Text

Supplement to License Amendment Request to Adopt Risk Informed Completion Times TSTF-505, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b.
	ML17058A181
Person / Time
Site:	Saint Lucie
Issue date:	02/25/2017
From:	Summers T; Florida Power & Light Co
To:	; Document Control Desk, Office of Nuclear Reactor Regulation
References
	L-2017-007
	Download: ML17058A181 (139)
	v • d • e

{{#Wiki_filter:FEB 2 5 2017 L-2017-007 10 CPR 50.90 U.S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 Re: St. Lucie Nuclear Plant, Units 1 and 2 Docket Nos. 50-335 and 50-389 Supplement to License Amendment Request to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b"

References:

1. Florida Power & Light Company letter L-2014-242, "Application to Adopt TSTF-505, Revision 1, Provide Risk-Informed Extended Completion Times- RITSTF Initiative 4B,"

December 5, 2014 (ML14353A016)

2. NRC E-mail "Request for Additional Information- St. Lucie TSTF-505 EICB- MFS372 &

MF 5373," March 28, 2016 (ML16089A006)

3. NRC E-mail "Request for Additional Information- St. Lucie TSTF-505 APLA- MF5372 &

MF5373," April13, 2016 (ML16105A456)

4. NRC E -mail "Request for Additional Information - St. Lucie TSTF 505 APLA - MF5372 &

MF5373," May 27, 2016 (ML16152A187)

5. Florida Power & Light Company letter L-2016-114, "Response to Request for Additional Information Regarding License Amendment Request to Adopt TSTF-505, 'Provide Risk-Informed Extended Completion Times- RITSTF Initiative 4B'," July 8, 2016 (ML16193A659)

6. Florida Power & Light Company letter L-2016-135, "Second Response to Request for Additional Information Regarding License Amendment Request to Adopt TSTF-505,

         'Provide Risk-Informed Extended Completion Times- RITSTF Initiative 4B'," July 22,2016 (ML16208A061)

In Reference 1, as supplemented by References 5 and 6, Florida Power & Light Company (FPL) submitted a license amendment request (LAR) for St. Lucie Units 1 and 2. The proposed amendment would revise the Technical Specifications (TS) to implement TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times RITSTF [Risk Informed TSTF] Initiative 4b." This letter provides a supplement to the LAR to address NRC staff concerns with TSTF-505 to support approval of the requested license amendment. Florida Power & Light Company 6501 S . Ocean Drive, Jensen Beach, FL 34957

L-2017-007 Page 2 of3 Consistent with TSTF-505, the LAR added newTS Actions for configurations that currently would require entry into TS 3.0.3. These new Actions provide one hour or a time determined in accordance with the Risk Informed Completion Time (RICT) Program to restore at least one train of the inoperable system. TSTF-505 allows applying a RICT under emergent conditions that result in loss of a specified safety function or inoperability of all required trains of a system required to be operable provided one or more of the trains is probabilistic risk assessment (PRA) functional. The current St. Lucie TS also include Actions for conditions that represent a loss of function, and the LAR proposed adding a RICT to these Actions. In a letter to the Technical Specifications Task Force on November 15, 2016, and during a public meeting on December 13, 2016, the NRC staff discussed its concerns with TSTF-505. The staff determined that reductions in safety margin and defense-in-depth have not been adequately evaluated for the loss of function conditions permitted in TSTF-505. As a result, the NRC has suspended approval of TSTF-505 until the staffs concerns are resolved. At the same time, the staff stated that it intends to continue its review of in-house applications requesting adoption of RICT programs. One of the industry-proposed options to address the staffs concerns in future LARs is to exclude the use of the loss of function provisions currently provided in TSTF-505. FPL is using this approach in its supplement to the LAR by removing the loss of function provisions. This supplement revises the LAR to remove the new TS Actions for configurations that currently would require entry into TS 3.0.3. Similarly, the supplement removes the application of RICTs to existing Actions that represent a loss of function. In addition, the new Risk Informed Completion Time Program added to the administrative section of the TS is modified to exclude use of a RICT for any configuration that represents loss of a specified safety function or inoperability of all required trains of a system required to be operable. For the reasons discussed above, this supplement removes the proposed RICTs for which there is no consensus between staff and industry. This change is intended to allow the staff to move forward with a timely review and approval of the requested amendment. Attachments 1 and 2 to this letter provide a table that displays the relevant TS changes previously proposed in References 1, 5, and 6 and the modifications to the proposed changes. Attachments 3 and 4 provide a complete markup of the Unit 1 and Unit 2 TS, respectively, including the modifications to the proposed changes presented in Attachments 1and 2. These markups supersede the TS markups provided in References 1, 5, and 6. Revised TS pages for Units 1 and 2 are provided in Attachments 5 and 6, respectively, and supersede the corresponding pages provided in References 1, 5, and 6. Attachments 7 and 8 provide proposed changes to the TS Bases for Units 1 and 2, respectively, and supersede the corresponding Bases changes provided in References 1, 5, and 6. This supplement does not alter the conclusions in Reference 1 that the changes do not involve a significant hazards consideration pursuant to 10 CFR 50.92, and there are no significant environmental impacts associated with the changes. No new or revised commitments are included in this letter.

L-2017-007 Page 3 of 3 Should you have any questions regarding this submittal, please contact Mr. Mike Snyder, Licensing Manager, at (772) 467-7036. I declare under penalty of perjury that the foregoing is true and correct. Executed on February Sincerely, ~~~~ers-- Regional Vice President - Southern Region St. Lucie Plant Enclosure cc: NRC Regional Administrator, Region II NRC Senior Resident Inspector NRC Project Manager Ms. Cindy Becker, Florida Department of Health

L-2017-007 ATTACHMENT 1 St. Lucie Unit 1 Summary of Modifications to the Proposed Changes to the Technical Specifications

L-2017-007 Attachment 1 St. Lucie Unit 1 Summary of Modifications to the Proposed Changes to the Technical Specifications Technical Modification to Proposed Previously Proposed Change Change Add new Action 10C with a risk informed completion time (RlCT) for the condition that the number of operable channels is two or more less than the minimum channels operable Proposed change is deleted requirement Table 3.3-3 Add new Action 8.b with a RICT for the condition that two channels are inoperable Proposed change is deleted ESPAS Add new Action 11.b with a RICT for the condition that two auxiliary feedwater instruments Proposed change is deleted channels are inoperable Revise Action a to apply RICT:

a. With one SIT inoperable due to boron concentration not within limits, or due to an TS 3.5.1 inability to verify the required water volume or nitrogen cover-pressure, restore the inoperable SIT to OPERABLE status with 72 hours or in accordance with the Risk Proposed changes are Safety Injection deleted.

Tanks Informed Completion Time Program; otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. Add new Action c with a RICT for two or more safety injection tanks inoperable Revise Action to apply RICT: TS 3.5.4 With the refueling water tank inoperable, restore the tank to OPERABLE Refueling Water Proposed change is deleted status within 1 hour or in accordance with the Risk Informed Completion Time Tank Program, or be in at least HOT STANDBY within 6 hours and in COLD SHUTDOWN within the following 30 hours. Revise Action e to apply RICTs: TS 3.6.2.1

e. With two containment spray trains inoperable or any combination of three or more Proposed change is deleted Containment Spray trains inoperable, restore containment spray trains and containment cooling trains to and TS markup is updated and Cooling OPERABLE status within 1 hour or in accordance with the Risk Informed to Amendment 228.

Systems Completion Time Program, or be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours. Page 1 of 4

L-2017-007 Attachment 1 St. Lucie Unit 1 Summary of Modifications to the Proposed Changes to the Technical Specifications Technical Modification to Proposed Previously Proposed Change Change TS 3.7.1.2 Add new Action with a RICT for the condition that two auxiliary feedwater pumps are Proposed change is deleted Auxiliary inoperable Feedwater System Revise Action to apply RICT: TS 3.7.1.3 With the condensate storage tank inoperable, restore the condensate storage tank to Proposed change is deleted Condensate Storage OPERABLE status within 4 hours or in accordance with the Risk Informed Compledon Tank Time Program, or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. TS 3.7.1.5 Main Steam Proposed change is deleted Add new Action b with a RICT for the condition that two MSIVs are inoperable in Mode 1 Isolation Valves (MSIV) TS 3.7.3.1 Component Add new Action b with a RICT for the condition that two component cooling water loops are Proposed change is deleted Cooling Water inoperable System TS 3.7.4.1 Add new Action b with a RICT for the condition that two intake cooling water loops are Proposed change is deleted Intake Cooling inoperable Water System Page 2 of 4

L-2017-007 Attachment 1 St. Lucie Unit 1 Summary of Modifications to the Proposed Changes to the Technical Specifications Technical Modification to Proposed Previously Proposed Change Change Revise Action e to apply RICT: With two of the above required diesel generators inoperable, demonstrate the OPERABILITY of two offsite A. C. circuits by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour and at least once per 8 hours thereafter; Proposed change is deleted TS 3.8.1.1 restore one of the inoperable diesel generators to OPERABLE status within AC Sources 2 hours or in accordance with the Risk Infonned Completion Time Program, or be in the at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. Add new Action f with a RICT for the condition that three or more AC sources are Proposed change is deleted inoperable TS 3.8.2.3 Add new Action c with a RICT for the condition that two DC electrical sources are Proposed change is deleted D.C. Distribution-inoperable. Operating - - - --- --- - --- Page 3 of 4

L-2017-007 Attachment 1 St. Lucie Unit 1 Summary of Modifications to the Proposed Changes to the Technical Specifications Modification to Proposed Previously Proposed Change Chan.!!e

q. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09, "Risk-Informed Technical Specification Initiative 4b: Risk-Managed Technical Specifications (RMTS) Guidelines," Revision 0-A, November 2006. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2;

c. When a RICT is being used, any plant configuration change within the scope of the Risk Informed Completion Time Program must be considered for the effect on the RICT.

Item dis revised to remove

1. For planned changes, the revised RICT must be determined prior to the term "voluntary" TS 6.8.4 implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within Item e is deleted the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours after the plant configuration change, whichever is less.

3. Revising the RICT is not required if the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for voluntary entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

e. Use of a RICT, not to exceed 24 hours, is permitted for emergent conditions which represent a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE if one or more of the trains are considered "PRA functional" as defined in Section 2.3. 1 of NEI 06-09.

Page 4 of 4

L-2017-007 ATTACHMENT 2 St. Lucie Unit 2 Summary of Modifications to the Proposed Changes to the Technical Specifications

L-2017-007 Attachment 2 St. Lucie Unit 2 Summary of Modifications to the Proposed Changes to the Technical Specifications Modification to Proposed Previously Proposed Change Change Add new Action 12.b with a risk informed completion time (RICT) for the condition that Proposed change is deleted two channels are inoperable Table 3.3-3 Add new Action 15.b with a RICT for the condition that two channels are inoperable Proposed change is deleted ESFAS Add new Action 18.d for the condition that the number of operable channels is two or more Proposed change is deleted less than the minimum channels operable requirement Revise Action a to apply RICT:

b. With one SIT inoperable due to boron concentration not within limits, or due to an inability to verify the required water volume or nitrogen cover-pressure, restore the TS 3.5.1 inoperable SIT to OPERABLE status within 72 hours or in accordance with the Proposed changes are Safety Injection Risk Informed Completion Time Program ; otherwise, be in at least HOT deleted.

Tanks STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. Add new Action c with a RICT for two or more safety injection tanks inoperable Revise Action to apply RICT: TS 3.5.4 With the refueling water tank inoperable, restore the tank to OPERABLE Proposed change is deleted Refueling Water status within 1 hour or in accordance with the Risk Informed Completion Time Tank Program~ or be in at least HOT STANDBY within 6 hours and in COLD SHUTDOWN within the following 30 hours. Revise Action e to apply RICTs: TS 3.6.2.1 Proposed change is deleted

f. With two containment spray trains inoperable or any combination of three or more Containment Spray and TS markup is updated trains inoperable, restore containment spray trains and containment cooling trains to and Cooling OPERABLE status within 1 hour or in accordance with the Risk Informed to Amendment 178.

Systems Completion Time Program, or be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours. Page 1 of 4

L-2017-007 Attachment 2 St. Lucie Unit 2 Summary of Modifications to the Proposed Changes to the Technical Specifications Technical Modification to Proposed Previously Proposed Change Chan.Q"e Specification TS 3.7.1.2 Add new Action with a RJCT for the condition that two auxiliary feedwater pumps are Proposed change is deleted Auxiliary inoperable Feedwater System Revise Action to apply RJCT: TS 3.7.1.3 With the condensate storage tank inoperable, within 4 hours or in accordance with the Risk Proposed change is deleted Condensate Storage Infonned Completion Time Program, restore the CST to OPERABLE status or be in at Tank least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. TS 3.7.1.5 Main Steam Proposed change is deleted Add new Action b with a RJCT for the condition that two MSIVs are inoperable in Mode 1 Isolation Valves (MSIV) TS 3.7.3 Component Add new Action b with a RJCT for the condition that two component cooling water loops are Proposed change is deleted Cooling Water inoperable System TS 3.7.4 Add new Action b with a RJCT for the condition that two intake cooling water loops are Proposed change is deleted Intake Cooling inoperable Water System ----- ----- - - -- - ---- Page 2 of 4

L-2017-007 Attachment 2 St. Lucie Unit 2 Summary of Modifications to the Proposed Changes to the Technical Specifications Modification to Proposed Previously Proposed Change Chan.Q"e Revise Action e to apply RJCT: With two of the above required diesel generators inoperable, demonstrate the OPERABILITY of two offsite A. C. circuits by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour and at least once per 8 hours thereafter; Proposed change is deleted TS 3.8.1.1 restore one of the inoperable diesel generators to OPERABLE status within AC Sources 2 hours or in accordance with the Risk Infonned Completion Time Program, or be in the at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. Add new Action f with a RICT for the condition that three or more AC sources are Proposed change is deleted inoperable TS 3.8.2.1 Add new Action d with a RICT for the condition that more than one AC vital panel either not D.C. Distribution- Proposed change is deleted energized from its associated inverter or inverters not connected to associated DC buses Operating Page 3 of 4

L-2017-007 Attachment 2 St. Lucie Unit 2 Summary of Modifications to the Proposed Changes to the Technical Specifications Technical Modification to Proposed Previously Proposed Change Chan.Q'e

r. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09, "Risk-Informed Technical Specification Initiative 4b: Risk-Managed Technical Specifications (RMTS) Guidelines," Revision 0-A, November 2006. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2;

c. When a RICT is being used, any plant configuration change within the scope of the Risk Informed Completion Time Program must be considered for the effect on the RICT.

Item dis revised to remove

1. For planned changes, the revised RICT must be determined prior to the term "voluntary" TS 6.8.4 implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within Item e is deleted the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours after the plant configuration change, whichever is less.

3. Revising the RICT is not required if the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for voluntary entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

e. Use of a RICT, not to exceed 24 hours, is permitted for emergent conditions which represent a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE if one or more of the trains are considered "PRA functional" as defined in Section 2.3.1 of NEI 06-09.

Page 4 of 4

L-2017-007 ATTACHMENT 3 St. Lucie Unit 1 Markup of the Technical Specification Pages

L-2017-007 Attachment 3 Page 1 of 24 INSERT1 or in accordance with the Risk Informed Completion Time Program, INSERT2 or in accordance with the Risk Informed Completion Time Program INSERT 3

q. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09, "Risk-Informed Technical Specifications Initiative 4b: Risk-Managed Technical Specifications (RMTS) Guidelines," Revision 0-A, November 2006. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2;

c. When a RICT is being used, any plant configuration change within the scope of the Risk Informed Completion Time Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours after the plant configuration change, whichever is less.

3. Revising the RICT is not required If the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

L-20_17-007 Attachment 3 Page 2 of24 TABLE 3.3-1 (Continued) TABLE NOTATION

With the protective system trip breakers in the closed position and the CEA drive system capable of CEA withdrawal.

(a) Trip may be bypassed below 1% of RATED THERMAL POWER; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is 2:_ 1% of RATED THERMAL POWER. (b) Trip may be manually bypassed below 685 psig ; bypass shall be automatically removed at or above 685 psig. (c) Trip may be bypassed below 15% of RATED THERMAL POWER; bypass shall be automatically removed when Power Range Neutron Flux power is 2: 15% of RATED THERMAL POWER.

                                        -4 (d)    Trip may be bypassed below 10 % and above 15% of RATED THERMAL POWER; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is 2:_ 10-4%

and Power Range Neutron Flux power:: 15% of RATED THERMAL POWER. (e) Deleted . (f) There shall be at least two decades of overlap between the Wide Range Logarithmic Neutron Flux Monitoring Channels and the Power Range Neutron Flux Monitoring Channels. INSERT 1 ACTION STATEMENTS ACTION 1 - With the number of c annels OPERABLE one less than required by the Minimum Channels OPERABL equirement, restore the inoperable channel to OPERABLE status within 48 hours r be in HOT STANDBY within the next 6 hours and/or open the protective system trip breakers. ACTION 2 - With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in either the bypassed or tripped condition within 1 hour. For the purposes of testing and maintenance, the inoperable channel may be bypassed for up to 48 hours from time of initial loss of OPERABILITY; however, the inoperable channel shall then be either restored to OPERABLE status or placed in the tripped condition .

ST. LUCIE- UNIT 1 3/4 3-4 Amendment No. 4-e, 2+, 4-a, ~ . 4-W . ~

L-2017-007 Attachment 3 Page 3 of 24 TABLE 3.3-3 ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION TOTAL NO. MINIMUM OF CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT CHANNELS TO TRIP OPERABLE MODES ACTION

1. SAFETY INJECTION (SIAS)

a. Manual (Trip Buttons) 2 1 2 1, 2, 3,4 8

b. Containment Pressure -

High 4 2 3 1, 2, 3 9 y

c. Pressurizer Pressure -

Low 4 2 3 1, 2, 3(a) 9 --r

2. CONTAINMENT SPRAY (CSAS)

a. Manual (Trip Buttons)

b. Containment Pressure -

2 1 2 1,2, 3, 4

High-High 4 2(b) 3 1, 2, 3 10a , 10b, 10o .-{"

3. CONTAINMENT ISOLATION (CIS)

a. Manual (Trip Buttons) 2 1 2 1, 2, 3, 4 8

b. Containment Pressure -

High 4 2 3 1, 2, 3 9 +-

c. Containment Radiation -

High 4 2 3 1, 2, 3, 4 9 ~

d. SIAS ---------------------------- (See Functional Unit 1 above)--------------- ----------------

4. MAIN STEAM LINE ISOLATION (MSIS)

a. Manual (Trip Buttons) 2/steam 1/steam 2/operating 1,2, 3,4 8 generator generator steam generator

b. Steam Generator 4/steam 2/steam 3/steam 1, 2,3(c) 9 ~

Pressure- Low generator generator generator ST. LUCIE- UNIT 1 3/4 3-10 Amendment No. 4a, ~. 4-88, ~

L-2017-007 Attachment 3 Page 4 of 24 TABLE 3.3-3 {Continued} ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

5. CONTAINMENT SUMP RECIRCULATION (RAS)

a. Manual RAS (Trip Buttons) 2 1 2 1,2, 3,4 8

b. Refueling Water Tank- Low 4 2 3 1, 2, 3 13

6. LOSS OF POWER

a. 4.16 kv Emergency Bus Under-voltage (Loss of Voltage) 2/Bus 2/Bus 1/Bus 1, 2, 3 12

b. 4.16 kv Emergency Bus Under-voltage (Degraded Voltage) 2/Bus 2/Bus 1/Bus 1' 2, 3 12

c. 480 V Emergency Bus Under-voltage (Degraded Voltage) 2/Bus 2/Bus 1/Bus 1, 2, 3 12

7. AUXILIARY FEEDWATER (AFAS)

a. Manual (Trip Buttons) 4/SG 2/SG 4/SG 1' 2, 3 11

b. Automatic Actuation Logic 4/SG 2/SG 3/SG 1,2, 3 11

c. SG Level (1A/1 B)- Low 4/SG 2/SG 3/SG 1,2, 3 14a, 14b, 44s %

8. AUXILIARY FEEDWATER ISOLATION ""

a. SG 1A- SG 1B Differential Pressure 4/SG 2/SG 3/SG 1,2, 3

b. Feedwater Header 1A - 1B Differential It-Pressure 4/SG 2/SG 3/SG 1' 2, 3 14a, 44s t ST. LUCIE- UNIT 1 3/4 3-11 Amendment No. 4&, ~. e8, ~. 400, ~ .

                                                                                 ~. 2-20

L-2017-007 Attachment 3 Page 5 of 24 TABLE 3.3-3 (Continued) TABLE NOTATION (a) Trip function may be bypassed in this MODE when pressurizer pressure is < 1725 psia; bypass shall be automatically removed when pressurizer pressure is~ 1725 psia . (b) An SIAS signal is first necessary to enable CSAS logic. (c) Trip function may be bypassed in this MODE below 685 psig ; bypass shall be automatically removed at or above 685 psig. ACTION STATEMENTS ACTION 8 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours r be in at least HOT STANDBY within the next 6 hours an *n COLD SHUTDOWN within the following 30 hours. INSERT 1 ACTION 9 - With the number of OPERABLE channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in either the bypassed or tripped condition wjthin 1 hour. For the purposes of testing and maintenance, the inoperable channel may be bypassed for up to 48 hours from time of initial loss of OPERABILITY; however, the inoperable channel shall then be either restored to OPERABLE status or placed in the tripped condition.

b. Within one hour, all functional units receiving an input from the inoperable channel are also bypassed or tripped.

c. The Minimum Channels OPERABLE requirement is met; however, one additional channel may be bypassed for up to 48 hours while performing tests and maintenance on that channel provided the other inoperable channel is placed in the tripped condition.

ST. LUCIE- UNIT 1 3/4 3-12 Amendment No. 4-a, 4a, ~. ~

L-2017-007 Attachment 3 Page 6 of24 TABLE 3.3-3 (continued) TABLE NOTATION ACTION W- With the number of OPERABLE channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied :

a. The inoperable channel is placed in the bypassed or tripped condition and the Minimum Channels OPERABLE requirement is demonstrated within 1 hour. If the inoperable channel can not be restored to OPERABLE status within 48 hours, then place the inoperable channel in the tripped condition.

b. Within 1 hour, all functional units receiving an input from the inoperable channel are also bypassed or tripped.

jACTION 1 OB -1 G7 With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel has been placed in the tripped condition within 1 hour. Restore one of the inoperable channels to OPERABLE status within 48 hou be in at least HOT STANDBY within 6 hours and in HOT SHUTD within the following 6 hours. INSERT 1 ACTION 11 - With the number of OPERABLE ch one less than the Total Number of Channels, re t e inoperable channels to OPERABLE status within 48 hours o be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. ACTION 12 - With the number of OPERABLE Channels one less than the Total Number of Channels, operation may proceed until performance of the next required CHANNEL FUNCTIONAL TEST provided the inoperable channel is placed in the tripped condition within 1 hour. ST. LUCIE- UNIT 1 3/4 3-13 Amendment No. ~. ~. a8, ~. 4-88,

~.~

L-2017-007 Attachment 3 Page 7 of 24 TABLE 3.3-3 (continued) TABLE NOTATION ACTION 13 - With the number of OPERABLE channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied : INSERT 2

a. The inope able channel is placed in either the bypassed or tripped conditior.l ithin 1 hour. If OPERABILITY can not be restored within 48 hour , be in at least HOT STAND BY within 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. The Minimum Channels OPERABLE requirement is met; however, one additional channel may be bypassed for up to 2 hours while performing tests and maintenance on that channel provided the other inoperable channel is placed in the tripped condition .

