluded that issuance of this violation had been justified.
I(
- The inspector reviewed the current technical adequacy of procedure
<
8.M 1-3.1 which functionally tests APRM trips with the mode switch not in l run. The procedure has been revised to directly verify the operation of i
the downscale scram trip output relay cor. tact which initiates the scram.
l This test is scheduled weekly when the mode switch is not in ru In
,
addition, procedure 2.1.1, Startup from Shutdown, requires completion of l 8.M.1-3.1 prior to startu Procedure 2.1.1 has also been revised to l
l i
l
{- -
_ _ _ - _ _ _ _ _ _ - _ _ - _ _ _ _ _ _ _ - _ _ _ _ - _ _ - - _ - _ - _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ . . _ _ _ _ _ - _ _ - _ - _ - _ . _ _ . . _ _ _ _
.
' s
'
-
.
require performance of procedure 8.M.1-3, APRM Functional, within four hours after placing the mode switch in run, or prior to 40 percent powe Procedure 8.M.1-3 functionally tests APRM trips with the mode switch in run, including initiating the appropriate half -scram With the incor-poration of these changes the licensee appears to be performing the
required APRM functional tests. The inspector had no further question Item 4: On January 2,1985, the stop valve closure alarm was not func-tionally tested prior to declaring the turbine stop valve (SV) closure instrumentation operable with the mode switch in ru This instrumenta-tion is required to be operable with turbine first stage pressure greater than 305 psig and the reactor in the run mode. The licensee's test pro-cedures did not include steps to perform this testing for either the stop valve or main steam isolation valve (MSIV) closure alarms. This defici-
, ency was identified by a licensee Quality Assurance (QA) audit conducted
- in September 198 A formal Deficiency Report (OR) was issued on l November 5, 1984, however, corrective action was not initiated until l January 28, 198 Tempor
- ry Modification (TM) 85-11 was implemented on February 14, 1985 to improve circuit testability, and surveillance pro-
,
cedures were revised to perform adequate test It is noted in NRC Inspection Report 50-293/85-03 that while. the licensee had identified the
- deficiency, effective corrective actions were not taken in thct four l calendar months, and significant time with the unit at power, had trans-
- pired before action was taken. During the current inspection, the inspec-
'
tion circuits have been permanently revised to ensure performance of the
! required testin The licensee's responsiveness to QA findings was the
! subject of violation 50-293/86-14-07 and has subsequently improved.
t i In each case discussed above the licensee appears to have implemented i adequate corrective action The inspector had no further question This item is closed, l
t
, (Update) Unresolved Item (86-19-03), Standby Gas Treatment System (SGTS)
'
Single Failures (
, This item was last updated in inspection report 50-293/87-45. The licen-l see previously identified several SGTS single failure vulnerabilities and
! submitted appropriate 10 CFR Part 21 reports. A plant design change (PDC)
l was implemented to address the problem The licensee's corrective i
actions were reviewed and evaluated by the inspector as detailed in in-
- spection report 50-293/87-4 This item remained open pending inspector
! review of a design evaluation performed for the licensee by a contractor.
, Ouring this inspection period the inspector reviewed the contractor report
- and licensee actions to disposition the findings. Generally, the findings presented in the contractor report were minor in nature and were ade-quately dispositioned by the licensee. However, the inspector questioned
!
!
!
I i
.
.
.
- .
the licensee closecut of two items. No post-modification test was per-formed to verify that an acceptable cooling flow rate will be achieved through the train crosstie duct. A minimu.a flow rate must be maintained through this path to cool the charcoal filters of the standby train. The licensee's response to this item was that available calculations provide sufficient assurance, and that no functional test is neede The inspec-tor requested that the licensee provide these calculations and any addi-tional justification available. The contractor also questioned the sizing of the orifice installed in the crosstie duct. The PDC installed a system discharge flow switch which will start the standby train at a flow rate of 2000 CFM. If the orifice is sized to allow the minimum cooling flow rate with the running train operating at a design flow of 4000 CFM, then a significant reduction in the train flow, possibly to as low as 2000 CFM, could result in insufficient cooling flow through the standby trai The inspector questioned the adequacy of the 2000 CFM setpoin If degrada-tion of the operating train occurs, flow cou'd drop significantly and still remain above the setpoin The licensee stated that the setpoint had been raised and that the new setpoint combined with existing calcula-tions would support the adequacy of the design. The licensee stated that this information would be made availabl The inspector will review supporting information when provided by the license .0 Routine periodic Inspections (Modules: 71707, 71710, 62703, 61726, 71881, 37700, 71709, 71714, 72701, 92701 and 92703)
The inspectors routinely toured the facility during normal and backshift hours to assess general plant and equipment conditions, housekeeping, and adherence to fire protection, security and radiological control measure Inspections were conducted between ten p.m. and six a.m. on February 12, February 26, March 3, March 4, and March 5,1983 for a total of 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> i nspections were also conducted on holidays and weekends on January 23, January 24, February 21, February 28, and March 5,1988 for a total of 23 hours2.662037e-4 days <br />0.00639 hours <br />3.80291e-5 weeks <br />8.7515e-6 months <br />. Ongoing work activities were monitored to verify that they were being conducted in accordance with approved administrative and technical procedures, and that proper communications with the control room staff had been established. The inspector observed valve, instrument and electrical equipment lineaps in the field to ensure that they were consistent with system operability requirements and onerating procedure During tears of the control room the inspectors verified proper staffing, access control and operator attentivenes Adherence to procedures and limiting conditions for operations were evaluate The inspectors examined equipment lineup and operability, instrument traces and status of control room annunciators. Various control rocm logs and other avail-able licensee documentation were reviewed,
,
l l
l
,
I
.
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
.
..,
,
p 5
.
The inspector observed and reviewed outage, maintenance and problem inves-tigation activities to verify compliance with regulations, procedures, codes and standard Involvement of QA/QC, safety tag use, personnel qualifications, fire protection precautions, retest requirements, and reportability were assesse The inspector observed tests to verify performance in accordance with approved procedures and LCO's, collection of valid test results, removal and restoration of equipment, and deficiency review and resolutio Radiological controls were observed on a routine basis during the report-ing period. Standard industry radiological work practices, conformance to radiological control procedures and 10 CFR Part 20 requirements were observed. Independent surveys of radiological boundaries and random sur-veys of nonradiological points throughout the facility were taken by the inspecto Checks were made to determine whether security conditions met regulatory requirements, the physical security plan, and approved procedures. Those checks included security staffing, protected and vital area barriers, personnel identification, access control, badging, and compensatory measures when require Routine Observations On January 23, 1988, at about 9:30 a.n., the control room received a report of flooding in the high pressure coolant injection (HPCI)
system pump roo Investigation confirmed that approximately three inches of water had accumulated on the floor in the area. The Watch Engineer entered Emergency Operating Procedure (EOP)-4, Secondary Containment Control. Water level of greater than one inch on the HPCI pump room floor is an entry condition of E0P- All systems discharging into the sump were isolated. The area drain valve was checked cpen, and an operator was dispatched to manually start one l of the two sump pumps. Af ter manually starting a pump the operator l noted that a rubber hose had been wrapped around the sump level float l switch. The hose prevented the float switch from actuating and starting the pumps on increasing sump leve The hose was removed and the second pump automatically starte The water was quickly processed to rad waste. Health physics surveys indicated contamina-tion levels of between 1K and 350K dpm per 100 square centimeter The source of the water was routine equipment leakage. The licensee estimates that it took at least two shif ts for the water to build up in the room. One non-licensed operator and one licensed reactor operator who should have completed shift tours in the area were suspended for failure to perform the required surveillance. Because the level of water in the room remained low no equipment damage resulted. There were no personnel contaminations associated with the inciden _ _ _ _ _ _ _ _ - _ - - _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ -
. ..
