ML021410289

Transmittal of Ginna Station Emergency Action Level (EAL) Technical Basis, Rev. 028

ML021410289
Person / Time
Site:	Ginna
Issue date:	05/15/2002
From:	Rochester Gas & Electric Corp
To:	Vissing G Document Control Desk, Office of Nuclear Reactor Regulation
References
Download: ML021410289 (135)

Text

ROCHESTER GAS & ELECTRIC CORPORATION DOCUMENT CONTROL Document Transmittal Transmittal: 200205026 010 To: DOCUMENT CONTROL DESK Date: 05/15/2002 US NRC Holder: 1217 ATT: GUY VISSING PROJECT DOCTORATE 1-1 WASHINGTON DC 20555 LISTED BELOW ARE NEW OR REVISED CONTROLLED DOCUMENTS. REVIEW THE ATTACHED INSTRUCTION LETTER (IF APPLICABLE), AND UPDATE YOUR CONTROLLED DOCUMENT IN ACCORDANCE WITH EP-3-S-0901 Doc Id Doc Title Rev Rev Date Qty EAL-TECHBASIS EAL TECHNICAL BASIS 028 05/15/2002 1 Receipt Acknowledgement and Action Taken:

Signature Date Return ENTIRE FORM to: Rochester Gas & Electric Corporation Ginna Station - Records Management 1503 Lake Road Ontario, New York 14519 1-o0r5

ROCHESTER GAS AND ELECTRIC CORPORATION

• 89 EAST AVENUE, ROCHESTER, N.Y. 14649-0001 TELEPHONE AýEA CoEE 546-2700 Date: May 15, 2002 To: Emergency Action Level Technical Bases Copyholders (EAL Technical Basis Manual)

Subject:

EAL Technical Basis The Emergency Action Levels Technical Bases has been revised.

Instructions:

> Remove and discard EAL Technical Bases, Revision 27

> Replace with EAL Technical Bases, Revision 28 - Effective: 5/15/02 If you have any questions on this regarding this update, please contact Peter Polfleit at (585) 771-6772.

Please return the "Receipt Acknowledgement" sheet to Records Management Thank you for your cooperation.

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 New York EAL Upgrade Project R.E. Ginna Emergency Action Levels Technical Basis Revision 28 Approved 05/15/02

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 PURPOSE The purpose of this document is to provide an explanation and rationale for each of the emergency action levels (EALs) included in the EAL Upgrade Program for R.E. Ginna Nuclear Power Station (REGNPS). It is also intended to facilitate the review process of the REGNPS EALs and provide historical documentation for future reference. This document is also intended to be utilized by those individuals responsible for implementation of EPIP-1 -0 "Ginna Station Event Evaluation and Classification" as a technical reference and aid in EAL interpretation.

DISCUSSION EALs are the plant-specific indications, conditions or instrument readings which are utilized to classify emergency conditions defined in the REGNPS Emergency Plan.

Subsequent to the acceptance by the NRC of NUMARC/NESP-007 "Methodology for Development of Emergency Action Levels" as an acceptable alternative to the NUREG 0654 EAL guidance, the four nuclear utilities in the State of New York decided to perform a joint implementation of the new methodology. This upgrade project involved the following plants:

"* Nine Mile Point Unit 1

"* Nine Mile Point Unit 2

"* James A. FitzPatrick Nuclear Power Plant

"* Indian Point Station 2

"* Indian Point 3 Nuclear Power Station

"* R.E. Ginna Nuclear Power Station While the upgraded EALs are site specific, an objective of the upgrade project was to ensure conformity and consistency between the sites to the extent possible.

The revised EALs were derived from the Initiating Conditions and example EALs given in the REGNPS Plant-Specific EAL Guideline (PEG). The PEG is the REGNPS interpretation of the NUMARC methodology for developing EALs. The PEG identifies deletions from the NUMARC methodology by striking out words and phrases that are not applicable to REGNPS; additions are identified by underlining new words and phrases. The source of documents for PEG changes from NUMARC methodology are listed in the references section of the PEG.

Many of the EALs derived from the NUMARC methodology are fission product barrier based.

That is, the conditions which define the EALs are based upon loss or potential loss of one or more of the three fission product barriers.

1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 The primary fission product barriers are:

A. Reactor Fuel Cladding: The fuel cladding is comprised of the zirconium tubes which house the ceramic uranium oxide pellets along with the end plugs which are welded into each end of the fuel rods.

B. Reactor Coolant System (RCS): The RCS is comprised of the reactor vessel shell, vessel head, vessel nozzles and penetrations and all primary systems directly connected to the reactor vessel up to the first containment isolation valve.

C. Containment: The containment is comprised of the vapor containment structure and all isolation valves required to maintain containment integrity under accident conditions.

The following criteria serves as the bases for event classification related to fission product barrier loss (Refer to Attachment A):

Unusual Event:

Any loss or potential loss of containment Alert:

Any loss or any potential loss of either fuel clad or RCS Site Area Emergency:

Any loss of both fuel clad and RCS or Any potential loss of both fuel clad and RCS or Any potential loss of either fuel clad or RCS with a loss of any additional barrier General Emergency:

Loss of any two barriers with loss or potential loss of a third Those EALs which reference one or more of the fission product barrier IC designators (FC, RCS and PC) in the PEG Reference section of the technical bases are derived from the Fission Product Barrier Analysis. The analysis entailed an evaluation of every combination of the plant specific barrier loss/potential loss indicators applied to the above criteria.

Where possible, the EALs have been made consistent with and utilize the conditions defined in the REGNPS Critical Safety Function Status Trees (CSFSTs). While the symptoms that drive operator actions specified in the CSFSTs are not indicative of all possible conditions which warrant emergency classification, they do define the symptoms, independent of initiating events, for which reactor plant safety and/or fission product barrier integrity are threatened. Where these symptoms are clearly representative of one of the PEG Initiating Conditions, they have been utilized as an EAL. This allows for rapid classification of emergency situations based on plant conditions without the need for additional evaluation or event diagnosis. Although some of the EALs presented here are based on conditions defined in the CSFSTs, classification of emergencies using these EALs is not dependent upon Emergency Operating Procedures (EOPs) entry or execution. The EALs can be utilized independently or in conjunction with the EOPs.

2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 To the extent possible, the EALs are symptom based. That is, the action level is defined by values of key plant operating parameters which identify emergency or potential emergency conditions. This approach is appropriate because it allows the full scope of variations in the types of events to be classified as emergencies. But, a purely symptom based approach is not sufficient to address all events for which emergency classification is appropriate. Particular events to which no predetermined symptoms can be ascribed have also been utilized as EALs since they may be indicative of potentially more serious conditions not yet fully realized.

The EALs are grouped into nine categories to simplify their presentation and to promote a rapid understanding by their users. These categories are:

1. CSFST Status

2. Reactor Fuel

3. Reactor Coolant System

4. Containment

5. Radioactivity Release / Area Radiation

6. Electrical Failures

7. Equipment Failures

8. Hazards

9. Other Categories 1 through 5 are primarily symptom based. The symptoms are indicative of actual or potential degradation of either fission product barriers or personnel safety.

Categories 6, 7 and 8 are event based. Electrical Failures are those events associated with losses of either AC or vital DC electrical power. Equipment Failures are abnormal and emergency events associated with vital plant system failures, while Hazards are those non-plant system related events which have affected or may affect plant safety.

Category 9 provides the Emergency Coordinator (Shift Supervisor) the latitude to classify and declare emergencies based on plant symptoms or events which in his judgment warrant classification. This judgment includes evaluation of loss or potential loss of one or more fission product barriers warranting emergency classification consistent with the NUMARC barrier loss criteria. The fission product barrier loss and potential loss indicators are provided in Attachment A.

Categories are further divided into one or more subcategories depending on the types and number of plant conditions that dictate emergency classifications. For example, the Electrical Failures category has two subcategories whose values can be indicative of losses of electrical power sources: loss of AC power sources and loss of DC power sources. An EAL may or may not exist for each sub category at all four classification levels. Similarly, more than one EAL may exist for a sub category in a given emergency classification when appropriate (i.e. no EAL at the General Emergency level but three EALs at the Unusual Event level).

For each EAL, the following information is provided:

"* Classification: Unusual Event, Alert, Site Area Emergency, or General Emergency

"* NUMARC Initiating Condition from which the EAL was derived, if applicable.

"* Fission product barrier loss/potential loss condition which the EAL represents, if applicable.

"* Operating Mode Applicability: One or more of the following plant operating conditions are listed: Power Operation, Hot Shutdown, Cold Shutdown, Refuel and Defueled 3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28

• EAL: Description of the condition or set of conditions which comprise the EAL

• Basis: Description of the rationale for the EAL

"* PEG

Reference:

PEG IC(s) and example EAL(s) from which the EAL is derived

"* Basis Reference(s): Source documentation from which the EAL is derived The identified operating modes are defined as follows 1- Power Operations Reactor shutdown margin is less than Technical Specification minimum required and greater than 5% rated thermal power.

2- Startup Reactor shutdown margin is less than Technical Specification minimum required and less than or equal to 5% rated thermal power.

3 - Hot Shutdown Reactor shutdown margin greater than or equal to Technical Specification minimum required with coolant temperature (Tavg) greater than or equal to 350 OF.

4 - Hot Standby Reactor shutdown margin greater than or equal to Technical Specification minimum required with coolant temperature (Tavg) less than than 350 OF and greater than 200 OF.

5 - Cold Shutdown Reactor shutdown margin greater than or equal to Technical Specification minimum required with coolant temperature (Tavg) less than or equal to 200 OF.

6 - Refuel Reactor shutdown margin greater than or equal to Technical Specification minimum required for refueling operations and coolant temperature (Tavg) less than or equal to 140 OF.

Defueled Reactor vessel contains no irradiated fuel.

These operating modes correlate to the NUMARC-007 and PEG identified operating modes as follows:

NUMARC-007 Technical Bases Power Operations 1-Power operations Startup/Hot standby 2-Startup Hot Shutdown 3-hot shutdown Startup/Hot Standby 4-hot standby Cold Shutdown 5-cold shutdown Refuel 6-refueling Defueled Defueled All All 4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST STATUS Plant Emergency Operating Procedures (EOPs) are designed to maintain and/or restore a set of critical safety functions which are prioritized for restoration efforts during accident conditions. By monitoring the critical safety functions status, the impact of multiple events can be inherently addressed.

The critical safety functions are monitored through the use of Critical Safety Function Status Trees (CSFSTs). When certain plant parameters exceed threshold values specified by the CSFST, the plant operator is directed to one or more functional restoration and/or EOPs in an attempt to restore those parameters to within acceptable limits. The following CSFSTs are utilized to be indicative of failures or potential failures of one or more fission product barriers:

"* Subcriticality: Orange or Red paths in this CSFST indicate losses of reactivity control which may pose a threat to fuel clad and RCS integrity.

"* Core Cooling: Orange or Red paths in this CSFST indicate losses of core subcooling and thus pose a direct threat to the integrity of the reactor fuel clad and RCS.

"* Heat Sink: The Red path of this CSFST is indicative of a loss of ability to remove decay heat from the core and thus poses a direct threat to fuel clad and RCS integrity.

"* Integrity: The Red path of this CSFST is indicative of a direct threat to RCS barrier integrity.

"* Containment: Red path of this CSFST is indicative to a loss of fuel clad and RCS barrier and direct threat to the containment barrier integrity.

1-1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.1 Subcriticality 1.1.1 Alert Any failure of an automatic trip signal to reduce power range < 5%

AND Manual trip is successful NUMARC IC:

Failure of Reactor Protection system instrumentation to complete or initiate an automatic reactor trip once a Reactor Protection system setpoint has been exceeded and manual trip was successful while in power operations or hot standby FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown Basis:

A manual trip is any set of actions by the reactor operator(s) at the reactor control console which causes control rods to be rapidly inserted into the core and brings the reactor subcritical. Failure of the manual scram would escalate the event to a Site Area Emergency.

This condition indicates failure of the automatic protection system to scram the reactor. This condition is more than a potential degradation of a safety system in that a front line automatic protection system did not function in response to a plant transient and thus the plant safety has been compromised, and design limits of the fuel may have been exceeded. An Alert is indicated because conditions exist that lead to potential loss of fuel clad or Reactor Coolant System integrity. Reactor protection system setpoint being exceeded, rather than limiting safety system setpoint being exceeded, is specified here because automatic protection system is the issue.

The NRC guidance in declaring an Alert for this condition is that when an automatic reactor trip does not occur and that there may be more problems with the protection and alarm system. An Alert is to be declared even if the manual trip is successful and no radiation alarms indicate fuel problems.

PEG

Reference:

SA2.1 Basis Reference(s):

1. CSFST F-0.1, Subcriticality

2. "Methodology for Development of Emergency Action Levels NUMARC/NESP-007 Revision 2 - Questions and Answers, June 1993 1-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.1 Subcriticality 1.1.2 Site Area Emergency RED path in F-0.1 SUBCRITICALITY NUMARC IC:

Failure of Reactor Protection system instrumentation to complete or initiate an automatic reactor trip once a Reactor Protection system setpoint has been exceeded and manual scram trip was not successful.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown Basis:

CSFST Subcriticality - RED path is entered based on failure of power range indication to decrease below 5% following a reactor trip. This portion of the EAL addresses any manual trip or automatic trip signal followed by a manual trip which fails to shut down the reactor to an extent that the reactor is producing more heat load for which the safety systems were designed. A manual trip is any set of actions by the reactor operator(s) at the reactor control console which causes "control rods to be rapidly inserted into the core and brings power below that percent power associated with the ability of the safety systems to remove heat and continue to decrease."

Automatic and manual scram are not considered successful if action away from the main control board was required to scram the reactor.

Under these conditions, the reactor is producing more heat than the maximum decay heat load for which the safety systems are designed. A Site Area Emergency is indicated because conditions exist that lead to imminent loss or potential loss of both fuel clad and the Reactor Coolant System integrity.

Under these conditions, there is an actual major failure of a system intended for protection of the public.

Escalation of this event to a General Emergency would be via fission product barrier degradation, abnormal radiation levels, abnormal effluents or Emergency Coordinator judgement EAL Category 9.0)

This condition indicates failure of both the automatic and manual protection systems to trip the reactor to an extent that emergency boration is required. The combination of failure of both front line and backup protection systems to function in response to a plant transient, along with the continued production of heat poses a direct threat to fuel clad and Reactor Coolant System integrity and thus warrants declaration of a Site Area Emergency.

PEG

Reference:

SS2.1 SS4.1 Basis Reference(s):

1. CSFST F-0.1, Subcriticality

2. FR-S.1, Response to Reactor Restart/ATWS

3. FR-S.2, Response to Loss of Core Shutdown

4. "Methodology for Development of Emergency Action Levels NUMARC/NESP-007 Revision 2 - Questions and Answers, June 1993 1-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.1 Subcriticality 1.1.3 General Emergency RED path in F-0.1, SUBCRITICALITY AND Actual or imminent entry into either RED path in F-0.2, CORE COOLING OR RED path in F-0.3, HEAT SINK NUMARC IC:

Failure of the Reactor Protection System to complete an automatic trip and manual trip was not successful and there is indication of an extreme challenge to the ability to cool the core.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown Basis:

CSFST Subcriticality - RED path is entered based on > 5% reactor power following a reactor trip.

CSFST Heat Sink - RED path is entered based on both:

. both S/G's narrow range level < 5%

AND

. Total feedwater flow to S/Gs < 200 gpm CSFST Core Cooling - RED path is entered based on either:

. Core exit thermocouples >1200 OF OR

° Core exit thermocouples > 700 OF AND

° RVLIS level < 77% w/ no RCPs The combination of these conditions (reactor power > 5% and Heat Sink-RED or Core Cooling RED path ) indicates the ultimate heat sink function is under extreme challenge. Additionally, the efforts to bring the reactor subcritical have been unsuccessful and, as a result, the reactor is producing more heat load for which the safety systems were designed. This situation could be the precursor for a core melt sequence.

A major consideration is the inability to initially remove heat during the early stages of this sequence.

If emergency feedwater flow is insufficient to remove the amount of heat required by design from at least one steam generator, an extreme challenge should be considered to exist. This equates to a HEAT Sink RED condition. If CETs indicate > 1200 OF or are > 700 OF with RVLIS < minimum level for core cooling a condition indicative of severe challenge to heat removal also exists.

In the event this challenge exists at a time when the reactor has not been brought below the power associated with safety system design power (5%) a core melt sequence is considered to exist. In this situation, core degradation can occur rapidly. For this reason, the General Emergency declaration is intended to be anticipatory of the fission product barrier matrix declaration to permit maximum offsite intervention time.

PEG

Reference:

SG2.1 1-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Basis Reference(s):

1. CSFST F-0.3, Heat Sink

2. CSFST F-0.1, Subcriticality 3.-- CSFST F-0.2, Core Cooling

3. FR-S.1, Response to Reactor Restart/ATWS

4. FR-S.2, Response to Loss of Core Shutdown 1-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.2 Core Cooling 1.2.1 Site Area Emergency ORANGE or RED path in F-0.2, CORE COOLING NUMARC IC:

Complete loss of function needed to achieve or maintain hot shutdown with reactor coolant > 200 OF.

FPB loss/potential loss:

Fuel clad potential loss, RCS loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

CSFST Core Cooling - ORANGE path is entered based on either:

• Core exit thermocouples > 700 OF OR

• RVLIS level < 77% w/ no RCPs Either condition indicates subcooling has been lost and that some clad damage may occur. It must also be assumed that the loss of RCS inventory is a result of a loss of Reactor Coolant System integrity. Therefore a Site Area Emergency is warranted based upon the potential loss of fuel clad with loss of Reactor Coolant System barriers.

Under these conditions, there is an actual major failure of a system intended for protection of the public. Escalation to a General Emergency would be via abnormal radiation levels, abnormal EAL radiological effluents, Emergency Coordinator judgement or fission product barrier degradation (Category 9.0)

PEG

Reference:

FC1.2 FC3.2 FC4.1 SS4.1 Basis Reference(s):

1. CSFST F-0.2, Core Cooling

2. EOP Basis document, Setpoint section 1-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.2 Core Cooling 1.2.2 General Emergency RED path in F-0.2, CORE COOLING AND Functional restoration procedures not effective within 15 min.

NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS loss, Containment potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

CSFST Core Cooling - RED path is entered based on either:

° Core exit thermocouples > 1200 'F OR

"* Core exit thermocouples > 700 'F AND

"* RVLIS level < 77%

Either condition indicates significant core exit superheating and core uncovery and is considered a loss of the Fuel Clad Barrier. It must also be assumed that the loss of RCS inventory is a result of a loss of RCS barrier. These conditions, if not mitigated, will likely lead to core melt which will in turn result in a potential loss of containment. Therefore, declaration of a General Emergency is warranted.

Severe accident analyses (e. g., NUREG-1 150) have concluded that function restoration procedures can arrest core degradation within the reactor vessel in a significant fraction of the core damage scenarios, and that the likelihood of containment failure is very small in these events. Given this, it is appropriate to provide a reasonable period to allow function restoration procedures to arrest the core melt sequence. Whether or not procedures will be effective should be apparent within 15 minutes.

The Emergency Coordinator should make the declaration as soon as it is determined that the procedures have not been, or will not be effective.

For the purpose of this EAL the term 'effective' with regards to functional restoration procedures means that the CSFST Core Cooling - RED path entry criterion no longer exists.