ACTION 14 - With the number of channels OPERABLE one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in either the bypassed or tripped condition within 1 hour. If an inoperable SG level channel can not be restored to OPERABLE status within 48 hours, then AFAS-1 or AFAS-2 as applicable in the inoperable channel shall be placed in the bypassed condition. If an inoperable SG DP or FW Header DP channel can not be restored to OPERABLE status within 48 hours, then both AFAS-1 and AFAS-2 in the inoperable channel shall be placed in the bypassed condition. The channel shall be returned to OPERABLE status no later than during the next COLD SHUTDOWN.

b. Within 1 hour, all functional units receiving an input from the inoperable channel are also bypassed or tripped. .r

!ACTION 15 1&.- With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel has been placed in the tripped condition within 1 hour. Restor PRT 1 1 one of the inoperable channels to OPERABLE status within 48 hours be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. ST. LUCIE- UNIT 1 3/4 3-13a Amendment No. ~. ~

L-2017-007 Attachment 3 Page 8 o.f24 REACTOR COOLANT SYSTEM SAFETY VALVES- OPERATING LIMITING CONDITION FOR OPERATION 3.4.3 All pressurizer code safety valves shall be OPERABLE with a lift setting of

          ~ 2422.8 psig and.:: 2560.3 psig.

APPLICABILITY: MODES 1, 2, 3, and 4 with all RCS cold leg temperatures> 281 °F. ACTION:

a. With one pressurizer code safety valve inoperable, eith estore the inoperable valve to OPERABLE status within 15 minutes or be in HOT STANDBY within 6 hours and in HOT SHUTDOWN within the next 6 hours.

b. With two or more pressurizer code safety valves inoperable, be in HOT STANDBY within 6 hours and in HOT SHUTDOWN with all RCS cold leg temperatures.:: 281 °F within the next 6 hours.

SURVEILLANCE REQUIREMENTS 4.4.3 Verify each pressurizer code safety valves is OPERABLE in accordance with the lnservice Testing Program. Following testing, as-left lift settings shall be within

          +I- 1% of 2500 psia.

ST. LUCIE- UNIT 1 3/4 4-3 Amendment No. W, ~. 400

L-2017-007 Attachment 3 Page 9 of 24 REACTOR COOLANT SYSTEM PORV BLOCK VALVES LIMITING CONDITION FOR OPERATION 3.4.12 Each Power Operated Relief Valve (PORV) Block Valve shall be OPERABLE. APPLICABILITY: MODES 1, 2, and 3.

ACTION: . . J. . With one or more block valve(s) inoperable, within 1 hour either restore the block valve(s) to OPERABLE status or close the block valve(s) and remove power from the block valve(s); otherwise, be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. SURVEILLANCE REQUIREMENTS 4.4.12 Each block valve shall be demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by operating the valve through one complete cycle of full travel. ST. LUCIE - UNIT 1 3/4 4-58 Amendment No. ¥, 42, sa . ~

L-2017-001 Attachment 3 Page 10 of 24 3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) SAFETY INJECTION TANKS (SIT) LIMITING CONDITION FOR OPERATION 3.5.1 Each reactor coolant system safety injection tank shall be OPERABLE with :

a. The isolation valve open,

b. Between 1090 and 1170 cubic feet of borated water,

c. A minimum boron concentration of 1900 ppm , and

d. A nitrogen cover-pressure of between 230 and 280 psig .

APPLICABILITY: MODES 1, 2 and 3/ l with pressurizer pressure .C 1750 psiQ. ACTION:

a. With one SIT inoperable due to boron concentration not within limits, or due to an inability to verify the required water volume or nitrogen cover-pressure, restore the inoperable SIT to OPERABLE status with 72 hours; otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. INSERT 2

b. With one SIT inoperable due to reasons other than those stated

ACTION-a, restore the *inoperable SIT to OPERABLE status within 24 hours; otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

SURVEILLANCE REQUIREMENTS 4.5.1 Each safety injection tank shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying that the borated water volume and nitrogen cover-pressure in the tanks are within their limits, and

2. Verifying that each safety injection tank isolation valve is open.

7 With pressurizer pressure > 1750 psia . ST. LUCIE - UNIT 1 3/4 5-1 Amendment No.~.~ . ~

L-2017-007 Attachment 3 Page 11 of 24 EMERGENCY CORE COOLING SYSTEMS ECCS SUBSYSTEMS - OPERATING LIMITING CONDITION FOR OPERATION 3.5.2 Two independent ECCS subsystems shall be OPERABLE with each subsystem comprised of:

a. One OPERABLE high-pressure safety injection (HPSI) pump,

b. One OPERABLE low-pressure safety injection pump, C. An independent OPERABLE flow path capable of taking suction from the refueling water tank on a Safety Injection Actuation Signal and automatically transferring suction to the containment sump on a Recirculation Actuation Signal, and

d. One OPERABLE charging pump*.

APPLICABILITY: MODES 1, 2 and 3~ lwith pressurizer pressure ~ 1750 psi a. I ACTION:

                                                      !INSERT 1         J

a. 1. With one ECCS sub~ystem i operable only because its associated LPSI train is inoperable, rest the inoperable subsystem to OPERABLE status within 7 days be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

2. With one ECCS subsystem inoperable for reasons other than condition a.1., restore the inoperable subsystem to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and in UTDOWN within the following 6 hours.

1

b. In the event the ECCS is actuated and injects water into the Reactor Coolant System , a Special Report shall be prepared and submitted to the Commission pursuant to Specification 6.9.2 within 90 days describing the circumstances of the actuation and the total accumulated actuation cycles to date .

       .--?""One EGGS subsystem charging pump shall satisfy the flow path requirements of Specification 3.1.2.2 .a or 3.1.2.2.d. The second EGGS subsystem charging pump shall satisfy the flow path 1

requirements of Specification a.1.2.2.b OF a.1 .2.2.e .

         .4' With pressurizer pressure .:::. 1750 psia .                                                               .(

NOTE One ECCS subsystem charging pump shall satisfy the flow path requirements of Specification 3.1.2.2.a or 3.1.2.2.d. The second ECCS subsystem charging pump shall satisfy the flow path requirements of Specification 3.1.2.2.b or 3.1.2.2.e. ST. LUCIE- UNIT 1 3/4 5-3 Amendment No. ~ . ~. 44, .:+++,

L-2017-007

                                                                                                 .Attachment 3 Page 12 of 24 CONTAINMENT SYSTEMS CONTAINMENT AIR LOCKS LIMITING CONDITION FOR OPERATION 3.6.1.3      Each containment air lock shall be OPERABLE with :

a. Both doors closed except when the air lock is being used for normal transit entry and exit through the containment, then at least one air lock door shall be closed, and

b. An overall air lock leakage rate in accordance with the Containment Leakage Rate Testing Program.

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION:

a. With one containment air lock door inoperablef:

1. Maintain at least the OPERABLE air lock door closed and either restore the inoperable air lock door to OPERABLE status within 24 hours or lock the OPERABLE air lock door closed.

2. Operation may then continue until performance of the next required overall air lock leakage test provided that the OPERABLE air lock door is verified to be closed at least once per 31 days. in the affected air lock(s) and

3. Otherwise, be in at least HOT STANDBY within the next 6 hours a in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is no one or both applicable when entering ~TDOWN.

b. With the-containment air leek inoperable, except as the result of a inoperable air lock door, maintain at least one air lock door closed-;-restore the inoperable air lock to OPERABLE status within 24 hours r be in at least HOT STANDBY within the next 6 hours and in HOT SHUTD N within the following 6 hours.

SHUTDOWN. LCO 3.0.4.a is not applicable when entering OT r SURVEILLANCE REQUIREMENTS 4.6.1.3 Each containment air lock shall be demonstrated OPERABLE: If the inner air lock door is inoperable, passage through the OPERABLE outer air lock door is

~-----lpermitted to effect repairs to the inoperable inner air lock door. No more than one air lock door shall be open at any time.

ST. LUCIE- UNIT 1 3/4 6-10 Amendment No. ge, M-9, ~.

L-2017-007 Attachment 3 Page 13 of 24 CONTAINMENT SYSTEMS 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS CONTAINMENT SPRAY AND COOLING SYSTEMS LIMITING CONDITION FOR OPERATION 3.6.2.1 Two containment spray trains and two containment cooling trains shall be OPERABLE. APPLICABILITY: Containment Spray System: MODES 1, 2, and MODE 3 with Pressurizer Pressure~ 1750 psia. Containment Cooling System: MODES 1, 2, and 3. ACTION:

1. Modes 1 2 and 3 with Pressurizer Pressure ;:::: 1750 INSERT 2

a. With one containment spray train inoperabl e inoperable spray train to OPERABLE status within 72 hours, therwis be in MODE 3 ..-1 within the next 6 hours and in MODE 4 within the f lowing 54 hours.

b. With one containment cooling train inoperable, r tore the inoperable v' cooling train to OPERABLE status within 7 days; otherwise be in MODE 3 /1 within the next 6 hours and in MODE 4 within the following 6 hours.

c. With one containment spray train and one containment cooling train inoperable, concurrently implement ACTIONS a. and b. The completion intervals for ACTION a. and ACTION b. shall be tracked separately for each train starting from the time each train was discovered inoperable.

NOTE Action not applicable when second containment spray train intentionally made inoperable.

d. With two containment spray trains inoperable, within 1 hour verify TS 3.7.7, "Control Room Emergency Ventilation System," is met, and restore at least one containment spray train to OPERABLE status within 24 hours; otherwise, be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours. INSERT 2

e. With two containment cooling trains i perable, restore one cooling train to OPERABLE status within 72 hours, otherwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

f. With any combination of three or more trains inoperable, enter LCO 3.0.3 immediately.

2. Mode 3 with Pressurizer Pressure < 1750 psia:

a. With one containment cooling train inoperable, restore the inoperable cooling train to OPERABLE status within 72 hours; otherwise be in MODE 4 within the next 6 hours.

b. With two containment cooling trains inoperable, enter LCO 3.0.3 immediately.

ST. LUCIE- UNIT 1 3/4 6-15 Amendment No. W , ~ . ~ .

L-2017-007 Attachment 3 Page 14 of 24 CONTAINMENT SYSTEMS 3/4.6.3 CONTAINMENT ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.6.3.1 The containment isolation valves shall be OPERABLE: APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With one or more of the isolation valve(s) inoperable, either:

a. Restore the inoperable valve(s) to OPERABLE st

b. Isolate each affected penetration within 4 hours by u e of at least one deactivated automatic valve secured in the isolatio position, or

c. Isolate each affected penetration within 4 hours y use of at least one closed d.

manual valve or blind flange ; or Be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. t SURVEILLANCE REQUIREMENTS 4.6.3.1.1 The isolation valves shall be demonstrated OPERABLE prior to returning the valve to service after maintenance, repair or replacement work is performed on the valve or its associated actuator, control or power circuit by performance of the cycling test, and verification of isolation time. ST. LUCIE- UNIT 1 3/4 6-18 Amendment No. 00, 449, ~

L-2017-007 Attachment 3 Page f5 of 24 PLANT SYSTEMS AUXILIARY FEEDWATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7 .1.2 At least three independent steam generator auxiliary feedwater pumps and associated flow paths shall be OPERABLE with:

a. Two motor driven feedwater pumps, and

b. One feedwater pump capable of being powered from an OPERABLE steam supply system.

APPLICABILITY: MODES 1, 2 and 3. ACTION:

a. With one auxiliary feedwater pump inopera I , restore the auxiliary feedwater pump to OPERABLE status within 72 hours r be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

{

b. With two auxiliary feedwater pumps inoperable, be in at least HOT STAND BY within 6 hours and in HOT SHUTDOWN within the following 6 hours.

NOTE

LCO 3.0.3 and all other LCO Actions requiring MODE changes are suspended until one AFW pump is restored to OPERABLE status . C. With three auxiliary feedwater pumps inoperable, immediately initiate corrective action to restore at least one auxiliary feedwater pump to OPERABLE status.

d. LCO 3.0.4.b is not applicable.

SURVEILLANCE REQUIREMENTS 4.7.1.2 Each auxiliary feedwater pump shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

ST. LUCIE- UNIT 1 3/4 7-4 Amendment No. ~. 9G, 4-99, 6m,

~.~

L-2017-007 Attachment 3 Page 16 of 2'4 PLANT SYSTEMS MAIN STEAM LINE ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.7.1.5 Each main steam line isolation valve shall be OPERABLE. APPLICABILITY: MODES 1, 2 and 3. ACTION: INSERT 2 MODE 1 With one main steam line isolation valve inoperable, POWER OPERATION may continue provided th *noperable valve is either restored to OPERABLE status or closed within 4 hours; otherwise, be in 190T STANQ:.@Y within tpe next 6 hours

                                                                      .       ' --------4MODE 2               I MODES 2 -        With one or both main steam isolation valve(s) inoperable, subsequent operation in and 3            MODES 2 or 3 may prooeed provided the isolation valve(s) is (are) maintained olosed . Otherwise, be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDO'.N~l within the following 24 hours.

4.7.1.5 Each main steam line isolation valve that is open shall be demonstrated OPERABLE by verifying full closure within 6.0 seconds when tested pursuant to the lnservice Testing Program . With one or both main steam isolation valve(s) inoperable , subsequent operation in MODES 2 or 3 may continue provided:

1. The inoperable main steam isolation valves are closed within 8 hours, and

2. The inoperable main steam isolation valves are verified closed once per 7 days.

Otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 24 hours. ST. LUCIE- UNIT 1 3/4 7-9 Amendment No. 99, 444, ~.

L-2017-007 Attachment 3 Page 17 of 24 PLANT SYSTEMS 3/4.7.3 COMPONENT COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.3.1 At least two independent component cooling water loops shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: INSERT 1 With only one component cooling ter loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or be in at least HOT STAND BY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN . SURVEILLANCE REQUIREMENTS 4.7.3.1 At least two component cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual, power operated or automatic) servicing safety related equipment that is not locked, sealed or otherwise secured in position, is in its correct position.

b. In accordance with the Surveillance Frequency Control Program during shutdown by verifying that each automatic valve servicing safety related equipment actuates to its correct position on a Safety Injection Actuation Signal.

ST. LUCIE- UNIT 1 3/4 7-14 Amendment No. 00, ~. ~

L-2017-007 Attachment 3 Page 1 8" of 24 PLANT SYSTEMS 3/4.7.4 INTAKE COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.4.1 At least two independent intake cooling water loops shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. INSERT 1 ACTION: With only one intake oling water loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and in HOT { SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. SURVEILLANCE REQUIREMENTS 4.7.4.1 At least two intake cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual, power operated or automatic) ser\ticing safety related equipment that is not locked, sealed, or otherwise secured in position, is in its correct position.

b. In accordance with the Surveillance Frequency Control Program during shutdown by verifying that each automatic valve servicing safety related equipment actuates to its correct position on a Safety Injection Actuation signal.

ST. LUCIE- UNIT 1 3/4 7-16 Amendment No. W, ~. ~

L-2017-007 Attachment 3 Page 19 of 24-3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1 A.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.1 .1 As a minimum, the following A. C. electrical power sources shall be OPERABLE:

a. Two physically independent circuits between the offsite transmission network and the onsite Class 1E distribution system, and

b. Two separate and independent diesel generator sets each with :

1. Engine-mounted fuel tanks containing a minimum of 152 gallons of fuel ,

2. A separate fuel storage $ystem containing a minimum of 19,000 gallons of fuel, and

3. A separate fuel transfer pump.

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: INSERT 1

a. With one offsit circuit of 3.8.1 .1.a inoperable, except as provided in Action f.

below, demons rate the OPERABILITY of the remaining A. C. sources by performing Su eillance Requirement 4.8.1 .1.1.a within 1 hour and at least once per 8 ho thereafter. Restore the offsite circuit to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

b. With one diesel generator of 3.8.1.1 .b inoperable, demonstrate the OPERABILITY of the A. C. sources by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour and at least once per 8 hours thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system, an independently testable component, or preplanned preventative maintenance or testing , demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1 .2.a.4 within 8 hours, unless it can be confirmed that the cause of the inoperable EDG does not exist on the remaining EDG~ restore the diesel generator to OPERABLE status within 14 days r be in at least HOT STANDBY within the next 6 hours and in HOT SHUTD N within the following 6 hours. LCO 3.0.4.a is not applicable when enterin OT SHUTDOWN. Additionally, within 4 hours from the discovery of concurren *noperability of required redundant feature(s)

(including the steam driven a iliary feed pump in MODE 1, 2, and 3) , declare required feature(s) supported l:i the inoperable EDG inoperable if its redundant required feature(s) is inoperable. INSERT 1 NOTE If the absence of any common-cause failure cannot be confirmed , this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY ST. LUCIE- UNIT 1 3/4 8-1 Amendment No. 4@, ~ . ~. 4-+G, 4-W .~.~

L-2017-007 Attachment 3 Page 20 of 24 ELECTRICAL POWER SYSTEMS ACTION (continued)

c. With one offsite A.C . circuit and one diesel generator inoperable, demonstrate the OPERABILITY of the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1 .1.a within one hour and at least once per 8 hours thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system, an independently testable component, or preplan ned preventative maintenance or testing , demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1 .2.a.4 within 8 hours unless it can be confirmed that the cause of the inoperable EDG does not exist on the remaining EDG'\ Restor at least one of the inoperable sources to OPERABLE status within 12 hours or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. Restore the other A.C . power source (offsite circuit or diesel 1

generator) to OPERABLE status in accordance with the provisions of Section 3.8.1.1 ACTION Statement a or b, as appropriate, with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable A. C. power source. Additionally, within 4 hours from the discovery of concurrent inoperability of required redundant feature(s) (including the steam driven auxiliary feed pump in MODE 1, 2, and 3) , declare required feature(s) supported by the inoperable EDG inoperable if its redundant required feature(s) is inoperable.

                                                                                !INSERT 1    I

d. With two of the required offsite A. C. circuits inoperable, restorel -ne of the inoperable offsite sources to OPERABLE status within 24 hou~~~r be in at least HOT STANDBY within the next 6 hours. Following restoration of one offsite source, follow ACTION Statement a. with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable offsite A.C. circuit.

/ NOTE If the absence of any common-cause failure cannot be confirmed, this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY. ST. LUCIE - UNIT 1 3/4 8-2 Amendment No. 400, 4-4-2, ~ . 400,

L-2017-007 Attachment 3 Page 21 of 24 ELECTRICAL POWER SYSTEMS ACTION (continued)

e. With two of the above required diesel generators inoperable, demonstrate the OPERABILITY of two offsite A. C. circuits by performing Surveillance Requirement 4.8 .1.1 .1.a within 1 hour and at least once per 8 hours thereafter; restore one of the inoperable diesel generators to OPERABLE status within 2 hours or be in the at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when f

entering HOT SHUTDOWN. Following restoration of one diesel generator unit, follow ACTION Statement b. with the time requirement of that ACTION Statement based on the time of initial loss of the remaining inoperable diesel generator.

f. With one Unit 1 startup transformer (1A or 1B) inoperable and with a Unit 2 startup transformer (2A or 2B) connected to the same A or B offsite power circuit and administratively available to both units, then should Unit 2 require the use of the startup transformer administratively available to both units, Unit 1 shall demonstrate the OPERABILITY of the remaining A. C. sources by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour and at least once per 8 hours thereafter. Restore the inoperable startup transformer to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and COLD SHUTD N within the following 30 hours.

g. SURVEILLANCE REQUIREMENTS 4.8.1.1.1 Each of the above required independent circuits between the offsite transmission network and the onsite Class 1E distribution system shall be:

a. Determined OPERABLE in accordance with the Surveillance Frequency Control Program by verifying correct breaker alignments, indicated power availability; and

b. Demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by transferring (manually and automatically) unit power supply from the auxiliary transformer to the startup transformer.

4.8.1.1.2 Each diesel generator shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying fuel level in the engine-mounted fuel tank,

2. Verifying the fuel level in the fuel storage tank,

3. Verifying the fuel transfer pump can be started and transfers fuel from the storage system to the engine-mounted tank, ST. LUCIE - UNIT 1 3/4 8-3 Amendment No. 4-ro, 44:2, ~ .

                                                                           ~ . ~ .~

L-2017-007 Attachment 3 Page 22 of24 ELECTRICAL POWER SYSTEMS 3/4.8.2 ONSITE POWER DISTRIBUTION SYSTEMS A. C. DISTRIBUTION - OPERATING LIMITING CONDITION FOR OPERATION 3.8.2.1 The following A.C . electrical busses shall be OPERABLE and energized from sources of power other than the diesel generator sets: 4160 volt Emergency Bus 1A3 4160 volt Emergency Bus 1B3 480 volt Emergency Bus 1A2 480 volt Emergency Bus 1B2 480 volt Emergency MCC Busses 1A5, 1A6, 1A7 480 volt Emergency MCC Busses 1B5, 1B6, 1B7 120 volt A. C. Instrument Bus 1MA 120 volt A. C. Instrument Bus 1MB 120 volt A. C. Instrument Bus 1MC 120 volt A. C. Instrument Bus 1MD APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With less than the above complement of A.C. buss OPERABLE, restore the inoperable bus to OPERABLE status within 8 hours or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. SURVEILLANCE REQUIREMENTS 4.8.2.1 The specified A.C . busses shall be determined OPERABLE and energized from A.C. sources other than the diesel generators in accordance with the Surveillance y Frequency Control Program by verifying indicated power availability. /1 ST. LUCIE- UNIT 1 3/4 8-8 Amendment No. ~

L-2017-007 Attachment 3 Page 23 of 24 ELECTRICAL POWER SYSTEMS D.C. DISTRIBUTION - OPERATING LIMITING CONDITION FOR OPERATION 3.8.2.3 As a minimum the following D.C. electrical sources shall be OPERABLE:

a. 125-volt D.C. bus No. 1A, 125-volt Battery bank No. 1A and a full capacity charger.

b. 125-volt D.C. bus No. 1B, 125-volt Battery bank No. 1B and a full capacity charger.

APPLICABILITY: MODES 1, 2, 3 and 4. INSERT 1 ACTION:

a. With one of the required battery banks or busses inoperable, restor the inoperable battery bank or bus to OPERABLE status within 2 hours r be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

r

b. With one of the required full capacity chargers inoperable, demonstrate the OPERABILITY of its associated battery banks by performing Surveillance Requirement 4.8.2.3.2.a.1 within 1 hour, and at least once per 8 hours thereafter. If any Category A limit in Table 4.8-2 is not met, declare the battery inoperable.

SURVEILLAN CE REQUIREMENTS 4.8.2.3.1 Each D.C. bus train shall be determined OPERABLE and energized in accordance with the Surveillance Frequency Control Program by verifying indicated power availability. 4.8.2.3.2 Each 125-volt battery bank and charger shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that:

1. The parameters in Table 4.8-2 meet the Category A limits, and

2. The total battery terminal voltage is greater than or equal to 129-volts on float charge.

ST. LUCIE- UNIT 1 3/4 8-10 Amendment No . ~.~.~

L-2017-007 Attachment 3 Page 24 of24 ADMINISTRATIVE CONTROLS (continued)

o. Surveillance Frequency Control Program This program provides controls for Surveillance Frequencies. The program shall ensure that Surveillance Requirements specified in the Technical Specifications are performed at intervals sufficient to assure the associated Limiting Conditions for Operation are met.

a. The Surveillance Frequency Control Program shall contain a list of frequencies of those Surveillance Requirements for which the frequency is controlled by the program.

b. Changes to the frequencies listed in the Surveillance Frequency Control Program shall be made in accordance with NEI 04-10, "Risk-Informed Method for Control of Surveillance Frequencies," Revision 1.

c. The provisions of Surveillance Requirements 4.0.2 and 4.0.3 are applicable to the frequencies established in the Surveillance Frequency Control Program.

p. Snubber Testing Program This program conforms to the examination, testing and service life monitoring for dynamic restraints (snubbers) in accordance with 10 CFR 50.55a inservice inspection (lSI) requirements for supports. The program shall be in accordance with the following :

1. This program shall meet 10 CFR 50.55a(g) lSI requirements for supports.

2. The program shall meet the requirements for lSI of supports set forth in subsequent editions of the Code of Record and addenda of the American Society of Mechanical Engineers (ASME) Boiler and Pressure (BPV) Code and the ASME Code for Operation and Maintenance of Nuclear Power Plants (OM Code) that are incorporated by reference in 10 CFR 50.55a(b) subject to the conditions listed in 10 CFR 50.55a(b) and subject to Commission approval.