^
L f b .
i The inspector observed and reviewed outage, maintenance and problem inves- I tigation activities to verify compliance with regulations, procedures, i codes and standard Involvement of QA/QC, safety tag use, personnel !
qualifications,- fire protection precautions, retest requirements, and reportability were assesse 'l i
The inspector observed tests to verify performance in accordance with approved procedures and LCO's, collection of valid test results, removal and resto*ation of equipment, and deficiency review and resolutio Radiological controls were observed on a routine basis during the report- 1 ing period. Standard industry radiological work practices, conformance to ,
radiological control procedures and 10 CFR Part 20 requirements were i observed. Independent surveys of radiological boundaries and random sur- r veys of nonradiological points throughout the facility were taken by the inspecto ;
Checks were made to determine whether security conditions met regulatory requirements, the physical security plan, and approved procedures. Thos checks included security staffing, protected and vital area barriers, ,
personnel identification, access control, badging, and compensatory
'
measures when require Routine Observations ,
On January 23, 1988, at about 9:30 a.m. , the control room received a ,
report of flooding in the high pressure coolant injection (HPCI)
system pump roo Investigation confirmed that approximately three >
-inches of water had accumulated on the floor in the area. The Watch Engineer entered Emergency Operating Procedure (EOP)-4, Secondary ;
Containment Contro Water level of greater than one inch on the l HPCI pump room floor is an entry condition of E0P-4. All systems !
'
discharging into the sump were isolated. The area drain vahe was checked open, and an operator was dispatched to manually start one of the two sump pumps. Atter manually starting a pump the operator o noted that a rubber hose had been wrapped around the sump level float !
switc The hose prevented the float switch from actuating and !
starting the pumps ori increasing sump leve The hose was removed and the second pump automatically starte The water was quickly i processed to rcd wast Health physics surveys indicated contamina-tion levels of between 1K and 350K dpm per 100 square centimeters, ,
The source of the water was routine equipment leakage. The licensee i estimates that it took at least two shifts for the water to build up !
in the roo One non-licensed operator and one licensed reactor [
operator who should have completed shift tours in the area were
, suspended for failure to perform the required surveillance. Because ,.
. the level of water in the room remained low no equipment damage t i
resulte There were no personnel contaminations associated with the !
l incident.
,
i !
i l
"
,
.- -w - - . , - . . . , , . - - , - . , , . ,nn,,_,n,,- ..-------,,n.--nw- - .,,,,-_-.,--.,_,,--,.---.,,-v ,,_.-.-n.,.,,.,--~_.~s
. .
During a routine operator tour on January 26, 1988, the licensee again identified several inches of water on the HPCI pu;np room floo One of the sump pumps was manually started. The operator also ob-served that the pumps had not automatically started on increasing level because a pipe had been placed on top of the sump float switch, preventing the switch from actuating. Subsequent licensee investiga-tion identified that I&C technicians routinely used the pipe to 'slock the switch and allow sump levels to increase for float switch test-ing. The technicians had failed to remove the pipe after a previous test. A licensee critique of this occurrence revealed that the pro-cedure for testing and adjusting the sump switch was inadequate. The procedure provided no guidance on how to raise sump level and there-fore, the technicians improvised the method which blocked the float switch. The licensee has revised the procedure and the technicians have been made aware of the proper methods for conducting this tes The inspector reviewed licensee responses to these two occurrences and had no further question During the week of February 29, 1988, the inspector accompanied oper-ators for portions of routine operator tours. The inspector reviewed the logs for their completeness and accurac The inspector also interviewed the operators for their knowledge of the systems and components. No discrepancies were noted, b. Plant Maintenance and Outage Activities
--
Blackout Diesel post Modification Testing During the current outage the licensee installed a third emerg-ency diesel generator for use in the event of a station blackou Although installation and operability of the third EDG is not a license requirement, its availability is intended to provide an alternate status power source in the event of a loss of offsite power to the sit Construction, component testing, and final diesel acceptance testing was completed dur-ing this inspection period. Procedures TP 88-09, Electric Plant Line-up for Blackout Diesel Generator Load Test, Revision 0, and TP 87-267, Pre-Operational Test of the Blackout Diesel Genera-tor, Revision 0, were issued after approval by the station Oper-ations Review Com.mittee (ORC). TP 88-09 controls the signifi-cant equipment lineups and tempora ry alterations required to allow complete testing of the diese TP 87-267 prescribes the performance testing of the machine after establishment of the
! required system configuration.
!
< <
-- -
- , . - _
_ - _ - _ _ _ _ _ _ _ _ _
. . . _
.
'
.
Immediately prior to licensee implementation of the testing the inspector reviewed these two procedures for technical adequac The inspector identified that TP 88-09, Revision 0, was inade-quate in that in four separate locations within the procedure an unanticipated "B" emergency diesel generator (EDG) start signal would have been generated. Although procedure steps had been included to disable the "B" EDG output breaker, no steps had been included to prevent the machine from automatically start-ing, or to prepare far the start. Performance of the TP as written would have resulted in unnecessary cold starting of the
"B" EDG and the resultant chillenge to installed ESF actuation The inspector informed the licensee of this concerr. . The licensee confirmed the existence of this deficiency, placed all further EDG testing on hold, and initiated a detailed technical review. In addition to confirming the presence of the inadvert-ent "B" EDG start signals the licensee review identified that drywell unit coolers would also automatically have starte Procedure TP 88-09 was revised to prevent these equipment actu-ation The inspector informed the licenseo that the failure to perform adequate technical review, and to establish an ade-quate procedure is an apparent violation of Technical Specifica-tion 6.8.A (VIO 88-07-01).