PEG

Reference:

FC1.1 PC6.1 PC6.2 Basis Reference(s):

1. CSFST F-0.2, Core Cooling

2. EOP Basis document, Setpoint section 1-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.3 Heat Sink 1.3.1 Site Area Emergency RED path in F-0.3, HEAT SINK NUMARC IC:

Complete loss of function needed to achieve or maintain hot shutdown with reactor coolant > 200 OF.

FPB loss/potential loss:

Fuel clad potential loss, RCS potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

CSFST Heat Sink - RED path is entered based on both:

• both S/G's narrow range level < 5%

AND

• Total feedwater flow to S/Gs < 200 gpm The combination of these two conditions indicates the ultimate heat sink function is under extreme challenge. This EAL addresses loss of functions required for hot shutdown with the reactor at pressure and temperature. Under these conditions, there is an actual major failure of a system intended for protection of the public with potential for multiple fission product barrier loss. Therefore, declaration of a Site Area Emergency is warranted.

Under these conditions, there is an actual major failure of a system intended for protection of the public. Escalation to a General Emergency would be via abnormal radiation levels, abnormal radiological effluents, Emergency Coordinator judgement or fission product barrier degradation EAL (Category 9.0)

PEG

Reference:

FC1.3 RCS1.2 SS4.1 Basis Reference(s):

1. CSFST F-0.3, Heat Sink 1-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.4 Integrity 1.4.1 Alert RED path on F-0.4, INTEGRITY NUMARC IC:

N/A FPB loss/potential loss:

RCS potential loss Mode Applicability:

1 -Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

CSFST Integrity - RED path is entered based on both:

• exceeding RCS cooldown rate of 100 °F/hr AND

• all RCS cold leg temperatures to the left of the RCS Pressure/RCS Cold Leg Temperature Curve The combination of these two conditions indicates the RCS barrier is under significant challenge and should be considered a potential loss of RCS barrier. Any loss or potential loss of RCS barrier warrants declaration of an Alert.

PEG

Reference:

RCS1.1 Basis Reference(s):

1. CSFST F-0.4, Integrity 1-9

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 1.0 CSFST Status 1.5 Containment 1.5.1 General Emergency RED path F-0.5, CONTAINMENT resulting from a loss of reactor coolant NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS loss, Containment potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

CSFST Containment - RED path is entered based on exceeding containment design pressure of 60 psig. This pressure is well in excess of that expected from the design basis loss of coolant accident.

This is indicative of a loss of both RCS and fuel clad boundaries in that it is not possible to reach this condition without severe core degradation (metal-water reaction) or failure to scram in combination with RCS breach. Since containment pressures at or approaching design levels is also a potential loss of containment, this combination of conditions requires the declaration of a General Emergency.

PEG

Reference:

PC1.1 Basis Reference(s):

1. CSFST F-0.5, Containment 1-10

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 REACTOR FUEL The reactor fuel cladding serves as the primary fission product barrier. Over the useful life of a fuel bundle, the integrity of this barrier should remain intact as long as fuel cladding integrity limits are not exceeded.

Should fuel damage occur (breach of the fuel cladding integrity) radioactive fission products are released to the reactor coolant. The magnitude of such a release is dependent upon the extent of the damage as well as the mechanism by which the damage occurred. Once released into the reactor coolant, the highly radioactive fission products can pose significant radiological hazards inplant from reactor coolant process streams. If other fission product barriers were to fail, these radioactive fission products can pose significant offsite radiological consequences.

The following parameters/indicators are indicative of possible fuel failures:

Coolant Activity: During normal operation, reactor coolant fission product activity is very low. Small concentrations of fission products in the coolant are primarily from the fission of tramp uranium in the fuel cladding or minor perforations in the cladding itself. Any significant increase from these base-line levels is indicative of fuel failures.

• Failed Fuel Detector: As with coolant activity, any fuel failures will release fission products to the reactor coolant. These fission products will be circulated with the reactor coolant and be detected by the failed fuel radiation detector in the RCS letdown line.

"* Containment Radiation Monitors: Although not a direct indication or measurement of fuel damage, exceeding predetermined limits on containment high range radiation monitors under LOCA conditions is indicative possible fuel failures.

" Refueling Accidents & Other Radiation Monitors: Both area and process radiation monitoring systems designed to detect fission products during refueling conditions as well as visual observation can be utilized to indicate loss or potential loss of spent fuel cladding integrity.

2-1

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.1 Coolant Activity 2.1.1 Unusual Event Coolant sample activity:

>100% of 100/E bar pCi/cc total specific activity OR

> 1.0 pCi/gm 1-131 equivalent and entry into the action step of Technical Specification condition 3.4.16.B NUMARC IC:

Fuel clad degradation FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Elevated reactor coolant activity represents a potential degradation in the level of safety of the plant and a potential precursor of more serious problems. This EAL addresses reactor coolant samples exceeding coolant technical specifications. If the limits of Figure 3.4.16-1 for acceptable operation are exceeded, this indicates a large amount of cladding failures and this unusual event should be declared. However, the technical specifications allow for operation with some small amount of elevated coolant activity for a short period of time to take into account plant transients.

However, if the 1-131 equivalent value of 1.0 pCi/gm has been exceeded for 7 days, the unusual event should be declared.

Escalation of this EAL to the Alert level is via the fission product barrier degradation monitoring EAL (Category 9.0).

PEG

Reference:

SU4.2 Basis Reference(s):

1. Technical Specifications section 3.4.16 2-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.1 Coolant Activity 2.1.2 Alert Coolant activity > 300 pCi/cc 1-131 equivalent NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Elevated reactor coolant activity represents a potential degradation in the level of safety of the plant and a potential precursor of more serious problems. This amount of coolant activity corresponds to about 2% to 5% fuel clad damage. When reactor coolant activity reaches this level, significant clad heating has occurred and thus the fuel clad barrier is considered lost.

Therefore, declaration of an Alert is warranted.

PEG

Reference:

FC2.1 Basis Reference(s):

None 2-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.1 Coolant Activity 2.1.3 Site Area Emergency Coolant activity > 300 pCi/cc 1-131 equivalent and any of the following:

• RED path on F-0.4, INTEGRITY

• Primary system leakage > 46 gpm

• RCS subcooling < EOP Fig. MIN SUBCOOLING due to RCS leakage

• Containment radiation monitor R-29/R-30 reading > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS potential loss/loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses combinations of fuel clad loss with RCS loss and potential loss indicators.

300 pCi/cc 1-131 equivalent coolant activity corresponds to about 2% to 5% fuel clad damage.

When reactor coolant activity reaches this level, significant clad heating has occurred and thus the fuel clad barrier is considered lost. This condition in combination with any of the following RCS loss/potential loss indicators warrants declaration of a Site Area Emergency:

RED path on F-0.4, INTEGRITY: RED path indicates an extreme challenge to the safety function derived from appropriate instrument readings, and indicates a potential loss of RCS barrier.

RCS subcooling < EOP Fig. MIN SUBCOOLING: This indicator addresses conditions where leakage from the RCS is greater than available inventory control capacity such that a loss of subcooling has occurred. The loss of subcooling as determined from E-0, Reactor Trip or Safety Injection is the fundamental indication that the inventory control systems are inadequate in maintaining RCS pressure and inventory against the mass loss through a leak.

Primary system leakage > 46 gpm: This potential loss of RCS is based on the inability to maintain normal liquid inventory within the Reactor Coolant System (RCS) by normal operation of the Chemical and Volume Control System which is considered as two positive displacement charging pumps discharging to the charging header.

Thel 0 R/hr reading is a value which indicates the release of reactor coolant to the containment.

The reading was derived assuming the instantaneous release and dispersal of the reactor coolant noble gas and iodine inventory associated with normal operating concentrations (i. e., within T/S) into the containment atmosphere. This EAL is indicative of a RCS leak only.

PEG

Reference:

FC2.1 + RCS1.1, RCS2.1, RCS2.2 and RCS4.1 2-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Basis Reference(s):

1. EPIP 16 "Core Damage Estimation"

2. CSFST F-0.4 Integrity

3. E-0, Reactor Trip or Safety Injection

4. Technical Specifications Section 3.4.13

5. FSAR Table 9.3.6 2-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.2 Failed Fuel Detectors 2.2.1 Unusual Event Letdown Line Monitor R-9 > 2 R/hr and Tave >5000 F NUMARC IC:

Fuel clad degradation FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown Basis:

Elevated letdown line activity represents a potential degradation in the level of safety of the plant and a potential precursor of more serious problems. This radiation level (2 R/hr) corresponds to 1% fuel failure (bases for the Technical Specifications coolant activity limits). Therefore, declaration of an Unusual Event is warranted.

Escalation of this EAL to the Alert level is via the fission product barrier degradation monitoring EAL (Category 9.0).

PEG

Reference:

SU4.1 Basis Reference(s):

1. Technical Specifications section 3.4.16

2. P-9 "Radiation Monitoring System"

3. EPIP 2-16 section 6.2.1.b 2-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.2 Failed Fuel Detectors 2.2.2 Alert Letdown Line Monitor R-9 > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This condition indicates the loss of the fuel clad barrier. Failed Fuel Monitor readings of 2 R/hr corresponds to 1% fuel failures. Failed Fuel Monitor readings of 10 R/hr corresponds to 5% fuel failures and is considered an actual loss of fuel clad.

Note: Monitor R-9 automatically shifts scale from mR/hr to R/hr when indicated values exceed 1000 mR/hr.

PEG

Reference:

FC6.1 Basis Reference(s):

1. EPIP 16 "Core Damage Estimation"

2. P-9 "Radiation Monitoring System"

3. EPIP 2-16 section 6.2.1 .b 2-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.2 Failed Fuel Detectors 2.2.3 Site Area Emergency Letdown Line Monitor R-9 > 10 R/hr and any of the following:

• RED path on F-0.4, INTEGRITY

• Primary system leakage > 46 gpm

• RCS subcooling < EOP Fig. MIN SUBCOOLING due to RCS leakage

• Containment radiation monitor R-29/R-30 reading > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses combinations of fuel clad loss with RCS loss and potential loss indicators.

Failed Fuel Monitor readings of 10 R/hr corresponds to 5% fuel failures. This condition indicates the loss of the fuel clad barrier. Note: Monitor R-9 automatically shifts scale from mR/hr to R/hr when indicated values exceed 1000 mR/hr. This condition in combination with any of the following RCS loss/potential loss indicators warrants declaration of a Site Area Emergency:

RED path on F-0.4, INTEGRITY: RED path indicates an extreme challenge to the safety function derived from appropriate instrument readings, and indicates a potential loss of RCS barrier.

RCS subcooling < EOP Fig. MIN SUBCOOLING: This indicator addresses conditions where leakage from the RCS is greater than available inventory control capacity such that a loss of subcooling has occurred. The loss of subcooling as determined from E-0, Reactor Trip or Safety Injection is the fundamental indication that the inventory control systems are inadequate in maintaining RCS pressure and inventory against the mass loss through a leak.

Primary system leakage > 46 gpm: This potential loss of RCS is based on the inability to maintain normal liquid inventory within the Reactor Coolant System (RCS) by normal operation of the Chemical and Volume Control System which is considered as two positive displacement charging pumps discharging to the charging header.

Thel0 R/hr reading is a value which indicates the release of reactor coolant to the containment.

The reading was derived assuming the instantaneous release and dispersal of the reactor coolant noble gas and iodine inventory associated with normal operating concentrations (i. e., within T/S) into the containment atmosphere. This EAL is indicative of a RCS leak only.

PEG

Reference:

FC6.1 + RCS1.1, RCS2.1, RCS2.2 and RCS4.1 2-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Basis Reference(s):

1. EPIP 16 "Core Damage Estimation"

2. CSFST F-0.4 Integrity

3. E-0, Reactor Trip or Safety Injection

4. F-0.5, Containment

5. FR-Z.1, Response to High Containment Radiation Level

6. Technical Specifications Section 3.4.13

7. FSAR Table 9.3.6 2-9

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.3 Containment Radiation 2.3.1 Alert Containment radiation monitor R-29/R-30 reading > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

RCS loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

The 10 R/hr reading is a value which indicates the release of reactor coolant to the containment.

The reading was derived assuming the instantaneous release and dispersal of the reactor coolant noble gas and iodine inventory associated with normal operating concentrations (i. e., within T/S) into the containment atmosphere. This EAL is indicative of a RCS leak only. It is not possible to obtain 10 R/hr on the containment radiation monitors due to shine from increased activity in the reactor coolant water. In order to obtain > 10 R/hr a breach of the RCS system must have occurred. If the radiation monitor reading increased to that specified by Reactor Fuel EAL 2.3.2, significant fuel damage would also be indicated.

PEG

Reference:

RCS4.1 Basis Reference(s):

1. F-0.5, Containment

2. FR-Z.1, Response to High Containment Radiation Level

3. EPIP 2-16, Core Damage Estimation 2-10

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.3 Containment Radiation 2.3.2 Site Area Emergency Containment radiation monitor R-29/R-30 reading > 100 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

The 100 R/hr reading is a value which indicates the release of reactor coolant, with elevated activity indicative of fuel damage, into the containment. The reading is derived assuming the instantaneous release and dispersal of the reactor coolant noble gas and iodine inventory associated with a concentration of 300 pCi/gm dose equivalent 1-131 into the containment atmosphere. Reactor coolant concentrations of this magnitude are several times larger than the maximum concentrations (including iodine spiking) allowed within technical specifications and are therefore indicative of fuel damage (approximately 2-5 % clad failure depending on core inventory and RCS volume). This value is higher than that specified in EAL 2.3.1 which would be indicative of only the RCS barrier. Thus, this EAL indicates a loss of both the fuel clad barrier and a loss of RCS barrier warranting declaration of a Site Area Emergency.

PEG

Reference:

FC5.1 Basis Reference(s):

1. P-9, Radiation Monitoring System, Section 2.2.2.6, pg. P-9:2

2. EPIP 2-16, Core Damage Estimation 2-11

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.3 Containment Radiation 2.3.3 General Emergency Containment radiation monitor R-29/R-30 reading > 1000 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS loss, Containment potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

The 1000 R/hr reading is a value which indicates significant fuel damage (>20% clad failure) well in excess of the EALs associated with both loss of fuel clad and loss of RCS barriers. A major release of radioactivity requiring offsite protective actions from core damage is not possible unless a major failure of fuel cladding allows radioactive material to be released from the core into the reactor coolant. Regardless of whether containment is challenged, this amount of activity in containment, if released, could have such severe consequences that it is prudent to treat this as a potential loss of containment, such that a General Emergency declaration is warranted. NUREG 1228 "Source Estimations During Incident Response to Severe Nuclear Power Plant Accidents,"

indicates that such conditions do not exist when the amount of clad damage is less than 20%.

PEG

Reference:

PC5.1 Basis Reference(s):

1. EPIP 1-0, Ginna Station Event Evaluation and Classification

2. EPIP 2-16, Core Damage Estimation

3. NUREG-1228 "Source Estimations During Incident Response to Severe Nuclear Power Plant Accidents"

4. Technology for Energy Report No. R-81-012 2-12

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.3 Refueling Accidents or Other Radiation Monitors 2.4.1 Unusual Event Spent fuel pool (reactor cavity during refueling) water level cannot be restored and maintained above the spent fuel pool low water level alarm setpoint NUMARC IC:

Unexpected increase in plant radiation or airborne concentration.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

In light of Reactor Cavity Seal failure incidents at two different PWRs and loss of water in the Spent Fuel Pit/Fuel Transfer Canal at a BWR, explicit coverage of these types of events via this EAL is appropriate given their potential for increased doses to plant workers. Classification as an Unusual Event is warranted as a precursor to a more serious event.

The spent fuel pool low water level alarm setpoint of 20 in. below top of pool is actuated by LC 661. The definition of "... cannot be restored and maintained above ..." allows the operator to visually observe the low water level condition, if possible, and to attempt water level restoration instructions as long as water level remains above the top of irradiated fuel. Water level restoration instructions for loss of refueling cavity water level during refueling are performed in accordance with the RF-65 series of procedures.

When the fuel transfer canal is directly connected to the spent fuel pool and reactor cavity, there could exist the possibility of uncovering irradiated fuel in the fuel transfer canal. Therefore, this EAL is applicable for conditions in which irradiated fuel is being transferred to and from the RPV and spent fuel pool.

Site Specific indications may include instrumentation such as water level and local area radiation monitors and personnel (e.g. refueling crews) reports. If available, security video cameras may allow remote observation. Depending on available level instrumentation, the declaration threshold may need to be based on indications of water makeup rate or decrease in refueling water storage tank level. While a radiation monitor could detect an increase in dose due to a drop in the water level, it might not be a reliable indication of whether or not the fuel is uncovered. For example, the reading on an area radiation monitor located on the refueling bridge may increase due to planned evolutions such as head lift, or even a fuel assembly being raised in the manipulator mast.

Generally, increased radiation monitor indications will need to be combined with another indicator (or personnel report) or water loss.

This event escalates to an Alert if irradiated fuel outside the reactor vessel is uncovered. For events involving irradiated fuel in the reactor vessel, escalation would be via the fission product barrier matrix PEG

Reference:

AU2.1 2-13

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Basis Reference(s):

1. ER-SFP.1 "Loss of Spent Fuel Pit Cooling"

2. AR-K-29

3. RF-65 series 2-14

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.3 Refueling Accidents or Other Radiation Monitors 2.4.2 Alert Confirmed sustained alarm on any of the following radiation monitors resulting from an uncontrolled fuel handling process:

• R-2 Containment Area Monitor

• R-5 Spent Fuel Pit

• R-12 Containment Noble Gas NUMARC IC:

Major damage to irradiated fuel or loss of water level that has or will result in the uncovering of irradiated fuel outside the reactor vessel.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

Escalation, if appropriate, would occur via Category 5.0, Radioactivity Release/Area Radiation or Emergency Coordinator judgment in EAL Category 9.0. When considering escalation information may come from:

- Radiation monitor readings

- Sampling and surveys

- Dose projections/calculations

- Reports from the scene reguarding the extent of damage (e.g. refueling crew, RP technicians)

NUREG-0818, "Emergency Action Levels for Light Water Reactors," forms the basis for this EAL.

This EAL is defined by the specific area where irradiated fuel is located such as reactor cavity, reactor vessel, or spent fuel pool.

NUREG/CR-4982, "Severe Accident in Spent Fuel Pools in Support of Generic Safety Issue 82,"

July 1987, indicates that even if corrective actions are not taken, no prompt fatalities are predicted, and that risk of injury is low. In addition, NRC Information Notice No. 90-08, "KR-85 Hazards from Decayed Fuel" presents the following in its discussion:

"In the event of a serious accident involving decayed spent fuel, protective actions would be needed for personnel on site, while offsite doses (assuming an exclusion area radius of one mile from the plant site) would be well below the Environmental Protection Agency's Protective Action Guides. Accordingly, it is important to be able to properly survey and monitor for Kr-85 in the event of an accident with decayed spent fuel."

An "uncontrolled fuel handling process" is defined as any event or activity related to the movement of irradiated fuel which results in unexpected or uncontrolled conditions. This terminology has been specifically added to exclude anticipated increases in area radiation levels as a result of actions performed in accordance with approved procedures during refueling operations.

2-15

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 The basis for the Containment Area Monitor setpoint (50 mR/hr) and Spent Fuel Pit monitor setpoint (25 mR/hr) are a spent fuel handling accident and is, therefore, appropriate for this EAL.