3. The program shall, as required by 10 CFR 50.55a(b)(3)(v), meet Subsection ISTA, "General Requirements" and Subsection ISTD, "Preservice and lnservice Examination and Testing of Dynamic Restraints (Snubbers) in Light-Water Reactor Nuclear Power Plants".

4. The 120-month program updates shall be made in accordance with 10 CFR 50.55a(g)(4) , 10 CFR 50.55a(g)(3)(v) and 10 CFR 50.55a(b) (including 10 CFR 50.55a(b)(3)(v)) subject to the conditions listed therein .

jiNSERT 3 I L ST. LUCIE - UNIT 1 6-15h Amendment No. 2G+, ~ . ~

L-2017-007 ATTACHMENT 4 St. Lucie Unit 2 Markup of the Technical Specification Pages

L-2017-007 Attachment 4 Page 1 of 31 INSERT1 or in accordance with the Risk Informed Completion Time Program, INSERT 2 or in accordance with the Risk Informed Completion Time Program INSERT 3

r. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09, "Risk-Informed Technical Specifications Initiative 4b: Risk-Managed Technical Specifications (RMTS) Guidelines," Revision 0-A, November 2006. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2;

c. When a RICT is being used, any plant configuration change within the scope of the Risk Informed Completion Time Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours after the plant configuration change, whichever is less.

3. Revising the RICT is not required If the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

L-2017-007 Attachment 4 Page 2 of 31 REACTIVITY CONTROL SYSTEMS FLOW PATHS- OPERATING LIMITING CONDITION FOR OPERATION 3.1.2.2 At least two of the following three boron injection flow paths shall be OPERABLE:

a. One flow path from the boric acid makeup tank(s) with the tank meeting Specification 3.1.2.8 part a) or b), via a boric acid makeup pump through a charging pump to the Reactor Coolant System.

b. One flow path from the boric acid makeup tank(s) with the tank meeting Specification 3.1.2.8 part a) or b), via a gravity feed valve through a charging pump to the Reactor Coolant System.

c. The flow path from the refueling water storage tank via a charging pump to the Reactor Coolant System. ~

OR At least two of the following three boron injection flow paths shall be OPERABLE:

d. One flow path from each boric acid makeup tank with the combined tank contents meeting Specification 3.1 .2.8 c), via both boric acid makeup pumps through a charging pump to the Reactor Coolant System.

e. One flow path from each boric acid makeup tank with the combined tank .{

contents meeting Specification 3.1.2.8 c) , via both gravity feed valves through a charging pump to the Reactor Coolant System.

f. The flow path from the refueling water storage tank, via a charging pump to the ,r Reactor Coolant System. ~

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With only one of the above required boron injection flow paths to the Reactor Coolant System OPERABLE , restore at least two boron injection flow paths to the Reactor Coolant System to OPERABLE status within 72 hours or be in at least HOT STANDBY and borated to a SHUTDOWN MARGIN equivalent to its COLR limit at 200 °F within the next 6 hours; restore at least two flow paths to OPERABLE status within the next 7 days or be in COLD SHUTDOWN within the next 30 hours. ST. LUCIE- UNIT 2 3/4 1-8 Amendment No. 8, 2oe, 4G, -We,

L-2017-007 Attachment 4 Page 3 of 31 TABLE 3.3-1 (Continued) TABLE NOTATION

With the protective system trip breakers in the closed position , the CEA drive system capable of CEA withdrawal , and fuel in the reactor vessel.

(a) Trip may be manually bypassed below 0.5% of RATED THERMAL POWER in conjunction with (d) below; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is greater than or equal to 0.5% of RATED THERMAL POWER. (b) Trip may be manually bypassed below 705 psig; bypass shall be automatically removed at or above 705 psig. (c) Trip may be bypassed below 15% of RATED THERMAL POWER; bypass shall be automatically removed when Power Range Neutron Flux power is greater than or equal to 15% of RATED THERMAL POWER. (d) Trip may be bypassed during testing pursuant to Special Test Exception 3.10.3. 4 (e) Trip may be bypassed below 10- % and above 15% of RATED THERMAL POWER ; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is ~ 10 % 4 and Power Range Neutron Flux power,::: 15% of RATED THERMAL POWER. (f) Each channel shall be comprised of two trip breakers; actual trip logic shall be one-out-of-two taken twice. (g) There shall be at least two decades of overlap between the Wide Range Logarithmic Neutron Flux Monitoring Channels and the Power Range Neutron Flux Monitoring Channels. ACTION STATEMENTS ACTION 1 - With the number of channels OPERABLE one less than required by the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 48 hour or be in at least HOT STAND BY within the next 6 hours and/or open the prate ive system trip breakers. INSERT 1 ST. LUCIE- UNIT 2 3/4 3-3 Amendment No. 00, 479

L-2017-007 Attachment 4 Page 4 of 31 TABLE 3.3-3 ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

1. SAFETY INJECTION (SIAS)

a. Manual (Trip Buttons) 2 1 2 1, 2, 3, 4 12

b. Containment Pressure - 4 2 3 1, 2, 3 13, 14 ~

High

c. Pressurizer Pressure - 4 2 3 1, 2, 3(a) 13, 14 {"

Low ~delete hyphen I

d. Automatic Actuation- 2 1 2 1,2,3,4 12 Logic

2. CONTAINMENT SPRAY (CSAS)

a. Manual (Trip Buttons) 2 1 2 1,2,3,4 12

b. Containment Pressure- 4 2 3 1(b), 2(b), 3(b)

High-High

c. Automatic Actuation 2 1 2 1,2, 3,4 12 Logic

3. CONTAINMENT ISOLATION (CIAS)

a. Manual CIAS (Trip 2 1 2 1,2, 3,4 12 Buttons)

b. Safety Injection (SIAS) See Functional Unit 1 for all Safety Injection Initiating Functions and Requirements

c. Containment Pressure - 4 2 3 1,2, 3 13, 14 -+-

High

d. Containment Radiation- 4 2 3 1,2,3 13, 14 t High

e. Automatic Actuation 2 1 2 1,2,3,4 12 Logic ST. LUCIE - UNIT 2 3/4 3-12 Amendment No. ~. 4-7-G

L-2017-007 Attachment 4 Page 5 of 31 TABLE 3.3-3 (Continued) ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

4. MAIN STEAM LINE ISOLATION (MSIS)

a. Manual (Trip Buttons) 2 1 2 1, 2, 3 16

b. Steam Generator 4/steam 2/steam 3/steam generator generator 1, 2, 3(c) 13, 14 ,1 Pressure- Low generator

c. Containment Pressure -

High 4 2 3 1' 2, 3 13, 14 .r

d. Automatic Actuation Logic 2 1 2 1, 2, 3 12

5. CONTAINMENT SUMP RECIRCULATION (RAS)

a. Manual RAS (Trip Buttons) 2 1 2 1,2, 3,4 12

b. Refueling Water Storage 4 2 3 1' 2, 3 19 Tank-Low ~

c. Automatic Actuation Logic IEditorial I 2 1 2 1,2, 3 12 ST. LUCIE- UNIT 2 3/4 3-13 Amendment No . W, ~. 47G

L-2017-007 Attachment 4 Page 6 of 31 TABLE 3.3-3 (Continued) ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

6. LOSS OF POWER (LOV)

a. (1) 4.16 kV Emergency Bus Undervoltage (Loss of Voltage) 2/Bus 2/Bus 1/Bus 1, 2, 3 17 (2) 480 V Emergency Bus 3/Bus 2/Bus 2/Bus 1' 2, 3 17 Undervoltage (Loss of Voltage)

b. (1) 4.16 kV Emergency Bus 3/Bus 2/Bus 2/Bus 1, 2, 3 17 Undervoltage (Degraded Voltage)

(2) 480 V Emergency Bus 3/Bus 2/Bus 2/Bus 1,2, 3 17 Undervoltage (Degraded Voltage)

7. AUXILIARY FEEDWATER (AFAS)

a. Manual (Trip Buttons) 4/SG 2/SG 4/SG 1' 2, 3 15

b. Automatic Actuation Logic 4/SG 2/SG 3/SG 1, 2, 3 15

c. SG Level (2A/2B) - Low 4/SG 2/SG 3/SG 1' 2, 3 20a,20b,~ ~

8. AUXILIARY FEEDWATER ISOLATION

~~

a. SG 2A - SG 2B Differential Pressure 4/SG 2/SG 3/SG 1, 2, 3 20a, 20b, ~/ J

b. Feedwater Header 2A- 2B Differential Pressure 4/SG 2/SG 3/SG 1' 2, 3 20a, ~ ~ ~

ST. LUCIE- UNIT 2 3/4 3-14 Amendment No. ~. +9, ~. 479

L-2017-007 Attachment4 Page 7 of 31 TABLE 3.3-3 (Continued) TABLE NOTATION (a) Trip function may be bypassed in this MODE when pressurizer pressure is less than 1836 psia; bypass shall be automatically removed when pressurizer pressure is greater than or equal to 1836 psia. (b) An SIAS signal is first necessary to enable CSAS logic. (c) Trip function may be bypassed in this MODE below 700 psia; bypass shall be automatically removed at or above 700 psia. INSERT 1 ACTION OF STATEMENTS ACTION 12 - With the number o PERABLE channels one less than the Total Number of Channels estore the inoperable channel to OPERABLE status within 48 hours or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. ACTION 13 - With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may continue provided the inoperable channel is placed in the bypassed or tripped condition within 1 hour. The channel shall be returned to OPERABLE status no later than during the next COLD SHUTDOWN. With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below. Process Measurement Circuit Functional Unit Bypassed

1. Containment Pressure - Containment Pressure - High (SIAS, CIAS, CSAS)

Containment Pressure- High (RPS)

2. Steam Generator Pressure- Steam Generator Pressure - Low (MSIS)

AFAS-1 and AFAS-2 (AFAS) Thermal Margin/Low Pressure (RPS) Steam Generator Pressure - Low (RPS)

3. Steam Generator Level - Steam Generator Level - Low (RPS)

If SG-2A, then AFAS-1 (AFAS) If SG-2B, then AFAS-2 (AFAS)

4. Pressurizer Pressure- Pressurizer Pressure- High (RPS)

Pressurizer Pressure- Low (SIAS) Thermal Margin/Low Pressure (RPS) ST. LUCIE - UNIT 2 3/4 3-15 Amendment No. ;m, N, 449, 4+9

L-2017-007 Attachment 4 Page 8 of 31 TABLE 3.3-3 (Continued) TABLE NOTATION ACTION 14 - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, STARTUP and/or POWER OPERATION may continue provided the following conditions are satisfied :

a. Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition within 1 hour.

b. All functional units affected by the bypassed/tripped channel shall also be placed in the bypassed/tripped condition as listed below.

Process Measurement Circuit Functional Unit Bypassed/Tripped

1. Containment Pressure - Containment Pressure- High (SIAS, CIAS, CSAS)

Containment Pressure - High (RPS)

2. Steam Generator Pressure - Steam Generator Pressure - Low (MSIS)

AFAS-1 and AFAS-2 (AFAS) Thermal Margin/Low Pressure (RPS) Steam Generator Pressure- Low (RPS)

3. Steam Generator Level - Steam Generator Level - Low (RPS)

If SG-2A, then AFAS-1 (AFAS) If SG-2B, then AFAS-2 (AFAS)

4. Pressurizer Pressure - Pressurizer Pressure- High (RPS)

Pressurizer Pressure- Low (SIAS) INSERT 1 Thermal Margin/Low Pressure (RPS) ACTION 15 - With the number of 0 ERABLE channels one less than the Total Number of Channels store the inoperable channels to OPERABLE status within 48 hours or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. ACTION 16 - With the number of OPERABLE channels one less than the Total Number of Channels , restore the inoperable channel to OPERABLE status within 48 hours or declare the associated valve inoperable and take the ACTION required by Specification 3.7.1.5. ACTION 17 - With the number of OPERABLE Channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours or place the inoperable channel in the tripped condition and rify that the Minimum Channels OPERABLE requirement is demon trated within 1 hour; one additional channel may be bypassed for p to 2 hours for surveillance testing per Specification 4.3.2.1. INSERT 1 ST. LUCIE- UNIT 2 3/4 3-16 Amendment No. ~. n, 4-84

L-2017-007 Attachment 4 Page 9 of 31 TABLE 3.3-3 (Continued) TABLE NOTATION 11r1 ACTION4-S- With the number of OPERABLE Channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied :

a. The inoperable channel is placed in either the bypassed or tripped condition and the Minimum Channels OPERABLE requirement is demonstrated within 1 hour. If the inoperable channel can not be restored to OPERABLE status within 48 hours, then place the inoperable channel in the tripped condition.

b. With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed in ACTION 13.

!ACTION 188 -1 67 With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel has been placed in the tripped condition within 1 hour. Restore one of the inoperable channels to OPERABLE status within 48 hours or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN ithin the following 6 hours. ACTION 19 - With the number of OPERABLE Channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied:

a. Within 1 hour the inoperable channel is placed in either the bypassed or tripped condition. If OPERABILITY can notcannot be restored within 48 hours be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. 1NSERT 2

b. The Minimum Channels OPERABLE requirement is met; however, one additional channel may be bypassed for up to 2 hours for surveillance testing per Specification 4.3.2.1.

ST. LUCIE- UNIT 2 3/4 3-16a Amendment No. 43:2

L-2017-007 Attachment 4 Page 10 of 31 TABLE 3.3-3 (Continued) TABLE NOTATION ACTION 20 - With the number of channels OPERABLE one less than the Total Number of Channels, operation may proceed provided the following conditions are t satisfied:

a. The inoperable channel is placed in either the bypassea or tripped condition within 1 hour. If an inoperable SG level channel can not be restored to OPERABLE status within 48 hours, then AFAS-1 or AFAS-2 as applicable in the inoperable channel shall be placed in the bypassed condition.

If an inoperable SG DP or FW Header DP channel can not be restored to OPERABLE status within 48 hours, then both AF AS-1 and AF AS-2 in the inoperable channel shall be placed in the bypassed condition. The channel -( shall be returned to OPERABLE status no later than during the next COLD SHUTDOWN. b With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed in ACTION 13. !ACTION 21 -1 &. With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel placed in the tripped condition within 1 hour. Restore one of the inoperable channels to OPERABLE status within 48 hours or be in at least HOT STANDBY within 6 hours and in HOT SHUTD WN within the following 6 hours. ST. LUCIE - UNIT 2 3/4 3-16b Amendment No. 4J2, 449

L-2017-007 Attachment 4 Page 11 of 31 TABLE 3.3-4 (Continued) ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION TRIP VALUES FUNCTIONAL UNIT TRIP VALUE ALLOWABLE VALUES

5. CONTAINMEN T SUMP RECIRCULATION (RAS)

a. Manual RAS (Trip Buttons) Not Applicable Not Applicable

b. Refueling Water Storage Tank- Low 5.67 feet 4.62 feet to 6.24 feet

                               ~                         above tank bottom           above tank bottom

c. Automatic Actuation Logic Not Applicable Not Applicable

6. LOSS OF POWER

a. (1) 4.16 kV Emergency Bus Undervoltage ~ 3120 volts ~ 3120 volts (Loss of Voltage)

(2) 480 V Emergency Bus Undervoltage ~ 360 volts ~ 360 volts (Loss of Voltage)

b. (1) 4.16 kV Emergency Bus Undervoltage (Degraded Voltage)

(2) 480 V Emergency Bus Undervoltage

                                                             ~ 3848 volts with < 10-second time delay
                                                                                         ~ 3848 volts with < 10-second time delay              t
                                                              ~  432 volts                ~ 432 volts (Degraded Voltage)

7. AUXILIARY FEEDWATER (AFAS)

a. Manual (Trip Buttons) Not Applicable Not Applicable

b. Automatic Actuation Logic Not Applicable Not Applicable

c. SG 2A & 2B Level Low > 19.0% > 18.0%

8. AUXILIARY FEEDWATER ISOLATION

a. Steam Generator ilP- High ~ 275 psid 89.2 to 281 psid

b. Feedwater Header ilP- High ~ 150.0 psid 56.0 to 157.5 psid 3/4 3-18 Amendment No. ~, ~ , -79 ST. LUCIE- UNIT 2

L-2017-007 Attachment 4 Page 12 of 31 TABLE 4.3-2 ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION SURVEILLANCE REQUIREMENTS CHANNEL MODES FOR WHICH FUNCTIONAL CHANNEL CHANNEL FUNCTIONAL SURVEILLANCE UNIT CHECK CALIBRATION TEST IS REQUIRED

1. SAFETY INJECTION (SIAS)

a. Manual (Trip Buttons) N.A. N.A. SFCP 1, 2, 3,4 i

b. Containment Pressure- High SFCP SFCP SFCP 1,2, 3

c. Pressurizer Pressure - Low SFCP SFCP SFCP 1,2,3

d. Automatic Actuation Logic N.A. N.A. SFCP(1), 1, 2, 3,4 SFCP(3)

2. CONTAINMENT SPRAY (CSAS) 1

a. Manual (Trip Buttons) N.A. N.A. SFCP 1, 2,3,4

b. Containment Pressure - High-High SFCP SFCP SFCP 1' 2, 3

c. Automatic Actuation Logic N.A. N.A. SFCP(1), 1, 2,3, 4 SFCP(3)

3. CONTAINMENT ISOLATION (CIAS)

a. Manual CIAS (Trip Buttons) N.A. N.A. SFCP 1,2, 3,4

b. Safety Injection SIAS N.A. N.A. SFCP 1, 2, 3, 4

c. Containment Pressure- High SFCP SFCP SFCP 1' 2, 3

d. Containment Radiation- High SFCP SFCP SFCP 1' 2, 3

e. Automatic Actuation Logic SFCP(1),

N.A. N.A. 1, 2, 3, 4 SFCP(3)

4. MAIN STEAM LINE ISOLATION N.A. N.A. SFCP 1, 2, 3 t

a. Manual (Trip Buttons)

b. Steam Generator Pressure- Low SFCP SFCP SFCP 1' 2, 3

c. Containment Pressure - High SFCP SFCP SFCP 1,2,3

d. Automatic Actuation Logic SFCP(1) ,

N.A. N.A. 1,2,3,4 SFCP(3)

5. CONTAINMENT SUMP RECIRCULATION (RAS) i

a. Manual RAS (Trip Buttons) N.A. N.A. SFCP N.A.

b. Refueling Water Storage Tank- Low SFCP SFCP SFCP 1, 2, 3

c. Automatic Actuation Logic~ SFCP(1),

N.A. N.A. 1, 2, 3 SFCP(3) I ST. LUCIE- UNIT 2 !editorial I 3/4 3-22 Amendment No. 00, 4+3

L-2017-007 Attachment 4 Page 13 of 31 TABLE 3.3-10 ACCIDENT MONITORING INSTRUMENTATION REQUIRED NUMBER MINIMUM CHANNELS INSTRUMENT OF CHANNELS OPERABLE

1. Containment Pressure 2 1 2 1

2. Reactor Coolant Outlet Temperature- T Hot (Wide Range) ,r

3. Reactor Coolant Inlet Temperature- T Cold 2 (Wide Range)

Reactor Coolant Pressure- Wide Range 2 1 4.

5. Pressurizer Water Level 2 1

6. Steam Generator Pressure 2/steam generator 1/steam generator

7. Steam Generator Water Level- Narrow Range 1/steam generator 1/steam generator

8. Steam Generator Water Level -Wide Range 1/steam generator* 1/steam generator*

9. Refueling Water Storage;!_ank Water Level , . . 2 1 ed1tonal 1/pump* 1/pump*

10. Auxiliary Feedwater Flow Rate (Each pump)

11. Reactor Cooling System Subcooling Margin Monitor 2 1

12. PORV Position/Flow Indicator 2/valve*** 1/valve**

13. PORV Block Valve Position Indicator 1/valve** 1/valve**

14. Safety Valve Position/Flow Indicator 1/valve*** 1/valve***

15. Containment Sump Water Level (Narrow Range) 1**** 1****

16. Containment Water Level (Wide Range) 2 1

17. lncore Thermocouples 4/core quadrant 2/core quadrant

18. Reactor Vessel Level Monitoring System 2***** 1*****

These corresponding instruments may be substituted for each other.
- Not required if the PORV block valve is shut and power is removed from the operator.
  - If not available, monitor the quench tank pressure, level and temperature, and each safety valve/PORV discharge piping temperature at least once every 12 hours.
    - The non-safety grade containment sump water level instrument may be substituted.
      - Definition of OPERABLE: A channel consists of eight (8) sensors in a probe of which four (4) sensors must be OPERABLE.

ST. LUCIE- UNIT 2 3/4 3-42 Amendment No. ~. 4-9, +G9

L-2017-007 Attachment 4 Page 14 of 31 REACTOR COOLANT SYSTEM OPERATING LIMITING CONDITION FOR OPERATION ~.4.2.2 All pressurizer code safety valves shall be OPERABLE with a lift setting of

               ~ 2410.3 psig and~ 2560.3 psig!

APPLICABILITY: MODES 1, 2, 3, and 4 with all RCS cold leg temperatures> 230°F. ACTION:

a. With one pressurizer code safety valve inoperable, either restore the inoperable valve to OPERABLE status within 15 minutes\8[ be in HOT STANDBY within 6 hours and in HOT SHUTDOWN withirl lthe next 6 hours.

                                                                           !INSERT 11

b. With two or more pressurizer code safety valves inoperable, be in HOT STAND BY within 6 hours and in HOT SHUTDOWN with all RCS cold leg temperatures at~ 230°F within the next 6 hours.

SURVEILLANCE REQUIREMENTS 4.4.2.2 Verify each pressurizer code safety valve is OPERABLE in accordance with the lnservice Testing Program. Following testing, as-left lift settings shall be within+/- 1% of 2500 psia. ritormat change I

NOTE The lift setting pressure shall correspond to ambient conditions of the valve at nominal operating temperature and pressure. ST. LUCIE- UNIT 2 3/4 4-8 Amendment No. 94-, 4-4-G, ~

L-2017-007 Attachment 4 Page15of31 REACTOR COOLANT SYSTEM 3/4.4.4 PORV BLOCK VALVES LIMITING CONDITION FOR OPERATION 3.4.4 Each Power Operated Relief Valve (PORV) Block valve shall be OPERABLE. No more than one block valve shall be open at any one time . APPLICABILI TY: MODES 1, 2 and 3. ACTION: ~

a. With one or more block valve(s) inoperable, within 1 hour either restore the block valve(s) to OPERABLE status or close the block valve(s) and remove power from the block valve(s); otherwise, be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

b. With both block valves open, close one block valve within 1 hour, otherwise be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

SURVEILLAN CE REQUIREMENTS 4.4.4 Each block valve shall be demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by operating the valve through one complete cycle of full travel unless the block valve is closed with power removed in order to meet the requirements of Action a. or b. above. ST. LUCIE- UNIT 2 3/4 4-10 Amendment No. ~. 46, 4-m, ~

L-2017-007 Attachment 4 Page 16 of 31 3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3/4.5.1 SAFETY INJECTION TANKS (SIT) LIMITING CONDITION FOR OPERATION 3.5.1 Each Reactor Coolant System safety injection tank shall be OPERABLE with:

a. The isolation valve open,

b. A contained borated water volume of between 1420 and 1556 cubic feet,

c. A boron concentration of between 1900 and 2200 ppm of boron , and

d. A nitrogen cover-pressure of between 500 and 650 psig.

APPLICABILITY: MODES 1, 2 and 3'\ lwith pressurizer pressure .:::_ 1750 psi a. ACTION:

a. With one SIT inoperable due to boron concentration not within limits, or due to an inability to verify the required water volume or nitrogen cover-pressure, restore the inoperable SIT to OPERABLE status with 72 hours; otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. INSERT 2

b. With one SIT inoperable due to reasons other than those stated i restore the inoperable SIT to OPERABLE status within 24 hours; therwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

SURVEILLANCE REQUIREMENTS Each safety injection tank shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying that the borated water volume and nitrogen cover-pressure in the tanks are within their limits, and

2. Verifying that each safety injection tank isolation valve is open. in MODE 3 With pressuriz:er pressure greater than b~~q:~llo 1750 psia. When essurizer pres:~~~ is less than 1750 psia, at least three safety injection tanks shall be OPERABLE, each with a minimum pressure of 235 psig and a maximum pressure of 650 psig and a contained water volume of between 1250 and 1556 cubic feet with a boron concentration of between 1900 and 2200 ppm of boron. With all four safety injection tanks OPERABLE, each tank shall have a minimum pressure of 235 psig and a maximum pressure of 650 psig and a contained water volume of between 833 and 1556 cubic feet with a boron concentration of between 1900 and 2200 ppm of boron.