The inspector reviewed the revised TP 88-09 and witnessed its imple-mentatio Control of the procedure execution was genera'ily goo Conduct of diesel load test TP87-267 was also observed. The inspec-tor noted that personnel involved in the testing, including the con-trol room staff, were cautious and displayed a conservative approach to test performance, c. Cold Weather Protection During routine tours of the plant, the inspector examined systems susceptible to freezing to verify the presence and operability of heat tracing, space heaters, and insulatio The licensee's program and procedures were also reviewed to determine whether the licensee has maintained effective implementation of the program of protective measures for extreme cold weather conditions to ensure equipment operabilit The plant has been in a prolonged shutdown condition since April 12, 198 The plant heating system provides heat for process buildings including the screen house and the diesel generator build-ing. Discussions with the licensee indicated that heat tracing was applied to the following systems and that all other safety-related piping susceptible to freezing was either buried or in a heated area:
1) the main stack sample line, 2) the fire sprinkler piping for "B" diesel generator, 3) the jockey fire pump low pressure sensing line, and 4) the fire sprinkler piping for the outside bottle storage are l
_ - .
_ _ _ - _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _
I
.
.
.
The operability of heat tracing for the main stack sample line, the fire sprinkler piping for "B" diesel generator, and the jockey fire pump low pressure sensing line are checked during a routine (daily /
weekly) surveillance. The inspector noted that the heat trace on the fire water sprinkler piping for the outside bottle storage area was inoperable and an hourly fire watch patrol has been established by the license The licensee informed the inspector that a permanent enclosure will be built for the bottle storage area and a space heater will be provided to preclude freezin The inspector reviewed the following to determine if any other sys-tems-could be subject to freezing:
--
IE Bulletin 79-24, Frozen Lines
--
Licensee response to IEB 79-24, dated October 24, 1979
--
Licensee Event Reports for the years 1984, 1985, 1986 and 1987 The inspector had no further question d. Region I Temporary Instruction 87-07, Licensee's Fitness for Outy Policy and Reporting Requirements
, The Commission Policy Statement on fitness for duty of nuclear power plant personnel, published on August 4, 1986, in the Federal Register (51 FR 27921) requires the NRC staff to evaluate the effectiveness of licensee efforts in the area. Early in 1987, copies of all licensee fitness for duty programs were collected and reviewe Based upon the information provided and questions raised about fitness for duty programs, further information was needed to evaluate the programs on a consistent basi During this inspection period, the inspector examined records and data relating to the experience associated with the licensee's fitness for duty program. Information was provided as requested in the NRC Region I Temporary Instruction 88-01, e. Temporary Instruction 2515/90:__ Licensee's Implementation of Multiplant Action Item B-58, Scram Discharge Volume (50V) Capability On June 1980 during a routine shutdown of the Browns Ferry Unit 3 reactor, a manual scram from about 36*o power failed to fully insert approximately 40*4 of the control rods. The root cause was determined to be a problem with the 50V heade The followup to this event at other BWRs revealed a number of deficiencies with the SDV header The corrective measures to this problem were divided into a short-term program and a long-term progra The short-term actions were implemented by IE Bulletins 80-14 and 80-17 and their supplement The objective of the long-term program was the improvement of the SDV design. (SDV design details vary from plant to plant.) There are three primary areas of concern addressed by the long-term progra . .
-.
-- _ __ _ __ __ _ _- _ _ _ _ _ . _ _ - - - _ . . _ - _ . _ _ _ _ _ _ _ _ _ _ _ _ ____
~
t
'
. .
9 ;
-
i j L
!
The first concern was to improve the hydraulic coupling between the !
SDV headers, which comprise most of the free volume in the SDV, and ;
the instrumented volume (IV), which i s physically lower than the '
l headers and is intended to detect any water accumulation and to scram 3 the reactor before the headers fill. It was discovered at many sites f that the relatively long pipes connecting the SDV headers to the IV had considerably greater hydraulic resistance than the IV drain lin :
! Thus, a rapid ingress of water would tend to fill up the headers, j
-
leaving the IV nearly empty because it was draining as fast as water i
spilled in'through the long connecting pipe, s
!
- Second, the reliability of the float switches in the IVs needed to
.
be improved. The recommended solution was the addition of redundant l'
'
and diverse water sensor i
,
Finally, it was recommended that the IVs be modified to prevent l
damage to the level sensors by hydrodynamic forces and water hammer ,
l
,
in the IV during a scra !
!
'
Temporary Instruction 2515/90 provides inspection guidance to assure that facility modifications installed at all boiling water reactors ,
meet the criteria and technical bases that were endorsed in a NRC
generic safety evaluation report dated December 1,1980 for use in I implementing permanent system modifications t r. identified deficiencie l
<
The inspector conducted an extensive review of 1 hensee design docu-
"
ments and physical installations to insure that the present plant '
- configuration meets the requirements of the NRC confirmatory Order to
'
. Boston Edison Company dated June 24, 1983. The results of this :
review are as follows: i
,
!
!
--
Scram Discharge Header Sizing and Hydraulic Coupling to the i i Irstrument Volume J
j Generic Safety Evaluation Report (SER) to all BWR licensees, ,
dated December 9,1980 shows that the Pilgrim design for scram !
discharge instrument volume's sizing is acceptable. To meet the !
improved hydraulic coupling requirements the licensee has in-
- stalled two new scram discharge instrument volumes which are
. coupled to the scram headers via six inch line Review of !
design documents which installed this modification verified that !
4 the hydraulic coupling is now satisfactory, t
) --
Automatic Scram on High Scram Discharge Instrument Volume (SDIV)
4 Leve :
J
Review of Technical Specifications, reactor protection system drawings and surveillance tests verify that a high SDIV level j scram exists and is routinely teste !
l ;
>
,
,
n,
___e- - - - ,m_e-_,_, .._._,_m......, ..--er-___ym-.___nr--- r w. w m..,y..,,,-n +,m,.,-aw ,-,.-,i,.c%,,.,,-,cw_,%,--,7,.__.r-%-------==----t-
_-
_ .___ ._ .
.
- .
4
--
Instrument Taps not on Conncting Piping Visual examination determined that the installed instrument taps are on the vertical instrument volume not on connect lng pipin Diverse and Redundant Level Indication TM installed instrumentation at Pilgrim includes two differen-tial pressure cells and three RTO level sensors on each of the two instrument volumes. These diverse instrument types use four separate sets of instrument taps and by their arrangement meet the requirement to have diverse and redundant instrumentatio This instrumentation provides continuous level indication, alarms, rod withdrawal blocks and scram signals from both instrument volume The inspector reviewed applicable surveil-lance test procedures and found that they adequately tested all installed instrumentation. The inspector also reviewed licensee design documents, as-built drawings and physical installation for susceptability to single failures; no single failure modes were identifie Vent and Drain Valves The inspector reviewed as-built drawings and physical installa-tion and verified the following: Vent and drain functions are not adversely affected by interfaces with other systems.