This EAL addresses specific events that have resulted, or may result, in unexpected increases in radiation dose rates within plant buildings, and may be a precursor to a radioactivity release to the environment. These events represent a loss of control over handling of radioactive material and present a degradation in the level of safety of the plant.

PEG

Reference:

AA2.1 Basis Reference(s):

1. P-9 Radiation Monitoring System

2. NUREG-0818, "Emergency Action Levels for Light Water Reactors,"

3. NUREG/CR-4982, "Severe Accident in Spent Fuel Pools in Support of Generic Safety Issue 82" 2-16

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 2.0 Reactor Fuel 2.3 Refueling Accidents or Other Radiation Monitors 2.4.3 Alert Report of visual observation of irradiated fuel uncovered NUMARC IC:

Major damage to irradiated fuel or loss of water level that has or will result in the uncovering of irradiated fuel outside the reactor vessel.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

Escalation, if appropriate, would occur via Category 5.0, Radioactivity Release/Area Radiation or Emergency Coordinator judgment in EAL Category 9.0. When considering escalation information may come from:

- Radiation monitor readings

- Sampling and surveys

- Dose projections/calculations

- Reports from the scene reguarding the extent of damage (e.g. refueling crew, RP technicians)

This EAL is defined by the specific areas where irradiated fuel is located such as reactor cavity, or spent fuel pool.

There is no indication that water level in the spent fuel pool or refueling cavity has dropped to the level of the fuel other than by visual observation. Since there is no level indicating system in the fuel transfer canal, visual observation of loss of water level would also be required.

Sufficient time exists to take corrective actions for these conditions and there is little potential for substantial fuel damage. NUREG/CR-4982 "Severe Accident in Spent Fuel Pools in Support of Generic Safety Issue 82" indicates that even if corrective actions are not taken, no prompt fatalities are predicted and the risk of injury is low. In addition, NRC Information Notice No. 90-08, "KR-85 Hazards from Decayed Fuel" presents the following it its discussion:

"In the event of a serious accident involving decayed spent fuel, protective actions would be needed for personnel on site, while offsite doses (assuming an exclusion area radius of one mile from the plant site) would be well below the Environmental Protection Agency's Protective Action Guides. Accordingly, it is important to be able to properly survey and monitor for Kr-85 in the event of an accident with decayed spent fuel.

This EAL applies to spent fuel requiring water coverage and is not intended to address spent fuel which is licensed for dry storage.

If available, security video cameras may allow remote observation. Depending on available level indication, the declared threshold may need to be based on indications of makeup rate or decrease in refueling water storage tank level.

2-17

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 PEG

Reference:

AA2.2 Basis Reference(s):

1. P-9 Radiation Monitoring System

2. NUREG/CR-4982 "Severe Accident in Spent Fuel Pools in Support of Generic Safety Issue 82" 3 NRC Information Notice No. 90-08, "KR-85 Hazards from Decayed Fuel" 2-18

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 REACTOR COOLANT SYSTEM (RCS)

The reactor vessel provides a volume for the coolant which covers the reactor core. The reactor vessel and associated pressure piping (reactor coolant system) together provide a barrier to limit the release of radioactive material should the reactor fuel cladding integrity fail.

There are three RCS parameters which are indicative of conditions which may pose a threat to RCS or fuel cladding integrity:

RCS Leakaqe: Excessive (> Technical Specification) RCS leakage indications are utilized to indicate potential pipe cracks which may propagate to an extent threatening fuel clad, RCS and containment integrity. RCS leakage of a degree requiring ECCS to maintain RCS inventory poses a direct threat to fuel clad integrity. Reactor vessel water level is also directly related to the status of adequate core cooling, and therefore fuel cladding integrity.

" Primary to Secondary Leakaqe: A subset of RCS leakage, excessive primary to secondary leakage in conjunction with unisolable secondary releases to environment may result in losses of containment integrity as well as threaten fuel clad integrity for more severe SG tube ruptures.

"* RCS Subcooling: A loss of RCS subcooling is a fundamental indication that the inventory control systems are inadequate in maintaining RCS pressure and inventory against mass loss through a leak.

3-1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 Reactor Coolant System 3.1 RCS Leakage 3.1.1 Unusual Event Unidentified or pressure boundary leakage > 10 gpm OR Identified leakage > 25 gpm NUMARC IC:

RCS leakage when greater than 200 OF FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

The conditions of this EAL may be a precursor of more serious conditions and, as a result, is considered to be a potential degradation of the level of safety of the plant. The 10 gpm value for the unidentified leakage and pressure boundary leakage was selected because it is observable with normal Control Room indications. Smaller values must be determined through time consuming surveillance tests (e. g., mass balances). The 25 gpm value for identified leakage is set at a higher value because of the significance of identified leakage in comparison to unidentified or pressure boundary leakage.

Only operating modes in which there is fuel in the reactor coolant system and the system is pressurized are specified.

PEG

Reference:

SU5.1 Basis Reference(s):

None 3-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 Reactor Coolant System 3.1 RCS Leakage 3.1.2 Alert Primary system leakage > 46 gpm NUMARC IC:

N/A FPB loss/potential loss:

RCS potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL is based on the inability to maintain normal liquid inventory within the Reactor Coolant System (RCS) by normal operation of the Chemical and Volume Control System which is considered as two positive displacement charging pumps discharging to the charging header.

PEG

Reference:

RCS2.2 Basis Reference(s):

1. FSAR Table 9.3.6 3-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 Reactor Coolant System 3.1 RCS Leakage 3.1.3 Site Area Emergency RVLIS cannot be maintained > 77% with no RCPs running OR With the reactor vessel head removed, it is reported that water level in the reactor vessel is dropping in an uncontrolled manner and core uncovery is likely NUMARC IC:

Loss of reactor vessel water level has or will uncover fuel in the reactor vessel.

FPB loss/potential loss:

Fuel clad potential loss, RCS loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby, 5-cold shutdown, 6-refueling Basis:

The reactor vessel water level used in this EAL is the top of fuel. This is the minimum water level to assure core is covered with water. Severe core damage can occur and reactor coolant system pressure boundary integrity may not be assured if reactor vessel water level is not maintained above that corresponding to RVLIS at 77%. RVLIS dynamic range indications are not utilized in this EAL since the RCPs would not be running under conditions where vessel level is approaching a level where the core could be uncovered..

During modes 4, 5 or 6 RVLIS could be isolated. Check the status of the RVLIS system when assessing plant conditions.

Thus, declaration of a Site Area Emergency is warranted under the conditions specified by this EAL. Escalation to a General Emergency would be via radioactivity release category 5.0.

PEG

Reference:

SS5.1 FC4.1 Basis Reference(s):

1. FR-C.1 "Response to Inadequate Core Cooling"

2. EOP Basis document, Setpoint section 3-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 Reactor Coolant System 3.2 Primary to Secondary Leakage 3.2.1 Unusual Event Unisolable release of secondary side to atmosphere with primary to secondary leakage > 0.1 gpm in the affected steam generator NUMARC IC:

N/A FPB loss/potential loss:

Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses SG tube leaks indicative of a loss of containment. Secondary side releases to atmosphere include those from feed line or steam line breaks as well as stuck open safety valves, atmospheric relief valve or main steam isolation valve that cannot be isolated once isolation has been directed by the EOPs. During plant operation using 0-6.10 isolation would not be directed. In this case, events would be classified by exceeding the air ejector values in section 5.1 "effluent monitors" A steam generator which is required to be used for plant cooldown would also be covered under this EAL. For small leaks, not exceeding the normal charging capacity threshold in RCS leakage EAL 3.1.2, this EAL results in an Unusual Event. For larger leaks, RCS leakage EAL 3.2.2 would result in a Site Area Emergency. For SG tube ruptures which may involve multiple steam generators or unisolable secondary line breaks, SG tube rupture EAL 4.2.1 would also result in a Site Area Emergency.

PEG

Reference:

PC4.1 Basis Reference(s):

1. Technical Specifications Section 3.4.13 3-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 Reactor Coolant System 3.2 Primary to Secondary Leakage 3.2.2 Site Area Emergency Unisolable release of secondary side to atmosphere with primary to secondary leakage > 46 gpm NUMARC IC:

N/A FPB loss/potential loss:

RCS potential loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses SG tube leaks indicative of a loss of both RCS and containment barriers.

Unisolable secondary side releases to atmosphere include those from feed line or steam line breaks as well as stuck open safety valves, atmospheric relief valves or main steam isolation valves that cannot be isolated once isolation has been directed by the EOPs. A steam generator which is required to be used for plant cooldown would also be covered under this EAL. Primary to secondary leakage > 46 gpm is based on the inability to maintain normal liquid inventory within the Reactor Coolant System (RCS) by normal operation of the Chemical and Volume Control System which is considered as two positive displacement charging pumps discharging to the charging header. For primary to secondary leakage > 46 gpm in the absence of any secondary to atmosphere release, an Alert would be declared based on EAL 3.1.2.

This EAL represents the loss of both RCS and containment barriers and therefore warrants declaration of a Site Area Emergency.

PEG

Reference:

PC4.1 + RCS2.2 Basis Reference(s):

1. Technical Specifications Section 3.4.13

2. E-3 "Steam Generator Tube Rupture"

3. FSAR Table 9.3.6 3-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 Reactor Coolant System 3.2 Primary to Secondary Leakage 3.2.3 Site Area Emergency Unisolable release of secondary side to atmosphere with primary to secondary leakage > 0.1 gpm in the affected steam generator AND Coolant activity > 300 pCi/cc of 1-131 OR Letdown Line Monitor R-9 > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses SG tube leaks indicative of a loss of containment in conjunction with a loss of fuel cladding. Unisolable secondary side releases to atmosphere include those from feed line or steam line breaks as well as stuck open safety valves, atmospheric relief valves or main steam isolation valves that cannot be isolated once isolation has been directed by the EOPs. A steam generator which is required to be used for plant cooldown would also be covered under this EAL.

A coolant activity > 300 pCi/cc of 1-131 indicates a loss of fuel cladding. Refer to EAL #2.1.2 basis Failed Fuel Monitor readings of 10 R/hr corresponds to 5% fuel failures and is considered an actual loss of fuel clad. Refer to EAL #2.2.2.

This condition represents a loss of both primary containment with the loss of fuel cladding and thus warrants declaration of a Site Area Emergency.

PEG

Reference:

PC4.1 + FC2.1, FC6.1 Basis Reference(s):

1. Technical Specifications Section 3.4.16 3-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 3.0 Reactor Coolant System 3.3 RCS Subcooling 3.3.1 Alert RCS subcooling < EOP Fig. MIN SUBCOOLING due to RCS leakage NUMARC IC:

N/A FPB loss/potential loss:

RCS loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses conditions where leakage from the RCS is greater than available inventory control capacity such that a loss of subcooling has occurred. The loss of subcooling is the fundamental indication that the inventory control systems are inadequate in maintaining RCS pressure and inventory against the mass loss through the leak.

Loss of the RCS barrier warrants declaration of an Alert.

PEG

Reference:

RCS2.1 Basis Reference(s):

1. E-0, Reactor Trip Or Safety Injection 3-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 CONTAINMENT The containment structure is an atmospheric vapor containment system. It forms a fission product barrier designed to contain the radioactive fission products generated from any postulated accident so as to preclude exceeding offsite exposure limits.

The containment structure is a low leakage system housing the reactor vessel, the reactor coolant piping, steam generators and other branch connections of the reactor primary system. The containment is equipped with isolation valves for systems which penetrate the containment boundary. These valves automatically actuate to isolate systems under emergency conditions.

There are three containment parameters which are indicative of conditions which may pose a threat to containment integrity or indicate degradation of RCS or reactor fuel clad integrity.

" Containment Integrity Status: Abnormally high containment pressure or failure of containment cooling systems following a LOCA are indicative of potential losses of the containment barrier integrity.

The existence of an unisolable Cl or CVI line break outside containment constitutes a loss of containment integrity as well as a loss of RCS boundary. Inconsistent containment response to a known LOCA is also indicative of containment loss in conjunction with RCS barrier breach. Should a loss of fuel cladding integrity occur under either of these conditions, the potential for release of large amounts of radioactive materials to the environment exists.

"* Steam Generator Tube Rupture with Secondary Release: SG tube ruptures in conjunction with a secondary system line break resulting in release to the environment constitutes losses of both RCS and containment integrity.

Primary to secondary leakage in excess of Technical Specifications in conjunction with fuel clad damage and secondary system leakage to the environment constitutes losses of fuel clad, RCS and containment integrity. This condition provides the potential for release of large amounts of radioactive materials to the environment.

"* Combustible Gas Concentrations: The existence of combustible gas concentrations in containment pose a severe threat to containment integrity and are indicative of severely degraded reactor core and RCS conditions.

4-1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.1 Containment Integrity Status 4.1.1 Unusual Event Both doors open on containment airlock OR Inability to close containment pressure relief or purge valves which results in a radiological release pathway to the environment OR Cl or CVI valve(s) not closed when required which results in a radiological release pathway to the environment OR Rapid uncontrolled pressure decrease in containment pressure following increase due to steam line break.

NUMARC IC:

N/A FPB loss/potential loss:

Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses an indication that unambiguously indicates loss of the containment barrier under conditions when containment integrity is required.

It is important to note however, that loss of containment due to both airlock doors being open is event dependent. Upon recognition, shift personnel would rapidly respond in an attempt to reestablish containment integrity. If the doors cannot be reclosed, any loss of the RCS barrier that occurs with the doors open would appear as an inconsistent LOCA response. Therefore, this event is not used as a definitive indicator of loss of the primary containment barrier for purposes of defining higher classification EALs. Rather it is left to the Emergency Coordinator's judgment whether such a loss has occurred.

The condition " Inability to close containment pressure relief or purge valves which results in a radiological release pathway to the environment" was added to address loss of containment boundary as a result of failure to isolate the containment vent path following routine containment venting. The condition "Cl or CVI valve(s) not closed when required which results in a radiological release pathway to the environment" was added to address Cl or CVI isolation failures which are not initiated as a result of RCS boundary breach such as resulting from severly faulted SGs.

The steam line break inside containment which causes a failure of containment was added as an unusual event because one of the three fission barriers has been lost and to identify this condition as being different from EAL 4.1.2 (loss of containment due to LOCA).

PEG

Reference:

PC7.1 Basis Reference(s):

None 4-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.1 Containment Integrity Status 4.1.2 Site Area Emergency Rapid uncontrolled decrease in containment pressure following initial increase due to LOCA OR Loss of primary coolant inside containment with containment pressure or sump level response not consistent with LOCA conditions NUMARC IC:

N/A FPB loss/potential loss:

RCS loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Rapid unexplained loss of pressure (i. e., not attributable to containment spray or Fan Cooling Units or condensation effects) following an initial pressure increase indicates a loss of both RCS and containment integrity. Containment pressure and sump levels should increase as a result of the mass and energy release into containment from a LOCA. Thus, sump level or pressure not increasing indicates containment bypass (V-sequence) and a loss of containment integrity.

For a steam line break inside containment which results in containment failure, an unusual event should be declared (EAL 4.1.1) due to the loss of only one fission product barrier.

This EAL indicates loss of both RCS and containment and therefore warrants declaration of a Site Area Emergency.

PEG

Reference:

PC2.1 PC2.2 Basis Reference(s):

1. Alarm response procedure, AR-C-18, Revision 6

2. Alarm response procedure, AR-C-19, Revision 4

3. R. E. Ginna Updated FSAR, Figure 6.2-3 through 6.2-5 4-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.1 Containment Integrity Status 4.1.3 Site Area Emergency Either:

Cl or CVI valve(s) not closed when required following confirmed LOCA OR Inability to isolate any primary system discharging outside containment AND Radiological release pathway to the environment exists as a result NUMARC IC:

N/A FPB loss/potential loss:

RCS loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL is intended to address incomplete containment isolation that allows direct release to the environment. It represents a loss of both the RCS and containment barrier and therefore warrants declaration of a Site Area Emergency.

Failure of CI or CVI valves to isolate is intended to address incomplete containment isolation that allows direct release to the environment. It represents a loss of both the RCS and containment barrier. Confirmation of a LOCA should be based on diagnostic activities consistent with E-0 "Reactor Trip or Safety Injection."

"Inability to isolate any primary system discharging outside containment" is intended to address other primary systems, either direct or indirect, which the inability to isolate indicate loss of both RCS and containment. No leakage threshold is specified since leaks outside containment, particularly under dynamic conditions, are difficult to quantify and may manifest themselves with diverse symptoms. Symptoms of a primary system discharging outside containment may be indicated via mass balance, decreasing RCS inventory without corresponding containment response, or area temperatures and radiation levels outside containment. It is for this reason that Shift Supervisor/Emergency Coordinator judgment is intended to be used in evaluating this criteria. However, it is intended that the magnitude of the leak associted with this EAL be consistent with the RCS barrier loss threshold of 46 gpm or greater.

Inability to isolate means that the leak cannot be isolated from the main control board.

PEG

Reference:

PC3.1 Basis Reference(s):

1. FRZ-2.1 "Response to High Containment Pressure" 4-4

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.1 Containment Integrity Status 4.1.4 General Emergency Safety injection signal due to LOCA with less than minimum operable containment heat removal equipment, Table 4.3 AND Any indicators of fuel clad loss, Table 4.1 Table 4.3 Minimum Operable Containment Heat Removal Equipment CNMT Pressure Recirc Fans Operable Spray Pumps Required

<28 psig 2 N/A

>28 psig 2 1

<2 2 Table 4.1 Fuel Clad Loss Indicators

1. Coolant activity > 300 pCi/cc of 1-131

2. Containment rad monitor R-29/R-30 reading >100 R/hr

3. Letdown Monitor R-9 reading> 10 R/hr

4. RED path in F-0.2, CORE COOLING NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS loss, Containment potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL represents a potential loss of containment in conjunction with losses of both RCS and fuel clad.

A potential loss of containment is considered to exist in that the containment heat removal/depressurization systems (e. g., containment sprays, Recirc. Fans, but not including containment venting strategies) are either lost or performing in a degraded manner, as indicated by plant parameters such as containment pressure, pressurizer level and steam line pressure in excess of the setpoints at which the equipment was supposed to have actuated.

RCS is also assumed to be lost in this condition due to exceeding safety injection initiation setpoints: containment pressure (>4 psig) or low pressurizer (< 1723 psig).

Table 4.1 presents fuel clad loss indicators which represent 2 - 5% clad failures. Refer to EAL #Vs 2.1.2, 2.2.2, and 2.3.2 for bases of these indicators.

PEG

Reference:

PC2.5 + FC2.1, FC5.1 and FC6.1 4-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Basis Reference(s):

1. Technical Specifications, 3.3.2

2. R. E. Ginna UFSAR, Section 6.2.2.1.2.4, pg. 6.2-28 pg.5.2-1

3. FR-Z.1, Response to High Containment Pressure, Revision 3

4. R. E. Ginna UFSAR, Section 6.2.2.1, pg. 6.2-24b

5. R. E. Ginna UFSAR, Section 6.2.2.2, pg. 6.2-32 and Figure 6.2-11

6. EPIP 2-16, Core Damage Estimation

7. P-9, Radiation Monitoring System 4-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.1 Containment Integrity Status 4.1.5 General Emergency Either:

Rapid uncontrolled decrease in containment pressure following initial increase due to LOCA OR Loss of primary coolant inside containment with containment pressure or sump level response not consistent with LOCA conditions AND Any indicators of fuel clad damage, Table 4.2 Table 4.2 Fuel Clad Damage Indicators ORANGE or RED path in F-0.2, CORE COOLING RED path in F-0.3, HEAT SINK Coolant activity > 300 IpCi/cc of 1-131 Containment rad monitor R-29/R-30 reading >100 R/hr Letdown Monitor R-9 reading > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad potential loss/loss, RCS loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL indicates loss of both RCS and containment with loss or potential loss of the fuel cladding and therefore warrants declaration of a General Emergency.