ST. LUCIE- UNIT 2 3/4 5-1 Amendment No. 4G, M , W, ~.

                                                                             ~.4-73

L-2017-007 Attachment 4 Page 17 of 31 EMERGENCY CORE COOLING SYSTEMS 3/4.5.2 ECCS SUBSYSTEMS - OPERATING LIMITING CONDITION FOR OPERATION

3.5.2 Two independent Emergency Core Cooling System (ECCS) subsystems shall be OPERABLE with each subsystem comprised of:

a. One OPERABLE high pressure safety injection pump,

b. One OPERABLE low pressure safety injection pump, and

c. An independent OPERABLE flow path capable of taking suction from the

'-lto_r_m_a_t_c_o_r_r_e-ct...,..io-n'h refueling water tank on a Safety Injection Actuation Signal and automatically transferring suction to the containment sump on a Recirculation Actuation Signal, and

d. One OPERABLE charging pump~

v;--ltormat change I APPLICABILITY: MODES 1, 2, and 3;'.,. with pressurizer pressure : : : 1750 psia. ACTION:

a. 1. With one ECCS subsystem inoperable only because its associated LPSI train is inoperable, restore the inoperable subsystem to OPERABLE status within 7 day~?r be in at least HOT STANDBY within the next 6 hours and in HOI ]'SHUTDOWN within the following 6 hours.

                                                              !INSERT 1 1

2. With one ECCS subsystem inoperable for reasons other than condition a.1., restore the inoperable subsystem to OPERABLE status within 72 hour~r be in at least HOT STANDBY within the next 6 hours and in HOT SI-JJjTDOWN within the following 6 hours.

                                                 !INSERT 11

b. In the event the ECCS is actuated and injects water into the Reactor Coolant System, a Special Report shall be prepared and submitted to the Commission pursuant to Specification 6.9.2 within 90 days describing the circumstances of the actuation and the total accumulated actuation cycles to date. The current value of the usage factor for each affected safety injection nozzle shall be provided in this Special Report whenever its value exceeds 0.70.

NOTE

       ,__/---! One ECCS              subsystem     charging   pump  shall satisfy the flow path requirements of Specification 3.1.2.2.a           or 3.1.2.2.d. The second ECCS subsystem charging pump shall satisfy the flow path requirements             of Specification  3.1.2.2.b or 3.1 .2.2.e.
             -F1 With pressurizer pressure greater than or equal to 1750 psia.
                                                                                                          ~format change I ST. LUCIE- UNIT 2                                           3/4 5-3                   Amendment No. 400, 44-9, ~

L-2017-007 Attachment 4 Page 18 of 31 CONTAINMENT SYSTEMS CONTAINMENT AIR LOCKS LIMITING CONDITION FOR OPERATION 3.6 .1.3 Each containment air lock shall be OPERABLE with:

a. Both doors closed except when the air lock is being used for nGlrmal transit entry and exit through the containment, then at least one air lock door shall be closed, and

b. An overall air lock leakage rate in accordance with the Containment Leakage Rate Testing Program.

APPLICABILITY: MODES 1, 2, 3, and 4. ACTION:

a. With one containment air lock door inoperabl~

1. Maintain at least the OPERABLE air lock door closed and either restore the inoperable air lock door to OPERABLE status within 24 hours or lock the OPERABLE air lock door closed.

2. Operation may then continue until performance of the next required overall air lock leakage test provided that the OPERABLE air lock door is verified to be locked closed at least once per 31 dp.u.>!.;-*--:-:---,--,-..,..-~-,---co in the affected air lock(s) and

3. Otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not

  ~                      applicable when entering H~OWN.
  ~~                                               ~

b. With tl=te containment air ~Inoperable, except as the result of an inoperable air lock door, maintain at least one air lock door closed;- estore the inoperable air lock to OPERABLE status within 24 hour et= be in at least HOT STANDBY within the next 6 hours and in HOT SHUT within the following 6 hours. LCO 3.0.4.a is not applicable when enten g HOT SHUTDOWN.

INSERT 2 ; otherwise, NOTE If the inner air lock door is inoperable, passage through the OPERABLE outer air lock door is permitted to effect repairs to the inoperable inner air lock door. No more than one airlock door shall be open at any time. ST. LUCIE- UNIT 2 3/4 6-9 Amendment No. ~. gg, 4-+G, 484

L-2017-007 Attachment 4 Page 19 of 31 CONTAINMENT SYSTEMS CONTAINMENT VENTILATION SYSTEM LIMITING CONDITION FOR OPERATION 3.6.1. 7 Each containment purge supply and exhaust isolation valve shall be OPERABLE and :

a. Each 48-inch containment purge supply and exhaust isolation valve shall be sealed closed.

b. The 8-inch containment purge supply and exhaust isolation valves may be open for purging and/or venting as required for safety related purposes such as:

1. Maintaining containment pressure within the limits of Specification 3.6.1.4.

2. Reducing containment atmosphere airborne radioactivity and/or improv-ing air quality to an acceptable level for containment access.

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION:

a. With a 48-inch containment purge supply and/or exhaust isolation valve(s) open or not sealed closed , close and/or seal close the open valve(s) or isolate the penetration(s) within 4 hours,; otherwise be in at least HOT STANDBY within the next 6 hours an COLD SHUTDOWN within the following 30 hours. INSERT 2

b. With an 8-inch containment purge supply and/or exhaust isolation valve(s) open for reasons other than those stated in Specification 3.6.1.7.b, close the open 8-inch valve(s) or isolate the penetration(s) within 4 hours, ;

otherwise be in at least HOT STANDBY within the next 6 hours an COLD t SHUTDOWN within the foil . INSERT 2 INSERT 2

c. With a containment purge supp y an ore haust isolation valve(s) having a measured leakage rate exceeding the r its of Surveillance Requirements 4.6.1.7.3 and/or 4.6.1.7.4, within 24 hours either restore the inoperable valve(s) to OPERABLE status or isolate the affected penetration flow path by use of at least one closed and de-activated automatic valve with resilient seals or blind flange ,

verify the affected penetration flowpath is isolated , and perform Surveillance Requirement 4.6.1.7.3 or 4.6.1.7.4 for resilient seated valves closed to isolate the penetration flowpath , otherwise be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

1. Closed and de-activated automatic valve(s) with resilient seals used to isolate the penetration flowpath(s) shall be tested in accordance with either Surveillance Requirement 4.6.1 .7.3 for 48-inch valves at least once per 6 months or Surveillance Requirement 4.6.1.7.4 for 8-inch valves at least once per 92 days. insert "following isolation"

2. Verify/ the affected penetration flowpath is isolated once per 31 day for isolation devices outside containment and prior to entering MODE 4 from MODE 5 for isolation devices inside containment if not performed within the previous 92 days. \Viformat change 1

/ NOTE y Verification of isolation devices by administrative means is acceptable when they are located in "I high rad iation areas or they are locked, sealed , or otherwise secured by administrative means. ST. LUCIE - UNIT 2 3/4 6-14 Amendment No. ~. :W, ~

L-2017-007 Attachment 4 Page 20 of 31 CONTAINMENT SYSTEMS 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS CONTAINMENT SPRAY AND COOLING SYSTEMS LIMITING CONDITION FOR OPERATION 3.6.2.1 Two containment spray trains and two containment cooling trains shall be OPERABLE. APPLICABILITY: Containment Spray System: MODES 1, 2, and MODE 3 with Pressurizer Pressure ~ 1750 psia. Containment Cooling System: MODES 1, 2, and 3. ACTION:

1. Modes 1, 2, and 3 with Pressurizer Pressure ?: 1750 psia : INSERT 2

a. With one containment spray train inoperabl e inoperable spray train to OPERABLE status within 72 hours; otherwis be in MODE 3 )I' within the next 6 hours and in MODE 4 within the fa owing 54 hours.

b. With one containment cooling train inoperable, r tore the inoperable cooling train to OPERABLE status within 7 days, otherwise be in MODE 3 }

within the next 6 hours and in MODE 4 within the following 6 hours.

c. With one containment spray train and one containment cooling train inoperable, concurrently implement ACTIONS a. and b. The completion intervals for ACTION a. and ACTION b. shall be tracked separately for each train starting from the time each train was discovered inoperable.

NOTE Action not applicable when second containment spray train intentionally made inoperable.

d. With two containment spray trains inoperable, within 1 hour verify TS 3.7.7, "CREACS," is met, and restore at least one containment spray train to OPERABLE status within 24 hours; otherwise, be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours. INSERT 2

e. With two containment cooling trains ino er , estore one cooling train to OPERABLE status within 72 hours; erwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

f. With any combination of three or more trains inoperable, enter LCO 3.0.3 immediately.

2. Mode 3 with Pressurizer Pressure < 1750 psia :

a. With one containment cooling train inoperable, restore the inoperable cooling train to OPERABLE status within 72 hours; otherwise be in MODE 4 within the next 6 hours.

b. With two containment cooling trains inoperable, enter LCO 3.0.3 immediately.

ST. LUCIE - UNIT 2 3/4 6-15 Amendment No. ~. +G, 4++-, 478

L-2017-007 Attachment 4 Page 21 of 31 CONTAINMENT SYSTEMS 3/4.6.3 CONTAINMENT ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.6.3 The containment isolation valves shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With one or more of containment isolation valve(s) inoperable, maintain at least one isolation valve OPERABLE in each affected penetration that is open and either:

a. Restore the inoperable valve(s) to OPERABLE status within 4 hour

b. Isolate each affected penetration within 4 hours deactivated automatic valve secured in the isola 1

c. Isolate each affected penetration within 4 hours manual valve or blind flange; or

d. Be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN {

within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. SURVEILLANCE REQUIREMENTS 4.6.3.1 The containment isolation valves shall be demonstrated OPERABLE prior to returning the valve to service after maintenance, repair or replacement work is performed on the valve or its associated actuator, control or power circuit by performance of a cycling test and verification of isolation time. ST. LUCIE- UNIT 2 3/4 6-19 Amendment No. 8&, 484

L-201 7-007 Attachment 4 Page 22 of 31 PLANT SYSTEMS AUXILIARY FEEDWATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.1.2 At least three independent steam generator auxiliary feedwater pumps and associated flow paths shall be OPERABLE with:

a. Two feedwater pumps , each capable of being powered from separate OPERABLE emergency busses , and

b. One feedwater pump capable of being powered from an OPERABLE steam supply system.

APPLICABILITY: MODES 1, 2, and 3. ACTION: INSERT 1

a. With one auxiliary feedwater pump inopera , restore the auxiliary feedwater pump to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. With two auxiliary feedwater pumps inoperable, be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours.

NOTE LCO 3.0.3 and all other LCO Actions requiring MODE changes are suspended until one AFW ump is restored to OPERABLE status.

c. With three auxiliary feedwater pumps inoperable, immediately initiate corrective action to restore at least one auxiliary feedwater pump to OPERABLE status.

d. LCO 3.0.4.b is not applicable.

SURVEILLAN CE REQUIREMENTS 4.7.1.2 Each auxiliary feedwater pump shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying that each valve (manual , power-operated , or automatic) in the flow path that is not locked, sealed , or otherwise secured in position , is in its correct position .

ST. LUCIE - UNIT 2 3/4 7-4 Amendment No. ~ . -Me, 4+G,

                                                                              ~ . 479

L-2017-007 Attachment 4 Page 23 of 31 PLANT SYSTEMS MAIN STEAM LINE ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.7.1.5 Each main steam line isolation valve shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: MODE1 - With one main steam line isolation valve inoperable but open , POWER OPERATION may continue provided the inoperable valve is restored to T OPERABLE status within 4 hours; otherwise, be in at least HOT STA~JDBY within the next 6 hours ~ ji NSERT 2 MODES 2, 3 - With one or both main steam isolation valve(s) inoperable, subsequent and 4 operation in MODE:S 2, 3 or 4 may proceed provided the isolation valve(s) is (are) maintained closed. OthePNise , be in at least HOT STA~JDBY within the next 6 hours and in GOLD SHUTDOWN within the following 24 hours. 4.7.1 .5 Each main steam line isolation valve shall be demonstrated OPERABLE by verifying full closure within 6.75 seconds when tested pursuant to the lnservice Testing Program . With one or both main steam isolation valve(s) inoperable, subsequent operation in MODES 2, 3, or 4 may proceed provided:

1. The inoperable main steam isolation valves are closed within 8 hours, and

2. The inoperable main steam isolation valves are verified closed once per 7 days.

Otherwise , be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 24 hours. ST. LUCIE- UNIT 2 3/4 7-9 Amendment No. Je, ~ . 9-i, ~

                                                                                             -L-20_17 -007 Attachment 4 Page 24 of 31 PLANT SYSTEMS 3/4.7.3      COMPONENT COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.3        At least two independent component cooling water loops shall be OPERABLE\

APPLICABILITY: MODES 1, 2, 3, and 4. ACTION: INSERT 1 With only one component cooling ter loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering V HOT SHUTDOWN. /l SURVEILLANCE REQUIREMENTS At least two component cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual, power-operated or automatic) servicing safety-related equipment that is not locked, sealed, or otherwise secured in position, is in its correct position.

b. In accordance with the Surveillance Frequency Control Program during shutdown by verifying that each automatic valve servicing safety-related equipment actuates to its correct position on an SIAS test signal.

NOTE When CCW pump 2C is being used to satisfy the requirements of this specification, the alignment of the discharge valves shall be verified to be consistent with the appropriate power supply at least once per 24 hours. Upon receipt of annunciation for improper alignment of the pump 2C motor power in relation to any of its motor-operated discharge valves positions, restore proper system alignment within 2 hours. ST. LUCIE- UNIT 2 3/4 7-13 Amendment No. ~. 4S4

L-2017-007 Attachment 4 Page 25 of 31 PLANT SYSTEMS 314:7.4 INTAKE COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.4 At least two independent intake cooling water loops shall be OPERABLE\ APPLICABILITY: MODES 1, 2, 3, and 4. r ACTION: INSERT 1 With only one intake ling water loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. SURVEILLANCE REQUIREMENTS At least two intake cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual , power-operated , or automatic) servicing safety-related equipment that is not locked, sealed or otherwise secured in position, is in its correct position.

b. In accordance with the Surveillance Frequency Control Program during shutdown, by verifying that each automatic valve servicing safety-related equipment actuates to its correct position on a SIAS test signal.

NOTE When ICW pump 2C is being used to satisfy the requirements of this specification ,

the alignment of the discharge valves must be verified to be consistent with the appropriate power supply at least once per 24 hours. ST. LUCIE- UNIT 2 3/4 7-14 Amendment No. 4-+J, 4-84

L-2017-007-Attachment 4 Page 26 of 31 3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1 A.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.1.1 As a minimum, the following A. C. electrical power sources shall be OPERABLE:

a. Two physically independent circuits between the offsite transmission network and the onsite Class 1E distribution system, and

b. Two separate and independent diesel generators, each with:

1. Two separate engine-mounted fuel tanks containing a minimum volume of 200 gallons of fuel each,

2. A separate fuel storage system containing a minimum volume of 42,500 gallons of fuel, and

3. A separate fuel transfer pump.

APPLICABILITY: MODES 1, 2, 3, and 4. ACTION:

a. With one offsite circuit of 3.8.1 .1.a inoperable, except as provided in Action f.

below, demonstrate the OPERABILITY of the remaining A. C. sources by ~erforming Surveillance Requirement 4.8.1.1.1.a within 1 hour and at least once ~ p?~~hours thereafter. Restore the offsite circuit to OPERABLE status within 72 hours or be in at least HOT STANDBY within the next 6 hours and HOT { SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. INSERT 1 r------7

b. With one diesel generator of. 3.8.1.1.b inoperable, demonstrate the OPERABILITY of the A.C. ources by performing Surveillance Requirement 4.8.1.1 .1.a within 1 hour a d at least once per 8 hours thereafter; and if the EDG became inoperable ue to any cause other than an inoperable support system , an independent! testable component, or preplanned preventative maintenance or testing, emonstrate the OPERABILITY of the remaining OPERABLE EDG by p arming Surveillance Requirement 4.8.1 .1.2a.4 within 8 hours, unless it can be confirmed that the cause of the inoperable EDG does not exist on the rema* *ng EDG\ restore the diesel generator to OPERABLE status within 14 days or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not j applicable when entering HOT SHUTDOWN . Additionally, within 4 hours from /I the discovery of concurrent inoperability of required redundant feature(s)

(including the steam driven auxiliary feed pump in MODE 1, 2, and 3), declare required feature(s) supported by the inoperable EDG inoperable if its redundant re uired feature s is ino erable.

                                           !NOTE      I If the absence of any common-cause failure cannot be confirmed, this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY.

ST LUCIE- UNIT 2 3/4 8-1 Amendment No. 2-9, ~. 18, 4--1-a,

                                                                         ~.4W, 484

L-2017-007 Atta chment 4 Page 27 of 31 ELECTRICAL POWER SYSTEMS ACTION: (Continued)

c. With one offsite A.C. circuit and one diesel generator inoperable, demonstrate the OPERABILITY of the remaining A. C. sources by performing Surveillance Requirement 4.8.1.1 .1.a within one hour and at least once per 8 hours thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system , an independently testable component, or INSERT 1 preplanned preventative maintenance or testing , demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance r

Requirement 4.8.1 .1.2a.4 within 8 hours, unless it can be confirm~d that the cause of the inoperable EDG does not exist on the remaining EDG\ Restor, at least one of the inoperable sources to OPERABLE status within 12 hours or be in at least HOT STANDBY with in the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN . Restore the other A.C. power source (offsite circuit or diesel generator) to OPERABLE status in accordance with the provisions of Section 3.8.1.1 ACTION Statement a or b, as appropriate, with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable A. C. power source. Additionally, within 4 hours from the discovery of concurrent inoperability of required redundant feature(s) (including the steam driven a~xiliary feed pump in MODE 1, 2, and 3), declare required feature(s) supported by the inoperable EDG inoperable if its redundant required feature(s) is inoperable. I I NOTE If the absence of any common-cause failure cannot be confirmed, this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY. ST. LUCIE - UNIT 2 3/4 8-2 Amendment No. 2-9, ~ . ~. 423, 484

L-2017-007 Attachment 4

                                                                                       -page 28 cif 31 ELECTRICAL POWER SYSTEMS INSERT 1 ACTION: (Continued)

d. With two of the required offsite A. C. circuits inoperable, restore e of the inoperable offsite sources to OPERABLE status within 24 hours or be in at least HOT STAND BY within the next 6 hours. Following restoration of one offsite source, follow ACTION Statement a. with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable offsite A.C. circuit.

e. With two of the above required diesel generators inoperable, demonstrate the OPERABILITY of two offsite A. C. circuits by performing Surveillance Requirement 4.8.1.1.1 .a within 1 hour and at least once per 8 hours thereafter; restore one of the inoperable diesel generators to OPERABLE status within 2 hours or be in the at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within ~

the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN . Following restoration of one diesel generator unit, follow ACTION Statement b. with the time requirement of that ACTION Statement based on the time of initial loss of the remaining inoperable diesel generator.

f. With one Unit 2 startup transformer (2A or 2B) inoperable and with a Unit 1 startup transformer (1A or 1B) connected to the same A orB offsite power circuit and administratively available to both units, then should Unit 1 require the use of the startup transformer administratively available to both units, Unit 2 shall demonstrate the operability of the remaining A. C. sources by performing Surveillance Requirement 4.8.1.1 .1a. within 1 hour and at least once per 8 hours thereafter. Restore the inoperable startup transformer to OPERABLE status within 72 hours r be in at least HOT STANDBY within the next 6 hours and COLD SHUTDOW w* . . g 30 hours.

INSERT 1

g. LCO 3.0.4.b is not applicable to diesel generators.

SURVEILLANCE REQUIREMENTS 4.8.1.1.1 Each of the above required independent circuits between the offsite transmission network and the onsite Class 1E distribution system shall be:

a. Determined OPERABLE in accordance with the Surveillance Frequency Control Program by verifying correct breaker alignments, indicated power availability; and

b. Demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by transferring (manually and automatically) unit power supply from the normal circuit to the alternate circuit.

4.8.1.1.2 Each diesel generator shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

ST. LUCIE- UNIT 2 3/4 8-3 Amendment No. ~ . 4-J, +S, 4-+G,

                                                                            ~ . -484

L-2017-007 Attachment 4 Page 29 of 31 ELECTRICAL POWER SYSTEMS 3/4.8.2 D.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.2.1 As a minimum the following D.C. electrical sources shall be OPERABLE:

a. 125-volt Battery bank No. 2A and a full capacity charger.

b. 125-volt Battery bank No. 2B and a full capacity charger.

APPLICABILITY: MODES 1, 2, 3, and 4. ACTION:

a. With one of the required battery banks inoperable, restore th inoperable battery bank to OPERABLE status within 2 hours or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN {

within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

b. With one of the required full capacity chargers inoperable, demonstrate the OPERABILITY of its associated battery banks by performing Surveillance Requirement 4.8.2.1a.1 within 1 hour, and at least once per 8 hours thereafter. If any Category A limit in Table 4.8-2 is not met, declare the battery inoperable.

SURVEILLANCE REQUIREMENTS 4.8.2.1 Each 125-volt battery bank and charger shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that:

1. The parameters in Table 4.8-2 meet the Category A limits, and

2. The total battery terminal voltage is greater than or equal to 129-volts on float charge.

ST. LUCIE- UNIT 2 3/4 8-10 Amendment No. ~. 484

                                                                                           .L-2017-007 Attachment 4 Page 30 of 31 ELECTRICAL POWER SYSTEMS ACTION:

a. With one of the required trains of A . Emergency busses not fully energized, re-energize the train within 8 hours or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

b. With one A. C. Instrument Bus either not energized from its associated inverter, or with the inverter not connected to its associated D.C. Bus: (1) re-energize the A.C. Instrument Bus within 2 hours be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDO ithin the following 30 hours and (2) re-energize the A. C. Instrument Bus from its ociated inverter connected to its associated D.C. Bus within 24 hours

at le HOT STANDBY within the next 6 hours and in HOT SHUTDOWN wittim wing 6 hours.

LCO 3.0.4 .a is not applicable when entering HOT SHUTDOWN. INSERT 1

c. With one D.C. Bus not energized from its associated Battery nk, re-energize the D.C. Bus from its associated Battery Bank within 2 hours or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

SURVEILLANCE REQUIREMENTS 4.8.3.1 The specified busses shall be determined energized in the required manner in accordance with the Surveillance Frequency Control Program by verifying correct breaker alignment and indicated voltage on the busses. ST. LUCIE- UNIT 2 3/4 8-15 Amendment No. ~. 4-84

L-20 1-7-007 Attachment 4 Page 31 of 31 ADMINISTRATIVE CONTROLS

q. Surveillance Frequency Control Program This program provides controls for Surveillance Frequencies. The program shall ensure that Surveillance Requirements specified in the Technical Specifications are performed at intervals sufficient to assure the associated Limiting Conditions for Operation are met.

a. The Surveillance Frequency Control Program shall contain a list of frequencies of those Surveillance Requirements for which the frequency is controlled by the program .

b. Changes to the frequencies listed in the Surveillance Frequency Control Program shall be made in accordance with NEI 04-10, "Risk-Informed Method for Control of Surveillance Frequencies," Revision 1.

c. The provisions of Surveillance Requirements 4.0.2 and 4.0.3 are applicable to the frequencies established in the Surveillance Frequency Control Program.