' Vent and drain valves close on loss of instrument ai . Instrument volume vent and drain valves are redundant and do not appear to be suseptable to single failur . Current Surveillance testing is adequate and meets the Technical Specification requirement Integrated Testing of the Entire System
The inspector reviewed facility surveillance tests to verify that all technical specification required testing is performed at the required periodicity and found no weaknesses in this area. The review revealed that the licensee currently performs no integrated scram testing and that the current Technical Specifications require no such tes Based on the results of this review the inspector has determined that the licensee has met its long term commitments to upgrade the scram discharge volume, Temporary Instruction 2515/90 is close _ _ _ - _ _ _ _
.
'
.
.
4.0 Review of Plant Events (Modules 71707, 62703, 61726, 93702, 72701 and 37700)
The inspectors followed up on events occurring during the period to deter-mine if licensee response was thorough and effective. Independent reviews of the events were conducted to verify the accuracy and completeness of licensee informatio Degraded Voltage Protection System Design Deficiency During an engineering review the licensee identified that setpoints for safety-related degraded voltage sensing relays installed on the 4160 VAC emergency buses may not be adequate. The inplant electrical distribution system includes two safety-related 4160 VAC buses which in turn supply all lower voltage safety-related AC loads. The 4160 VAC buses are equipped with both loss of voltage and degraded voltage protective relay Either set of relays will trip the bus feeder breakers and start the emergency diesel generator The current Technical Specification setpoint for the degraded vcitage relays is 3745 V with t 9.2 second time dela If a transient occurred with the offsite power system already operating at a lower than normal voltage, the resulting turbine trip could cause further degradation of the offsite distribution system supplying the statio In this case, the degraded voltage relay setpoint may not be sufficient to ensure that the supply voltage to some 480 VAC equipment would be maintained within its design operating ban This deficiency was caused by a nonconservative assumption made during the licensee's degraded voltage analysis. The licensee reported this condition to the NRC via ENS t,t 6:00 p.m. on January 30, 1988. An NRC Special Electrical Team Inspection arrived onsite February 1, 1988 to perform a previously scheduled inspection of the licensee's onsite power distribution system, This team reviewed the degraded voltage pro-
, tection problem. Licensee followup actions will be evaluated under r an unresolved iten as described in Electrical Team Inspe: tion Report No. 50-293/88-03, Engineered Safety Feature Actuations During a Computer Point Tie-in
) On February 2,1983, at 11:15 a.m. , the licensee received unexpected s isolations of the reactor water cleanup (RWCV) system and secondary containment, and an auto-start of the "A" standby gas treatment sys-tem. A shutdown cooling (SDC) isolation signal was also generated, however the SDC isolation valves were already closed, so that no further equipment actuation occurre The actuations occurred when I&C technicians lif ted leads in the isolation logic to allow tie-in of a process computer monitoring loo The leads were relanded, a blown fuse was replaced, and the isolations were cleared. The licen-see subsequently reported the actuation to the NRC via ENS, and initiated an investigation of the inciden _ - _____ _ _ ___ _-
_ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
.
.
.
The inspector attended a licensee event critique on February 2. Two licensee management representatives, two I&C technicians, and two of the cognizant engineers were present. The inspector also attended a followup critique on the morning of February 3. During the critiques, the licensee postulated that the actuations were caused when the technician lifting the leads inadvertently touched them to an adjacent termina This created a momentar, fault, causing &
blown power fuse in one circuit, and momentarily reducing the poten-tial in other circuits low enough to allow various relays to dene-ergize. In order to validate this scenario the licensee decided to proceed by relifting the leads and looking for evidence of electrical arcin After the licensee had made this decision but before the licensee proceeded, the inspector reviewed applicable elementary and connec-tion drawings, reviewed a statement prepared by the control room staff, and inspecteo the cabine The connection drawings show that a common ground circuit would be interrupted by breaking contact between the two lifted leads. Breaking the common ground would cause the observed actuations. The construction of the affected terminal board makes it unlikely that the technician would touch an adjacent terminal while lifting the lead However, the location was diffi-cult to reach and the technician could easily have touched the leads to the adjacent point while attempting to restore the circuit. This would explain the blown power fuse. The technician stated that he experienced dif ficulty in relanding the lead The inspector re-viewed the instructions contained in Plant Design Change (PDC)83-510 which controlled the work. Signal cut-in sheet 83-510-150, ISO 726, constituted the specific instructions for control, implementation and testing of the activit It stated only that a single RWCU valve would close and that the test capability for one main steam isolation valve would be lost. The signal cut-in sheet was inadequate in that the existence of the common ground loop and the impact of breaking it during the performance of the cut-in was neither recognized nor com-pensated fo The above information was discussed with the licensee prior to imple-mentation of the instructions to relif t the lead The inspector pointed out that relifting the leads would likely cause a second group of ESF actuatior The licensee evaluated the i r.spe c to r' s concern, concurred in the assessment and immediately took action to stop all ongoing tasks which could result in similar actuations, pending more thorough review _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ____
_ . _
'+
.. 1
.
.i
,
.
13 !
. ..
i The inspector informed the licensee that failure to perform adequate ;
technical review and to establish adequate instructions for PDC l implementation is an apparent violation of Technical Specification '
- 6.8.A (VIO 88-07-01). Further, licensee technical follow-up of the *
ESF actuations was inadequate in that the cause of the actuations was not identified by the licensee until prompted by the ' inspector. The i inspector also noted that no representative of the Technical Engi- '
neering Section was involved in the post-incident followu . Secondary Containment Isolation Caused by a Failed Relay Coil ;
l On February 2,1988, at 7:08 p.m., an automatic start of - the "A" i i standby gas treatment. system, and isolation of the secondary contain-ment occurred. Licensee investigation identified a failed electrical relay coil as the source. A circuit fault created by the failed coil '
resulted in a blown logic power supply fuse. Deenergization of the .
'
logic caused the observed equipment actuations. The relay and fuse ,
were replaced, and the logic was reset. The NRC was informed of the '
.
actuations via ENS at 7:50 The failed relay was a General i Electric Type CR120A. This type of relay has experienced a high
- failure rate at Pilgri The licensee is currently implementing a '
1 replacement program to address this problem. NRC followup is being
! conducted under existing inspector follow item 86-37-0 :
,
j Anticipated Transient Without Scram System Actuation
, .
On. February 3,1988, at 7:36 p.m., the licensee received a spurious
. Division II anticipated transient without scram (ATWS) trip signa i The ATWS system normally would function to mitigate certain plant .
! transients by tripping the reactor recirculation pumps and the alter- l'
- nate rod insertion (ARI) system at a reactor pressure of 1175 psig or q reactor water level of -48 inche In addition, the reactor feed
- water pumps are tripped at a reactor pressure of 1400 psig. When the l spurious trip signal was received, both operating reactor recircula-
-
tion pumps tripped, and the ARI system actuated, which depressurized I i the scram pilot valve air header allowing the scram valves to open.
i This resulted in water accumulation in the scram discharge instrument
!' licensee determined that no reactor feed pump trip signal was gener-ated. The trip was cleared and the reactor scram was reset a short i time later. The licensee reported the actuation to the NRC via ENS l at 8:30 p.m. on February ; '
. t f
l I
i l
l l
!
t
!
t
- _ _ _ _ _ _ _ _ _ . _ _ _ _ . - _ . . . _ _ _ _ ____. _ . _ - ___.--- _ _ ., _ _
_ _ _ _ _ _ _ _ _ _ _ _
,
t
. ,.