Rapid unexplained loss of pressure (i. e., not attributable to containment spray or Fan Cooling Units or condensation effects) following an initial pressure increase indicates a loss of both RCS and containment integrity. Containment pressure and sump levels should increase as a result of the mass and energy release into containment from a LOCA. Thus, sump level or pressure not increasing indicates containment bypass (V-sequence) and a loss of containment integrity.

Table 4.2 presents fuel clad loss and potential loss indicators:

• ORANGE or RED path in F-0.2, Core Cooling: Refer to EAL #1.1.1 basis

• RED path in F-0.3, Heat Sink: Refer to EAL #1.2.1 basis

• Coolant activity > 300 pCi/cc of 1-131: Refer to EAL #2.1.2 basis

• Containment rad monitor reading >100 R/hr: Refer to EAL #2.3.2 basis

• Letdown Monitor R-9 reading > 10 R/hr: Refer to EAL #2.2.2 basis PEG

Reference:

PC2.1/PC2.2 + FC1.2, FC1.3, FC2.1, FC3.2, FC4.1, FC5.1 and FC6.1 4-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Basis Reference(s):

1. Alarm response procedure, AR-C-18, Revision 6

2. Alarm response procedure, AR-C-19, Revision 4

3. R. E. Ginna Updated FSAR, Figure 6.2-3 through 6.2-5

4. EPIP 2-16, Core Damage Estimation

5. CSFST F-0.2, Core Cooling, Revision 3

6. CSFST F-0.3, Heat Sink, Revision 3

7. FR-C.1, Response to Inadequate Core Cooling, Revision 7

8. FR-C.2, Response to Degraded Core Cooling, Revision 6, step 9.a

9. FR-C.2, Response to Degraded Core Cooling, Revision 6, Note, pg. 3

10. P-9 "Radiation Monitoring System" 4-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.1 Containment Integrity Status 4.1.6 General Emergency Either:

Cl or CVI valve(s) not closed when required following confirmed LOCA OR Inability to isolate any primary system discharging outside containment AND Radiological release pathway to the environment exists as a result AND Any indicators of fuel clad damage, Table 4.2 Table 4.2 Fuel Clad Damage Indicators ORANGE or RED path in F-0.2, CORE COOLING RED path in F-0.3, HEAT SINK Coolant activity> 300 pCi/cc of 1-131 Containment rad monitor R-29/R-30 reading >100 R/hr Letdown Monitor R-9 reading > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss/potential loss, RCS loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL indicates loss of both RCS and containment with loss or potential loss of the fuel cladding and therefore warrants declaration of a General Emergency.

Failure of Cl or CVI valves to isolate is intended to address incomplete containment isolation that allows direct release to the environment. It represents a loss of both the RCS and containment barrier.

Inability to isolate means that the leak cannot be isolated from the main control board.

"Inability to isolate any primary system discharging outside containment" is intended to address other primary systems, either direct or indirect, which the inability to isolate indicate loss of both RCS and containment. No leakage threshold is specified since leaks outside containment, particularly under dynamic conditions, are difficult to quantify and may manifest themselves with diverse symptoms. Symptoms of a primary system discharging outside containment may be indicated via mass balance, decreasing RCS inventory without corresponding containment response, or area temperatures and radiation levels outside containment. It is for this reason that Shift Supervisor/Emergency Coordinator judgment is intended to be used in evaluating this criteria. However, it is intended that the magnitude of the leak associted with this EAL be consistent with the RCS barrier loss threshold of 46 gpm or greater.

4-9

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Table 4.2 presents fuel clad loss and potential loss indicators:

• ORANGE path in F-0.2, Core Cooling: Refer to EAL #11.1.1 basis

• RED path in F-0.3, Heat Sink: Refer to EAL #11.2.1 basis

• Coolant activity > 300 ICi/cc of 1-131: Refer to EAL #2.1.2 basis

• Containment rad monitor reading >100 R/hr: Refer to EAL #2.3.2 basis

• Letdown Monitor R-9 reading > 10 R/hr: Refer to EAL #2.2.2 basis PEG

Reference:

PC3.1 + FC1.2, FC1.3, FC2.1, FC3.2, FC4.1, FC5.1 and FC6.1 Basis Reference(s):

1. FR-2.1 "Response to High Containment Pressure"

2. CSFST F-0.2, "Core Cooling"

3. FR-C.1, "Response to Inadequate Core Cooling"

4. EPIP 2-16, Core Damage Estimation

5. CSFST F-0.2, Core Cooling, Revision 3

6. CSFST F-0.3, Heat Sink, Revision 3

7. FR-C.1, Response to Inadequate Core Cooling, Revision 7

8. FR-C.2, Response to Degraded Core Cooling, Revision 6, step 9.a

9. FR-C.2, Response to Degraded Core Cooling, Revision 6, Note, pg. 3

10. P-9 "Radiation Monitoring System" 4-10

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.2 SG Tube Rupture w/ Secondary Release 4.2.1 Site Area Emergency Unisolable secondary side line break with SG tube rupture as identified in E-3 "Steam Generator Tube Rupture" NUMARC IC:

N/A FPB loss/potential loss:

RCS loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL is intended to address the full spectrum of Steam Generator (SG) tube rupture events in conjunction with a loss of containment due to a significant secondary line break. This EAL addresses ruptured SG(s) with an unisolable secondary line break corresponding to the loss of 2 of 3 fission product barriers (RCS barrier and containment barrier). This allows the direct release of radioactive fission and activation products to the environment. Resultant offsite dose rates are a function of many variables. Examples include: coolant activity, actual leak rate, SG carry over, iodine partitioning, and meteorology.

The indications utilized should be consistent with the diagnostic activities of the emergency operating procedures (EOPs), if available. This should include indication of reduction in primary coolant inventory, increased secondary radiation levels, and an uncontrolled or complete depressurization of the ruptured SG. Secondary radiation increases should be observed via radiation monitoring of condenser air ejector discharge, SG blowdown, main steam, and/or SG sampling system. Determination of the "uncontrolled" depressurization of the ruptured SG should be based on indication that the pressure decrease in the ruptured steam generator is not a function of operator action. This should prevent declaration based on a depressurization that results from an EOP induced cooldown of the RCS that does not involve the prolonged release of contaminated secondary coolant from the affected SG to the environment. This EAL encompasses steam breaks, feed breaks, and stuck open safety or relief valves.

PEG

Reference:

RCS3.1 Basis Reference(s):

1. E-3 "Steam Generator Tube Rupture" 4-11

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.2 SG Tube Rupture w/ Secondary Release 4.2.2 General Emergency Unisolable secondary side line break with SG tube rupture as identified in E-3 "Steam Generator Tube Rupture" AND Any indicators of fuel clad damage, Table 4.2 Table 4.2 Fuel Clad Damage Indicators ORANGE or RED path in F-0.2, CORE COOLING RED path in F-0.3, HEAT SINK Coolant activity> 300 pCi/cc of 1-131 Containment rad monitor R-29/R-30 reading >100 R/hr Letdown Monitor R-9 reading > 10 R/hr NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss/potential loss, RCS loss, Containment loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL is intended to address the full spectrum of Steam Generator (SG) tube rupture events in conjunction with a loss of containment due to a significant secondary line break with actual or potential loss of the fuel clad integrity. This EAL addresses ruptured SG(s) with an unisolable secondary line break corresponding to the loss of 2 of 3 fission product barriers (RCS barrier and containment barrier) with the actual or potential loss of the third (fuel cladding). This allows the direct release of radioactive fission and activation products to the environment. Resultant offsite dose rates are a function of many variables. Examples include: coolant activity, actual leak rate, SG carry over, iodine partitioning, and meteorology.

The indications utilized should be consistent with the diagnostic activities of the emergency operating procedures (EOPs), if available. This should include indication of reduction in primary coolant inventory, increased secondary radiation levels, and an uncontrolled or complete depressurization of the ruptured SG. Secondary radiation increases should be observed via radiation monitoring of condenser air ejector discharge, SG blowdown, main steam, and/or SG sampling system. Determination of the "uncontrolled" depressurization of the ruptured SG should be based on indication that the pressure decrease in the ruptured steam generator is not a function of operator action. This should prevent declaration based on a depressurization that results from an EOP induced cooldown of the RCS that does not involve the prolonged release of contaminated secondary coolant from the affected SG to the environment. This EAL encompasses steam breaks, feed breaks, and stuck open safety or relief valves.

4-12

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Table 4.2 presents fuel clad loss and potential loss indicators:

• ORANGE or RED path in F-0.2, Core Cooling: Refer to EAL #1.1.1 basis

° RED path in F-0.3, Heat Sink: Refer to EAL #1.2.1 basis

• Coolant activity > 300 pCi/cc of 1-131: Refer to EAL #2.1.2 basis

° Containment rad monitor reading >100 R/hr: Refer to EAL #2.3.2 basis

• Letdown Monitor R-9 reading > 10 R/hr: Refer to EAL #2.2.2 basis This condition represents a loss of both RCS and primary containment with the loss or potential loss of fuel cladding and thus warrants declaration of a General Emergency.

PEG

Reference:

RCS 3.1 + FC1.2, FC1.3, FC2.1, FC3.1, FC3.2, FC4.1, FC5.1 and FC6.1 Basis Reference(s):

1. Technical Specifications Section 3.4.13

2. EPIP 2-16, Core Damage Estimation

3. CSFST F-0.2, Core Cooling, Revision 3

4. CSFST F-0.3, Heat Sink, Revision 3

5. FR-C.1, Response to Inadequate Core Cooling, Revision 7

6. FR-C.2, Response to Degraded Core Cooling, Revision 6, step 9.a

7. FR-C.2, Response to Degraded Core Cooling, Revision 6, Note, pg. 3

8. P-9 "Radiation Monitoring System" 4-13

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 4.0 Containment 4.3 Combustible Gas Concentrations 4.3.1 General Emergency

> 4% hydrogen concentration in containment NUMARC IC:

N/A FPB loss/potential loss:

Fuel clad loss, RCS loss, Containment potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Existence of an explosive mixture (4 % hydrogen) means a hydrogen and oxygen concentration of at least the lower deflagration limit curve exists.

When hydrogen and oxygen concentrations reach or exceed the deflagration limits, imminent loss of the containment barrier exists. To generate such levels of combustible gas, loss of the fuel clad and RCS barriers must have occurred.

This EAL represents loss of both fuel clad and RCS with the potential loss of containment and therefore warrants declaration of a General Emergency.

PEG

Reference:

PC2.4 Basis Reference(s):

1. FR-Z.1 "Response to High Containment Pressure" 4-14

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 RADIOACTIVITY RELEASE I AREA RADIATION Many EALs are based on actual or potential degradation of fission product barriers because of the increased potential for offsite radioactivity release. Degradation of fission product barriers though, is not always apparent via non-radiological symptoms. Therefore, direct indication of increased radiological effluents or area radiation levels are appropriate symptoms for emergency classification.

At lower levels, abnormal radioactivity releases may be indicative of a failure of containment systems or precursors to more significant releases. At higher release rates, offsite radiological conditions may result which require offsite protective actions. Increased area radiation levels in plant may also be indicative of the failure of containment systems or preclude access to plant vital equipment necessary to ensure plant safety.

There are two basic indications of radioactivity release rates and one for area radiation levels which warrant emergency classifications.

• Effluent Monitors: Direct indication of effluent radiation monitoring systems provides a rapid assessment mechanism to determine releases in excess of classifiable limits.

• Dose Proiections / Environmental Measurements: Projected offsite doses (based on effluent monitor readings) or actual offsite field measurements indicating doses or dose rates above classifiable limits.

• Area Radiation Level: Sustained general area radiation levels in excess of those indicating loss of control of radioactive materials or those levels which may preclude access to vital plant areas also warrant emergency classification.

5-1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.1 Effluent Monitors 5.1.1 Unusual Event A valid reading on any monitors Table 5.1 column "UE" for > 60 min. unless sample analysis can confirm release rates < 2 x release rate limit within the 60 min. time limit.

Table 5.1 Effluent Monitor Classification Thresholds Monitor GE SAE Alert UE R-11 N/A N/A N/A 1.72E6 cpm*

R-12 N/A N/A N/A 7.80E6 cpm*

R-13 N/A N/A N/A 2.20E4 cpm R-14 N/A N/A N/A 6.40E5 cpm R-15 N/A N/A N/A 2.94E5 cpm R-12A(7/9) 60.00 pCi/cc 6.00 pCi/cc 6.OOE-1 pCi/cc N/A R-14A(7/9) 5.33 pCi/cc 0.533 pCi/cc 5.33E-2 pCi/cc N/A R-15A(7/9) 115.00 pCi/cc 11.50 pCi/cc 1.15 pCi/cc N/A R-18 N/A N/A offscale hi** 3.60E5 cpm**

R-20A N/A N/A offscale hi 4.08E4 cpm R-20B N/A N/A offscale hi 5.20E3 cpm R-21 N/A N/A offscale hi** 5.00E4 cpm**

R-22 N/A N/A offscale hi** 9.20E4 cpm**

R-31/32 1 ARV 190 mR/hr 1.900 mR/hr 19.0 mR/hr 0.2 mR/hr 1 Safety 95.1 mR/hr 0.951 mR/hr 9.51 mR/hr 0.2 mRhr 2 Safety 47.6 mR/hr 0.476 mR/hr 4.76 mR/hr N/A 3 Safety 31.7 mR/hr 0.317 mR/hr 3.17 mR/hr N/A 4 Safety 23.8 mR/hr 0.238 mR/hr 2.38 mR/hr N/A "during containment purge Wiltl [no iS Olior NUMARC IC:

Any unplanned release of gaseous or liquid radioactivity to the environment that exceeds two times the radiological Technical Specifications for 60 minutes or longer.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

The "value shown" for each monitor is two times the calculated release rate limit as specified in procedure P-9 section 2.4.

Unplanned releases in excess of two times the site release rate limits that continue for 60 minutes or longer represent an uncontrolled situation and hence, a potential degradation in the level of safety. The final integrated dose (which is very low in the Unusual Event emergency class) is not the primary concern here; it is the degradation in plant control implied by the fact that the release was not isolated within 60 minutes. Therefore, it is not intended that the release be averaged over 60 minutes. For example, a release of 4 times release rate limits for 30 minutes does not exceed this initiating condition. Further, the Emergency Coordinator should not wait until 60 minutes has 5-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 elapsed, but should declare the event as soon as it is determined that the release duration has or will likely exceed 60 minutes.

If sample analysis cannot confirm levels to be less than two times the release rate limit within the allotted time, the classification should be made on the basis of the monitor reading alone.

Monitor indications are calculated on the basis of the methodology of the site Offsite Dose Calculation Manual (ODCM). Annual average meteorology is used.

Valid means that a radiation monitor reading has been confirmed by the operators to be correct.

PEG

Reference:

AU1.1 Basis Reference(s):

1. EPIP 2-3 Emergency Release Rate Determination

2. EPIP 2-18 Control Room Dose Assessment

3. "Calculations for NUMARC EALs" by P.S. Polfleit File EAL.XLS

4. RD-1 5.0 ODCM 5-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.1 Effluent Monitors 5.1.2 Alert A valid reading on any monitors Table 5.1 column "Alert" for > 15 min. unless dose assessment can confirm releases are below Table 5.2 column "Alert" within the 15 min. limit.

Table 5.1 Effluent Monitor Classification Thresholds Monitor GE SAE Alert UE R-11 N/A N/A N/A 1.72E6 cpm*

R-12 N/A N/A N/A 7.80E6 cpm*

R-13 N/A N/A N/A 2.2OE4 cpm R-14 N/A N/A N/A 6.40E5 cpm R-15 N/A N/A N/A 2.94E5 cpm R-12A(7/9) 60.00 pCi/cc 6.00 pCi/cc 6.OOE-1 pCi/cc N/A R-14A(7/9) 5.33 pCi/cc 0.533 pCi/cc 5.33E-2 pCi/cc N/A R-15A(7/9) 115.00 pCi/cc 11.50 pCi/cc 1.15 pCi/cc N/A R-18 N/A N/A offscale hi** 3.60E5 cpm**

R-20A N/A N/A offscale hi 4.08E4 cpm R-20B N/A N/A offscale hi 5.20E3 cpm R-21 N/A N/A offscale hi** 5.00E4 cpm**

R-22 N/A N/A offscale hi** 9.20E4 cpm**

R-31/32 1 ARV 190 mR/hr 19.0 mR/hr 1.90 mR/hr 0.2 mR/hr 1 Safety 95.1 mR/hr 9.51 mR/hr 0.95 mR/hr 0.2 mRhr 2 Safety 47.6 mR/hr 4.76 mR/hr 0.47 mR/hr N/A 3 Safety 31.7 mR/hr 3.17 mR/hr 0.31 mR/hr N/A 4 Safety 23.8 mR/hr 2.38 mR/hr 0.23 mR/hr N/A

• during containment purge ** with no isolation Table 5.2 Dose Projection / Env. Measurement Classification Thresholds GE SAE Alert TEDE 1000 mR 100 mR 10 mR CDE Thyroid 5000 mR 500 mR N/A External exposure rate 1000 mR/hr 100 mR/hr 10 mR/hr Thyroid exposure rate 5000 mR/hr 500 mR/hr N/A (for 1 hr. of inhalation) OEM=

5-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 NUMARC IC:

Any unplanned release of gaseous or liquid radioactivity to the environment that exceeds 200 times radiological Technical Specifications for 15 minutes or longer.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This event escalates from the Unusual Event by escalating the magnitude of the release by a factor of 100. Prorating the 500 mR/yr criterion for both time (8766 hr/yr) and the 200 multiplier, the associated site boundary dose rate would be 10 mR/hr. The required release duration was reduced to 15 minutes in recognition of the increased severity.

Monitor indications are calculated on the basis of the methodology of the EPIP 2-18 Control Room Dose Assessment. Annual average meteorology is used.

As previously stated, the 10 mR/hr value is based on a proration of 200 times the 500 mR/yr basis of the 10CFR20 non-occupational MPC limits, rounded down to 10 mR/hr. The values for the gaseous effluent radiation monitors are based upon not exceeding 10 mR/hr at the site boundary as a result of the release.

The conversion factors are based upon the mixture of noble gas present in reactor coolant during the 1/25/82 tube rupture - normal operations.

Since there is no high range monitor associated with liquid effluent monitor R-1 8 and the 200x Technical Specification value is beyond it's upper scale, an indication of "offscale hi" is conservatively used.

Valid means that a radiation monitor reading has been confirmed by the operators to be correct.

If dose calculations using actual meteorology cannot be confirmed to be below the Alert levels in Table 5.2 within the allotted time, the classification should be made on the basis of the monitor reading alone PEG

Reference:

AA1.1 Basis Reference(s):

1. EPIP 2-3 Emergency Release Rate Determination

2. P-9 Radiation Monitoring System

3. EPIP 2-18 Control Room Dose Assessment

4. "Calculations for NUMARC EALs" by P.S. Polfleit File EAL.XLS 5-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.1 Effluent Monitors 5.1.3 Site Area Emergency A valid reading on any monitors Table 5.1 column "SAE" for > 15 min. unless dose assessment can confirm releases at the site boundary are below Table 5.2 column "SAE" within the 15 min.

limit.