6.9 REPORTING REQUIREMENTS ROUTINE REPORTS 6.9.1 In addition to the applicable reporting requirements of Title 10, Code of Federal Regulations, the following reports shall be submitted to the NRC. STARTUP REPORT 6.9.1.1 A summary report of plant startup and power escalation testing shall be submitted following (1) receipt of an operating license, (2) amendment to the license involving a planned increase in power level, (3) installation of fuel that has a different design or has been manufactured by a different fuel supplier; and (4) modifications that may have significantly altered the nuclear, thermal or hydraulic performance of the plant. 6.9.1.2 The startup report shall address each of the tests "identified in the FSAR and shall include a description of the measured values of the operating conditions or characteristics obtained during the test program and a comparison of these values with design predictions and specifications. Any corrective actions that were required to obtain satisfactory operation shall also be described. Any additional specific details required in license conditions based on other commitments shall be included in this report. 6.9.1.3 Startup reports shall be submitted within (1) 90 days following completion of the startup test program , (2) 90 days following resumption or commencement of commercial power operation, or (3) 9 months following initial criticality, whichever is earliest. If the Startup

       . Report does not cover all three events (i.e., initial criticality, completion of startup test program , and resumption or commencement of commercial operation) , supplementary reports shall be submitted at least every three months until all three events have been completed.

ST. LUCIE- UNIT 2 6-16 Amendment No. ~ . 213, w , 444, 4f.3

L-2017-007 ATTACHMENT 5 St. Lucie Unit 1 Revised Technical Specification Pages

TABLE 3.3-1 (Continued) TABLE NOTATION

With the protective system trip breakers in the closed position and the CEA drive system capable of CEA withdrawal.

(a) Trip may be bypassed below 1% of RATED THERMAL POWER; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is~ 1% of RATED THERMAL POWER. (b) Trip may be manually bypassed below 685 psig; bypass shall be automatically removed at or above 685 psig . (c) Trip may be bypassed below 15% of RATED THERMAL POWER; bypass shall be automatically removed when Power Range Neutron Flux power is~ 15% of RATED THERMAL POWER.

                                       -4 (d)    Trip may be bypassed below 10 % and above 15% of RATED THERMAL POWER; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is~ 10-4%

and Power Range Neutron Flux power.:=: 15% of RATED THERMAL POWER. (e) Deleted. (f) There shall be at least two decades of overlap between the Wide Range Logarithmic Neutron Flux Monitoring Channels and the Power Range Neutron Flux Monitoring Channels. ACTION STATEMENTS ACTION 1 - With the number of channels OPERABLE one less than required by the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program, or be in HOT STANDBY within the next 6 hours and/or open the protective system trip breakers . ACTION 2 - With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may proceed provided the following conditions are satisfied :

a. The inoperable channel is placed in either the bypassed or tripped condition within 1 hour. For the purposes of testing and maintenance, the inoperable channel may be bypassed for up to 48 hours from time of initial loss of OPERABILITY; however, the inoperable channel shall then be either restored to OPERABLE status or placed in the tripped condition.

ST. LUCIE- UNIT 1 3/4 3-4 Amendment No. 4-6, 2;1-, 46, -'1-00, 4-W . ~

TABLE 3.3-3 ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION TOTAL NO. MINIMUM OF CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT CHANNELS TO TRIP OPERABLE MODES ACTION

1. SAFETY INJECTION (SIAS)

a. Manual (Trip Buttons) 2 1 2 1121314 8

b. Containment Pressure -

High 4 2 3 11 21 3 9

c. Pressurizer Pressure -

Low 4 2 3 1 2 13(a) I 9

2. CONTAINMENT SPRAY (CSAS)

a. Manual (Trip Buttons) 2 1 2 1121314 8

b. Containment Pressure-High-High 4 2(b) 3 11 2 13 10A 1 10B

3. CONTAINMENT ISOLATION (CIS)

a. Manual (Trip Buttons) 2 1 2 1121314 8

b. Containment Pressure-High 4 2 3 11213 9

c. Containment Radiation -

High 4 2 3 1121314 9

d. SIAS ---------------------------- (See Functional Unit 1 above) ------------------------- ------

4. MAIN STEAM LINE ISOLATION (MSIS)

a. Manual (Trip Buttons) 2/steam 1/steam 2/operating 1121314 8 generator generator steam generator

b. Steam Generator 4/steam 2/steam 3/steam 112 13(c) 9 Pressure - Low generator generator generator ST. LUCIE- UNIT 1 3/4 3-10 Amendment No. +e, ~. 4-88, ~

TABLE 3.3-3 {Continued} ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

5. CONTAINMENT SUMP RECIRCULATION (RAS)

a. Manual RAS (Trip Buttons) 2 1 2 1,2, 3,4 8

b. Refueling Water Tank- Low 4 2 3 1' 2, 3 13

6. LOSS OF POWER

a. 4.16 kv Emergency Bus Under-voltage (Loss of Voltage) 2/Bus 2/Bus 1/Bus 1' 2, 3 12

b. 4.16 kv Emergency Bus Under-voltage (Degraded Voltage) 2/Bus 2/Bus 1/Bus 1' 2, 3 12

c. 480 V Emergency Bus Under-voltage (Degraded Voltage) 2/Bus 2/Bus 1/Bus 1' 2, 3 12

7. AUXILIARY FEEDWATER (AFAS)

a. Manual (Trip Buttons) 4/SG 2/SG 4/SG 1, 2, 3 11

b. Automatic Actuation Logic 4/SG 2/SG 3/SG 1' 2, 3 11

c. SG Level (1 A/1 B) - Low 4/SG 2/SG 3/SG 1' 2, 3 14a, 14b, 15

8. AUXILIARY FEEDWATER ISOLATION

a. SG 1A- SG 1B Differential Pressure 4/SG 2/SG 3/SG 1' 2, 3 14a, 14b, 15

b. Feedwater Header 1A- 1B Differential Pressure 4/SG 2/SG 3/SG 1' 2, 3 14a, 15 ST. LUCIE- UNIT 1 3/4 3-11 Amendment No. 4-e, ~. eg, ~ . +00, 4-24,

                                                                                 ~.6W

TABLE 3.3-3 (Continued) TABLE NOTATION (a) Trip function may be bypassed in this MODE when pressurizer pressure is < 1725 psia ; bypass shall be automatically removed when pressurizer pressure is .:::_ 1725 psia. (b) An SIAS signal is first necessary to enable CSAS logic. (c) Trip function may be bypassed in this MODE below 685 psig ; bypass shall be automatically removed at or above 685 psig . ACTION STATEMENTS ACTION 8 - With the number of OPERABLE channels one less than the Total Number of Channels , restore the inoperable channel to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. ACTION 9 - With the number of OPERABLE channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in either the bypassed or tripped condition within 1 hour. For the purposes of testing and maintenance, the inoperable channel may be bypassed for up to 48 hours from time of initial loss of OPERABILITY; however, the inoperable channel shall then be either restored to OPERABLE status or placed in the tripped condition.

b. Within one hour, all functional units receiving an input from the inoperable channel are also bypassed or tripped .

c. The Minimum Channels OPERABLE requirement is met; however, one additional channel may be bypassed for up to 48 hours while performing tests and maintenance on that channel provided the other inoperable channel is placed in the tripped condition.

ST. LUCIE - UNIT 1 3/4 3-12 Amendment No. 4-e, 4a, ~ . ~

TABLE 3.3-3 (continued) TABLE NOTATION ACTION 1OA - With the number of OPERABLE channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied :

a. The inoperable channel is placed in the bypassed or tripped condition and the Minimum Channels OPERABLE requirement is demonstrated within 1 hour. If the inoperable channel can not be restored to OPERABLE status within 48 hours, then place the inoperable channel in the tripped condition .

b. Within 1 hour, all functional units receiving an input from the inoperable channel are also bypassed or tripped.

ACTION 1OB - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel has been placed in the tripped condition within 1 hour. Restore one of the inoperable channels to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. ACTION 11 With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channels to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. ACTION 12 - With the number of OPERABLE Channels one less than the Total Number of Channels, operation may proceed until performance of the next required CHANNEL FUNCTIONAL TEST provided the inoperable channel is placed in the tripped condition within 1 hour. ST. LUCIE- UNIT 1 3/4 3-13 Amendment No. 4-9, ;J+, ~ . +J, ~.

                                                                        ~.2-d4

TABLE 3.3-3 (continued) TABLE NOTATION ACTION 13 - With the number of OPERABLE channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in either the bypassed or tripped condition within 1 hour. If OPERABILITY cannot be restored within 48 hours or in accordance with the Risk Informed Completion Time Program be in at least HOT STAND BY within 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. The Minimum Channels OPERABLE requirement is met; however, one additional channel may be bypassed for up to 2 hours while performing tests and maintenance on that channel provided the other inoperable channel is placed in the tripped condition.

ACTION 14 - With the number of channels OPERABLE one less than the Total Number of Channels , operation may proceed provided the following conditions are satisfied :

a. The inoperable channel is placed in either the bypassed or tripped condition within 1 hour. If an inoperable SG level channel can not be restored to OPERABLE status within 48 hours, then AFAS-1 or AFAS-2 as applicable in the inoperable channel shall be placed in the bypassed condition. If an inoperable SG DP or FW Header DP channel can not be restored to OPERABLE status within 48 hours, then both AFAS-1 and AFAS-2 in the inoperable channel shall be placed in the bypassed condition. The channel shall be returned to OPERABLE status no later than during the next COLD SHUTDOWN.

b. Within 1 hour, all functional units receiving an input from the inoperable channel are also bypassed or tripped .

ACTION 15 - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel has been placed in the tripped condition within 1 hour. Restore one of the inoperable channels to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. ST. LUCIE- UNIT 1 3/4 3-1 3a Amendment No. ~ . 202,

REACTOR COOLANT SYSTEM SAFETY VALVES- OPERATING LIMITING CONDITION FOR OPERATION 3.4.3 All pressurizer code safety valves shall be OPERABLE with a lift setting of

         ~ 2422.8 psig and .:s. 2560.3 psig .

APPLICABILITY: MODES 1, 2, 3, and 4 with all RCS cold leg temperatures> 281°F. ACTION:

a. With one pressurizer code safety valve inoperable, either restore the inoperable valve to OPERABLE status within 15 minutes or in accordance with the Risk Informed Completion Time Program, or be in HOT STANDBY within 6 hours and in HOT SHUTDOWN within the next 6 hours.

b. With two or more pressurizer code safety valves inoperable, be in HOT STANDBY within 6 hours and in HOT SHUTDOWN with all RCS cold leg temperatures .:s. 281°F within the next 6 hours .

SURVEILLANCE REQUIREMENTS 4.4.3 Verify each pressurizer code safety valves is OPERABLE in accordance with the lnservice Testing Program. Following testing, as-left lift settings shall be within

          +I- 1% of 2500 psi a.

ST. LUCIE- UNIT 1 3/4 4-3 Amendment No. 00, +ad, 400

REACTOR COOLANT SYSTEM PORV BLOCK VALVES LIMITING CONDITION FOR OPERATION 3.4 .12 Each Power Operated Relief Valve (PORV) Block Valve shall be OPERABLE. APPLICABILITY: MODES 1, 2, and 3. ACTION: With one or more block valve(s) inoperable, within 1 hour or in accordance with the Risk Informed Completion Time Program either restore the block valve(s) to OPERABLE status or close the block valve(s) and remove power from the block valve(s); otherwise, be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. SURVEILLANCE REQUIREMENTS 4.4.12 Each block valve shall be demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by operating the valve through one complete cycle of full travel. ST. LUCIE- UNIT 1 3/4 4-58 Amendment No. ;?;1-, ~. 86, ~

3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) SAFETY INJECTION TANKS (SIT) LIMITING CONDITION FOR OPERATION 3.5.1 Each reactor coolant system safety injection tank shall be OPERABLE with:

a. The isolation valve open,

b. Between 1090 and 1170 cubic feet of borated water,

c. A minimum boron concentration of 1900 ppm , and

d. A nitrogen cover-pressure of between 230 and 280 psig.

APPLICABILITY: MODES 1, 2 and 3 with pressurizer pressure;::: 1750 psia ACTION:

a. With one SIT inoperable due to boron concentration not within limits, or due to an inability to verify the required water volume or nitrogen cover-pressure, restore the inoperable SIT to OPERABLE status with 72 hours; otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. With one SIT inoperable due to reasons other than those stated in ACTION-a ,

restore the inoperable SIT to OPERABLE status within 24 hours or in accordance with the Risk Informed Completion Time Program; otherwise, be in at least HOT STAND BY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. SURVEILLANCE REQUIREMENTS 4.5.1 Each safety injection tank shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying that the borated water volume and nitrogen cover-pressure in the tanks are within their limits, and

2. Verifying that each safety injection tank isolation valve is open .

ST. LUCIE- UNIT 1 3/4 5-1 Amendment No. 4-e+, ~. ~

EMERGENCY CORE COOLING SYSTEMS ECCS SUBSYSTEMS - OPERATING LIMITING CONDITION FOR OPERATION 3.5.2 Two independent ECCS subsystems shall be OPERABLE with each subsystem comprised of:

a. One OPERABLE high-pressure safety injection (HPSI) pump,

b. One OPERABLE low-pressure safety injection pump,

c. An independent OPERABLE flow path capable of taking suction from the refueling water tank on a Safety Injection Actuation Signal and automatically transferring suction to the containment sump on a Recirculation Actuation Signal, and NOTE One ECCS subsystem charging pump shall satisfy the flow path requirements of Specification 3.1.2.2.a or 3.1 .2.2.d. The second ECCS subsystem charging pump shall satisfy the flow path requirements of Specification 3.1.2.2.b or 3.1.2.2.e.

d. One OPERABLE charging pump*.

APPLICABILITY: MODES 1, 2 and 3 with pressurizer pressure:::: 1750 psia. ACTION:

a. 1. With one ECCS subsystem inoperable only because its associated LPSI train is inoperable, restore the inoperable subsystem to OPERABLE status within 7 days or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

2. With one ECCS subsystem inoperable for reasons other than condition a.1.,

restore the inoperable subsystem to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. In the event the ECCS is actuated and injects water into the Reactor Coolant System , a Special Report shall be prepared and submitted to the Commission pursuant to Specification 6.9.2 within 90 days describing the circumstances of the actuation and the total accumulated actuation cycles to date.

ST. LUCIE- UNIT 1 3/4 5-3 Amendment No. ~. ~ . ~. 4++,

CONTAINMENT SYSTEMS CONTAINMENT AIR LOCKS LIMITING CONDITION FOR OPERATION 3.6.1.3 Each containment air lock shall be OPERABLE with:

a. Both doors closed except when the air lock is being used for normal transit entry and exit through the containment, then at least one air lock door shall be closed , and

b. An overall air lock leakage rate in accordance with the Containment Leakage Rate Testing Program .

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: NOTE If the inner air lock door is inoperable, passage through the OPERABLE outer air lock door is permitted to effect repairs to the inoperable inner air lock door. No more than one air lock door shall be open at any time.

a. . With one containment air lock door inoperable:

1. Maintain at least the OPERABLE air lock door closed and either restore the inoperable air lock door to OPERABLE status within 24 hours or lock the OPERABLE air lock door closed.

2. Operation may then continue until performance of the next required overall air lock leakage test provided that the OPERABLE air lock door is verified to be closed at least once per 31 days.

3. Otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4 .a is not applicable when entering HOT SHUTDOWN .

b. .With one or both containment air lock(s) inoperable, except as the result of an inoperable air lock door, maintain at least one air lock door closed in the affected air lock(s) and restore the inoperable air lock to OPERABLE status within 24 hours or in accordance with the Risk Informed Completion Time Program or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

SURVEILLANCE REQUIREMENTS 4.6.1 .3 Each containment air lock shall be demonstrated OPERABLE: ST. LUCIE - UNIT 1 3/4 6-10 Amendment No. ge, 449, ~ .

CONTAINMENT SYSTEMS 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS CONTAINMENT SPRAY AND COOLING SYSTEMS LIMITING CONDITION FOR OPERATION 3.6.2 .1 Two containment spray trains and two containment cooling trains shall be OPERABLE. APPLICABILITY: Containment Spray System: MODES 1, 2, and MODE 3 with Pressurizer Pressure ;::: 1750 psia . Containment Cooling System: MODES 1, 2, and 3. ACTION:

1. Modes 1, 2. and 3 with Pressurizer Pressure > 1750 psia:

a. With one containment spray train inoperable, restore the inoperable spray train to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program ; otherwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 54 hours.

b. With one containment cooling train inoperable, restore the inoperable cooling train to OPERABLE status within 7 days or in accordance with the Risk Informed Completion Time Program; otherwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

c. With one containment spray train and one containment cooling train inoperable, concurrently implement ACTIONS a. and b. The completion intervals for ACTION a. and ACTION b. shall be tracked separately for each train starting from the time each train was discovered inoperable.

NOTE Action not applicable when second containment spray train intentionally made inoperable.

d. With two containment spray trains inoperable, within 1 hour verify TS 3.7.7, "Control Room Emergency Ventilation System," is met, and restore at least one containment spray train to OPERABLE status within 24 hours; otherwise, be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

e. With two containment cooling trains inoperable, restore one cooling train to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program; otherwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

2. Mode 3 with Pressurizer Pressure < 1750 psia :

a. With one containment cooling train inoperable, restore the inoperable cooling train to OPERABLE status within 72 hours; otherwise be in MODE 4 within the next 6 hours.

b. With two containment cooling trains inoperable, enter LCO 3.0.3 immediately.

ST. LUCIE- UNIT 1 3/4 6-15 Amendment No. 00, ~. 227, 2,28

CONTAINMENT SYSTEMS 3/4.6.3 CONTAINMENT ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.6.3.1 The containment isolation valves shall be OPERABLE: APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With one or more of the isolation valve(s) inoperable, either:

a. Restore the inoperable valve(s) to OPERABLE status within 4 hours, or in accordance with the Risk Informed Completion Time Program or

b. Isolate each affected penetration within 4 hours or in accordance with the Risk Informed Completion Time Program by use of at least one deactivated automatic valve secured in the isolation position , or

c. Isolate each affected penetration within 4 hours or in accordance with the Risk Informed Completion Time Program by use of at least one closed manual valve or blind flange; or

d. Be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

SURVEILLANCE REQUIREMENTS 4.6.3.1.1 The isolation valves shall be demonstrated OPERABLE prior to returning the valve to service after maintenance, repair or replacement work is performed on the valve or its associated actuator, control or power circuit by performance of the cycling test, and verification of isolation time. ST. LUCIE- UNIT 1 3/4 6-18 Amendment No. 00,449, ~

PLANT SYSTEMS AUXILIARY FEEDWATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.1.2 At least three independent steam generator auxiliary feedwater pumps and associated flow paths shall be OPERABLE with :

a. Two motor driven feedwater pumps, and

b. One feedwater pump capable of being powered from an OPERABLE steam supply system.

APPLICABILITY: MODES 1, 2 and 3. ACTION:

a. With one auxiliary feedwater pump inoperable, restore the auxiliary feedwater pump to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. With two auxiliary feedwater pumps inoperable, be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours.

NOTE LCO 3.0.3 and all other LCO Actions requiring MODE changes are suspended until one AFW pump is restored to OPERABLE status.

c. With three auxiliary feedwater pumps inoperable, immediately initiate corrective action to restore at least one auxiliary feedwater pump to OPERABLE status.

d. LCO 3.0.4.b is not applicable.

SURVEILLANCE REQUIREMENTS 4.7.1 .2 Each auxiliary feedwater pump shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

ST. LUCIE- UNIT 1 3/4 7-4 Amendment No. Je, 00, 4-99, ~. 2-2-d, ~

PLANT SYSTEMS MAIN STEAM LINE ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.7.1.5 Each main steam line isolation valve shall be OPERABLE. APPLICABILITY: MODES 1, 2 and 3. ACTION: MODE 1 With one main steam line isolation valve inoperable, POWER OPERATION may continue provided the inoperable valve is either restored to OPERABLE status or closed within 4 hours or in accordance with the Risk Informed Completion Time Program; otherwise, be in MODE 2 within the next 6 hours. MODES 2 - With one or both main steam isolation valve(s) inoperable, subsequent operation in and 3 MODES 2 or 3 may continue provided :

1. The inoperable main steam isolation valves are closed within 8 hours, and

2. The inoperable main steam isolation valves are verified closed once per 7 days.

Otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 24 hours. SURVEILLANCE REQUIREMENTS 4.7.1 .5 Each main steam line isolation valve that is open shall be demonstrated OPERABLE by verifying full closure within 6.0 seconds when tested pursuant to the lnservice Testing Program. ST. LUCIE- UNIT 1 3/4 7-9 Amendment No. 99, 444-, 4W, 229

PLANT SYSTEMS 3/4.7.3 COMPONENT COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.3.1 At least two independent component cooling water loops shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With only one component cooling water loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN . SURVEILLANCE REQUIREMENTS 4.7.3.1 At least two component cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual, power operated or automatic) servicing safety related equipment that is not locked, sealed or otherwise secured in position, is in its correct position .

b. In accordance with the Surveillance Frequency Control Program during shutdown by verifying that each automatic valve servicing safety related equipment actuates to its correct position on a Safety Injection Actuation Signal.

ST. LUCIE- UNIT 1 3/4 7-14 Amendment No. W , ~ . 2M

PLANT SYSTEMS 3/4.7.4 INTAKE COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.4.1 At least two independent intake cooling water loops shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With only one intake cooling water loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. SURVEILLANCE REQUIREMENTS 4.7.4 .1 At least two intake cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual, power operated or automatic) servicing safety related equipment that is not locked, sealed, or otherwise secured in position, is in its correct position.

b. In accordance with the Surveillance Frequency Control Program during shutdown by verifying that each automatic valve servicing safety related equipment actuates to its correct position on a Safety Injection Actuation signal.

ST. LUCIE- UNIT 1 3/4 7-16 Amendment No. 00, 22J, 2M

3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1 A.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

a. Two physically independent circuits between the offsite transmission network and the onsite Class 1E distribution system, and

b. Two separate and independent diesel generator sets each with:

1. Engine-mounted fuel tanks containing a minimum of 152 gallons of fuel,

2. A separate fuel storage system containing a minimum of 19,000 gallons of fuel , and

3. A separate fuel transfer pump.

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION:

a. With one offsite circuit of 3.8.1.1.a inoperable, except as provided in Action f.

below, demonstrate the OPERABILITY of the remaining A. C. sources by performing Surveillance Requirement 4.8.1 .1.1.a within 1 hour and at least once per 8 hours thereafter. Restore the offsite circuit to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. NOTE If the absence of any common-cause failure cannot be confirmed , this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY.

b. With one diesel generator of 3.8.1.1.b inoperable, demonstrate the OPERABILITY of the A. C. sources by performing Surveillance Requirement 4.8.1 .1.1.a within 1 hour and at least once per 8 hours thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system, an independently testable component, or preplanned preventative maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1 .1.2.a.4 within 8 hours, unless it can be confirmed that the cause of the inoperable EDG does not exist on the remaining EDG ; restore the diesel generator to OPERABLE status within 14 days or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. Additionally, within 4 hours from the discovery of concurrent inoperability of required redundant feature(s) (including the steam driven auxiliary feed pump in MODE 1, 2, and 3) , declare required feature(s) supported by the inoperable EDG inoperable if its redundant required feature(s) is inoperable.

ST. LUCIE- UNIT 1 3/4 8-1 Amendment No. ~ . ~ . ~. 4-+G,

                                                                       -WG .~. 2od4

ELECTRICAL POWER SYSTEMS ACTION (continued) NOTE If the absence of any common-cause failure cannot be confirmed, this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY.

c. With one offsite A. C. circuit and one diesel generator inoperable, demonstrate the OPERABILITY of the remaining A.C . sources by performing Surveillance Requirement 4.8.1.1 .1.a within one hour and at least once per 8 hours thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system , an independently testable component, or preplanned preventative maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2.a.4 within 8 hours unless it can be confirmed that the cause of the inoperable EDG does not exist on the remaining EDG. Restore at least one of the inoperable sources to OPERABLE status within 12 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STAND BY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. Restore the other A.C. power source (offsite circuit or diesel generator) to OPERABLE status in accordance with the provisions of Section 3.8.1.1 ACTION Statement a or b, as appropriate, with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable A. C. power source. Additionally, . within 4 hours from the discovery of concurrent inoperability of required redundant feature(s) (including the steam driven auxiliary feed pump in MODE 1, 2, and 3) , declare required feature(s) supported by the inoperable EDG inoperable if its redundant required feature(s) is inoperable.

d. With two of the required offsite A. C. circuits inoperable, restore one of the inoperable offsite sources to OPERABLE status w ithin 24 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours. Following restoration of one offsite source, follow ACTION Statement a. with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable offsite A.C. circuit.