Event followup determined that the Division I AiWS system was not fully functional at the time of the trip due to ongoing modification activities. The licensee formed a task force led by the engineering department and composed of representatives from operations, mainten-ance, systems engineering and modifications management sections. A temporary procedure was approved to control investigation and troubleshooting. The inspector attended the licensee's event crt-tique and observed that management appeared to effectively focus attention on development of a program for determining the root cause of this even The resident inspectors will continue to follow licensee action e. Unusual Event Due to a Fire in the Machine Shop On February 11, 1988, at 7:35 p.m., the control room received a re-port of a fire in a contaminated area of the machine shop. The sta-tion fire brigade was dispatched to the scene. The Plymouth Fire Department was notified at 7:36 p.m. and three fire trucks arrived at the site by 7:50 An Unusual Event was declared at 7:50 The licensee's emergency plan requires declaration of an Unusual Event if there is a fire in a process building that is not controlled within 10 minutes af ter the fire fighting efforts have begun. This declaration is only required with reactor coolant temperature greater
, than 212 degrees F. The licensee's decision to declare the Unusual Event was conservative in that the fire appeared to have remahed under control throughout the event, and reactor coolant temperature was less than 100 degrees F. The fire was extinguished but was still smoldering by 7:52 p.m. The fire was confined to a small area and
- was identified as burning insulation from a heat-treating niachine
'
which was being used on a valve disk in the sho The smoldering insulation was placed into a 55 gallon drum filled with water, and the Unusual Event was secured at 8:05 p.m. Licensee radiological surveys indicated that there was no spread of contamination in the general area. Air samples taken in the area during the fire showed no airborne contamination. An NRC inspector was onsite at the time of the event and the resident inspectors performed additional follow-up, including obse vation of the licensee's post-incident critiqu The inspectors noted that the critique was well-run and appeared to be very thorough and effective. Results of the resident inspector's followup were discussed with NRC Region I emergency preparedness specialist inspector On February 23 and 24, 1988, an emergency preparedness inspector was onsite to conduct additional incident followup. This review will be documented in inspection report 50-293/88-0 _ _ _ _ _ _ _ _ _ - _ _ _ _ ___ ___ _
l
.'
^
,
l
+
. !
!
15 !
-
i i
a Secondary Containment Isolation During an Electrical Relay Replacement I i
'
On February 23, 1988, at 2:24 p.m. , the licensee experienced an l inadvertent isolation of all inboard secondary contairment isolation ;
dampers, automatic start of the "A" standby gas treatment train, and '
, an isolation of the inboard residual heat removal system discharge i
'
to radwaste primary containment isolation valve. The observed actua- i
.
tions occurred during a primary containment isolation system relay ;
coil replacement. Maintenance technicians removed a fuse to deener- ;
gize the relay and allow its removal. It appears that the licensee failed to fully identify the effect of deenergizing the circuit. Th :
technicians reinserted the fuse and the actuations were cleared a short time later. The licensee notified the NRC via ENS at 2:55 !
, .
The inspector's review of the maintenance request work package (MR !
- 88-54-3 and MR 88-54-7) and interviews with personnel involved indi-
- cated that the preplanning and work instructions were not adequate.
"
Also, the communication between the' maintenance technicians and the duty operations personnel appeared to be poor. The inspector noted I
. that the maintenance requests as presented to the duty operations !
i staff lacked the work description and information regarding compo- !
'
s nents potentially affecte Thus, the operation's review of the
- maintenance requests prior to their release relied heavily on infor- .
) mal verbal communciations from the maintenance technician ,
'
The preplanning and work instructions for MR 88-54-3 did not specify I
- installation of a jumper on the neutral port of the circuit prior to [
] the relay coil replacemen The maintenance technician involved i i indicated that he identified the need for a jumper and installed one, ,
j- based on a previous event where lifting a lead to the common neutral l
'
caused a series of unexpected ESF actuations. The jumper was subse-
!
quently documented on the tagging request. Inadequate preplanning :
! and work instructions were the subjects of a violation as documented ;
j in the inspection report 50-293/87-5 !
i :
- Licensee management informed the inspector at the end of the report l l period that a comprehensive investigation was initiated involving ;
l various disciplines in the nuclear organization to review the above l l event and other recent inadvertant ESF actuations. The objective of
!_ the investigation is to identify common root causes and to develop l l appropriate corrective action The inspectors will monitor the -
! outcome of the invest vation, t l t t i i
!
!
i I
! f
! I
<
.
',
'
. .
I
,
t .
g. ENS Notification of Inoperable SDV Isolation Valves On February 23, 1988, at about 10:00 a.m., the licensee identified two scrarr discharge volume (SDV) isolation valves which failed to close in the required time. SDV vent and drain valves are required by the Technical Specifications to close on an isolation signal with-in 30 seconds. SDV vent valve CV302-23A closed in 90 seconds and drain valve CV302-22A closed in 15 seconds. The average closing time for the remaining operable valves on .the SDVs was about 9 second IE Bulletin (IEB) 80-14, Degradation of BWR Scram Discharge Volume Capability, Item A.3, required licensee's to notify the NRC within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> if the SDV vent and drain valves are not operable or are closed for more than one hour in any 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> period during operation. This reporting requirement was incorporated into licensee notification precedure 2.2.1 Procedure 2.2.17 requires the reporting of any inoperability - of a SDV vent or drain valve. Upon identifying the existence of this procedural requirement on February 24, 1988 the Watch Engineer informed the NRC via ENS at 9:55 a.m. IE Bulletin 80-14 was issued prior to implementation of the extensive modifica-tions to the SDV later required by the NRC, Although the licensee complied with the IEB 80-14 reporting stipulations, su:h reporting may no longer be needed. The licensee stated that a review would be performed to determine if the requirement could be remove During inspection 50-293/87-57 SDV vent valve CV302-238 failed to close on demand. The inspector expressed concern that the failure of the three valves in a relatively short time could indicate a generic problem. The licensee stated that the valves would be dis-assembled when replacement parts are available and that a thorough investigation of the failure mode would be conducted. The inspector will continue to monitor licensee followup in this area, h. Spurious Reactor Water Cleanup Isolation On February 26, 1988, at about 1:10 p.m., the licensee experienced a partial reactor water cleanup system (RWCV) isolation. The outboard containment isolation valve on the RWCU suction line was previously removed from service for maintenance and MOVATS testing. After com-pletion of the testing, the valve was opened and the valve motor operator feeder breaker was closed. A containment isolation signal was present but was not recogni:ed. This uused the valve to auto-matically close when the operator was reenergized. The unanticipated isolation was reported to the NRC via EN , _ _ _ _ _ _ - _ _ _ _ _ - _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ ____ __ __ _
o
j
'
- '
.