Table 5.1 Effluent Monitor Classification Thresholds Monitor GE SAE Alert IUE R-1 1 N/A N/A N/A 1.72E6 cpm*

R-1 2 N/A N/A N/A 7.80E6 cpm*

R-1 3 N/A N/A N/A 2.20E4 cpm R-1 4 N/A N/A N/A 6.40E5 cpm R-1 5 N/A N/A N/A 2.94E5 cpm R-12A(7/9) 60.00 pCi/cc 6.00 pCi/cc 6.OOE-1 pCi/cc N/A R-14A(7/9) 5.33 pCi/cc 0.533 pCi/cc 5.33E-2 pCi/cc N/A R-15A(7/9) 115.00 pCi/cc 11.50 pCi/cc 1.15 pCi/cc N/A R-1 8 N/A N/A offscale hi** 3.60E5 cpm**

R-20A N/A N/A offscale hi 4.08E4 cpm R-20B N/A N/A offscale hi 5.20E3 cpm R-21 N/A N/A offscale hi** 5.00E4 cpm**

R-22 N/A N/A offscale hi** 9.20E4 cpm**

R-31/32 1 ARV 190 mR/hr 19.0 mR/hr 1.90 mR/hr 0.2 mR/hr 1 Safety 95.1 mR/hr 9.51 mR/hr 0.95 mR/hr 0.2 mRhr 2 Safety 47.6 mR/hr 4.76 mR/hr 0.47 mR/hr N/A 3 Safety 31.7 mR/hr 3.17 mR/hr 0.31 mR/hr N/A 4 Safety 23.8 mR/hr 2.38 mR/hr 0.23 mR/hr N/A I I Ii

• during containment purge ** with no isolation Table 5.2 Dose Projection / Env. Measurement Classification Thresholds

_ GE SAE Alert TEDE 1000 mR 100 mR 10 mR CDE Thyroid 5000 mR 500 mR N/A External exposure rate 1000 mR/hr 100 mR/hr 10 mR/hr Thyroid exposure rate 5000 mR/hr 500 mR/hr N/A (for 1 hr. of inhalation)

NUMARC IC:

Boundary dose resulting from an actual or imminent release of gaseous radioactivity exceeds 100 mRem TEDE or 500 mR CDE Thyroid for the actual or projected duration of the release.

FPB loss/potential loss:

N/A 5-6

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Mode Applicability:

All Basis:

The values shown were determined utilizing EPIP 2-18 "Control Room Dose Assessment" based upon a 100 mR whole body exposure. The calculations used annual average meteorology from the ODCM. The most restrictive X/Q values at the 0 - 0.5 mile distance were used. EPIP 2-18 specifies that whole body dose is limiting with respect to emergency classification and protective action recommendations based upon the assumption of a noble gas to iodine ratio of 10,000:1.

The 100 mR integrated dose is based on the proposed 10CFR20 annual average population exposure. This value also provides a desirable gradient (one order of magnitude) between the Alert, Site Area Emergency, and General Emergency classes. It is deemed that exposures less than this limit are not consistent with the Site Area Emergency class description. The 500 mR integrated child thyroid dose was established in consideration of the 1:5 ratio of the EPA Protective Action Guidelines for whole body to thyroid dose.

Integrated doses are generally not monitored in real-time. In establishing the emergency action levels, a duration of one hour is assumed, based on a site boundary dose of 100 mR/hour whole body or 500 mR/hour child thyroid, whichever is more limiting (depends on source term assumptions).

Although EPIP 2-18 provides for R-31/32 release determinations, the variability of results based upon the number of ARV's and/or SV's precludes the use of any single monitor default value for these monitors.

Valid means that a radiation monitor reading has been confirmed by the operators to be correct.

Ifdose calculations using actual meteorology cannot be confirmed to be below the Site Area Emergency levels in Table 5.2 within the allotted time, the classification should be made on the basis of the monitor reading alone.

PEG

Reference:

AS1.1 Basis Reference(s):

1. P-9 Radiation Monitoring System

2. EPIP 2-18 Control Room Dose Assessment

3. FSAR Table 2.3

4. "Calculations for NUMARC EALs" by P.S. Polfleit File EAL.XLS

5. RD-1 5.0 ODCM Tables 3, 5 and 7 5-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.1 Effluent Monitors 5.1.4 General Emergency A valid reading on any monitors Table 5.1 column "GE" for > 15 min. unless dose assessment can confirm releases are below Table 5.2 column "GE" within the 15 min. limit.

Table 5.1 Effluent Monitor Classification Thresholds Monitor GE SAE Alert UE R-1 1 N/A N/A N/A 1.72E6 cpm*

R-12 N/A N/A N/A 7.80E6 cpm*

R-13 N/A N/A N/A 2.20E4 cpm R-14 N/A N/A N/A 6.40E5 cpm R-15 N/A N/A N/A 2.94E5 cpm R-12A(7/9) 60.00 pCi/cc 6.00 pCi/cc 6.OOE-1 pCi/cc N/A R-14A(7/9) 5.33 pCi/cc 0.533 pCi/cc 5.33E-2 pCi/cc N/A R-15A(7/9) 115.00 pCi/cc 11.50 pCi/cc 1.15 ptCi/cc N/A R-1 8 N/A N/A offscale hi** 3.60E5 cpm**

R-20A N/A N/A offscale hi 4.08E4 cpm R-20B N/A N/A offscale hi 5.20E3 cpm R-21 N/A N/A offscale hi** 5.00E4 cpm**

R-22 N/A N/A offscale hi** 9.20E4 cpm**

R-31/32 1 ARV 190 mR/hr 19.0 mR/hr 1.90 mR/hr 0.2 mR/hr 1 Safety 95.1 mR/hr 9.51 mR/hr 0.95 mR/hr 0.2 mRhr 2 Safety 47.6 mR/hr 4.76 mR/hr 0.47 mR/hr N/A 3 Safety 31.7 mR/hr 3.17 mR/hr 0.31 mR/hr N/A 4 Safety 23.8 mR/hr 2.38 mR/hr 0.23 mR/hr N/A

• during containment purge ** with no isolation Table 5.2 Dose Projection / Env. Measurement Classification Thresholds GE SAE Alert TEDE 1000 mR 100mR 10 mR CDE Thyroid 5000 mR 500 mR N/A External exposure rate 1000 mR/hr 100 m R/hr 10 mR/hr Thyroid exposure rate 5000 mR/hr 500 mR/hr N/A (for 1 hr. of inhalation)

NUMARC IC:

Boundary dose resulting from an actual or imminent release of gaseous radioactivity exceeds 1000 mRem TEDE or 5000 mR CDE Thyroid for the actual or projected duration of the release using actual meteorology.

FPB loss/potential loss:

N/A 5-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Mode Applicability:

All Basis:

The values shown were determined utilizing EPIP 2-18 "Control Room Dose Assessment" based upon a 1000 mR whole body exposure. The calculations used annual average meteorology from the ODCM. The most restrictive X/Q values at the 0 - 0.5 mile distance were used. EPIP 2-18 specifies that whole body dose is limiting with respect to emergency classification and protective action recommendations based upon the assumption of a noble gas to iodine ratio of 10,000:1.

The 1000 mR whole body and the 5000 mR child thyroid integrated dose are based on the EPA protective action guidance which indicates that public protective actions are indicated if the dose exceeds 1 REM whole body or 5 REM child thyroid. This is consistent with the emergency class description for a General Emergency. This level constitutes the upper level of the desirable gradient for the Site Area Emergency.

Integrated doses are generally not monitored in real-time. In establishing the emergency action levels, a duration of one hour is assumed, based on a site boundary dose of 1000 mR/hour whole body or 5000 mR/hour child thyroid, whichever is more limiting (depends on source term assumptions).

Although EPIP 2-18 provides for R-31/32 release determinations, the variability of results based upon the number of ARV's and/or SV's precludes the use of any single monitor default value for these monitors.

Valid means that a radiation monitor reading has been confirmed by the operators to be correct.

If dose calculations using actual meteorology cannot be confirmed to be below the General Emergency levels in Table 5.2 within the allotted time, the classification should be made on the basis of the monitor reading alone.

PEG

Reference:

AG1.1 Basis Reference(s):

1. P-9 Radiation Monitoring System

2. EPIP 2-18 Control Room Dose Assessment

3. FSAR Table 2.3

4. "Calculations for NUMARC EALs" by P.S. Polfleit File EAL.XLS 5-9

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.2 Dose Projections/ Environmental Measurements/ Release Rates 5.2.1 Unusual Event Confirmed sample analyses for gaseous or liquid release rates > 2 x release rate limits for > 60 min.

NUMARC IC:

Any unplanned release of gaseous or liquid radioactivity to the environment that exceeds two times the radiological Technical Specifications for 60 minutes or longer.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

Unplanned releases in excess of two times the site release rate limits that continue for 60 minutes or longer represent an uncontrolled situation and hence, a potential degradation in the level of safety. The final integrated dose (which is very low in the Unusual Event emergency class) is not the primary concern here; it is the degradation in plant control implied by the fact that the release was not isolated within 60 minutes. Therefore, it is not intended that the release be averaged over 60 minutes. For example, a release of 4 times release rate limits for 30 minutes does not exceed this initiating condition. Further, the Emergency Coordinator should not wait until 60 minutes has elapsed, but should declare the event as soon as it is determined that the release duration has or will likely exceed 60 minutes This EAL addresses uncontrolled releases that are detected by sample analysis, particularly in unmonitored pathways, e.g. spills of radioactive liquid into storm drains, heat exchanger leakage into service water systems.

PEG

Reference:

AU1.2 Basis Reference(s):

1. RD-1 5.0 ODCM 5-10

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.2 Dose Projections/ Environmental Measurements/ Release Rates 5.2.2 Alert Confirmed sample analyses for gaseous or liquid release rates > 200 x release rate limits for > 15 min.

NUMARC IC:

Any unplanned release of gaseous or liquid radioactivity to the environment that exceeds 200 times radiological Technical Specifications for 15 minutes or longer.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

Confirmed sample analyses in excess of two hundred times the site release rate limits that continue for 15 minutes or longer represent an uncontrolled situation and hence, a potential degradation in the level of safety. This event escalates from the Unusual Event by increasing the magnitude of the release by a factor of 100 over the Unusual Event level (i. e., 200 times release rate limits). Prorating the 500 mR/yr basis of the 10CFR20 non-occupational MPC limits for both time (8766 hr/yr) and the 200 multiplier, the associated site boundary dose rate would be 10 mR/hr. The required release duration was reduced to 15 minutes in recognition of the increased severity.

This EAL addresses uncontrolled releases that are detected by sample analysis, particularly in unmonitored pathways, e.g. spills of radioactive liquid into storm drains, heat exchanger leakage into service water systems.

PEG

Reference:

AA1.2 Basis Reference(s):

1. RD-15.0 ODCM 5-11

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release I Area Radiation 5.2 Dose Projections/ Environmental Measurements/ Release Rates 5.2.3 Alert Dose projections or field surveys resulting from actual or imminent release which indicate doses /

dose rates > Table 5.2 column "Alert" at the site boundary or beyond.

Table 5.2 Dose Projection / Env. Measurement Classification Thresholds Alert SAE GE TEDE 10mR 100 mR 1000 mR CDE Thyroid N/A 500 mR 5000 mR External exposure rate 10 mR/hr 100 mR/hr 1000 mR/hr Thyroid exposure rate N/A 500 mR/hr 5000 mR/hr (for 1 hr. of inhalation)

NUMARC IC:

Any unplanned release of gaseous or liquid radioactivity to the environment that exceeds 200 times radiological Technical Specifications for 15 minutes or longer FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

Offsite integrated doses in excess of 10 mR TEDE or dose rates in excess of 10 mR/hr TEDE represent an uncontrolled situation and hence, a potential degradation in the level of safety. This event escalates from the Unusual Event by increasing the magnitude of the release by a factor of 100 over the Unusual Event level (i. e., 200 times release rate limits). Prorating the 500 mR/yr basis of 10CFR20 for both time (8766 hr/yr) and the 200 multiplier, the associated site boundary dose rate would be 10 mR/hr.

As previously stated, the 10 mR/hr value is based on a proration of 200 times the 500 mR/yr basis of 10CFR20, rounded down to 10 mR/hr.

PEG

Reference:

AA1.2 Basis Reference(s):

1. RD-1 5.0 ODCM

2. EPIP 2-3 Emergency Release Rate Determination

3. P-9 Radiation Monitoring System

4. EPIP 2-18 Control Room Dose Assessment 5-12

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.2 Dose Projections/ Environmental Measurements/ Release Rates 5.2.4 Site Area Emergency Dose projections or field surveys resulting from actual or imminent release which indicate doses /

dose rates > Table 5.2 column "SAE" at the site boundary or beyond.

Table 5.2 Dose Projection / Env. Measurement Classification Thresholds Alert SAE GE TEDE 10 mR 100 mR 1000 mR CDE Thyroid N/A 500 mR 5000 mR External exposure rate 10 mR/hr 100 mR/hr 1000 mR/hr Thyroid exposure rate N/A 500 mR/hr 5000 mR/hr (for 1 hr. of inhalation)

NUMARC IC:

Boundary dose resulting from an actual or imminent release of gaseous radioactivity exceeds 100 mRem TEDE or 500 mR CDE Thyroid for the actual or projected duration of the release.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

The 100 mR integrated TEDE dose in this EAL is based on the proposed 10CFR20 annual average population exposure. This value also provides a desirable gradient (one order of magnitude) between the Alert, Site Area Emergency, and General Emergency classes. It is deemed that exposures less than this limit are not consistent with the Site Area Emergency class description. The 500 mR integrated CDE thyroid dose was established in consideration of the 1:5 ratio of the EPA Protective Action Guidelines for whole body thyroid. In establishing the dose rate emergency action levels, a duration of one hour is assumed. Therefore, the dose rate EALs are based on a site boundary dose rate of 100 mR/hr TEDE or 500 mR/hr CDE thyroid, whichever is more limiting.

PEG

Reference:

AS1.3 AS1.4 Basis Reference(s):

1. Technical Specifications, Amendment No. 24, Artciles 3.9.1.1 thru 3.9.2.3

2. EPIP 2-3 Emergency Release Rate Determination

3. P-9 Radiation Monitoring System

4. EPIP 2-18 Control Room Dose Assessment 5-13

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release I Area Radiation 5.2 Dose Projections/ Environmental Measurements/ Release Rates 5.2.5 General Emergency Dose projections or field surveys resulting from actual or imminent release which indicate doses /

dose rates > Table 5.2 column "GE" at the site boundary or beyond.

Table 5.2 Dose Projection / Env. Measurement Classification Thresholds Alert SAE GE TEDE 1OmR 100 mR 1000 mR CDE Thyroid N/A 500 mR 5000 mR External exposure rate 10 mR/hr 100 mR/hr 1000 mR/hr Thyroid exposure rate N/A 500 mR/hr 5000 mR/hr (for 1 hr. of inhalation)

NUMARC IC:

Boundary dose resulting from an actual or imminent release of gaseous radioactivity exceeds 1000 mRem TEDE or 5000 mR CDE Thyroid for the actual or projected duration of the release using actual meteorology.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

The General Emergency values of Table 5.2 are based on the boundary dose resulting from an actual or imminent release of gaseous radioactivity that exceeds 1000 mR TEDE or 5000 mR CDE thyroid for the actual or projected duration of the release. The 1000 mR TEDE and the 5000 mR CDE thyroid integrated dose are based on the EPA protective action guidance which indicates that public protective actions are indicated if the dose exceeds 1 rem TEDE or 5 rem CDE thyroid.

This is consistent with the emergency class description for a General Emergency. This level constitutes the upper level of the desirable gradient for the Site Area Emergency. Actual meteorology is specifically identified since it gives the most accurate dose assessment. Actual meteorology (including forecasts) should be used whenever possible. In establishing the dose rate emergency action levels, a duration of one hour is assumed. Therefore, the dose rate EALs are based on a site boundary dose rate of 1000 mR/hr TEDE or 5000 mR/hr CDE thyroid, whichever is more limiting.

PEG

Reference:

AG1.3 AG1.4 5-14

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Basis Reference(s):

1. Technical Specifications, Amendment No. 24, Articles 3.9.1.1 thru 3.9.2.3

2. EPIP 2-3 Emergency Release Rate Determination

3. P-9 Radiation Monitoring System

4. EPIP 2-18 Control Room Dose Assessment 5-15

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release / Area Radiation 5.3 Area Radiation Levels 5.3.1 Unusual Event Any sustained direct area radiation monitor readings > 100 x alarm or offscale hi resulting from an uncontrolled process NUMARC IC:

Unexpected increase in plant radiation or airborne concentration.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

Valid elevated area radiation levels usually have long lead times relative to the potential for radiological release beyond the site boundary, thus impact to public health and safety is very low.

It should be noted that the CAS and SAS do not have installed radiation monitors. Therefore, evaluation of this EAL would require survey of these areas.

This EAL addresses unplanned increases in radiation levels inside the plant. These radiation levels represent a degradation in the control of radioactive material and a potential degradation in the level of safety of the plant. Area radiation levels above 100 times the alarm setpoint have been selected because they are readily identifiable on ARM instrumentation. Since ARM setpoints are nominally set one decade over normal levels, 100 times the alarm setpoint provides an appropriate threshold for emergency classification. For those ARMs whose upper range limit are less than 100 times the alarm setpoint, a value of offscale high is used. This EAL escalates to an Alert, if the increases impair the level of safe plant operation.

PEG

Reference:

AU2.4 Basis Reference(s):

None 5-16

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release ! Area Radiation 5.3 Area Radiation Levels 5.3.2 Alert Sustained area radiation levels > 15 mR/hr in either:

Control Room OR Central Alarm Station and Secondary Alarm Station NUMARC IC:

Release of radioactive material or increases in radiation levels within the facility that impedes operation of systems required to maintain safe operations or to establish or maintain cold shutdown.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses increased radiation levels that impede necessary access to operating stations requiring continuous occupancy to maintain safe plant operation or perform a safe plant shutdown. Areas requiring continuous occupancy include the Control Room, the central alarm station (CAS) and the secondary security alarm station (SAS). The security alarm stations are included in this EAL because of their importance to permitting access to areas required to assure safe plant operations.

The value of 15 mR/hr is derived from the GDC 19 value of 5 rem in 30 days with adjustment for expected occupancy times. Although Section III.D.3 of NUREG-0737, "Clarification of TMI Action Plan Requirements", provides that the 15 mR/hr value can be averaged over the 30 days, the value is used here without averaging. A 30 day duration implies an event potentially more significant than an Alert.

It is the impaired ability to operate the plant that results in the actual or potential degradation of the level of safety of the plant. The cause or magnitude of the increase in radiation levels is not a concern of this EAL. The Emergency Coordinator must consider the source or cause of the increased radiation levels and determine if any other EALs may be involved. For example, a dose rate of 15 mR/hr in the Control Room may be a problem in itself. However, the increase may also be indicative of high dose rates in the containment due to a LOCA. In this latter case, a Site Area Emergency or a General Emergency may be indicated by other EAL categories.

This EAL is not intended to apply to anticipated temporary radiation increases due to planned events (e. g., radwaste container movement, depleted resin transfers, etc.).