ST. LUCIE- UNIT 1 3/4 8-2 Amendment No . .:tOO, ~ . ~. 4-SG,

ELECTRICAL POWER SYSTEMS ACTION (continued)

e. With two of the above required diesel generators inoperable, demonstrate the OPERABILITY of two offsite A. C. circuits by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour and at least once per 8 hours thereafter; restore one of the inoperable diesel generators to OPERABLE status within 2 hours or be in the at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

Following restoration of one diesel generator unit, follow ACTION Statement b. with the time requirement of that ACTION Statement based on the time of initial loss of the remaining inoperable diesel generator.

f. With one Unit 1 startup transformer (1A or 1B) inoperable and with a Unit 2 startup transformer (2A or 2B) connected to the same A or B offsite power circuit and administratively available to both units, then should Unit 2 require the use of the startup transformer administratively available to both units, Unit 1 shall demonstrate the OPERABILITY of the remaining A. C. sources by performing Surveillance Requirement 4.8.1.1 .1.a within 1 hour and at least once per 8 hours thereafter. Restore the inoperable startup transformer to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and COLD SHUTDOWN within the following 30 hours.

g. LCO 3.0.4.b is not applicable to diesel generators.

SURVEILLAN CE REQUIREMENTS 4.8.1 .1.1 Each of the above required independent circuits between the offsite transmission network and the onsite Class 1E distribution system shall be:

a. Determined OPERABLE in accordance with the Surveillance Frequency Control Program by verifying correct breaker alignments, indicated power availability; and

b. Demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by transferring (manually and automatically) unit power supply from the auxiliary transformer to the startup transformer.

4.8.1 .1.2 Each diesel generator shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying fuel level in the engine-mounted fuel tank,

2. Verifying the fuel level in the fuel storage tank,

3. Verifying the fuel transfer pump can be started and transfers fuel from the storage system to the engine-mounted tank, ST. LUCIE- UNIT 1 3/4 8-3 Amendment No. 400, 442, 4-Jg,

                                                                           ~. ~. ~

ELECTRICAL POWER SYSTEMS 3/4.8.2 ONSITE POWER DISTRIBUTION SYSTEMS A.C. DISTRIBUTION - OPERATING LIMITING CONDITION FOR OPERATION 3.8 .2.1 The following A.C. electrical busses shall be OPERABLE and energized from sources of power other than the diesel generator sets: 4160 volt Emergency Bus 1A3 4160 volt Emergency Bus 1B3 480 volt Emergency Bus 1A2 480 volt Emergency Bus 1B2 480 volt Emergency MCC Busses 1A5, 1A6, 1A7 480 volt Emergency MCC Busses 1B5, 1B6, 1B7 120 volt A. C. Instrument Bus 1MA 120 volt A. C. Instrument Bus 1MB 120 volt A. C. Instrument Bus 1MC 120 volt A. C. Instrument Bus 1MD APPLICABILITY: MODES 1, 2, 3 and 4. ACTION : With less than the above complement of A. C. busses OPERABLE, restore the inoperable bus to OPERABLE status within 8 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. SURVEILLANCE REQUIREMENTS 4.8.2.1 The specified A.C. busses shall be determined OPERABLE and energized from A.C . sources other than the diesel generators in accordance with the Surveillance Frequency Control Program by verifying indicated power availability. ST. LUCIE- UNIT 1 3/4 8-8 Amendment No. ~

ELECTRICAL POWER SYSTEMS D.C. DISTRIBUTION - OPERATING LIMITING CONDITION FOR OPERATION 3.8.2.3 As a minimum the following D.C. electrical sources shall be OPERABLE:

a. 125-volt D.C. bus No. 1A, 125-volt Battery bank No. 1A and a full capacity charger.

b. 125-volt D.C. bus No. 1B, 125-volt Battery bank No. 1Band a full capacity charger.

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION:

a. With one of the required battery banks or busses inoperable, restore the inoperable battery bank or bus to OPERABLE status within 2 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

b. With one of the required full capacity chargers inoperable, demonstrate the OPERABILITY of its associated battery banks by performing Surveillance Requirement 4.8.2.3.2.a.1 within 1 hour, and at least once per 8 hours thereafter. If any Category A limit in Table 4.8-2 is not met, declare the battery inoperable.

SURVEILLANCE REQUIREMENTS 4.8.2.3.1 Each D.C. bus train shall be determined OPERABLE and energized in accordance with the Surveillance Frequency Control Program by verifying indicated power availability. 4.8.2.3.2 Each 125-volt battery bank and charger shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that:

1. The parameters in Table 4.8-2 meet the Category A limits, and

2. The total battery terminal voltage is greater than or equal to 129-volts on float charge.

ST. LUCIE- UNIT 1 3/4 8-10 Amendment No. 9-1-, ~. ~

ADMINISTRATIVE CONTROLS (continued)

o. Surveillance Frequency Control Program This program provides controls for Surveillance Frequencies. The program shall ensure that Surveillance Requirements specified in the Technical Specifications are performed at intervals sufficient to assure the associated Limiting Conditions for Operation are met.

a. The Surveillance Frequency Control Program shall contain a list of frequencies of those Surveillance Requirements for which the frequency is controlled by the program.

b. Changes to the frequencies listed in the Surveillance Frequency Control Program shall be made in accordance with NEI 04-10, "Risk-Informed Method for Control of Surveillance Frequencies," Revision 1.

c. The provisions of Surveillance Requirements 4.0.2 and 4.0.3 are applicable to the frequencies established in the Surveillance Frequency Control Program.

p. Snubber Testing Program This program conforms to the examination , testing and service life monitoring for dynamic restraints (snubbers) in accordance with 10 CFR 50.55a inservice inspection (lSI) requirements for supports. The program shall be in accordance with the following :

1. This program shall meet 10 CFR 50 .55a(g) lSI requirements for supports.

2. The program shall meet the requirements for lSI of supports set forth in subsequent editions of the Code of Record and addenda of the American Society of Mechanical Engineers (ASME) Boiler and Pressure (BPV) Code and the ASME Code for Operation and Maintenance of Nuclear Power Plants (OM Code) that are incorporated by reference in 10 CFR 50 .55a(b) subject to the conditions listed in 10 CFR 50.55a(b) and subject to Commission approval.

3. The program shall , as required by 10 CFR 50.55a(b)(3)(v), meet Subsection ISTA, "General Requirements" and Subsection ISTD, "Preservice and lnservice Examination and Testing of Dynamic Restraints (Snubbers) in Light-Water Reactor Nuclear Power Plants".

4. The 120-month program updates shall be made in accordance with 10 CFR 50.55a(g)(4) , 10 CFR 50.55a(g)(3)(v) and 10 CFR 50.55a(b) (including 10 CFR 50.55a(b)(3)(v)) subject to the conditions listed therein.

q. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09 , "Risk-Informed Technical Specifications Initiative 4b: Risk-Managed Technical Specifications (RMTS) Guidelines, "

Revision 0-A, November 2006. The program shall include the following :

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2; ST. LUCIE- UNIT 1 6-15h Amendment No. ~. ~. ~

ADMINISTRATIVE CONTROLS (continued)

c. When a RICT is being used, any plant configuration change within the scope of the Risk Informed Completion Time Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration .

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours after the plant configuration change, whichever is less.

3. Revising the RICT is not required If the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

6.9 REPORTING REQUIREMENTS ROUTINE REPORTS 6.9.1 In addition to the applicable reporting requirements of Title 10, Code of Federal Regulations , the following reports shall be submitted to the NRC. STARTUP REPORT 6.9.1.1 A summary report of plant startup and power escalation testing shall be submitted following: (1) receipt of an operating license, (2) amendment of the license involving a planned increase in power level, (3) installation of fuel that has a different design or has been manufactured by a different fuel supplier, and (4) modifications that may have significantly altered the nuclear, thermal or hydraulic performance of the plant. ST. LUCIE- UNIT 1 6-15i Amendment No.

L-2017-007 ATTACHMENT 6 St. Lucie Unit 2 Revised Technical Specification Pages

REACTIVITY CONTROL SYSTEMS FLOW PATHS- OPERATING LIMITING CONDITION FOR OPERATION 3.1.2 .2 At least two of the following three boron injection flow paths shall be OPERABLE:

a. One flow path from the boric acid makeup tank(s) with the tank meeting Specification 3.1.2.8 part a) or b), via a boric acid makeup pump through a charging pump to the Reactor Coolant System.

b. One flow path from the boric acid makeup tank(s) with the tank meeting Specification 3.1.2.8 part a) or b) , via a gravity feed valve through a charging pump to the Reactor Coolant System.

c. The flow path from the refueling water tank via a charging pump to the Reactor Coolant System.

OR At least two of the following three boron injection flow paths shall be OPERABLE:

d. One flow path from each boric acid makeup tank with the combined tank contents meeting Specification 3.1.2.8 c), via both boric acid makeup pumps through a charging pump to the Reactor Coolant System .

e. One flow path from each boric acid makeup tank with the combined tank contents meeting Specification 3.1 .2.8 c), via both gravity feed valves through a charging pump to the Reactor Coolant System.

f. The flow path from the refueling water tank, via a charging pump to the Reactor Coolant System.

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With only one of the above required boron injection flow paths to the Reactor Coolant System OPERABLE, restore at least two boron injection flow paths to the Reactor Coolant System to OPERABLE status within 72 hours or be in at least HOT STANDBY and borated to a SHUTDOWN MARGIN equivalent to its COLR limit at 200 oF within the next 6 hours; restore at least two flow paths to OPERABLE status within the next 7 days or be in COLD SHUTDOWN within the next 30 hours. ST. LUCIE- UNIT 2 3/4 1-8 Amendment No. g, ~. 4Q, ~.

TABLE 3.3-1 (Continued) TABLE NOTATION

With the protective system trip breakers in the closed position , the CEA drive system capable of CEA withdrawal, and fuel in the reactor vessel.

(a) Trip may be manually bypassed below 0.5% of RATED THERMAL POWER in conjunction with (d) below; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is greater than or equal to 0.5% of RATED THERMAL POWER. (b) Trip may be manually bypassed below 705 psig; bypass shall be automatically removed at or above 705 psig. (c) Trip may be bypassed below 15% of RATED THERMAL POWER; bypass shall be automatically removed when Power Range Neutron Flux power is greater than or equal to 15% of RATED THERMAL POWER. (d) Trip may be bypassed during testing pursuant to Special Test Exception 3.1 0.3. 4 (e) Trip may be bypassed below 10 % and above 15% of RATED THERMAL POWER; bypass shall be automatically removed when Wide Range Logarithmic Neutron Flux power is~ 1 % o- 4 and Power Range Neutron Flux power_::: 15% of RATED THERMAL POWER. (f) Each channel shall be comprised of two trip breakers; actual trip logic shall be one-out-of-two taken twice. (g) There shall be at least two decades of overlap between the Wide Range Logarithmic Neutron Flux Monitoring Channels and the Power Range Neutron Flux Monitoring Channels . ACTION STATEMENTS ACTION 1 - With the number of channels OPERABLE one less than required by the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and/or open the protective system trip breakers. ST. LUCIE- UNIT 2 3/4 3-3 Amendment No. -98, 4-+G

TABLE 3.3-3 ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

1. SAFETY INJECTION (SIAS)

a. Manual (Trip Buttons) 2 1 2 1121314 12

b. Containment Pressure - 4 2 3 11 21 3 131 14 High

c. Pressurizer Pressure - 4 2 3 1, 2 13(a) 131 14 Low

d. Automatic Actuation 2 1 2 1121314 12 Logic

2. CONTAINMENT SPRAY (CSAS)

a. Manual (Trip Buttons) 2 1 2 11 21314 12

b. Containment Pressure- 4 2 3 1(b)l 2(b) l 3(b) 18AI 18B High-High

c. Automatic Actuation 2 1 2 1121314 12 Logic

3. CONTAINMENT ISOLATION (CIAS)

a. Manual CIAS (Trip 2 1 2 1121314 12 Buttons)

b. Safety Injection (SIAS) See Functional Unit 1 for all Safety Injection Initiating Functions and Requirements

c. Containment Pressure- 4 2 3 11 213 131 14 High

d. Containment Radiation- 4 2 3 1, 2, 3 13, 14 High

e. Automatic Actuation 2 1 2 1121314 12 Logic ST. LUCIE - UNIT 2 3/4 3-12 Amendment No. ~. -'1-+G

TABLE 3.3-3 (Continued) ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

4. MAIN STEAM LINE ISOLATION (MSIS)

a. Manual (Trip Buttons) 2 1 2 11213 16

b. Steam Generator 4/steam 2/steam 3/steam 112 13(c) 131 14 Pressure - Low generator generator generator

c. Containment Pressure - 4 2 3 11 2 13 131 14 High

d. Automatic Actuation Logic 2 1 2 112 13 12

5. CONTAINMENT SUMP RECIRCULATION (RAS)

a. Manual RAS (Trip Buttons) 2 1 2 1121314 12

b. Refueling Water 4 2 3 11 21 3 19 Tank- Low

c. Automatic Actuation Logic 2 1 2 11 21 3 12 ST. LUCIE- UNIT 2 3/4 3-13 Amendment No. W , ~. 4-+G

TABLE 3.3-3 (Continued) ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO. CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION

6. LOSS OF POWER (LOV)

a. (1) 4.16 kV Emergency Bus Undervoltage (Loss of Voltage) 2/Bus 2/Bus 1/Bus 1, 2, 3 17 (2) 480 V Emergency Bus 3/Bus 2/Bus 2/Bus 1' 2, 3 17 Undervoltage (Loss of Voltage)

b. (1) 4.16 kV Emergency Bus 3/Bus 2/Bus 2/Bus 1' 2, 3 17 Undervoltage (Degraded Voltage)

(2) 480 V Emergency Bus 3/Bus 2/Bus 2/Bus 1, 2, 3 17 Undervoltage (Degraded Voltage)

7. AUXILIARY FEEDWATER (AFAS)

a. Manual (Trip Buttons) 4/SG 2/SG 4/SG 1, 2, 3 15

b. Automatic Actuation Logic 4/SG 2/SG 3/SG 1, 2, 3 15

c. SG Level (2A/2B) - Low 4/SG 2/SG 3/SG 1' 2, 3 20a, 20b,21

8. AUXILIARY FEEDWATER ISOLATION 4/SG 2/SG 3/SG 1, 2, 3 20a,20b, 21

a. SG 2A- SG 2B Differential Pressure

b. Feedwater Header 2A- 2B 4/SG 2/SG 3/SG 1' 2, 3 20a , 21 Differential Pressure ST. LUCIE- UNIT 2 3/4 3-14 Amendment No. ~. +9, ~. 4+G

TABLE 3.3-3 (Continued) TABLE NOTATION (a) Trip function may be bypassed in this MODE when pressurizer pressure is less than 1836 psia; bypass shall be automatically removed when pressurizer pressure is greater than or equal to 1836 psia. (b) An SIAS signal is first necessary to enable CSAS logic. (c) Trip function may be bypassed in this MODE below 700 psia; bypass shall be automatically removed at or above 700 psia . ACTION OF STATEMENTS ACTION 12 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours. ACTION 13 - With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may continue provided the inoperable channel is placed in the bypassed or tripped condition within 1 hour. The channel shall be returned to OPERABLE status no later than during the next COLD SHUTDOWN . With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below. Process Measurement Circuit Functional Unit Bypassed

1. Containment Pressure - Containment Pressure - High (SIAS, CIAS, CSAS)

Containment Pressure- High (RPS)

2. Steam Generator Pressure - Steam Generator Pressure - Low (MSIS)

AFAS-1 and AFAS-2 (AFAS) Thermal Margin/Low Pressure (RPS) Steam Generator Pressure - Low (RPS)

3. Steam Generator Level - Steam Generator Level - Low (RPS)

If SG-2A, then AFAS-1 (AFAS) If SG-2B, then AFAS-2 (AFAS)

4. Pressurizer Pressure - Pressurizer Pressure - High (RPS)

Pressurizer Pressure- Low (SIAS) Thermal Margin/Low Pressure (RPS) ST. LUCIE- UNIT 2 3/4 3-15 Amendment No. ~. ~ . .:t-49, 4-+G

TABLE 3.3-3 (Continued) TABLE NOTATION ACTION 14 - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, STARTUP and/or POWER OPERATION may continue provided the following conditions are satisfied :

a. Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition within 1 hour.

b. All functional units affected by the bypassed/tripped channel shall also be placed in the bypassed/tripped condition as listed below.

Process Measurement Circuit Functional Unit Bypassed/Tripped

1. Containment Pressure - Containment Pressure- High (SIAS, CIAS , CSAS)

Containment Pressure- High (RPS)

2. Steam Generator Pressure - Steam Generator Pressure- Low (MSIS)

AFAS-1 and AFAS-2 (AFAS) Thermal Margin/Low Pressure (RPS) Steam Generator Pressure - Low (RPS)

3. Steam Generator Level- Steam Generator Level - Low (RPS)

If SG-2A, then AFAS-1 (AFAS) If SG-2B, then AFAS-2 (AFAS)

4. Pressurizer Pressure - Pressurizer Pressure - High (RPS)

Pressurizer Pressure - Low (SIAS) Thermal Margin/Low Pressure (RPS) ACTION 15 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channels to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. ACTION 16 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours or declare the associated valve inoperable and take the ACTION required by Specification 3.7.1.5. ACTION 17 - With the number of OPERABLE Channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program, or place the inoperable channel in the tripped condition and verify that the Minimum Channels OPERABLE requirement is demonstrated within 1 hour; one additional channel may be bypassed for up to 2 hours for surveillance testing per Specification 4.3.2.1. ST. LUCIE- UNIT 2 3/4 3-16 Amendment No. ~ . +3, 4-M

TABLE 3.3-3 (Continued) TABLE NOTATION ACTION 18A - With the number of OPERABLE Channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in either the bypassed or tripped condition and the Minimum Channels OPERABLE requirement is demonstrated within 1 hour. If the inoperable channel can not be restored to OPERABLE status within 48 hours, then place the inoperable channel in the tripped condition .

b. With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed in ACTION 13.

ACTION 18B - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel has been placed in the tripped condition within 1 hour. Restore one of the inoperable channels to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. ACTION 19 - With the number of OPERABLE Channels one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied :

a. Within 1 hour the inoperable channel is placed in either the bypassed or tripped condition . If OPERABILITY cannot be restored within 48 hours, or in accordance with the Risk Informed Completion Time Program be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. The Minimum Channels OPERABLE requirement is met; however, one additional channel may be bypassed for up to 2 hours for surveillance testing per Specification 4.3.2.1.

ST. LUCIE- UNIT 2 3/4 3-16a Amendment No. ~

TABLE 3.3-3 (Continued) TABLE NOTATION ACTION 20 - With the number of channels OPERABLE one less than the Total Number of Channels, operation may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in either the bypassed or tripped condition within 1 hour. If an inoperable SG level channel can not be restored to OPERABLE status within 48 hours, then AFAS-1 or AFAS-2 as applicable in the inoperable channel shall be placed in the bypassed condition .

If an inoperable SG DP or FW Header DP channel can not be restored to OPERABLE status within 48 hours, then both AFAS-1 and AFAS-2 in the inoperable channel shall be placed in the bypassed condition . The channel shall be returned to OPERABLE status no later than during the next COLD SHUTDOWN. b With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed in ACTION 13. . ACTION 21 - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, operation may proceed provided one of the inoperable channels has been bypassed and the other inoperable channel placed in the tripped condition within 1 hour. Restore one of the inoperable channels to OPERABLE status within 48 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours. ST. LUCIE- UNIT 2 3/4 3-16b Amendment No. ~ . 449

TABLE 3.3-4 (Continued) ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION TRIP VALUES FUNCTIONAL UNIT TRIP VALUE ALLOWABLE VALUES

5. CONTAINMENT SUMP RECIRCULATION (RAS)

a. Manual RAS (Trip Buttons) Not Applicable Not Applicable

b. Refueling Water Tank- Low 5.67 feet 4.62 feet to 6.24 feet above tank bottom above tank bottom

c. Automatic Actuation Logic Not Applicable Not Applicable

6. LOSS OF POWER

a. (1) 4.16 kV Emergency Bus Undervoltage ~ 3120 volts ~ 3120 volts (Loss of Voltage)

(2) 480 V Emergency Bus Undervoltage ~ 360 volts ~ 360 volts (Loss of Voltage)

b. (1) 4.16 kV Emergency Bus Undervoltage ~ 3848 volts ~ 3848 volts (Degraded Voltage) with < 10-second time delay with < 10-second time delay (2) 480 V Emergency Bus Undervoltage ~ 432 volts ~ 432 volts (Degraded Voltage)

7. AUXILIARY FEEDWATER (AFAS)

a. Manual (Trip Buttons) Not Applicable Not Applicable

b. Automatic Actuation Logic Not Applicable Not Applicable

c. SG 2A & 2B Level Low ~ 19.0% ~ 18.0%

8. AUXILIARY FEEDWATER ISOLATION

a. Steam Generator L'lP - High _::: 275 psid 89.2 to 281 psid

b. Feedwater Header L'lP - High _::: 150.0 psid 56.0 to 157.5 psid ST. LUCIE- UNIT 2 3/4 3-18 Amendment No. ~. ~. +9

TABLE 4.3-2 ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION SURVEILLANCE REQUIREMENTS CHANNEL MODES FOR WHICH FUNCTIONAL CHANNEL CHANNEL FUNCTIONAL SURVEILLANCE UNIT CHECK CALIBRATION TEST IS REQUIRED

1. SAFETY INJECTION (SIAS)

a. Manual (Trip Buttons) N.A. N.A. SFCP 1,2, 3,4

b. Containment Pressure- High SFCP SFCP SFCP 1, 2, 3

c. Pressurizer Pressure - Low SFCP SFCP SFCP 1,2, 3

d. Automatic Actuation Logic N.A. N.A. SFCP(1), 1,2, 3,4 SFCP(3)

2. CONTAINMENT SPRAY (CSAS)

a. Manual (Trip Buttons) N.A. N.A. SFCP 1,2,3,4

b. Containment Pressure - High-High SFCP SFCP SFCP 1' 2, 3

c. Automatic Actuation Logic N.A. N.A. SFCP(1), 1,2, 3,4 SFCP(3)

3. CONTAINMENT ISOLATION (CIAS)

a. Manual CIAS (Trip Buttons) N.A. N.A. SFCP 1, 2, 3, 4

b. Safety Injection SIAS N.A. N.A. SFCP 1,2, 3,4

c. Containment Pressure- High SFCP SFCP SFCP 1,2, 3

d. Containment Radiation- High SFCP SFCP SFCP 1,2, 3

e. Automatic Actuation Logic SFCP(1),

N.A. N.A. 1, 2,3,4 SFCP(3)

4. MAIN STEAM LINE ISOLATION

a. Manual (Trip Buttons) N.A. N.A. SFCP 1, 2, 3

b. Steam Generator Pressure- Low SFCP SFCP SFCP 1' 2, 3

c. Containment Pressure- High SFCP SFCP SFCP 1, 2, 3

d. Automatic Actuation Logic SFCP(1),

N.A. N.A. 1,2, 3,4 SFCP(3)

5. CONTAINMENT SUMP RECIRCULATION (RAS)

a. Manual RAS (Trip Buttons) N.A. N.A. SFCP N.A.

b. Refueling Water Tank- Low SFCP SFCP SFCP 1,2, 3

c. Automatic Actuation Logic SFCP(1),

N.A. N.A. 1' 2, 3 SFCP(3) 3/4 3-22 Amendment No. W, ~ ST. LUCIE- UNIT 2

TABLE 3.3-1 0 ACCIDENT MONITORING INSTRUMENTATION REQUIRED NUMBER MINIMUM CHANNELS INSTRUMENT OF CHANNELS OPERABLE

1. Containment Pressure 2 1 2 1

2. Reactor Coolant Outlet Temperature- T Hot (Wide Range) 2 1

3. Reactor Coolant Inlet Temperature- T cold (Wide Range)

4. Reactor Coolant Pressure- Wide Range 2 1

5. Pressurizer Water Level 2 1

6. Steam Generator Pressure 2/steam generator 1/steam generator

7. Steam Generator Water Level - Narrow Range 1/steam generator 1/steam generator

8. Steam Generator Water Level -Wide Range 1/steam generator* 1/steam generator*

9. Refueling Water Tank Water Level 2 1

10. Auxiliary Feedwater Flow Rate (Each pump) 1/pump* 1/pump*

11. Reactor Cooling System Subcooling Margin Monitor 2 1

12. PORV Position/Flow Indicator 2/valve*** 1/valve**

13. PORV Block Valve Position Indicator 1/valve** 1/valve**

14. Safety Valve Position/Flow Indicator 1/valve*** 1/valve***

15. Containment Sump Water Level (Narrow Range) 1**** 1****

16. Containment Water Level (Wide Range) 2 1

17. lncore Thermocouples 4/core quadrant 2/core quadrant

18. Reactor Vessel Level Monitoring System 2***** 1*****

These corresponding instruments may be substituted for each other.
- Not required if the PORV block valve is shut and power is removed from the operator.
  - If not available, monitor the quench tank pressure, level and temperature, and each safety valve/PORV discharge piping temperature at least once every 12 hours.
    - The non-safety grade containment sump water level instrument may be substituted.
      - Definition of OPERABLE: A channel consists of eight (8) sensors in a probe of which four (4) sensors must be OPERABLE.