17 j
.
!
During a series of electrical equipment walkdowns performed over the l last several years, the licensee has identified a large number of improperly installed wire terminations, or damaged components such !
as cracked terminal boards. These discrepancies were analyzed by the i licensee and those found to be unacceptable have been scheduled for i rework. Maintenance Request (MR) 88-12-07 was one of the MRs issued
'
to perform this work. A portion of the isolation in preparation for performance of the activity was the removal of fuse 16A-K63A. Remov- '
ing the fuse deenergized the non-regenerative heat exchanger high temperature trip and created a containment isolation signa .
The l trip has no direct annunciatio Initially, the licensee believed !
that this solation signal was not reset and remained unrecognized until the MOV was reenergized and automatically close $ubsequent- {
ly, the licensee concluded that control room operators had properly :
reset the isolation signal generated during performance of MR 88-12-07. The licensee now believes, that a routine start of a residual heat removal pump caused spurious RWCU high flow sensor oscillations and lead to the isolation. The spurious tripping of these sensors is '
the subject of existing Unresolved Item 87-50-06. As noted in Sec- ;
tion 4.f of this report, the licensee initiated a systematic assess- i mant of recent ESF actuations caused by maintenance activitie .
It was noted in report 50-293/87-50 that the licensee's corrective maintenance program did not appear to provide for an effective method l of documenting lifted leads and jumpers, and preparing detailed work -
instructions. In implementing MR 88-12-07, the licensee utilized Temporary Procedure (TP) 87-83, Attachment A, to control the lifted
, leads. While this TP was not written explicitly for this use the !
attachment is suitable for the applicatio A "Control Panel Isola-tion Instructional Termination Checklist" was utilized by the main-tenance personnel performing MR 88-12-07. This checklist, along with l its attachments, provided a good outline of work to be performed and 2 its effect on the plant. This checklist, however, is not an approved (
part of the maintenance program, is not used with all MRs, and does !
not prescribe necessary restoration or post-work testin In addi- -
tion, discussions with the operations and maintenance staff indicate that this checklist is not included with the maintenance package and is therefore not reviewed by the operators. The operators appear to *
rely heavily on verbal communication with the maintenance tech-nic1an Since no steps for restoration or post-work functional testing were included with the MR, the isolation signal could easily have gone undetected. Violation 87-50-07, the secondary containment i isolation during replacement of an electrical relay described in Section 4 f of this report, and the above incident appear similar in :
that the preparation, implemertation and restoration from corrective '
maintenance activities appears to be weak. Some steps such as use of +
TP 87-83 for itfted lead control and the use in some cases of a more ;
detailed work checklist have been implemented and represent improve- :
ment. Additional attention to this area however, appears warrante ;
i I
[
i ;
<
.
I l
_
_ _ _ _ _ _ . _ _ _ . . _ _ _ _ _ _ _ _ _ _ _ _. -
- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ __ __ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
.
.
.
lne inspector also noted that many MRs associated with the repair of electrical terminations described above are checked, no retest required. The licensee has already completed most of the logic test-ing for the outage. This project requires the lifting of a large number of leads. The inspector questioned the acceptability of the decision not to retest. The licensee stated that an evaluation would be performed. This item remains unresolved pending licensee response (50-293/88-07-02), Missed Technical Specification Surveillance Identified During a QA Audit On March 4, 1988, during a Quality Assurance audit, the licensee identified that a once per cycle surveillance test of the 'B" emerg-ency diesel generator (EOG) may not have been performed as required during the last cycle. Pilgrim Technical Specifications require that each EDG be started and loaded once per cycle with the control cir-cuits isolated from the cable spreading room to demonstrate remote shutdown capability. No record of performance of the surveillance per Procedure 8.9.13, Diesel Test From the Alternate Shutdown Panel, for the "B" EDG during the last operating cycle could be found. The test records were available for "A" EDG testing, The surveillance Procedure 8.9.13 is included in the Station Master Surveillance Tracking Progra In January 1987, both "A" and "B" EDG's were started and loaded locally folicwing 10 CFR 50, Appendix R modifica-tions. Performance of Procedure 8.9.13 for both EDGs is scheduled prior to restar .0 Review of Licensee Overtime Control (Module 71707)
In September 1987, the NRC received an anonymous allegation that individ-uals at Pilgrim were working excessive overtime, and that plant management was allowing blanket overtime authorizatio The NRC established overtime guidelines for use by licensees in control-ling and approving the use of personnel overtim The guidelines are described in NUREG-0737, Generic Letter 82-12 and Generic Letter 83-1 The NRC policy outlined in these documents is that the use of overtime for personnel performing safety-related activities should be closely con-trolled. The routine use of overtime to compensate for staffing defici-encies should be discouraged. Various numeric overtime limits were estab-lished. It is recognized that under unusual circumstances these limits may be exceeded. In this case deviations should be authorized by the Plant Manager or his deputy, considering the possible affect on personnel performance which could resul .
'
,
.
Previous NRC inspections in this area identified significant weaknesse Notice of Violation (NOV) 85-26-05 concerned a failure to control licensed operator overtime. Unresolved (UNR) item 86-25-08 identified poor control of security force overtim In response to these items the licensee significantly increased operator staffing, reduced the security force work load, and implemented a sixty hour work week limit for all personne This sixty hour limit is in addition to acceptance of the NRC guidelines, which have been incorporated into a station procedur In early October l'J87, the NRC requested that the licensee evaluate its overtime control program and previde a written response detailing the results of that evaluation. The licensee's audit was concluded in October 1987 and by letter dated October 28, 1987 Boston Edison stated that station overtime was being properly controlled, This conclusion was based on a review of overtinie records for the period of August 30, 1987 through October 3, 198 During the current inspection, NRC conducted an independent review of Boston Edison's overtime control program and implementation of that pro-gram. During this inspection, a regional based NRC inspector reviewed the licensee's program to d;termine if the NRC guidelines are adequately addressed and a review of licensee overtime records was conducted to determine the adequacy of program implementatio This review focused on maintenance personnel overtime, since routine reviews by the resident inspectors and security specialists have indicated that overtime controls in the operations and security areas have been improve Review of the licensee's policy and approved procedures indicates that appropriate overtime limits have been incorporated. The licensee's prac-tice of limiting individuals to a sixty hour work week is conservativ In order to exceed established limits, Plant Manager approval 's appro-priately required. The inspector concluded that the licensee's program as currently described is adequat To determine if the program has been effectively implemented the inspector reviewed internal licensee memoranda regarding utilization of overtime in the maintentnce department for the period of August 16 through October 3, 19P7. In memoranda from a licensee staff engineer to the Plant Manager dated October 3 and October 14, 1987, it was identified that only 70*. of persons exceeding the overtime limits had authorizations signed and on fil Tnese reports also identified an uptrend in both the number of overtime exceptions granted and the number of hours worked. The inspector also reviewed time sheets for the months of January 1988 and found in-stances of personnel exceeding the overtime guidelines without the re-quired Plant Manager approval. Unfortunately, both the records initially
,l reviewed by the inspector and those used b/t licensee engineer were pay-roll records, which can be in excess of actual work hours worked due to
_ ____
.