PEG

Reference:

AA3.1 Basis Reference(s):

1. GDC 19

2. NUREG-0737, "Clarification of TMI Action Plan Requirements",Section III.D.3

3. P-9 Radiation Monitoring System Rev. 67 5-17

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 5.0 Radioactivity Release I Area Radiation 5.3 Area Radiation Levels 5.3.3 Alert Sustained abnormal area radiation levels > 8 R/hr within any areas, Table 5.3 AND Access is required to establish or maintain cold shutdown.

Table 5.3 Plant Areas

"* Reactor Containment Building

"* Auxiliary Building

"* Turbine Building

"* Emergency Diesel Building

"* Screen House

"* Standby Auxiliary Feedwater Building NUMARC IC:

Release of radioactive material or increases in radiation levels within the facility that impedes operation of systems required to maintain safe operations or to establish or maintain cold shutdown.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses increased radiation levels in areas requiring infrequent access in order to maintain safe plant operation or perform a safe plant shutdown. Area radiation levels at or above 8 R/hr are indicative of radiation fields which may limit personnel access or adversely affect equipment whose operation may be needed to assure adequate core cooling or shutdown the reactor. The basis of the value is described in NMPC memo File Code NMP31027 "Exposure Guidelines For Unusual/Accident Conditions". The areas selected are consistent with those listed in other EALs and represent those structures which house systems and equipment necessary for the safe operation and shutdown of the plant.

It is the impaired ability to operate the plant that results in the actual or potential degradation of the level of safety of the plant. The cause or magnitude of the increase in radiation levels is not a concern of this EAL. The Emergency Coordinator must consider the source or cause of the increased radiation levels and determine if any other EAL may be involved. For example, a dose rate of 8 R/hr may be a problem in itself. However, the increase may also be indicative of high dose rates in the containment due to a LOCA. In this latter case, a Site Area Emergency or a General Emergency may be indicated by other EAL categories.

This EAL is not meant to apply to increases in the containment radiation monitors as these are events which are addressed in other EALs. Nor is it intended to apply to anticipated temporary radiation increases due to planned events (e. g., radwaste container movement, deplete resin transfers, etc.).

5-18

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 PEG

Reference:

AA3.2 Basis Reference(s):

1. Niagara Mohawk Power Corporation memo File Code NMP31027 "Exposure Guidelines For Unusual/Accident Conditions", Revision 1, 3/18/93 5-19

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 6.0 ELECTRICAL FAILURES Loss of vital plant electrical power can compromise plant safety system operability including decay heat removal and emergency core cooling systems which may be necessary to ensure fission product barrier integrity.

The events of this category have been grouped into the following two loss of electrical power types:

Loss of AC Power Sources: This category includes losses of onsite and/or offsite AC power sources including station blackout events.

Loss of DC Power Sources: This category involves total losses of vital plant 125 vdc power sources.

6-1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 6.0 Electrical Failures 6.1 Loss of AC Power Sources 6.1.1 Unusual Event Loss of ability to supply power to the safeguard trains from offsite circuits 751 and 767 for > 15 min.

NUMARC IC:

Loss of all offsite power to essential busses for greater than 15 minutes.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

Prolonged loss of all offsite AC power reduces required redundancy and potentially degrades the level of safety of the plant by rendering the plant more vulnerable to a complete loss of AC power (station blackout). Fifteen minutes was selected as a threshold to exclude transient or momentary power losses.

PEG

Reference:

SU1.1 Basis Reference(s):

1. RGE-6 "4160V Electrical Distribution System"

2. RGE-7 "480V Distribution" 6-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 6.0 Electrical Failures 6.1 Loss of AC Power Sources 6.1.2 Alert Loss of both trains of AC busses for > 15 min.

NUMARC IC:

Loss of all offsite power and loss of all onsite AC power to essential busses during cold shutdown, refueling or defueled mode.

FPB loss/potential loss:

N/A Mode Applicability:

5-cold shutdown, 6-refuelinging, Defueled Basis:

Loss of all AC power compromises all plant safety systems requiring electric power. This EAL is indicated by: loss of all offsite AND onsite AC power to safeguards buses 14/18 AND 16/17 for greater than 15 minutes. When in cold shutdown, refueling, or defueled mode the event can be classified as an Alert, because of the significantly reduced decay heat, lower temperature and pressure, increasing the time to restore one of the emergency busses, relative to that specified for the Site Area Emergency EAL. Escalating to the Site Area Emergency, if appropriate, is by Abnormal Rad Levels/Radiological Effluent, or Emergency Coordinator Judgment ICs. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses.

PEG

Reference:

SA1.1 Basis Reference(s):

1. RGE-6 "4160V Electrical Distribution System" 6-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28

• 6.0 Electrical Failures 6.1 Loss of AC Power Sources 6.1.3 Alert Available safeguard train AC power reduced to only one of the following for > 15 min.:

• EDG 1A (14/18)

• EDG 1B (16/17)

• Station Auxiliary Transformer 12A

• Station Auxiliary Transformer 12B NUMARC IC:

AC power capability to essential busses reduced to a single power source for greater than 15 minutes such that any additional single failure would result in station blackout with reactor coolant

> 200 'F.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

The condition indicated by this EAL is the degradation of the offsite power with a concurrent failure of one emergency generator to supply power to its emergency busses. Another related condition could be the loss of all offsite power and loss of onsite emergency diesels with only one train of emergency busses being fed from the unit main generator, or the loss of onsite emergency diesels with only one train of emergency busses being fed from offsite power. The subsequent loss of this single power source would escalate the event to a Site Area Emergency.

PEG

Reference:

SA5.1 Basis Reference(s):

1. RGE-6 "4160V Electrical Distribution"

2. RGE-7 "480v Distribution" 6-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 6.0 Electrical Failures 6.1 Loss of AC Power Sources 6.1.4 Site Area Emergency Loss of both trains of AC busses for > 15 min.

NUMARC IC:

Loss of all offsite power and loss of all onsite AC power to essential busses with reactor coolant

> 200 'F.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Loss of all AC power compromises all plant safety systems requiring electric power. This EAL is indicated by: loss of all offsite AND onsite AC power to safeguards buses 14/18 AND 16/17 for greater than 15 minutes. Prolonged loss of all AC power will cause core uncovery and loss of containment integrity, thus this event can escalate to a General Emergency. The time duration should be selected to exclude transient or momentary power losses, but should not exceed 15 minutes.

PEG

Reference:

SS1.1 Basis Reference(s):

1. RGE-6 "4160V Electrical Distribution"

2. RGE-7 "480v Distribution" 6-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 6.0 Electrical Failures 6.1 Loss of AC Power Sources 6.1.5 General Emergency Loss of all safeguards bus AC power AND either:

Power restoration to any safeguards bus is not likely in < 4 hrs OR An ORANGE or RED path condition exists on F-0.2, "CORE COOLING" NUMARC IC:

Prolonged loss of all offsite power and prolonged loss of all onsite AC power with reactor coolant

> 200 'F.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Loss of all AC power compromises all plant safety systems requiring electric power. Prolonged loss of all AC power will lead to loss of fuel clad, RCS, and containment. Although this EAL may be viewed as redundant to the RPV Water Level EALs, its inclusion is necessary to better assure timely recognition and emergency response.

This EAL is specified to assure that in the unlikely event of prolonged station blackout, timely recognition of the seriousness of the event occurs and that declaration of a General Emergency occurs as early as is appropriate, based on a reasonable assessment of the event trajectory.

The likelihood of restoring at least one emergency bus should be based on a realistic appraisal of the situation since a delay in an upgrade decision based on only a chance of mitigating the event could result in a loss of valuable time in preparing and implementing public protective actions.

In addition, under these conditions, fission product barrier monitoring capability may be degraded.

Although it may be difficult to predict when power can be restored, the Emergency Coordinator should declare a General Emergency based on two major considerations:

1. Are there any present indications that core cooling is already degraded to the point that Loss or Potential Loss of fission product barriers is imminent?

2. If there are no present indications of such core cooling degradation, how likely is it that power can be restored in time to assure that a loss of two barriers with a potential loss of the third barrier can be prevented?

Thus, indication of continuing core cooling degradation must be based on fission product barrier monitoring with particular emphasis on Emergency Coordinator judgment as it relates to imminent loss or potential loss of fission product barriers and degraded ability to monitor fission product barriers.

The time to restore AC power is based on site blackout coping analysis performed in conformance with 10CFR50.63 and Regulatory Guide 1.155, "Station Blackout", with appropriate allowance for offsite emergency response.

6-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 PEG

Reference:

SG1.1 Basis Reference(s):

1. F-0.2, "CORE COOLING,"

2. NRC letter to Dr. Mecredy dated 1/30/92 "RE Ginna Nuclear Power Plant Station Blackout Analysis (TAC M68548)

3. RGE-6 "4160v Electrical Distribution System"

4. RGE-7 "480v Distribution" 6-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 6.0 Electrical Failures 6.2 Loss of DC Power Sources 6.2.1 Unusual Event

< 108 vdc bus voltage indications on 125 vdc batteries 1A and 1B for > 15 min.

NUMARC IC:

Unplanned loss of required DC power during cold shutdown or refueling mode for greater than 15 minutes.

FPB loss/potential loss:

N/A Mode Applicability:

5-cold shutdown, 6-refueling Basis:

The purpose of this EAL is to recognize a loss of DC power compromising the ability to monitor and control the removal of decay heat during cold shutdown or refueling operations. This EAL is intended to be anticipatory in as much as the operating crew may not have necessary indication and control of equipment needed to respond to the loss.

The bus voltage is based on the minimum bus voltage necessary for the operation of safety related equipment. This voltage value incorporates a margin of at least 15 minutes of operation before the onset of inability to operate loads.

PEG

Reference:

SU7.1 Basis Reference(s):

1. RGE-9 "Instrument Bus and DC Power System" 6-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 6.0 Electrical Failures 6.2 Loss of DC Power Sources 6.2.2 Site Area Emergency

> 108 vdc bus voltage indications on 125 vdc batteries 1A and 1 B for > 15 min.

NUMARC IC:

Loss of all vital DC power with reactor coolant > 200 'F.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Loss of all DC power compromises ability to monitor and control plant safety functions. Prolonged loss of all DC power will cause core uncovering and loss of containment integrity when there is significant decay heat and sensible heat in the reactor system. Escalation to a General Emergency would occur by other EAL categories. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses.

The bus voltage is based on the minimum bus voltage necessary for the operation of safety related equipment. This voltage value incorporates a margin of at least 15 minutes of operation before the onset of inability to operate loads.

PEG

Reference:

SS3.1 Basis Reference(s):

1. RGE-9 "Instrument Bus and DC Power System" 6-9

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 EQUIPMENT FAILURES Numerous plant system related equipment failure events which warrant emergency classification, based upon their potential to pose actual or potential threats to plant safety, have been identified in this category.

The events of this category have been grouped into the following event types:

"* Technical Specifications: Only one EAL falls under this event type related to the failure of the plant to be brought to the required plant operating condition required by technical specifications.

"* System Failures or Control Room Evacuation: This category includes events which are indicative of losses of operability of safety systems such as ECCS, isolation functions, Control Room habitability or cold and hot shutdown capabilities.

" Loss of Indication, Alarm, or Communication Capability: Certain events which degrade the plant operators ability to effectively assess plant conditions or communicate with essential personnel within or external to the plant warrant emergency classification.

Under this event type are losses of annunciators and/or communication equipment.

7-1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.1 Technical Specification Requirements 7.1.1 Unusual Event Plant is not brought to required operating mode within Technical Specifications LCO Required Action Completion Time.

NUMARC IC:

Inability to reach required shutdown within Technical Specification Limits.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

Limiting Conditions of Operation (LCOs) require the plant to be brought to a required shutdown mode when the Technical Specification required configuration cannot be restored. Depending on the circumstances, this may or may not be an emergency or precursor to a more severe condition.

In any case, the initiation of plant shutdown required by the site Technical Specification requires a one hour report under 10CFR50.72 (b) non-emergency events. The plant is within its safety envelope when being shut down within the allowable action statement time in the Technical Specifications. An immediate Notification of an Unusual Event is required when the plant is not brought to the required operating mode within the allowable action statement time in the Technical Specifications. Declaration of an Unusual Event is based on the time at which the LCO-specified required action completion time statement period elapses under the site Technical Specifications and is not related to how long a condition may have existed. Other required Technical Specification shutdowns that involve precursors to more serious events are addressed by other EALs.

PEG

Reference:

SU2.1 Basis Reference(s):

1. Technical Specifications 7-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.2 System Failures or Control Room Evacuation 7.2.1 Unusual Event Report of main turbine failure resulting in casing penetration or damage to turbine seals or generator seals.

NUMARC IC:

Natural and destructive phenomena affecting the protected area.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL is intended to address main turbine rotating component failures of sufficient magnitude to cause observable damage to the turbine casing or to the seals of the turbine generator. Of major concern is the potential for leakage of combustible fluids (lubricating oils) and gases (hydrogen cooling) to the plant environs. Actual fires and flammable gas build up are appropriately classified through other EALs. This EAL is consistent with the definition of an Unusual Event while maintaining the anticipatory nature desired and recognizing the risk to non safety related equipment.

PEG

Reference:

HU1.6 Basis Reference(s):

None 7-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.2 System Failures or Control Room Evacuation 7.2.2 Alert Turbine failure generated missiles result in any visible structural damage to plant vital equipment NUMARC IC:

Natural and destructive phenomena affecting the plant vital area.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses the threat to safety related equipment imposed by missiles generated by main turbine rotating component failures. The involved equipment includes safety-related equipment, their controls, and their power supplies. This EAL is consistent with the definition of an ALERT in that, if missiles have damaged or penetrated areas containing safety-related equipment, the potential exists for substantial degradation of the level of safety of the plant.

PEG

Reference:

HA1.6 Basis Reference(s):

None 7-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.2 System Failures or Control Room Evacuation 7.2.3 Alert Entry into AP-CR.1 "Control Room Inaccessability" NUMARC IC:

Control room evacuation has been initiated.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby, 5-cold shutdown, 6-refueling Basis:

With the Control Room evacuated, additional support, monitoring and direction through the Technical Support Center and/or other emergency operations center is necessary. Inability to establish plant control from outside the Control Room will escalate this event to a Site Area Emergency.

PEG

Reference:

HA5.1 Basis Reference(s):

1. AP-CR.1 Control Room Inaccessibility 7-5

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.2 System Failures or Control Room Evacuation 7.2.4 Alert Reactor coolant temperature cannot be maintained < 200 OF NUMARC IC:

Inability to maintain plant in cold shutdown.

FPB loss/potential loss:

N/A Mode Applicability:

5-cold shutdown, 6-refueling Basis:

This EAL addresses complete loss of functions required for core cooling during refueling and cold shutdown modes. Escalation to Site Area Emergency or General Emergency would be through other EALs.

A reactor coolant temperature increase that approaches or exceeds the cold shutdown technical specification limit warrants declaration of an Alert irrespective of the availability of technical specification required functions to maintain cold shutdown. The concern of this EAL is the loss of ability to maintain the plant in cold shutdown which is defined by reactor coolant temperature and not the operability of equipment which supports removal of heat from the reactor.

PEG

Reference:

SA3.1 Basis Reference(s):

1. AP-RHR.1 "Loss of RHR"

2. Technical Specifications Section 1.1

3. AP-RHR-2 "Loss of RHR While Operating at Reduced RCS Inventory Conditions" 7-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.2 System Failures or Control Room Evacuation 7.2.5 Site Area Emergency Entry into AP-CR.1 "Control Room Inaccessability" AND Core cooling cannot be established per AP-CR.1 "Control Room Inaccessibility" in

> 20 min.

NUMARC IC:

Control room evacuation has been initiated and control of core cooling cannot be established.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby, 5-cold shutdown, 6-refueling Basis:

This EAL indicates that expeditious transfer of safety systems has not occurred but fission product barrier damage may not yet be indicated. The time interval for transfer is based on analysis or assessments as to how quickly control must be reestablished without core uncovering and/or core damage.

The design criteria for the remote shutdown equipment specifies that control of safety systems must be able to be achieved without resulting in core uncovery or core damage. REGNPS Appendix R submittal indicates 20 minutes is the maximum time for which control of plant safety systems should occur under worst case conditions. Therefore, 20 minutes is within the design criteria of the remote shutdown equipment.

In cold shutdown and refueling modes, operator concern is directed toward maintaining core cooling such as is discussed in Generic Letter 88-17, "Loss of Decay Heat Removal." In power operation , startup, hot shutdown and hot standby modes, operator concern is primarily directed toward maintaining critical safety functions and thereby assuring fission product barrier integrity.

PEG

Reference:

HS2.1 Basis Reference(s):

1. AP-CR.1 Control Room Inaccessibility

2. Appendix R Section 6.4.5 page 6-35

3. Generic Letter 88-17, "Loss of Decay Heat Removal."

7-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.3 Loss of Indications /Alarms /

Communication Capability 7.3.1 Unusual Event Unplanned loss of annunciators or indications on any Control Room Panels, Table 7.3 for > 15 min.

AND Increased surveillance is required for safe plant operation Table 7.3 Vital Control Room Panels A AA B C D E F G NUMARC IC:

Unplanned loss of most or all safety system annunciation or indication in the control room for greater than 15 minutes with reactor coolant temperature > 200 'F.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL recognizes the difficulty associated with monitoring changing plant conditions without the use of a major portion of the annunciation or indication equipment. Recognition of the availability of computer based indication equipment is considered (PPCS and SAS).

"Unplanned" loss of annunciators or indicators excludes scheduled maintenance and testing activities.

It is not intended that plant personnel perform a detailed count of the instrumentation lost but the use of judgment by the Shift Supervisor as the threshold for determining the severity of the plant conditions. This judgment is supported by the specific opinion of the Shift Supervisor that additional operating personnel will be required to provide increased monitoring of system operation to safely operate the plant.

It is further recognized that most plant designs provide redundant safety system indication powered from separate uninterruptable power supplies. While failure of a large portion of annunciators is more likely than a failure of a large portion of indications, the concern is included in this EAL due to difficulty associated with assessment of plant conditions. The loss of specific, or several, safety system indicators should remain a function of that specific system or component operability status. This will be addressed by their specific Technical Specification. The initiation of a Technical Specification imposed plant shutdown related to the instrument loss will be reported via 10CFR50.72. If the shutdown is not in compliance with the Technical Specification action, the Unusual Event is based on EAL 7.1.1, Inability to Reach Required Shutdown Within Technical Specification Limits.

7-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Annunciators or indicators for this EAL must include those identified in the Abnormal Operating procedures, in the Emergency Operating Procedures, and in other EALs (e. g., area, process, and/or effluent rad monitors, etc.).

Fifteen minutes was selected as a threshold to exclude transient or momentary power losses.

Due to the limited number of safety systems in operation during cold shutdown, refueling, and defueled modes, this EAL is not applicable during these modes of operation.

This Unusual Event will be escalated to an Alert if a transient is in progress during the loss of annunciation or indication.

PEG

Reference:

SU3.1 Basis Reference(s):

None 7-9

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.3 Loss of Indications /Alarms /

Communication Capability 7.3.2 Unusual Event Loss of all communications capability affecting the ability to either:

Perform routine operations OR Notify offsite agencies or personnel NUMARC IC:

Unplanned loss of all onsite or offsite communications capabilities.

FPB loss/potential loss:

NIA Mode Applicability:

All Basis:

The purpose of this EAL is to recognize a loss of communications capability that either defeats the plant operations staff ability to perform routine tasks necessary for plant operations or the ability to communicate problems with offsite authorities. The loss of offsite communications ability is expected to be significantly more comprehensive than the condition addressed by 10CFR50.72.