ST. LUCIE- UNIT 2 3/4 3-42 Amendment No. ~. +9, 400

REACTOR COOLANT SYSTEM OPERATING LIMITING CONDITION FOR OPERATION NOTE The lift setting pressure shall correspond to ambient conditions of the valve at nominal operating temperature and pressure. 3.4.2.2 All pressurizer code safety valves shall be OPERABLE with a lift setting of

          .:::, 2410.3 psig and~ 2560.3 psig.

APPLICABILITY: MODES 1, 2, 3, and 4 with all RCS cold leg temperatures > 230°F. ACTION:

a. With one pressurizer code safety valve inoperable, either restore the inoperable valve to OPERABLE status within 15 minutes or in accordance with the Risk Informed Completion Time Program, or be in HOT STANDBY within 6 hours and in HOT SHUTDOWN within the next 6 hours.

b. With two or more pressurizer code safety valves inoperable, be in HOT STANDBY within 6 hours and in HOT SHUTDOWN with all RCS cold leg temperatures at~ 230°F within the next 6 hours.

SURVEILLANCE REQUIREMENTS 4.4.2.2 Verify each pressurizer code safety valve is OPERABLE in accordance with the lnservice Testing Program . Following testing, as-left lift settings shall be within +/- 1% of 2500 psia. ST. LUCIE- UNIT 2 3/4 4-8 Amendment No. 9-1-, .:J..W, .wJ

REACTOR COOLANT SYSTEM 3/4.4.4 PORV BLOCK VALVES LIMITING CONDITION FOR OPERATION 3.4.4 Each Power Operated Relief Valve (PORV) Block valve shall be OPERABLE. No more than one block valve shall be open at any one time. APPLICABILITY: MODES 1, 2 and 3. ACTION:

a. With one or more block valve(s) inoperable, within 1 hour or in accordance with the Risk Informed Completion Time Program either restore the block valve(s) to OPERABLE status or close the block valve(s) and remove power from the block valve(s); otherwise, be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

b. With both block valves open, close one block valve within 1 hour, otherwise be in at least HOT STAND BY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

SURVEILLANCE REQUIREMENTS 4.4.4 Each block valve shall be demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by operating the valve through one complete cycle of full travel unless the block valve is closed with power removed in order to meet the requirements of Action a. or b. above. ST. LUCIE - UNIT 2 3/4 4-10 Amendment No. ~. 4-e, 4-+G, ~

3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3/4.5.1 SAFETY INJECTION TANKS (SIT) LIMITING CONDITION FOR OPERATION 3.5.1 Each Reactor Coolant System safety injection tank shall be OPERABLE with :

a. The isolation valve open,

b. A contained borated water volume of between 1420 and 1556 cubic feet,

c. A boron concentration of between 1900 and 2200 ppm of boron , and

d. A nitrogen cover-pressure of between 500 and 650 psig.

When in MODE 3 with pressurizer pressure is less than 1750 psia, at least three safety injection tanks shall be OPERABLE, each with a minimum pressure of 235 psig and a maximum pressure of 650 psig and a contained water volume of between 1250 and 1556 cubic feet with a boron concentration of between 1900 and 2200 ppm of boron. With all four safety injection tanks OPERABLE, each tank shall have a minimum pressure of 235 psig and a maximum pressure of 650 psig and a contained water volume of between 833 and 1556 cubic feet with a boron concentration of between 1900 and 2200 ppm of boron. APPLICABILITY: MODES 1, 2 and 3 with pressurizer pressure ~ 1750 psia. ACTION:

a. With one SIT inoperable due to boron concentration not within limits, or due to an inability to verify the required water volume or nitrogen cover-pressure, restore the inoperable SIT to OPERABLE status with 72 hours; otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. With one SIT inoperable due to reasons other than those stated in ACTION-a, restore the inoperable SIT to OPERABLE status within 24 hours or in accordance with the Risk Informed Completion Time Program; otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

SURVEILLANCE REQUIREMENTS 4.5.1.1 Each safety injection tank shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying that the borated water volume and nitrogen cover-pressure in the tanks are within their limits, and

2. Verifying that each safety injection tank isolation valve is open.

ST. LUCIE - UNIT 2 3/4 5-1 Amendment No. 4G, 68, 00, 4-00,

                                                                              .w3. ~

EMERGENCY CORE COOLING SYSTEMS 3/4.5.2 ECCS SUBSYSTEMS - OPERATING LIMITING CONDITION FOR OPERATION 3.5.2 Two independent Emergency Core Cooling System (ECCS) subsystems shall be OPERABLE with each subsystem comprised of:

a. One OPERABLE high pressure safety injection pump,

b. One OPERABLE low pressure safety injection pump, and

c. An independent OPERABLE flow path capable of taking suction from the refueling water tank on a Safety Injection Actuation Signal and automatically transferring suction to the containment sump on a Recirculation Actuation Signal, and NOTE One ECCS subsystem charging pump shall satisfy the flow path requirements of Specification 3.1.2.2.a or 3.1.2.2.d. The second ECCS subsystem charging pump shall satisfy the flow path requirements of Specification 3.1.2.2.b or 3.1.2.2.e.

d. One OPERABLE charging pump .

APPLICABILITY: MODES 1, 2, and 3 with pressurizer pressure ~ 1750 psia. ACTION:

a. 1. With one ECCS subsystem inoperable only because its associated LPSI train is inoperable, restore the inoperable subsystem to OPERABLE status within 7 days or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

2. With one ECCS subsystem inoperable for reasons other than condition a.1., restore the inoperable subsystem to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. In the event the ECCS is actuated and injects water into the Reactor Coolant System, a Special Report shall be prepared and submitted to the Commission pursuant to Specification 6.9.2 within 90 days describing the circumstances of the actuation and the total accumulated actuation cycles to date. The current value of the usage factor for each affected safety injection nozzle shall be provided in this Special Report whenever its value exceeds 0.70.

ST. LUCIE- UNIT 2 3/4 5-3 Amendment No. 400, 4-4-9, 4-eJ

CONTAINMENT SYSTEMS CONTAINMENT AIR LOCKS LIMITING CONDITION FOR OPERATION 3.6.1.3 Each containment air lock shall be OPERABLE with:

a. Both doors closed except when the air lock is being used for normal transit entry and exit through the containment, then at least one air lock door shall be closed, and

b. An overall air lock leakage rate in accordance with the Containment Leakage Rate Testing Program.

APPLICABILITY: MODES 1, 2, 3, and 4. ACTION: NOTE If the inner air lock door is inoperable, passage through the OPERABLE outer air lock door is permitted to effect repairs to the inoperable inner air lock door. No more than one airlock door shall be open at any time .

a. With one containment air lock door inoperable:

1. Maintain at least the OPERABLE air lock door closed and either restore the inoperable air lock door to OPERABLE status within 24 hours or lock the OPERABLE air lock door closed .

2. Operation may then continue until performance of the next required overall air lock leakage test provided that the OPERABLE air lock door is verified to be locked closed at least once per 31 days.

3. Otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN .

b. With one or both containment air lock(s) inoperable, except as the result of an inoperable air lock door, maintain at least one air lock door closed in the affected air lock(s) and restore the inoperable air lock to OPERABLE status within 24 hours or in accordance with the Risk Informed Completion Time Program ;

otherwise, be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. ST. LUCIE - UNIT 2 3/4 6-9 Amendment No. ~. gg, 4-+G, 4-M

CONTAINMENT SYSTEMS CONTAINMENT VENTILATION SYSTEM LIMITING CONDITION FOR OPERATION 3.6.1.7 Each containment purge supply and exhaust isolation valve shall be OPERABLE and :

a. Each 48-inch containment purge supply and exhaust isolation valve shall be sealed closed .

b. The 8-inch containment purge supply and exhaust isolation valves may be open for purging and/or venting as required for safety related purposes such as :

1. Maintaining containment pressure within the limits of Specification 3.6.1.4.

2. Reducing containment atmosphere airborne radioactivity and/or improving air quality to an acceptable level for containment access.

APPLICABILITY: MODES 1, 2, 3 and 4. ACTION:

a. With a 48-inch containment purge supply and/or exhaust isolation valve(s) open or not sealed closed , close and/or seal close the open valve(s) or isolate the penetration(s) within 4 hours or in accordance with the Risk Informed Completion Time Program ; otherwise be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

b. With an 8-inch containment purge supply and/or exhaust isolation valve(s) open for reasons other than those stated in Specification 3.6 .1.7.b, close the open 8-inch valve(s) or isolate the penetration(s) within 4 hours or in accordance with the Risk Informed Completion Time Program; otherwise be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

c. With a containment purge supply and/or exhaust isolation valve(s) having a measured leakage rate exceeding the limits of Surveillance Requirements 4.6.1.7.3 and/or 4.6.1 .7.4, within 24 hours or in accordance with the Risk Informed Completion Time Program either restore the inoperable valve(s) to OPERABLE status or isolate the affected penetration flow path by use of at least one closed and de-activated automatic valve with resilient seals or blind flange, verify the affected penetration flowpath is isolated, and perform Surveillance Requirement 4.6.1.7.3 or 4.6.1.7.4 for resilient seated valves closed to isolate the penetration flowpath, otherwise be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

1. Closed and de-activated automatic valve(s) with resilient seals used to isolate the penetration flowpath(s) shall be tested in accordance with either Surveillance Requirement 4.6.1.7.3 for 48-inch valves at least once per 6 months or Surveillance Requirement 4.6.1.7.4 for 8-inch valves at least once per 92 days.

NOTE Verification of isolation devices by administrative means is acceptable when they are located in high radiation areas or they are locked, sealed , or otherwise secured by administrative means.

2. Verify the affected penetration flowpath is isolated once per 31 days following isolation for isolation devices outside containment and prior to entering MODE 4 from MODE 5 for isolation devices inside containment if not performed within the previous 92 days.

ST. LUCIE- UNIT 2 3/4 6-14 Amendment No. ~. ~ . ~

CONTAINMENT SYSTEMS 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS CONTAINMENT SPRAY AND COOLING SYSTEMS LIMITING CONDITION FOR OPERATION 3.6.2.1 Two containment spray trains and two containment cooling trains shall be OPERABLE. APPLICABILITY: Containment Spray System: MODES 1, 2, and MODE 3 with Pressurizer Pressure~ 1750 psia. Containment Cooling System: MODES 1, 2, and 3. ACTION:

1. Modes 1, 2. and 3 with Pressurizer Pressure > 1750 psia:

a. With one containment spray train inoperable, restore the inoperable spray train to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program; otherwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 54 hours.

b. With one containment cooling train inoperable, restore the inoperable cooling train to OPERABLE status within 7 days or in accordance with the Risk Informed Completion Time Program; otherwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

c. With one containment spray train and one containment cooling train inoperable, concurrently implement ACTIONS a. and b. The completion intervals for ACTION a. and ACTION b. shall be tracked separately for each train starting from the time each train was discovered inoperable.

NOTE Action not applicable when second containment spray train intentionally made inoperable.

d. With two containment spray trains inoperable, within 1 hour verify TS 3.7.7, "CREACS," is met, and restore at least one containment spray train to OPERABLE status within 24 hours; otherwise, be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

e. With two containment cooling trains inoperable, restore one cooling train to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program; otherwise be in MODE 3 within the next 6 hours and in MODE 4 within the following 6 hours.

f. With any combination of three or more trains inoperable, enter LCO 3.0.3 immediately.

2. Mode 3 with Pressurizer Pressure < 1750 psia:

a. With one containment cooling train inoperable, restore the inoperable cooling train to OPERABLE status within 72 hours; otherwise be in MODE 4 within the next 6 hours.

b. With two containment cooling trains inoperable, enter LCO 3.0.3 immediately.

ST. LUCIE- UNIT 2 3/4 6-15 Amendment No. ~. +G, 4++, -'1-+S

CONTAINMENT SYSTEMS 3/4.6.3 CONTAINMENT ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.6.3 The containment isolation valves shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: With one or more of containment isolation valve(s) inoperable, maintain at least one isolation valve OPERABLE in each affected penetration that is open and either:

a. Restore the inoperable valve(s) to OPERABLE status within 4 hours or in accordance with the Risk Informed Completion Time Program, or

b. Isolate each affected penetration within 4 hours or in accordance with the Risk Informed Completion Time Program by use of at least one deactivated automatic valve secured in the isolation position, or

c. Isolate each affected penetration within 4 hours or in accordance with the Risk Informed Completion Time Program by use of at least one closed manual valve or blind flange; or

d. Be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

SURVEILLANCE REQUIREMENTS 4.6.3.1 The containment isolation valves shall be demonstrated OPERABLE prior to returning the valve to service after maintenance, repair or replacement work is performed on the valve or its associated actuator, control or power circuit by performance of a cycling test and verification of isolation time. ST. LUCIE- UNIT 2 3/4 6-19 Amendment No. 88, 4-M

PLANT SYSTEMS AUXILIARY FEEDWATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.1.2 At least three independent steam generator auxiliary feedwater pumps and associated flow paths shall be OPERABLE with :

a. Two feedwater pumps , each capable of being powered from separate OPERABLE emergency busses, and

b. One feedwater pump capable of being powered from an OPERABLE steam supply system.

APPLICABILITY: MODES 1, 2, and 3. ACTION:

a. With one auxiliary feedwater pump inoperable, restore the auxiliary feedwater pump to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours.

b. With two auxiliary feedwater pumps inoperable, be in at least HOT STANDBY within 6 hours and in HOT SHUTDOWN within the following 6 hours.

NOTE LCO 3.0.3 and all other LCO Actions requiring MODE changes are suspended until one AFW pump is restored to OPERABLE status.

c. With three auxiliary feedwater pumps inoperable, immediately initiate corrective action to restore at least one auxiliary feedwater pump to OPERABLE status.

d. LCO 3.0.4.b is not applicable.

SURVEILLANCE REQUIREMENTS 4.7.1.2 , Each auxiliary feedwater pump shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

1. Verifying that each valve (manual , power-operated , or automatic) in the flow path that is not locked, sealed , or otherwise secured in position, is in its correct position.

ST. LUCIE- UNIT 2 3/4 7-4 Amendment No. 25, 446, 4-+G ,

                                                                            ~ . 4+9

PLANT SYSTEMS MAIN STEAM LINE ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.7.1.5 Each main steam line isolation valve shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3 and 4. ACTION: MODE 1 - With one main steam line isolation valve inoperable but open, POWER OPERATION may continue provided the inoperable valve is restored to OPERABLE status within 4 hours or in accordance with the Risk Informed Completion Time Program; otherwise, be in at least MODE 2 within the next 6 hours. MODES 2, 3 - With one or both main steam isolation valve(s) inoperable, subsequent and 4 operation in MODES 2, 3 or 4 may proceed provided :

1. The inoperable main steam isolation valves are closed within 8 hours, and

2. The inoperable main steam isolation valves are verified closed once per 7 days.

Otherwise, be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 24 hours. SURVEILLANCE REQUIREMENTS 4.7.1.5 Each main steam line isolation valve shall be demonstrated OPERABLE by verifying full closure within 6.75 seconds when tested pursuant to the lnservice Testing Program. ST. LUCIE- UNIT 2 3/4 7-9 Amendment No. ~. a2, .g.t, 4-+G

PLANT SYSTEMS 3/4.7.3 COMPONENT COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION NOTE When CCW pump 2C is being used to satisfy the requirements of this specification, the alignment of the discharge valves shall be verified to be consistent with the appropriate power supply at least once per 24 hours. Upon receipt of annunciation for improper alignment of the pump 2C motor power in relation to any of its motor-operated discharge valves positions, restore proper system alignment within 2 hours. 3.7.3 At least two independent component cooling water loops shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3, and 4. ACTION: With only one component cooling water loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. SURVEILLANCE REQUIREMENTS 4.7.3 At least two component cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual, power-operated or automatic) servicing safety-related equipment that is not locked, sealed, or otherwise secured in position, is in its correct position.

b. In accordance with the Surveillance Frequency Control Program during shutdown by verifying that each automatic valve servicing safety-related equipment actuates to its correct position on an SIAS test signal.

ST. LUCIE- UNIT 2 3/4 7-13 Amendment No. ~. 4M

PLANT SYSTEMS 3/4.7.4 INTAKE COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION NOTE When ICW pump 2C is being used to satisfy the requirements of this specification, the alignment of the discharge valves must be verified to be consistent with the appropriate power supply at least once per 24 hours. 3.7.4 At least two independent intake cooling water loops shall be OPERABLE. APPLICABILITY: MODES 1, 2, 3, and 4. ACTION: With only one intake cooling water loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. SURVEILLAN CE REQUIREMENTS 4.7.4 At least two intake cooling water loops shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that each valve (manual, power-operated, or automatic) servicing safety-related equipment that is not locked, sealed or otherwise secured in position , is in its correct position.

b. In accordance with the Surveillance Frequency Control Program during shutdown, by verifying that each automatic valve servicing safety-related equipment actuates to its correct position on a SIAS test signal.

3/4 7-14 Amendment No. ~ . .:J..84 ST. LUCIE- UNIT 2

3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1 A.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.1.1 As a minimum , the following A.C. electrical power sources shall be OPERABLE :

a. Two physically independent circuits between the offsite transmission network and the onsite Class 1E distribution system, and

b. Two separate and independent diesel generators, each with:

1. Two separate engine-mounted fuel tanks containing a minimum volume of 200 gallons of fuel each ,

2. A separate fuel storage system containing a minimum volume of 42 ,500 gallons of fuel , and

3. A separate fuel transfer pump.

APPLICABILITY: MODES 1, 2, 3, and 4. ACTION:

a. With one offsite circuit of 3.8.1.1.a inoperable, except as provided in Action f.

below, demonstrate the OPERABILITY of the remaining A. C. sources by performing Surveillance Requirement 4.8.1.1.1 .a within 1 hour and at least once per 8 hours thereafter. Restore the offsite circuit to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. NOTE If the absence of any common-cause failure cannot be confirmed , this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY.

b. With one diesel generator of 3.8.1 .1.b inoperable, demonstrate the OPERABILITY of the A. C. sources by performing Surveillance Requirement 4.8.1 .1.1.a within 1 hour and at least once per 8 hours thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system , an independently testable component , or preplan ned preventative maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1 .2a.4 within 8 hours, unless it can be confirmed that the cause of the inoperable EDG does not exist on the remaining EDG ;

restore the diesel generator to OPERABLE status within 14 days or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. Additionally, within 4 hours from the discovery of concurrent inoperability of required redundant feature(s) (including the steam driven auxiliary feed pump in MODE 1, 2, and 3), declare required feature(s) supported by the inoperable EDG inoperable if its redundant required feature(s) is inoperable. ST. LUCIE - UNIT 2 3/4 8-1 Amendment No. 2a, ~. ~ . 44-a,

                                                                          ~ . ~. 4 ELECTRICAL POWER SYSTEMS ACTION: (Continued)

NOTE If the absence of any common-cause failure cannot be confirmed, this test shall be completed regardless of when the inoperable EDG is restored to OPERABILITY.

c. With one offsite A.C. circuit and one diesel generator inoperable, demonstrate the OPERABILITY of the remaining A. C. sources by performing Surveillance Requirement 4.8.1.1.1 .a within one hour and at least once per 8 hours thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system, an independently testable component, or preplanned preventative maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2a.4 within 8 hours, unless it can be confirmed that the cause of the inoperable EDG does not exist on the remaining EDG. Restore at least one of the inoperable sources to OPERABLE status within 12 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN . Restore the other A.C. power source (offsite circuit or diesel generator) to OPERABLE status in accordance with the provisions of Section 3.8.1.1 ACTION Statement a orb, as appropriate, with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable A. C. power source. Additionally, within 4 hours from the discovery of concurrent inoperability of required redundant feature(s)

(including the steam driven auxiliary feed pump in MODE 1, 2, and 3), declare required feature(s) supported by the inoperable EDG inoperable if its redundant required feature(s) is inoperable. ST. LUCIE- UNIT 2 3/4 8-2 Amendment No. 2a, ~. +8, 42-J, 4 ELECTRICAL POWER SYSTEMS ACTION: (Continued)

d. With two of the required offsite A. C. circuits inoperable, restore one of the inoperable offsite sources to OPERABLE status within 24 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours. Following restoration of one offsite source, follow ACTION Statement a. with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable offsite A. C. circuit.

e. With two of th~ above required diesel generators inoperable, demonstrate the OPERABILITY of two offsite A. C. circuits by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour and at least once per 8 hours thereafter; restore one of the inoperable diesel generators to OPERABLE status within 2 hours or be in the at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN. Following restoration of one diesel generator unit, follow ACTION Statement b. with the time requirement of that ACTION Statement based on the time of initial loss of the remaining inoperable diesel generator.

f. With one Unit 2 startup transformer (2A or 2B) inoperable and with a Unit 1 startup transformer (1A or 1B) connected to the same A orB offsite power circuit and administratively available to both units, then should Unit 1 require the use of the startup transformer administratively available to both units, Unit 2 shall demonstrate the operability of the remaining A. C. sources by performing Surveillance Requirement 4.8 .1.1.1 a. within 1 hour and at least once per 8 hours thereafter. Restore the inoperable startup transformer to OPERABLE status within 72 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and COLD SHUTDOWN within the following 30 hours.

g. LCO 3.0.4.b is not applicable to diesel generators.

SURVEILLANCE REQUIREMENTS 4.8.1.1 .1 Each of the above required independent circuits between the offsite transmission network and the onsite Class 1E distribution system shall be:

a. Determined OPERABLE in accordance with the Surveillance Frequency Control Program by verifying correct breaker alignments, indicated power availability; and

b. Demonstrated OPERABLE in accordance with the Surveillance Frequency Control Program by transferring (manually and automatically) unit power supply from the normal circuit to the alternate circuit.

4.8.1.1.2 Each diesel generator shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by:

ST. LUCIE - UNIT 2 3/4 8-3 Amendment No. ~. ~. ~ . 4-+G,

                                                                             ~ . 4M

ELECTRICAL POWER SYSTEMS 3/4.8.2 D.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.2.1 As a minimum the following D.C. electrical sources shall be OPERABLE:

a. 125-volt Battery bank No. 2A and a full capacity charger.

b. 125-volt Battery bank No. 2B and a full capacity charger.