.
,
certain labor contract and pay clauses. Apparently, some supervisors are using information from the security computer that will indicate the time during which a worker is logged into the security computer. These records would appear to more indicative of actual hours worked than pay records, however, any periods of work assignment outside the security area would not be included. The security computer records were not provided until late in the inspectio Lack of clear and auditable records that unam-biguously reflect the status of overtime use is itself an area of concer Also, while overtime authorization records were generally available for maintenance personnel working hours in excess of the NRC guidelines, it is apparent that the approval process was not always complete prior to the work being performed. Specifically, supervisory approvals appeared to be before-the-fact, but senior plant management approvals were often after the overtime was performe Also, from a review of the payroll records and a brief review of the later provided security computer records, it was apparent that some of the same individuals were working overtime for several weeks in succession, The lack of pre-approval at the senior plant management level, as well as the prolonged approval of hours for mainten-ance personnel in excess of the NRC guidelines is not consistent with the intent of the NRC guidelines which discuss exceeding the guidelines only in unusual circumstances.
i These observations were discussed with senior licensee management. In response, the licensee suspended the use of all significant overtime pend-ing review of the situation. This action resolves the near term concern regarding controls on personnel overtim Additional discussions were held between licensee management and NRC supervision to determine the licensee's evaluation of the overtime situation. The licensee indicated that it had been its policy since the management changes that occurred in early 1937, to very tightly control operator overtime, since excessive operator working hours could have a safety impact, More liberal overtime use for maintenance personnel was tolerated because of (1) the unusual circumstances created by the extended outage involving extensive plant up-grade work, and (2) management's judgement that, for a variety of reasons, the potential impact of extensive maintenance overtime was decreased pro-ductivity rather than decreased safet Regarding pre-approval, the licensee had believed that pre-approval at the plant management level was not required by the NRC guidelines. Licensee management stated that they had believed that, despite the record-keeping lapses, supervisors knew and were controlling work hours, and workers were not overly fatigued. Plant management further stated that, although their review had indicated they met NRC guidelines regarding overtime, a series of memoranda had been 3 issued to supervisors based on licensee management's own desire to reduce unnecessary overtime. NRC indicated to the licensee that, even though the inspectors have not identified any actual cases of excessive maintenance worker f atigue, the potential for such an impact underlies the NRC guide-
- _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _
.
' ir . .,
.
.
2 .
lines and forms part of the basis for guidelines specifying case-by-case approval of overtime above specified limit Furthermore, although the guidelines do not clearly state that all levels of approval shall be com-pleted before-the-fact, that is the inten For example, the guidelines state that overtime authorizations shall have a paramount consideration that significant reductions in effectiveness would be unlikel The licensee was receptive to NRC comments regarding the intent of NRC guide-lines and indicated that it would submit an updated response to NRC's overtime-concern The inspector indicated to the licensee that the revised response should address, as a minimum, the following:
--
Measures for clear tracking of hours worked and for establishing easily auditable records;
--
Pro-authorization, at all specified levels of management, of irstances of overtime in excess of the estcblished guidelines; and,
--
Policy on use of overtime in excess of guidelines by the same indi-viduals over an extended time perio Final resolution of the licensee's corrective actions to ensure long term, effective controls are developed will remain unresolved pending future inspection (UNR 88-07-03). Based on the creation of UNR 88-07-03 and the rest.its of routine NRC observations of the administrative controls being implemented to control licensed operator and security overtime NOV 85-26-05 and UNR 86-25-03 will be administrative 1y closed. Formal resolu-tion of all station ove e issues will be tracked under Unresolved Item 88-07-0 .0 Technical Review of the Direct Torus Vent Modification (Modules: 37700 and 37702) Background and Scope of Review On March 2-3, 1988, an NRR inspection team, composed of three nem-bers, conducted an onsite inspection of the modification to install a direct torus vent lin This design modification, described by PDC 86-51 and addressad in Safety Evaluations No. 2197, 2216 and 2269, provides a direct vent path from the torus air space to the main stack, bypassing the Standby Gas Treatment System (SGTS) equipment of the torus purge exhaust lin The direct terus vent line, an 8" line, connects to the existing torus purge exhaust line (penetration X-227) at the upstream end by a tee located between containment iso-lation valves A0-5042B and A0-5042A. Downstream, the direct torus vent line is connected to the 20-inch main stack line downstream of SGTS valves A0N-108 and A0N-11 _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _
'
s
.
The installed configuration of the direct torus vent line currently includes a blind flange assembly in the line approximately 10 feet from the upstream connection and an in-line blank plate approximately 3 feet from the downsteam connection. Both of these barriers are rated for 150 psi. Originally the licensee proposed installation of an 8-inch automatic butterfly valve (AO-5025) and 30 psid rated 1 rupture disc at the same locations when the blind flange and blank plate are now installe By letter dated August 21, 1987, the NRC indicated to Boston Edison that such a modification could not pro-perly be performed under the provisions of 10 CFR 50.59 due to the need for revised technical specifications to address the new auto-matic containment isolation valve (AO-5025). At that juncture the ;
licensee proceeded with installation substituting a blind flange and blank plate for the originally proposed butterfly valve and rupture '
disc. In addition to the new piping, blind flange and blank plate, the installed modification replaces the AC solenoid valve for A0-5042B with an ASCO OC solenoid valve powered from essential 125 volt DC power supplies. Nitrogen lines were added to provide backup nitrogen to A0-5042 The objective of the NRR inspection was to evaluate the installed *
design configuration to assure the adequacy of the modification and its supporting safety evaluation. Because the installed modification leaves the direct torus vent line non-functional, i.e., the blind flange and blank plate isolate the piping, the team evaluated the modification to assure only that there is no adverse safety impact on the plant resulting from the installation of the new, albeit iso-lated, bypass lin In this regard the inspection focused on issues in the following three principal areas:
(1) Systems Issues:
--
Impact of the installed vent line and associated components on the containment isolation desig Effects of the installed vent line on the operability of the SGT (2) Mechanical Design Issue:
--
Evaluation of the modification with respect to the piping response to loading conditions, i.e., Mark I Program load (3) Structural Design Issue:
--
The ef fect of the added vont line on the torus response to loading condition '
>
'
.