The onsite communications loss must encompass the loss of all means of routine communications (i. e., phones, sound powered phone systems, page party system, and radios/walkie talkies).

The offsite communications loss must encompass the loss of all means of communications with offsite authorities. This should include ENS, Bell lines, FAX transmissions, and dedicated phone systems. This EAL is intended to be used only when extraordinary means are being utilized to make communications possible (relaying of information from radio transmissions, individuals being sent to offsite locations, etc.).

PEG

Reference:

SU6.1 Basis Reference(s):

1. A-56, "Communication Systems at Ginna Station" 7-10

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.3 Loss of Indications /Alarms /

Communication Capability 7.3.3 Alert Unplanned loss of annunciators or indications on any Control Room Panels, Table 7.3 for > 15 min.

AND Increased surveillance is required for safe plant operation AND either:

A plant transient in progress OR PPCS and SAS are unavailable Table 7.3 Vital Control Room Panels A AA B C D E F G NUMARC IC:

Unplanned loss of most or all safety system annunciation or indication in control room with either (1) a significant transient in progress, or (2) compensatory non-alarming indicators are unavailable with reactor coolant > 200 OF.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

the This EAL recognizes the difficulty associated with monitoring changing plant conditions without use of a major portion of the annunciation or indication equipment during a transient. Recognition of the availability of computer based indication equipment is considered (PPCS, SAS, etc.).

"Unplanned" loss of annunciators or indicators does not include scheduled maintenance and testing activities.

the It is not intended that plant personnel perform a detailed count of the instrumentation lost but the severity of the plant use of judgment by the Shift Supervisor as the threshold for determining conditions. This judgment is supported by the specific opinion of the Shift Supervisor that additional operating personnel will be required to provide increased monitoring of system operation to safely operate the plant.

It is further recognized that most plant designs provide redundant safety system indication of powered from separate uninterruptable power supplies. While failure of a large portion annunciators is more likely than a failure of a large portion of indications, the concern is included in this EAL due to difficulty associated with assessment of plant conditions. The loss of specific, or several, safety system indicators should remain a function of that specific system or component of operability status. This will be addressed by the specific Technical Specification. The initiation a Technical Specification imposed plant shutdown related to the instrument loss will be reported via 10CFR50.72.

7-11

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Annunciators or indicators for this EAL includes those identified in the Abnormal Operating Procedures, in the Emergency Operating Procedures, and in other EALs (e. g., area, process, and/or effluent rad monitors, etc.).

"Significant transient" includes response to automatic or manually initiated functions such as trips, runbacks involving greater than 25% thermal power change, ECCS injections, or thermal power oscillations of 10% or greater.

If both a major portion of the annunciation system and all computer monitoring are unavailable to the extent that the additional operating personnel are required to monitor indications, the Alert is required.

Due to the limited number of safety systems in operation during cold shutdown, refueling and defueled modes, no EAL is indicated during these modes of operation.

This Alert will be escalated to a Site Area Emergency if the operating crew cannot monitor the transient in progress.

PEG

Reference:

SA4.1 Basis Reference(s):

None 7-12

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 7.0 Equipment Failures 7.3 Loss of Indications /Alarms /

Communication Capability 7.3.4 Site Area Emergency Loss of annunciators or indications on any Control Room Panels, Table 7.3 AND Complete loss of ability to monitor all critical safety function status AND A plant transient in progress Table 7.3 Vital Control Room Panels I II - I I I A AA B C D E F G NUMARC IC:

Inability to monitor a significant transient in progress with reactor coolant > 200 OF.

FPB loss/potential loss:

N/A Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL recognizes the inability of the Control Room staff to monitor the plant response to a transient. A Site Area Emergency is considered to exist if the Control Room staff cannot monitor safety functions needed for protection of the public.

Annunciators for this EAL should be limited to inclu de those identified in the Abnormal Operating Procedures, in the CSFST's and Emergency Operating Procedures, and in other EALs (e. g., rad monitors, etc.).

"Significant transient" includes response to automatic or manually initiated functions such as scrams, runbacks involving greater than 25% thermal power change, ECCS injections, or thermal power oscillations of 10% or greater.

Indications needed to monitor critical safety functions necessary for protection of the public must include Control Room indications, computer generated indications and dedicated annunciation capability. The specific indications should be those used to determine such functions as the ability to shut down the reactor, maintain the core cooled and in a coolable geometry, to remove heat from the core, to maintain the reactor coolant system intact, and to maintain containment intact.

"Planned" actions are excluded from the EAL since the loss of instrumentation of this magnitude is of such significance during a transient that the cause of the loss is not an ameliorating factor.

PEG

Reference:

SS6.1 Basis Reference(s):

None 7-13

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards Hazards are those non-plant system related events which can directly or indirectly impact plant operation or reactor plant and personnel safety.

The events of this category have been grouped into the following types:

"* Security Threats: This category includes unauthorized entry attempts into the Protected actual security Area as well as bomb threats and sabotage attempts. Also addressed are compromises threatening loss of physical control of the plant.

"* Fire or Explosion: Fires can pose significant hazards to personnel and reactor safety.

may affect Appropriate for classification are fires within the site Protected Area or which operability of vital equipment.

"* Man-made Events: Man-made events are those non-naturally occurring events which can or cause damage to plant facilities such as aircraft crashes, missile impacts, toxic flammable gas leaks or explosions from whatever source.

"* Natural Events: Events such as hurricanes, earthquakes or tornados which have to threaten potential to cause damage to plant structures or equipment significant enough personnel or plant safety.

8-1

Ginna EAL Technical Basis Document, Rev 28 I file:EALTB28.doc 8.0 Hazards 8.1 Security Threats 8.1.1 Unusual Event Bomb device or other indication of attempted sabotage discovered within plant Protected Area OR Notification of any credible site specific security threat by the Security Shift Supervisor or outside agency (NRC, military or law enforcement)

NEI IC:

HU4 - Confirmed security event which indicates a potential degradation in the level of safety of the plant FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

do This EAL is based on the Ginna Station Safeguards Contingency Plans. Security events which a potential degradation in the level of safety of the plant are reported under not represent at least 10CFR73.71, or in some cases under 10CFR50.72.

in the The plant Protected Area boundary is within the security isolation zone and is defined security plan. Bomb devices discovered within the plant Vital Area would result in EAL escalation.

Intrusion into the plant Protected Area by a hostile force would result in escalation to an Alert.

are The second condition is included to ensure the appropriate notifications for the security threat made in a timely manner. The determination of "credible" is made through the use of information threat is found in the Safeguards Contingency Plan. Only the plant or site to which the specific Event. Threats made that are ambiguous or are not plant made need declare the Unusual of the specific (ex. "the Nine Mile Point site") may be conservatively interpreted to include all plant. Guidance plants on site. This would result in an emergency classification at more than one departments and their in these instances should be provided directly by the individual site security based upon the nature and timing of the sources. A highler initial classification could be made threat and potential consequences. Consideration shall be given to upgrading the emergency Plan.

response in accordance with the Safeguards Contingency Plan and Emergency PEG

Reference:

None.

Basis Reference(s):

1. Ginna Station Safegurds Contingency Plan

2. Letter from Mr. B.A. Boger (NRC) to Ms. Lynette Hendricks (NEI) date 02/04/02 Differences:

HU4

1. This EAL threshold has been revised to incorporate the 'redible threat' aspect of IC in a letter from Mr. B.A. Boger to Ms.

of NEI 99-01 as amended and endorsed by the NRC Lynette Hendricks (NEI) date 02/04/20.

8-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.1 Security Threats 8.1.2 Alert Intrusion into plant Protected Area by an adversary.

OR Any security event which represents an actual substantial degradation of the level of safety of the plant.

NUMARC IC:

Security event in a plant protected area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This class of security events represents an escalated threat to plant safety above that contained in the Unusual Event. For the purposes of this EAL, the intrusion by unauthorized personnel inside the Protected Area boundary can be considered a significant security threat. Intrusion into a vital area by unauthorized personnel will escalate this event to a Site Area Emergency.

PEG

Reference:

HA4.1 HA4.2 Basis Reference(s):

1. REGNPS Security Contingency Plan 8-3

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.1 Security Threats 8.1.3 Site Area Emergency Intrusion into a plant security vital area by an adversary.

OR Any security event which represents actual or likely failures of plant systems needed to protect the public.

NUMARC IC:

Security event in a plant vital area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This class of security events represents an escalated threat to plant safety above that contained in the Alert in that unauthorized personnel have progressed from the Protected Area to the vital area.

PEG

Reference:

HS1.1 HS1.2 Basis Reference(s):

1. REGNPS Security Contingency Plan 8-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.1 Security Threats 8.1.4 General Emergency Security event which results in:

Loss of plant control from the Control Room OR Loss of remote shutdown capability NUMARC IC:

Security event resulting in loss of ability to reach and maintain cold shutdown.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL encompasses conditions under which unauthorized personnel have taken physical control of vital areas required to reach and maintain safe shutdown.

PEG

Reference:

HG1.1 HG1.2 Basis Reference(s):

1. REGNPS Security Contingency Plan 8-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.2 Fire or Explosion 8.2.1 Unusual Event Confirmed fire in any plant area, Table 8.2 or 8.3 not extinguished in < 15 min. of Control Room notification:

Table 8.2 Plant Areas

• Turbine Building

• TSC Service Building

• Contaminated Storage Building Table 8.3 Plant Vital Areas

• Control Building

• Reactor Containment Building

• Auxiliary Building

• Intermediate Building

• Emergency Diesel Building

• Standby Auxiliary Feedwater Building

• Screen House NUMARC IC:

Fire within protected area boundary not extinguished within 15 minutes of detection.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

The purpose of this EAL is to address the magnitude and extent of fires that may be potentially significant precursors to damage to safety systems. This excludes such items as fires within administration buildings, waste-basket fires, and other small fires of no safety consequence.

PEG

Reference:

HU2.1 Basis Reference(s):

1. Site Plot Plan 8-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.2 Fire or Explosion 8.2.2 Alert Fire or explosion in any plant area, Table 8.2 or Table 8.3 which results in EITHER:

• visible damage to plant equipment or structures needed for safe shutdown OR

• Loss of a Safety System Table 8.2 Plant Areas

• Turbine Building

• TSC

• Service Building

• Contaminated Storage Building Table 8.3 Plant Vital Areas

• Control Building

• Reactor Containment Building

• Auxiliary Building

• Intermediate Building

• Emergency Diesel Building

• Standby Auxiliary Feedwater Building

• Screen House NUMARC IC:

Fire or explosion affecting the operability of plant safety systems required to establish or maintain safe shutdown.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

The listed areas contain functions and systems required for the safe shutdown of the plant. The REGNPS safe shutdown analysis was consulted for equipment and plant areas required for the applicable mode.

With regard to explosions, only those explosions of sufficient force to damage permanent structures or equipment required for safe operation, or which results in degraded performance of safety systems within the identified plant areas should be considered. As used here, an explosion is a rapid, violent, unconfined combustion, or a catastrophic failure of pressurized equipment, that potentially imparts significant energy to nearby structures and materials. No attempt is made in this EAL to assess the actual magnitude of the damage. The wording of this EAL does not imply that an assessment of safety system performance is intended to be performed, rather that as a result of the event, safety system parameter symptoms are degraded as a result of the event.

The declaration of an Alert and the activation of the TSC will provide the Emergency Coordinator 8-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 with the resources needed to perform damage assessments. The Emergency Coordinator also needs to consider any security aspects of the explosions.

If a single pump or component is damaged and there is installed redundancy (i.e. multiple pumps), an Alert need not be declared because that particular safety system is operable.

A steam line break that damages permanent structures or equipment would be classified under this EAL. The method of damage is not as important as the degradation of plant structures or equipment.

The change to EAL number 8.2.2 was to clarify the wording. The first wording changed was, "visible damage to plant equipment or structures needed for safe plant operation". The words, "safe plant operation" is not defined and is a determination that the Shift Supervisor must make based on his judgement of he defines "safe plant operation" . This would vary from one shift supervisor to the next. We wanted to define a term for all Shift Supervisors. We chose the wording, "visible damage to plant equipment or structures needed for safe shutdown". "Safe shutdown" is a term that is defined in Operations procedures. It is a defined set of equipment. This change will reduce the ambiguity and provide consistency between different operating crews.

The second change to EAL number 8.2.2 was to clarify the wording, "which affects safety system operability as indicated by degraded system performance". The problem was if a pump was affected however, redundant pumps were installed so the system could still perform it's intended function, the "system" was not degraded. This also left the decision to classify the event as an Alert up to the Shift Supervisor based on his judgement. We chose a term defined by Operations.

We replaced the wording with, "loss of a safety system". "Loss of a safety system" is also a defined term that will provide consistency between operating shifts. The wording has the same intent as the original wording however, defined terms are now used.

PEG

Reference:

HA2.1 Basis Reference(s):

1. Site Plot Plan 8-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.3 Man-Made Events 8.3.1 Unusual Event Vehicle crash into or projectile which impacts plant structures or systems within Protected Area boundary NUMARC IC:

Natural and destructive phenomena affecting the protected area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

The Protected Area boundary is within the security isolation zone and is defined in the site security plan.

This EAL addresses such items as plane, helicopter, train, barge, car or truck crash, or impact of other projectiles that may potentially damage plant structures containing functions and systems required for safe shutdown of the plant. If the crash is confirmed to affect a plant vital area, the event may be escalated to Alert.

PEG

Reference:

HU1.4 Basis Reference(s):

1. Site Plot Plan 8-9

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.3 Man-Made Events 8.3.2 Unusual Event Report by plant personnel of an explosion within Protected Area boundary resulting in visible damage to permanent structures or equipment NUMARC IC:

Natural and destructive phenomena affecting the protected area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

The Protected Area boundary is within the security isolation zone and is defined in the site security plan.

For this EAL, only those explosions of sufficient force to damage permanent structures or equipment within the Protected Area should be considered. As used here, an explosion is a rapid, violent, unconfined combustion, or a catastrophic failure of pressurized equipment, that potentially imparts significant energy to near by structures and materials. No attempt is made in this EAL to assess the actual magnitude of the damage. The occurrence of the explosion with reports of evidence of damage (e. g., deformation, scorching) is sufficient for declaration. The Emergency Coordinator also needs to consider any security aspects of the explosion.

A steam line break that damages permanent structures or equipment would be classified under this EAL. This does not include the steam line break itself. The method of damage is not as important as the degradation of plant structures or equipment.

PEG

Reference:

HU1.5 Basis Reference(s):

1. Site Plot Plan 8-10

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.3 Man-Made Events 8.3.3 Unusual Event Report or detection of toxic or flammable gases that could enter or have entered within the Protected Area boundary in amounts that could affect the health of plant personnel or safe plant operation OR Report by local, county or state officials for potential evacuation of site personnel based on offsite event NUMARC IC:

Release of toxic or flammable gases deemed detrimental to safe operation of the plant.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL is based on releases in concentrations within the site boundary that will affect the health of plant personnel or affecting the safe operation of the plant with the plant being within the evacuation area of an offsite event (i. e., tanker truck accident releasing toxic gases, etc.). The evacuation area is as determined from the DOT Evacuation Tables for Selected Hazardous Materials, in the DOT Emergency Response Guide for Hazardous Materials.

Should an explosion occur within a specified plant area, an Alert would be declared based on EAL 8.2.2.

PEG

Reference:

HU3.1 HU3.2 Basis Reference(s):

None 8-11

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.3 Man-Made Events 8.3.4 Alert Vehicle crash or projectile impact which precludes personnel access to or damages equipment in plant vital areas, Table 8.3 Table 8.3 Plant Vital Areas

• Control Building

• Reactor Containment Building

• Auxiliary Building

• Intermediate Building

• Emergency Diesel Building

• Standby Auxiliary Feedwater Building

• Screen House NUMARC IC:

Natural and destructive phenomena affecting the plant vital area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses events that may have resulted in a plant vital area being subjected to forces beyond design limits, and thus damage may be assumed to have occurred to plant safety systems. The initial report should not be interpreted as mandating a lengthy damage assessment prior to classification. No attempt is made in this EAL to assess the actual magnitude of the damage.

This EAL addresses such items as plane, helicopter, train, barge, car or truck crash, or impact of projectiles into a plant vital area.

PEG

Reference:

HA1.5 Basis Reference(s):

None 8-12

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.3 Man-Made Events 8.3.5 Alert Report or detection of toxic or flammable gases within a plant area, Table 8.3, in concentrations that will be life threatening to plant personnel or preclude access to equipment needed for safe plant operation Table 8.3 Plant Vital Areas

• Control Building

• Reactor Containment Building

• Auxiliary Building

• Intermediate Building

• Emergency Diesel Building

• Standby Auxiliary Feedwater Building

• Screen House NUMARC IC:

Release of toxic or flammable gases within a facility structure which jeopardizes operation of systems required to maintain safe operations or to establish or maintain cold shutdown.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL is based on gases that have entered a plant structure precluding access to equipment necessary for the safe operation of the plant. This EAL applies to buildings and areas contiguous to plant vital areas or other significant buildings or areas. The intent of this EAL is not to include buildings (i. e., warehouses) or other areas that are not contiguous or immediately adjacent to plant vital areas. It is appropriate that increased monitoring be done to ascertain whether consequential damage has occurred.

PEG

Reference:

HA3.1 HA3.2 Basis Reference(s):

None 8-13

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.4 Natural Events 8.4.1 Unusual Event Earthquake felt inplant by any plant operations personnel AND Confirmation of earthquake of an intensity > 0.01 g per ER-SC.4 "Earthquake Emergency Plan".

NUMARC IC:

Natural and destructive phenomena affecting the protected area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

REGNPS seismic instrumentation actuates at 0.01 g.

Damage to some portions of the site may occur but it should not affect ability of safety functions to operate. Methods of detection can be based on instrumentation validated by a reliable source, operator assessment, or indication received from outside agencies. As defined in the EPRI sponsored "Guidelines for Nuclear Plant Response to an Earthquake", dated October 1989, a "felt earthquake" is:

"An earthquake of sufficient intensity such that: (a) the inventory ground motion is felt at the nuclear plant site and recognized as an earthquake based on a consensus of Control Room operators on duty at the time, and (b) for plants with operable seismic instrumentation, the seismic switches of the plant are activated. For most plants with seismic instrumentation, the seismic switches are set at an acceleration of about 0.01 g."

PEG

Reference:

HU1.1 Basis Reference(s):

1. SC-5 Earthquake Emergency Plan

2. EPRI document, "Guidelines for Nuclear Plant Response to an Earthquake", dated October 1989 8-14

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.4 Natural Events 8.4.2 Unusual Event Report by plant personnel of tornado striking within plant Protected Area boundary NUMARC IC:

Natural and destructive phenomena affecting the protected area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL is based on the assumption that a tornado striking (touching down) within the Protected Area boundary may have potentially damaged plant structures containing functions or systems required for safe shutdown of the plant. If such damage is confirmed visually or by other in-plant indications, the event may be escalated to Alert.

PEG

Reference:

HU1.2 Basis Reference(s):

None 8-15

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.4 Natural Events 8.4.3 Unusual Event Deer Creek flooding over entrance road bridge hand rail OR Lake level > 252 ft OR Screen House Suction Bay water level < 19 ft or < 17.5 ft by manual level measurement NUMARC IC:

Natural and destructive phenomena affecting the protected area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This covers high and low lake water level conditions that could be precursors of more serious events. Deer creek flooding over entrance road bridge may preclude emergency response personnel access and egress. Lake water level > 252 ft. corresponds to plant design levels.