APPLICABILITY: MODES 1, 2, 3, and 4. ACTION:

a. With one of the required battery banks inoperable, restore the inoperable battery bank to OPERABLE status within 2 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN.

b. With one of the required full capacity chargers inoperable, demonstrate the OPERABILITY of its associated battery banks by performing Surveillance Requirement 4.8.2.1 a.1 within 1 hour, and at least once per 8 hours thereafter.

If any Category A limit in Table 4.8-2 is not met, declare the battery inoperable. SURVEILLANCE REQUIREMENTS 4.8.2.1 Each 125-volt battery bank and charger shall be demonstrated OPERABLE:

a. In accordance with the Surveillance Frequency Control Program by verifying that:

1. The parameters in Table 4.8-2 meet the Category A limits, and

2. The total battery terminal voltage is greater than or equal to 129-volts on float charge.

ST. LUCIE- UNIT 2 3/4 8-10 Amendment No. 4-M, ~

ELECTRICAL POWER SYSTEMS ACTION:

a. With one of the required trains of A. C. Emergency busses not fully energized, re-energize the train within 8 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

b. With one A.C . Instrument Bus either not energized from its associated inverter, or with the inverter not connected to its associated D.C. Bus: (1) re-energize the A.C. Instrument Bus within 2 hours or in accordance with the Risk Informed Completion Time Program , or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours and (2) re-energize the A. C. Instrument Bus from its associated inverter connected to its associated D.C. Bus within 24 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in HOT SHUTDOWN within the following 6 hours. LCO 3.0.4.a is not applicable when entering HOT SHUTDOWN .

c. With one D.C. Bus not energized from its associated Battery Bank, re-energize the D.C. Bus from its associated Battery Bank within 2 hours or in accordance with the Risk Informed Completion Time Program, or be in at least HOT STANDBY within the next 6 hours and in COLD SHUTDOWN within the following 30 hours.

SURVEILLANCE REQUIREMENTS 4.8.3.1 The specified busses shall be determined energized in the required manner in accordance with the Surveillance Frequency Control Program by verifying correct breaker alignment and indicated voltage on the busses. ST. LUCIE- UNIT 2 3/4 8-15 Amendment No . .:t+d, 4M

ADMINISTRATIVE CONTROLS

q. Surveillance Frequency Control Program This program provides controls for Surveillance Frequencies. The program shall ensure that Surveillance Requirements specified in the Technical Specifications are performed at intervals sufficient to assure the associated Limiting Conditions for Operation are met.

a. The Surveillance Frequency Control Program shall contain a list of frequencies of those Surveillance Requirements for which the frequency is controlled by the program .

b. Changes to the frequencies listed in the Surveillance Frequency Control Program shall be made in accordance with NEI 04-10, "Risk-Informed Method for Control of Surveillance Frequencies," Revision 1.

c. The provisions of Surveillance Requirements 4.0.2 and 4.0.3 are applicable to the frequencies established in the Surveillance Frequency Control Program.

r. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09 , "Risk-Informed Technical Specifications Initiative 4b: Risk-Managed Technical Specifications (RMTS) Guidelines, "

Revision 0-A, November 2006. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2;

c. When a RICT is being used, any plant configuration change within the scope of the Risk Informed Completion Time Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration .

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e. , not the RICT) or 12 hours after the plant configuration change, whichever is less.

3. Revising the RICT is not required If the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

ST. LUCIE - UNIT 2 6-16 Amendment No. d, ~ . ~. 4-4-1-, 4+J

ADMINISTRATIVE CONTROLS 6.9 REPORTING REQUIREMENTS ROUTINE REPORTS 6.9.1 In addition to the applicable reporting requirements of Title 10, Code of Federal Regulations, the following reports shall be submitted to the NRC. STARTUP REPORT 6.9.1 .1 A summary report of plant startup and power escalation testing shall be submitted following (1) receipt of an operating license, (2) amendment to the license involving a planned increase in power level, (3) installation of fuel that has a different design or has been manufactured by a different fuel supplier; and (4) modifications that may have significantly altered the nuclear, thermal or hydraulic performance of the plant. 6.9 .1.2 The startup report shall address each of the tests identified in the FSAR and shall include a description of the measured values of the operating conditions or characteristics obtained during the test program and a comparison of these values with design predictions and specifications. Any corrective actions that were required to obtain satisfactory operation shall also be described. Any additional specific details required in license conditions based on other commitments shall be included in this report. 6.9.1 .3 Startup reports shall be submitted within (1) 90 days following completion of the startup test program, (2) 90 days following resumption or commencement of commercial power operation , or (3) 9 months following initial criticality, whichever is earliest. If the Startup Report does not cover all three events (i.e. , initial criticality, completion of startup test program, and resumption or commencement of commercial operation), supplementary reports shall be submitted at least every three months until all three events have been completed. ST. LUCIE- UNIT 2 6-16a Amendment No.

L-2017-007 ATTACHMENT 7 St. Lucie Unit 1 Markup ofTechnical Specifications Bases

L-2017-007 Attachment 7 Page 1 of 5 INSERT 1 Alternatively, a Completion Time can be determined in accordance with the Risk Informed Completion Time Program.

L-2017-007 Attachment 7 Paae 2 of 5 1SECTION NO .: PAGE: TITLE: TECHNICAL SPECIFICATIONS 3/4.5 BASES ATTACHMENT 7 OF ADM-25 .04 3 of 8 REVISION NO.: EMERGENCY CORE COOLING SYSTEMS (ECCS) 7 ST. LUCIE UNIT 1 i BASES FOR SECTION 3/4.5 3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) BASES 3/4.5.1 SAFETY INJECTION TANKS The OPERABILITY of each of the RCS safety injection tanks ensures that a sufficient volume of borated water will be immediately forced into the reactor core through each of the cold legs in the event the RCS pressure falls below the pressure of the safety injection tanks. This initial surge of water into the core provides the initial cooling mechanism during large RCS pipe ruptures. The limits on safety injection tank volume, boron concentration and pressure ensure that the assumptions used for safety injection tank injection in the accident analysis are met. The limit of 72 hours for operation with an SIT that is inoperable due to boron concentration not within limits, or due to the inability to verify liquid volume or cover-pressure, considers that the volume of the SIT is still available for injection in the event of a LOCA. If one SIT is inoperable for other reasons, the SIT may be unable to perform its safety function and, based on probability risk assessment, operation in this condition is limited to 24 hours.

                 !INSERT 1     I

L-2017-007 1SECTION NO.: TITLE: TECHNICAL SPECIFICATIONS 3/4.5 BASES ATTACHMENT 7 OF ADM-25.04 4 of8': REVISION NO.: EMERGENCY CORE COOLING SYSTEMS (ECCS) 7 ST. LUCIE UNIT 1 3/4.5 EMERGENCY CORE COOLING SYSTEMS {ECCS) (continued) BASES (continued) 3/4.5.2 and 3/4.5.3 ECCS SUBSYSTEMS The OPERABILITY of two separate and independent ECCS subsystems ensures that sufficient emergency core cooling capability will be available in the event of a LOCA assuming the loss of one subsystem through any single failure consideration. Either subsystem operating in conjunction with the safety injection tanks is capable of supplying sufficient core cooling to limit the peak cladding temperatures within acceptable limits for all postulated break sizes ranging from the double ended break of the largest RCS cold leg pipe downward. In addition, each ECCS subsystem provides long term core cooling capability in the recirculation mode during the accident recovery period. Managing of gas voids is important to ECCS OPERABILITY. TS 3.5.2.c and 3.5.3.a require that ECCS subsystem(s) have an independent OPERABLE flow path capable of automatically transferring suction to the containment sump on a Recirculation Actuation Signal. The containment sump is defined as the area of containment below the minimum flood level in the vicinity of the containment sump strainers. Therefore, the LCOs are satisfied when an independent OPERABLE flow path to the containment sump strainer is available. TS 3.5.2.d requires that an ECCS subsystem(s) have OPERABLE charging pump and associated flow path from the BAMT(s) . Reference toTS 3.1.2.2 requires that the Train A charging pump flowpath is from the BAMT(s) through the boric acid makeup pump(s). The Train B charging pump flowpath is from the BAMT(s) through the gravity feed valve(s). INSERT 1 TS 3. . , TION a.1. provides an allowed outage/action completion time (AOT) of up to from initial discovery of failure to meet the LCO provided the affected EC system is inoperable only because its associated LPSI train is inoperabl . This 7 day AOT is based on the findings of a deterministic and probabilistic safety analysis and is referred to as a "risk informed" AOT extension. Entry into this ACTION requires that a risk assessment be performed in accordance with the Configuration Risk Management Program (CRMP) which is described in the ER /'J\ 100 2002, that implements the Maintenanoe Rule pursuant to 10 CFR 50.65.

L-2017-007 SECTION NO.: TITLE: TECHNICAL SPECIFICATIONS 3/4.6 BASES ATTACHMENT 8 OF ADM-25.04 REVISION NO. : CONTAINMENT SYSTEMS 14 ST. LUCIE UNIT 1 3/4.6 CONTAINMENT SYSTEMS (continued) BASES (continued) 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS 3/4.6.2.1 CONTAINMENT SPRAY AND COOLING SYSTEMS The OPERABILITY of the containment spray and cooling systems ensures that depressurization and cooling capability will be available to limit post-accident pressure and temperature in the containment to acceptable values. During a Design Basis Accident (DBA), at least one containment cooling train and one containment spray train are capable of maintaining the peak pressure and temperature within design limits. One containment spray train has the capability, in conjunction with the Spray Additive System, to remove iodine from the containment atmosphere and maintain concentrations below those assumed in the safety analyses. To ensure that these conditions can be met considering single-failure criteria , two spray trains and two cooling trains must be OPERABLE. Managing of gas voids is important to containment spray system OPERABILITY . The 72 hour action interval specified in ACTION 1.a and ACTION 1.e, and INSERT 1 the 7 day action interval specified in ACTION 1.b take into account the ant heat removal capability and the iodine removal capability of the remammg rable systems, and the low probability of a DBA occurring during this perio . It is possible to alternate between Actions in such a manner that operation could continue indefinitely without ever restoring systems to meet the LCO; however, doing so would be inconsistent with the basis for the Action Time. Alternating between Actions in order to continue operation indefinitely while not meeting the LCO is not allowed. If the system(s) cannot be restored to OPERABLE status within the specified completion time, alternate actions are designed to bring the unit to a mode for which the LCO does not apply. The extended interval (54 hours) specified in ACTION 1.a to be in MODE 4 includes 48 hours of additional time for restoration of the inoperable CS train, and takes into consideration the reduced driving force for a release of radioactive material from the RCS when in MODE 3. With two required containment spray trains inoperable, at least one of the required containment spray trains must be restored to OPERABLE status within 24 hours. Both trains of containment cooling must be OPERABLE or Action e is also entered. The Action is modified by a Note stating it is not applicable if the second containment spray train is intentionally declared inoperable. The Action does not apply to voluntary removal of redundant system or components from service. The Action is only applicable if one train is inoperable for any reason and the second train is discovered to be inoperable, or if both trains are discovered to be inoperable at the same time. In addition , LCO 3.7.7, "Control Room Emergency Ventilation System ," must be verified to be met within 1 hour. The components in this degraded condition are capable of providing greater than 100% of the heat removal needs after an accident.

L-2017-007 SECTION NO.: TITLE: TECHNICAL SPECIFICATIONS 3/4.8 BASES ATTACHMENT 10 OF ADM-25.04 REVISION NO. : ELECTRICAL POWER SYSTEMS 7 ST. LUCIE UNIT 1 3/4.8 ELECTRICAL POWER SYSTEMS (continued) BASES (continued) INSERT 1 TS 3.8.1.1, ACTION " provides an allowed outage/action completion time (AOT) of up to 1 ys tote-restore a single inoperable diesel generator to operable status. * *

probabilistic safety analysis and is referred to as a "risk informed" 1\0T.

Entry into this action requires that a risk assessment be performed in accordance 'A'ith the Configuration Risk Management Program (CRMPt,

              *.vhich is described in the Administrative Procedure that implements the Maintenance Rule pursuant to 10 CFR 50.65.

All EDG inoperabilities must be investigated for common-cause failures regardless of how long the EDG inoperability persists. When one diesel generator is inoperable, required ACTIONS 3.8.1.1 .b and 3.8.1 .1.c provide an allowance to avoid unnecessary testing of EDGs. If it can be determined that the cause of the inoperable EDG does not exist on the remaining OPERABLE EDG , then SR 4.8.1 .1.2.a.4 does not have to be performed. Eight (8) hours is reasonable to confirm that the OPERABLE EDG is not affected by the same problem as the inoperable EDG. If it cannot otherwise be determined that the cause of the initial inoperable EDG does not exist on the remaining EDG , then satisfactory performance of SR 4.8.1.1.2.a.4 suffices to provide assurance of continued OPERABILITY of that EDG . If the cause of the initial inoperability exists on the remaining OPERABLE EDG, that EDG would also be declared inoperable upon discovery, and ACTION 3.8.1.1.e would be entered . Once the failure is repaired (on either EDG), the common-cause failure no longer exists. Action g prohibits the application of LCO 3.0.4.b to an inoperable diesel generator. There is an increased risk associated with entering a MODE or other specified condition in the Applicability with an inoperable diesel generator and the provisions of LCO 3.0.4.b, which allow entry into a MODE or other specified condition in the Applicability with the LCO not met after performance of a risk assessment addressing inoperable systems and components , should not be applied in this circumstance. Ambient conditions are the normal standby conditions for the diesel engines. Any normally running warmup systems should be in service and operating, and manufacturer's recommendations for engine oil and water temperatures and other parameters should be followed. The OPERABILITY of the minimum specified A. C. and D.C. power sources and associated distribution systems during shutdown and refueling ensures that 1) the facility can be maintained in the shutdown or refueling condition for extended time periods and 2) sufficient instrumentation and control capability is available for monitoring and maintaining the facility status.

L-2017-807 ATTACHMENT 8 St. Lucie Unit 2 Markup of Technical Specifications Bases

L~2017-007 Attachment 8 Page 1 of 5 INSERT 1 Alternatively, a Completion Time can be determined in accordance with the Risk Informed Completion Time Program.

L-2017-007 Attachment 8 Pa e 2 of 5 SECTION NO.: PAGE: TITLE: TECHNICAL SPECIFICATION S 3/4.5 BASES ATTACHMENT 7 OF ADM-25.04 REVISION NO.: EMERGENCY CORE COOLING SYSTEMS (ECCS) 5 ST. LUCIE UNIT 2 BASES FOR SECTION 3/4.5 3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) BASES 3/4.5.1 SAFETY INJECTION TANKS The OPERABILITY of each of the Reactor Coolant System (RCS) safety injection tanks ensures that a sufficient volume of borated water will be immediately forced into the reactor core through each of the cold legs in the event the RCS pressure falls below the pressure of the safety injection tanks . This initial surge of water into the core provides the initial cooling mechanism during large RCS pipe ruptures . The limits on safety injection tank volume, boron concentration, and pressure ensure that the assumptions used for safety injection tank injection in the safety analysis are met. The safety injection tank power-operated isolation valves are considered to be "operating bypasses" in the context of IEEE Std . 279-1971, which requires that bypasses of a protective function be removed automatically whenever permissive conditions are not met. In addition, as these safety injection tank isolation valves fail to meet single failure criteria, removal of power to the valves is required. The limit of 72 hours for operation with an SIT that is inoperable due to boron concentration not within limits, or due to the inability to verify liquid volume or cover-pressure, considers that the volume of the SIT is still available for injection in the event of a LOCA. If one SIT is inoperable for other reasons, the SIT may be unable to perform its safety function and, based on probability risk assessment, operation in this condition is limited to 24 hours. ~ INSERT 1 I The practice of calibrating and testing the SIT isolation valve interlock function below 515 psia (the current plant practice is to set and test the interlock function at 500 psia) meets the requirements of Technical Specification Surveillance 4.5.1.1 .d.1. The staff accepted that testing the SIT isolation interlock at a more conservative setpoint demonstrates operability at and above the setpoint (NRC letter from William C. Gleaves to J.A. Stall dated November 2, 1999, subject "St. Lucie Unit 2-Amendment Request Regarding Safety Injection Tank and Shutdown Cooling System Isolation Interlock Surveillances (TAC No. MA5619) ."

L-2017-007 SECTION NO.: TITLE: TECHNICAL SPECIFICATIONS 3/4.5 BASES ATTACHMEN T 7 OF ADM-25.04 4 of8

REVISION NO.: EMERGENCY CORE COOLING SYSTEMS (ECCS) 5 ST. LUCIE UNIT 2 3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) (continued)

BASES (continued) 3/4.5.2 and 3/4.5.3 ECCS SUBSYSTEMS The OPERABILITY of two separate and independent ECCS subsystems ensures that sufficient emergency core cooling capability will be available in the event of a LOCA assuming the loss of one subsystem through any single failure consideration. Either subsystem operating in conjunction with the safety injection tanks is capable of supplying sufficient core cooling to limit the peak cladding temperatures within acceptable limits for all postulated break sizes ranging from the double-ended break of the largest RCS hot leg pipe downward. In addition, each ECCS subsystem provides long-term core cooling capability in the recirculation mode during the accident recovery period. Managing of gas voids is important to shutdown cooling system OPERABILITY. TS 3.5.2.c and 3.5.3 require that ECCS subsystem(s) have an independent OPERABLE flow path capable of automatically transferring suction to the containment on a Recirculation Actuation Signal. The containment sump is defined as the area of containment below the minimum flood level in the vicinity of the containment sump strainers. Therefore, the LCOs are satisfied when an independent OPERABLE flow path to the containment sump strainer is available. TS 3.5.2.d requires that an ECCS subsystem(s) have an OPERABLE charging pump and associated flow path from the BAMT(s). Reference to TS 3.1.2.2 requires that the one charging pump flow path is from the BAMT(s) through the boric acid makeup pump(s). The second charging pump flowpath is from the BAMT(s) through the gravityr.<:Ol:~~IL.<:O.i:l.-, INSERT 1 TS 3.5.2, ACTION a.1. provides an a lowed outage/action completion time (AOT) of up to 7 days from initial dis avery of failure to meet the LCO provided the affected ECCS subsys m is inoperable only because its associated LPSI train is inoperable. This 7 day AOT is based on the findings of a deterministic and probabilistic safety analysis and is referred to as a "risk informed" AOT extension. Entry into this ACTION requires that a risk assessment be performed in accordance with the Configuration Risk Management Program (CRMP) *.vhich is described in ER M 100 2002, that implements the Maintenance Rule pursuant to 10 CFR 50.65. In Mode 3 with RCS pressure < 1750 psia and in Mode 4, one OPERABLE ECCS subsystem is acceptable without single failure consideration on the basis of the stable reactivity condition of the reactor and the limited core cooling requirements.

L-201 7-007 Attachment 8 Pa e 4 of 5 SECTION NO. : PAGE: TITLE: TECHNICAL SPECIFICATIONS 3/4.6 BASES ATTACHMENT 8 OF ADM-25.04 REVISION NO. : CONTAINMENT SYSTEMS 17 ST. LUCIE UNIT 2 3/4.6 CONTAINMENT SYSTEMS (continued) BASES (continued) 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS 3/4.6.2.1 CONTAINMENT SPRAY AND COOLING SYSTEMS The OPERABILITY of the containment spray and cooling systems ensures that depressurization and cooling capability will be available to limit post-accident pressure and temperature in the containment to acceptable values . During a Design Basis Accident (DBA), at least one containment cooling train and one containment spray train are capable of maintaining the peak pressure and temperature within design limits. One containment spray train has the capability, in conjunction with the Iodine Removal System, to remove iodine from the containment atmosphere and maintain concentrations below those assumed in the safety analyses. To ensure that these conditions can be met considering single-failure criteria, two spray trains and two cooling trains must be OPERABLE. Managing of gas voids is important to shutdown cooling system OPERABILITY. The 72 hour action interval specified in ACTION 1.a and ACTION 1.e, and the 7 day action interval specified in ACTION 1.b take into account the redundant INSERT 1 heat removal capability and the iodine removal capability of the remaining o a le systems, and the low probability of a DBA occurring during this perio . It is possible to alternate between Actions in such a manner that operation could continue indefinitely without ever restoring systems to meet the LCO; however, doing so would be inconsistent with the basis for the Action Time. Alternating between Actions in order to continue operation indefinitely while not meeting the LCO is not allowed. If the system(s) cannot be restored to OPERABLE status within the specified completion time, alternate actions are designed to bring the unit to a mode for which the LCO does not apply. The extended interval (54 hours) specified in ACTION 1.a to be in MODE 4 includes 48 hours of additional time for restoration of the inoperable CS train, and takes into consideration the reduced driving force for a release of radioactive material from the RCS when in MODE 3. With two required containment spray trains inoperable, at least one of the required containment spray trains must be restored to OPERABLE status within 24 hours . Both trains of containment cooling must be OPERABLE or Action e is also entered. The Action is modified by a Note stating it is not applicable if the second containment spray train is intentionally declared inoperable. The Action does not apply to voluntary removal of redundant systems or components from service. The Action is only applicable if one train is inoperable for any reason and the second train is discovered to be inoperable , or if both trains are discovered to be inoperable at the same time. In addition , LCO 3.7.7, "CREACS," must be verified to be met within 1 hour. The components in this degraded condition are capable of providing a greater than 100% of the heat removal needs after an accident. The Allowed Outage time is based on Reference 1 which demonstrated that the 24-hour Allowed Outage.

L- 2017-007 Attachment 8 Pa e 5 of 5 SECTION NO.: PAGE: . TITLE: TECHNICAL SPECIFICATIONS 3/4.8 BASES ATTACHMENT 10 OF ADM-25.04 REVISION NO.: ELECTRICAL POWER SYSTEMS 8 ST. LUCIE UNIT 2 3/4.8 ELECTRICAL POWER SYSTEMS (continued) BASES (continued) 3/4.8.1, 3/4.8.2 and 3/4.8.3 A.C. SOURCES, D.C. SOURCES and ONSITE POWER DISTRIBUTION SYSTEMS (continued) The four hour completion time upon discovery that an opposite train required feature is inoperable is to provide assurance that a loss of offsite power, during the period that a EDG is inoperable, does not result in a complete loss of safety function of critical redundant required features. The four hour completion time allows the operator time to evaluate and repair any discovered inoperabilities. This completion time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock." The four hour completion time only begins on discovery that both an inoperable EDG exists and a required feature on the other train is inoperable. INSERT 1 TS 3.8.1.1, ACTI N "b" provides an allowed outage/action completion time (AOT) of up to 1 days to restore a single inoperable diesel generator to operable status. * * *

probabilistic safety analysis and is referred to as a "risk informed" 1\0T.

Entry into this action requires that a risk assessment be performed in accordance 'Nith the Configuration Risk Management Program (CRMP), which is described in the Administrative Procedure that implements the Maintenance Rule pursuant to 10 CFR 50.65. All EDG inoperabilities must be investigated for common-cause failures regardless of how long the EDG inoperability persists. When one diesel generator is inoperable, required ACTIONS 3.8.1.1.b and 3.8.1.1 .c provide an allowance to avoid unnecessary testing of EDGs. If it can be determined that the cause of the inoperable EDG does not exist on the remaining OPERABLE EDG, then SR 4.8.1.1.2.a.4 does not have to be performed. Eight (8) hours is reasonable to confirm that the OPERABLE EDG is not affected by the same problem as the inoperable EDG. If it cannot otherwise be determined that the cause of the initial inoperable EDG does not exist on the remaining EDG, then satisfactory performance of SR 4.8.1.1.2.a.4 suffices to provide assurance of continued OPERABILITY of that EDG. If the cause of the initial inoperability exists on the remaining OPERABLE EDG, that EDG would also be declared inoperable upon discovery, and ACTION 3.8.1.1.e would be entered. Once the failure is repaired (on either EDG), the common-cause failure no longer exists.}}

L-2017-007, Supplement to License Amendment Request to Adopt Risk Informed Completion Times TSTF-505, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b.

Text

References:

Navigation menu

L-2017-007, Supplement to License Amendment Request to Adopt Risk Informed Completion Times TSTF-505, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b.

Text

References:

Navigation menu

Search