23 Review of System Issues With regard to the effect of the vent line on the containment isola-tion design, the modification potentially influences containmant iso-lation due to: 1) the addition of a branch line off an existing penetration, connected between containment isolation valves and 2)
modification of an existing containment isolation valve A0 50428, replacing the AC solenoid with a DC solenoid and addition of a backup N2 supply to operate the valv The inspectors reviewed the design modification and concluded that applicable containment isolation requirements are satisfied. The need for an additional containment isolation bcrrier is satisfied by the blind flange assembly. The direct torus vent line is designed to ASME Section III Class 2 requirements from the upstream tee connec-tion up to and including the blind flange assembl Containment leak testing has also been performed to verify the leak tight integrity of the design modificatio The blind flange has been locally leak tested, and the piping section bounded by the iso-lation valves A0-5042 A&B and the blind flange has been tested to
"Pa" (i.e., the calculated *eak containment internal pressure related to the design basis accio, '). Furthermore, stroke testing was per-formed on the containment isolation valve The replacement of th AC solenoid valve with a DC solenoid has no adverse impact of '.;e valve to perform its isolation function as demonstrated by functional testin With regard to ;he effects of the installed vent line on the opera-bility of the SGTS, the inspectors considered the design features which provide for isolation of the vent line from the SGTS and con-cluded that redun~ ant barriers provided by the blind flange and blank plate --e adequate to assure operability of the SGT c. Review of Mechanical Design Issues The mechanical engineering staff reviewed samples of letters, draw-ings, and related documentation which contained information of loads, load combinations, design limits, and summaries of analysis results, and had the following finding The inspectors found that the analysis of this specific piping and supports did incorporate necessary loads, including thermal, seismic, and rupture disc dynamic loads. The design loads had also considered the effects of 27 possible event combinations from the previous modifications for the Mark I Long Term Program. The inspectors found the loads and load cor.'binations acceptabl .. , - - _ - -
. - -
. _ _
'
=
.
The inspectors reviewed summaries of analysis performed by Bechtel and Teledyn The analyses include cases before and after the
, installation of valve and rupture disc to the 8" direct vent lin '
Although both ANSI B31.1 and ASME Class 2 piping codes were applied in one pipe run, the analysis was performed using ASME Class 2 rules
,
for the entire pipe; this is acceptabl The inspectors noted that the level D stress limits were med for the direct torus vent line design under rupture disc dynamic conditio The staff believes that if the sole function of a piping system is to ,
mitigate the consequences of a plant accident event, its design -
limits should be less than level D. Due to rather unique design consideration of the direct torus vent line at Pilgrim, the staff position en stress limits will be formed in near futur The licen-see will investigate whether the line can meet lower level stress limits. This issue was reviewed for future consideration, because 1 it involves only the currently isolated portions of the system, which was not a subject of this inspectio The licensee was committed to meet IE Bulletin 79-02 requirements on expansion anchor bolts. A factor of 4 or 5 was used. The inspectors i found that this is acceptabl The inspectors found the pipe support design limits using the AISC 4 Code acceptabl In conclusion, the inspection found that the piping support design of the installed modification is acceptable, d. Review of Structural Issues
'
The structural inspections covered effects of modification on the structural integrity of the torus itself and the design of pipe supports and the associated anchorag Correspondence between Teledyne Engineering Services (TES) and Boston Edison Co. (BECo) (6706-16) dated February 5, 1988 indicated that the j subject modifications meet the ASME Code requirements of the 1977 i Summer Editions for two cases: with valve A0-5025 in place or with l the valve replaced by the 100 point blind flange assembly. The sub-ject correspondence also provides the anchor load summary at the torus nozzle and at the support !
-- ,-__--_ -_._ - - - - _, _ __ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ .
,
.
.
From the review of the correspondence between TES and BECo (6706-16)
dated January 14, 1988, it appears that the TES performed the analysis using the bounding events developed from 27 load combina-tions. This would indicate that the analysis was performed in accordance with the recommendations :f NUREG-0661, "Safety Evaluation Report, Mark I Containment Long-Term Program" dated July 1980. The inspection team conducted a telephone conference jointly with the BECo staff, with the principal engineer of TES who confirmed tht the modification analysis was performed in accordance with the require-ments of the NUREG-0661, and NE00-24583, "Mark I Containment Program Structural Acceptance Criteria Plant Unique Analysis Application Guide", Task N .1.1, General Electric Topical Report, December 197 These criteria are acceptable to the staf The inspection team was informed that the design of the anchors for the new line, as well as examination of the effects resulting there-from, was performed by Bechtel Eastern power Co. (Bechtel), and re-viewed the notes dated February 2 and 3,1983 documenting telephone conversation which would indicate that Bechtel completed the evalua-tion of the Direct Torus Vent (DTV) pipe supports using the loads provided by TE The criteria used in this work were contained in the BECo Specification PDC 86-51, "Direct Torus Vent" Rev. O, dated May 18, 198 This specification states that the standard manufac-tured pipe support items were analyzed in accordance with the ASME B31.1 through winter 1930 addenda and the requirements of NRC I&E Bulletin 79-11. The custom-designed tube steel supports were designed in accordance with the Specifications cor. tai ned in th,e
"Specification for the Design, Fabrication and Erection of Structural Steel for Buildings" ef fective November 1,1987. These criteria are considered acceptabl The inspection team reviewed the pertinent parts of the specification No. C-110-ERQ-EO, "Design of Pipe Supports for 2 1/2 Inches and Larger Piping" Rev. O, dated March 16, 1985, which was one of the documents used by Bechtel in design, ibis specification states that anchor bolts should be designed with the factors of safety of 5 (Hilti sleeves type and phillips snap-off-self drilling) and 4 (wedge type Hilti Kwik). The shear / tension interaction equation is based on the straight line with the actusi (calculated tension load times two)
if it is based on rigid plate assumption. This was found to be acceptabl *
.
- .
.
7.0 knagement and Exit Meetings (Module: 30703)
At periodic intervals during the inspection period, meetings were held with senior facility management to discuss the inspection scope and preliminary findings of the resident inspectors. A final exit interview was held on March 18, 1988 to discuss findings with licensee mancmen At no time during any of the above referenced ,,1eetings did the licensee identify the issues followed during this inspection as involving proprie-tary informatio .
.
D
.
.
Attachment I to Inspection Report 50-293/87,-0 Persons Contacted R. Bird Senior Vice Presidant - Nuclear
- K. HiC hfill, Station Director R. Barrett, Plant Manager E. Kraft, Plant Support Manager R. Anderson, Planning and Outage Manager D. Swanson, Nuclear Engineering Department Manager J. Alexander, Operations Section Manager N. Brosee, Maintenance Section Manager J. Jens, Radiological Section Manager N. Gannon, Chief Radiological Engineer J. Seery, Technical Section Manager P. Mastrangelo, Chief Operating Engineer R. Sherry, Chief Maintenance Engineer D. Long, Security Manager F. Wozniak, Fire Protection Manager
"Senior licensee representative present at the exit meeting.