Screen House Suction Bay level < 19 ft. is the low-low level alarm point and is the level where the both Fire Water Pumps are declared inoperable. It is appropriate to have the Unusual Event declared to mobilize some plant staff, and notify offsite agencies and the NRC.

A level of 17.5 ft is allowed if the level is taken manually. The 19 ft level is conservative based on instrument uncertainty. At this level, it is appropriate that the unusual event be declared due to the potential for the loss of the fire water system.

The unusual event level response organization will be activated to assist the plant operators.

Notifications will be made to offsite agencies and the NRC. At the 19 ft level the Ontario Fire Department is activated to connect a pumper truck to the plant fire loop wall hydrants. This compensatory action can be quickly implemented. The Fire Department is on call to respond to fire emergencies and is activated through the Wayne County 911 Center.

PEG

Reference:

HU1.7 Basis Reference(s):

1. ER-SC.2 High Water (Flood) Plan

2. ER-SC.3 Low Screenhouse Water Level

3. Interoffice Memo" Screenhouse Pump Bay Water Level" dated 1/24/94 to Terry White from William Rapin and Jeffrey Wayland 8-16

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.4 Natural Events 8.4.4 Alert Earthquake felt inplant by any plant operations personnel AND Confirmation of earthquake of an intensity > 0.08 g per ER-SC.4 "Earthquake Emergency Plan" NUMARC IC:

Natural and destructive phenomena affecting the plant vital area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses events that may have resulted in a plant vital area being subjected to forces beyond design limits, and thus damage may be assumed to have occurred to plant safety systems. The initial report should not be interpreted as mandating a lengthy damage assessment prior to classification. No attempt is made in this EAL to assess the actual magnitude of the damage.

This EAL is based on the FSAR design basis operating earthquake of 0.08 g. Seismic events of this magnitude can cause damage to plant safety functions.

PEG

Reference:

HA1.1 Basis Reference(s):

1. SC-5 "Earthquake Emergency Plan" 8-17

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.4 Natural Events 8.4.5 Alert Sustained winds > 75 mph OR Tornado strikes a plant vital area, Table 8.3 Table 8.3 Plant Vital Areas

° Control Building

• Reactor Containment Building

• Auxiliary Building

• Intermediate Building

• Emergency Diesel Building

• Standby Auxiliary Feedwater Building

• Screen House NUMARC IC:

Natural and destructive phenomena affecting the plant vital area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses events that may have resulted in a plant vital area being subjected to forces beyond design limits, and thus damage may be assumed to have occurred to plant safety systems. The initial report should not be interpreted as mandating a lengthy damage assessment prior to classification. No attempt is made in this EAL to assess the actual magnitude of the damage.

This EAL is based on the FSAR assumed "severe environmental loading" condition of 75 mph.

Wind loads of this magnitude can cause damage to safety functions.

PEG

Reference:

HA1.2 Basis Reference(s):

1. RGE FSAR Section 3.3.2.1.4 8-18

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.4 Natural Events 8.4.6 Alert Any natural event which results in a report of visible structural damage or assessment by Control Room personnel of actual damage to equipment needed for safe plant operation, Table 8.3 Table 8.3 Plant Vital Areas

• Control Building

• Reactor Containment Building

• Auxiliary Building

• Intermediate Building

• Emergency Diesel Building

• Standby Auxiliary Feedwater Building

• Screen House NUMARC IC:

Natural and destructive phenomena affecting the plant vital area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses events that may have resulted in a plant vital area being subjected to forces beyond design limits, and thus damage may be assumed to have occurred to plant safety systems. The initial report should not be interpreted as mandating a lengthy damage assessment prior to classification. No attempt is made in this EAL to assess the actual magnitude of the damage.

This EAL specifies areas in which structures containing systems and functions required for safe shutdown of the plant are located.

PEG

Reference:

HA1.3 Basis Reference(s):

None 8-19

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 8.0 Hazards 8.4 Natural Events 8.4.7 Alert Flood water accumulating on screen house operating floor OR Lake level > 253 ft OR Screen House Suction Bay water level < 16 ft or < 14.5 ft by manual level measurement NUMARC IC:

Natural and destructive phenomena affecting the plant vital area.

FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses events that may have resulted in a plant vital area being subjected to levels beyond design limits, and thus damage may be assumed to have occurred to plant safety systems. The initial report should not be interpreted as mandating a lengthy damage assessment prior to classification. No attempt is made in this EAL to assess the actual magnitude of the damage.

This EAL covers high and low lake water level conditions that exceed levels which threaten vital equipment. Flood water accumulating on the screen house operating floor or lake levels > 253 ft.

corresponds to levels threatening vital equipment. Screen House Suction Bay level < 16 ft.

corresponds to the level which the Service Water Pumps will be declared inoperable and where the fire water pump suction bowls are uncovered. A level of 14.5 ft is allowed if the level is taken manually. The 16 ft level is conservative based on instrument uncertainty. It is appropriate that the entire Emergency Response Organization be activated for these conditions.

PEG

Reference:

HA1.7 Basis Reference(s):

1. SC-4 High Water (Flood) Emergency Plan

2. ER-SC.3 Low Screenhouse Water Level

3. Interoffice Memo" Screenhouse Pump Bay Water Level" dated 1/24/94 to Terry White from William Rapin and Jeffrey Wayland 8-20

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 OTHER The EALs defined in categories 1.0 through 8.0 specify the predetermined symptoms or events which are indicative of emergency or potential emergency conditions, and which warrant classification. While these EALs have been developed to address the full spectrum of possible emergency conditions which may warrant classification and subsequent implementation of the Emergency Plan, a provision for classification of emergencies based on operator/management experience and judgment is still necessary. The EALs of this category provide the Shift Supervisor or Emergency Coordinator the latitude to classify emergency conditions consistent with the established classification criteria, based upon their judgment.

9-1

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.1 Unusual Event Any event, which in the opinion of the Shift Supervisor or Emergency Coordinator, that could lead to or has led to a potential degradation of the level of safety of the plant.

NUMARC IC:

Emergency Director Judgment FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Coordinator to fall under the Unusual Event emergency class.

From a broad perspective, one area that may warrant Emergency Coordinator judgment is related to likely or actual breakdown of site specific event mitigating actions. Examples to consider include inadequate emergency response procedures, transient response either unexpected or not understood, failure or unavailability of emergency systems during an accident in excess of that assumed in accident analysis, or insufficient availability of equipment and/or support personnel.

PEG

Reference:

HU1.3 HU5.1 Basis Reference(s):

None 9-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.2 Unusual Event Any event, which in the opinion of the Shift Supervisor or Emergency Coordinator, that could lead to or has led to a loss or potential loss of containment, Attachment 3.

NUMARC IC:

N/A FPB loss/potential loss:

Containment loss/potential loss Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses any other factors that are to be used by the Emergency Coordinator in determining whether the containment barrier is lost or potentially lost. In addition, the inability to monitor the barrier should also be incorporated in this EAL as a factor in Emergency Coordinator judgment that the barrier may be considered lost or potentially lost.

PEG

Reference:

PC8.1 Basis Reference(s):

None 9-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.3 Alert Any event, which in the opinion of the Shift Supervisor or Emergency Coordinator, that could cause or has caused actual substantial degradation of the level of safety of the plant.

NUMARC IC:

Emergency Director Judgment FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Coordinator to fall under the Alert emergency class.

PEG

Reference:

HA6.1 Basis Reference(s):

None 9-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.4 Alert could lead Any event, which in the opinion of the Shift Supervisor or Emergency Coordinator, that or has led to a loss or potential loss of either fuel clad or RCS barrier, Attachment 3.

NUMARC IC:

N/A FPB loss/potential loss:

Loss or potential loss of either fuel clad or RCS barrier Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

in This EAL addresses any other factors that are to be used by the Emergency Coordinator lost or potentially lost. In addition, the determining whether the fuel clad or RCS barriers are in Emergency inability to monitor the barriers should also be considered in this EAL as a factor may be considered lost or potentially lost.

Coordinator judgment that the barriers PEG

Reference:

FC7.1 RCS6.1 Basis Reference(s):

None 9-5

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.5 Site Area Emergency In the opinion of the Shift Supervisor or Emergency Coordinator, events are in progress which are indicate actual or likely failures of plant systems needed to protect the public. Any releases not expected to result in exposures which exceed EPA PAGs.

NUMARC IC:

Emergency Director Judgment FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

that warrant This EAL addresses unanticipated conditions not addressed explicitly elsewhere but by the Emergency declaration of an emergency because conditions exist which are believed Coordinator to fall under the emergency class description for Site Area Emergency.

PEG

Reference:

HS3.1 Basis Reference(s):

None 9-6

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.6 Site Area Emergency Any event, which in the opinion of the Shift Supervisor or Emergency Coordinator, that could lead or has led to either:

Loss or potential loss of both fuel clad and RCS barrier (Attachment 3)

OR Loss or potential loss of either fuel clad or RCS barrier in conjunction with a loss of containment (Attachment 3)

NUMARC IC:

N/A FPB loss/potential loss:

Loss or potential loss of both fuel clad and RCS barrier OR Loss or potential loss of either fuel clad or RCS barrier in conjunction with a loss of containment Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses unanticipated conditions affecting fission product barriers which are not addressed explicitly elsewhere. Declaration of an emergency is warranted because conditions exist which are believed by the Emergency Coordinator to fall under the emergency class description for Site Area Emergency.

PEG

Reference:

FC7.1 RCS6.1 PC8.1 Basis Reference(s):

None 9-7

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.7 General Emergency In the opinion of the Shift Supervisor or Emergency Coordinator, events are in progress which indicate actual or imminent core damage and the potential for a large release of radioactive material in excess of EPA PAGs outside the site boundary.

NUMARC IC:

Emergency Director Judgment FPB loss/potential loss:

N/A Mode Applicability:

All Basis:

This EAL addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Coordinator to fall under the General Emergency class.

the Releases can reasonably be expected to exceed EPA PAG plume exposure levels outside site boundary.

PEG

Reference:

HG2.1 Basis Reference(s):

None 9-8

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 9.0 Other 9.1.8 General Emergency Any event, which in the opinion of the Shift Supervisor or Emergency Coordinator, that could lead or has led to a loss of any two fission product barriers and loss or potential loss of the third (Attachment 3)

NUMARC IC:

N/A FPB loss/potential loss:

Loss of any two fission product barriers and loss or potential loss of the third Mode Applicability:

1-Power operations, 2-startup, 3-hot shutdown, 4-hot standby Basis:

This EAL addresses unanticipated conditions affecting fission product barriers which are not addressed explicitly elsewhere. Declaration of an emergency is warranted because conditions exist which are believed by the Emergency Coordinator to fall under the emergency class description for the General Emergency class.

PEG

Reference:

FC7.1 RCS6.1 PC8.1 Basis Reference(s):

None 9-9

!(

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 ATTACHMENT A (Attachment 3 of EPIP 1-0)

FISSION PRODUCT BARRIER LOSS & POTENTIAL LOSS INDICATORS A-1

K' file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 BARRIER LOSS/POTENTIAL LOSS Fuel Cladding Potential Loss Loss ORANGE path in F-0.2, CORE COOLING RED path in F-0.2, CORE COOLING RED path in F-0.3, HEAT SINK Coolant activity > 300 pCi/cc of 1-131 Core Exit Thermocouple Readings > 700 'F Core Exit Thermocouple Readings > 1200 'F RVLIS <77% w/ no RCPs running Containment rad monitor reading >100 R/hr Emergency Coordinator Judgment Letdown Monitor (R-9) reading > 10 R/hr Emergency Coordinator Judgment RCS Potential Loss Loss RED path on F-0.4, INTEGRITY RCS subcooling < EOP Fig. MIN SUBCOOLING due to RCS leakage RED path on F-0.3, HEAT SINK Unisolable secondary side line break with SG tube rupture as identified in E-3 "Steam Generator Tube Rupture" Primary system leakage > 46 gpm Containment radiation monitor reading > 10 R/hr Emergency Coordinator Judgment Emergency Coordinator Judgment A-2

C file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28

(

BARRIER LOSS/POTENTAIL LOSS Containment Potential Loss Loss RED path F-0.5, CONTAINMENT Rapid uncontrolled decrease in Containment Pressure following initial increase Either: Loss of primary coolant inside containment with containment pressure or Core exit thermocouples >1200 OF sump level response not consistent with LOCA conditions, i.e. unexpected OR changes occur in these parameters that are not explainable due to Core exit thermocouples >700 OF with RVLIS <77% (no RCPs) operator actions or automatic system actions.

AND Restoration procedures not effective within 15 minutes Safety injection signal due to LOCA with < the minimum containment cooling Either:

safeguards equipment operating: CI or CVI isolation required and Cl or CVI valve(s) not closed when CNMT pressure <28 psig: 2 CNMT Recirc Fans required OR CNMT pressure >28 psig: 2 CNMT Spray Pumps Inability to isolate any primary system discharging outside containment OR AND 2 CNMT Recirc Fans. Radiological release pathway to the environment exists and 1 CNMT Spray Pump Containment pressure 60 psig and increasing Release of secondary side to atmosphere with primary to secondary leakage greater than tech spec allowable of 0.1 GPM per steam generator

_>4% hydrogen concentration in containment Both doors open on containment airlock OR Inability to close containment pressure relief or purge valves which results in a radiological release pathway to the environment OR Cl or CVI valve(s) not closed when required which results in a radiological release pathway to the environment Containment radiation monitor reading >1000 R/hr Emergency Coordinator Judgment Emergency Coordinator Judgment A-3

ATTACHMENT B WORD LIST/DEFINITIONS

file: EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Actuate To put into operation; to move to action; commonly used to refer to automated, multi-faceted operations. "Actuate ECCS".

Adversary As applied to security EALs, an individual whose intent is to commit sabotage, disrupt Station operations or otherwise commit a crime on station property.

Alert Events are in process or have occurred which involve an actual or potential substantial degradation of the level of safety of the plant. Any releases are expected to be limited to small fractions of the EPA Protective Action Guideline exposure levels.

Available The state or condition of being ready and able to be used (placed into operation) to accomplish the stated (or implied) action or function. As applied to a system, this requires the operability of necessary support systems (electrical power supplies, cooling water, lubrication, etc.).

Can/Cannot be determined (</>)

The current value or status of an identified parameter relative to that specified can/cannot be ascertained using all available indications (direct and indirect, singly or in combination).

Can/Cannot be maintained above/below (</>)

The value of the identified parameter(s) is/is not able to be kept above /below specified limits.

This determination includes making an evaluation that considers both current and future system performance in relation to the current value and trend of the parameter(s). Neither implies that the parameter must actually exceed the limit before the action is taken nor that the action must be taken before the limit is reached.

Can/Cannot be restored above/below (4>)

The value of the identified parameter(s) is/is not able to be returned to above/below specified limits after having passed those limits. This determination includes making an evaluation that considers both current and future systems performances in relation to the current value and trend of the parameter(s). Does not imply any specific time interval but does not permit prolonged operation beyond a limit without taking the specified action.

As applied to loss of electrical power sources (ex.: Power cannot be restored to any vital bus in >

4 hrs) the specified power source cannot be returned to service within the specified time. This determination includes making an evaluation that considers both current and future restoration capabilities. Implies that the declaration should be made as soon as the determination is made that the power source cannot be restored within the specified time.

Close To position a valve or damper so as to prevent flow of the process fluid.

To make an electrical connection to supply power.

Confirm / Confirmation To validate, through visual observation or physical inspection, that an assumed condition is as expected or required, without taking action to alter the "as found" configuration.

Control Take action, as necessary, to maintain the value of a specified parameter within applicable limits; to fix or adjust the time, amount, or rate of; to regulate or restrict.

B-2

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Decrease To become progressively less in size, amount, number, or intensity.

Discharge Removal of a fluid/gas from a volume or system.

Enter To go into.

Establish To perform actions necessary to meet a stated condition. "Establish communication with the Control Room."

Evacuate To remove the contents of; to remove personnel from an area.

Exceeds To go or be beyond a stated or implied limit, measure, or degree.

Exist To have being with respect to understood limitations or conditions.

Failure A state of inability to perform a normal function.

General Emergency Events are in process or have occurred which involve actual or imminent substantial core degradation or melting with potential for loss of containment integrity. Releases can be reasonably expected to exceed EPA Protective Action Guideline exposure levels offsite for more than the immediate site area.

If Logic term which indicates that taking the action prescribed is contingent upon the current existence of the stated condition(s). If the identified conditions do not exist, the prescribed action is not to be taken and execution of operator actions must proceed promptly in accordance with subsequent instructions.

Increase To become progressively greater in size, amount, number or intensity.

Indicate To point out or point to; to display the value of a process variable; to be a sign or symbol.

Initiate The act of placing equipment or a system into service, either manually or automatically. Activation of a function or protective feature (i.e. initiate a manual trip).

Injection The act of forcing a fluid into a volume or vessel.

Inoperable Not able to perform it's intended function Intrusion The act of entering without authorization B-3

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 Loss Failure of operability or lack of access to.

Maintain Take action, as necessary, to keep the value of the specified parameter within the applicable limits.

Monitor Observe and evaluate at a frequency sufficient to remain apprised of the value, trend, and rate of change of the specified parameter.

Notify To give notice of or report the occurrence of; to make known to; to inform specified personnel; to advise; to communicate; to contact; to relay.

Open To position a valve or damper so as to allow flow of the process fluid.

To break an electrical connection which removes a power supply from an electrical device.

To make available for entry or passage by turning back, removing, or clearing away.

Operable Able to perform it's intended function Perform To carry out an action; to accomplish; to affect; to reach an objective.

Primary System The pipes, valves, and other equipment which connect directly to the reactor vessel or reactor in coolant system such that a reduction in reactor coolant system pressure will effect a decrease the steam or water being discharged through an unisolated break in the system.

Remove To change the location or position of.

Report To describe as being in a specific state.

Require To demand as necessary or essential.

Restore Take the appropriate action requires to return the value of an identified parameter to within applicable limits.

Rise Describes an increase in a parameter as the result of an operator or automatic action.

Sample To perform an analysis on a specified media to determine its properties.

Shut down B-4

file:EALTB28.doc Ginna EAL Technical Basis Document, Rev 28 To perform operations necessary to cause equipment to cease or suspend operation; to stop.

"Shut down unnecessary equipment."

Site Area Emergency Events are in process or have occurred which involve actual or likely major failures of plant functions needed for protection of the public. Any releases are not expected to result in exposure levels which exceed EPA Protective Action Guideline exposure levels except near the site boundary.

Sustained Prolonged. Not intermittent or of transitory nature Trip To de-energize a pump or fan motor; to position a breaker so as to interrupt or prevent the flow of current in the associated circuit; to manually activate a semi-automatic feature.

To take action to cause shutdown of the reactor by rapidly inserting a control rod or control rods (PWR).

Uncontrolled An evolution lacking control but is not the result of operator action.

Unplanned Not as an expected result of deliberate action.

Until Indicates that the associated prescribed action is to proceed only so long as the identified condition does not exist.

Unusual Event Events are in process or have occurred which indicate a potential degradation of the level of safety of the plant. No releases of radioactive material requiring offsite response or monitoring are expected unless further degradation of safety systems occurs.

Valid Supported or corroborated on a sound basis.

Vent To open an effluent (exhaust) flowpath from an enclosed volume; to reduce pressure in an enclosed volume.

Verify To confirm a condition and take action to establish that condition if required. "Verify reactor trip, verify SI pumps running."

B-5