ML022200600
| ML022200600 | |
| Person / Time | |
|---|---|
| Site: | Kewaunee  |
| Issue date: | 07/26/2002 |
| From: | Warner M Nuclear Management Co |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| NRC-02-067 | |
| Download: ML022200600 (164) | |
Text
14.1.9 Loss of External Electrical Load Accident Description The loss of external electrical load event is defined as a complete loss of steam load or a turbine trip from full power without a direct reactor trip. This anticipated transient is analyzed as a turbine trip from full power as this bounds both events: the loss of external electrical load and turbine trip. The turbine trip event is more severe than the total loss of external electrical load event since it results in a more rapid reduction in steam flow.
For a turbine trip, the reactor would be tripped directly (unless below approximately 10% power) from a signal derived from either the turbine auto-stop oil pressure or a closure of the turbine stop valves. The automatic steam dump system accommodates the excess steam generation.
Reactor coolant temperatures and pressures do not significantly increase if the steam dump system and pressurizer pressure control system are functioning properly. If the turbine condenser were not available, the excess steam generation would be dumped to the atmosphere.
Additionally, main feedwater flow would be lost if the turbine condenser were not available. For this situation, steam generator level would be maintained by the auxiliary feedwater (AIFW) system.
For a loss of external electrical load without subsequent turbine trip, no direct reactor trip signal would be generated. The plant would be expected to trip from the reactor protection system (RPS). A continued steam load of approximately 5% would exist after a total loss of external electrical load because of the steam demand of plant auxiliaries.
In the event of a large loss of load in which the steam dump valves fail to open or a complete loss of load with the steam dump operating, the main steam safety valves (MSSVs) may lift and the reactor may be tripped by any of the following signals: high pressurizer pressure, high pressurizer water level, overtemperature AT (OTAT), overpower AT (OPAT), or low-low steam generator water level. The steam generator shell-side pressure and reactor coolant temperatures will increase rapidly. However, the pressurizer safety valves (PSVs) and MSSVs are sized to protect the reactor coolant system (RCS) and steam generators (SGs) against overpressure for all load losses without assuming the operation of the steam dump system. The steam dump valves will not be opened for load reductions of 10% or less, but may open for larger load reductions.
The RCS and main steam system (MSS) steam relieving capacities were designed to ensure safety of the unit without requiring automatic rod control, pressurizer pressure control, steam bypass control systems, or a reactor trip on turbine trip.
Method of Analysis The loss of load transients are analyzed using the RETRAN computer code. The code simulates the neutron kinetics, RCS, pressurizer, pressurizer relief and safety valves, pressurizer spray, steam generators, and main steam safety valves. The code computes pertinent plant variables including temperatures, pressures, and power levels.
The loss of load accident is analyzed: (1) to confirm that the PSVs and MSSVs are adequately sized to prevent overpressurization of the primary RCS and MSS, respectively; and (2) to ensure that the increase in RCS temperature does not result in a departure from nucleate boiling (DNB) in the core. The RPS is designed to automatically terminate any such transient before the DNB ratio (DNBR) falls below the limit value.
In this analysis, the behavior of the unit is evaluated for a complete loss of steam load from full power with no credit taken for a direct reactor trip on turbine trip. This assumption will delay reactor trip until conditions in the RCS cause a trip on some other signal. Thus, the analysis assumes a worst case transient and demonstrates the adequacy of the pressure relieving devices and plant-specific RPS setpoints assumed in the analysis for this event.
Of the three cases analyzed, one is performed to address DNB concerns, one ensures that the peak primary RCS pressure remains below the design limit (2750 psia) and the final case confirms that the peak MSS pressure remains below 110% of the SG shell design pressure (1210 psia). The major assumptions for these cases are summarized as follows:
- a. For the case analyzed to demonstrate that the core thermal limits are adequately protected (beginning of cycle (BOC) reactivity feedback conditions with automatic pressurizer pressure control), the loss of load accident is analyzed using the revised thermal design procedure (RTDP). For this case, initial core power, reactor coolant temperature, and reactor coolant pressure are assumed to be at the nominal values consistent with steady state full power operation. Uncertainties in initial conditions are included in determining the DNBR limit value. For the case analyzed to demonstrate the adequacy of the primary pressure relieving devices (BOC reactivity feedback conditions without automatic pressurizer pressure control), the loss of load accident is analyzed using the standard thermal design procedure (STDP). For this case, initial core power and reactor coolant temperature are assumed at the maximum values consistent with steady-state full
power operation, including allowances for calibration and instrument errors. Initial pressurizer pressure is assumed at the minimum value for this case, since it delays reactor trip on high pressurizer pressure and results in more severe primary side temperature and pressure transients. This results in the maximum power difference for the loss of load.
Similar to the primary RCS overpressurization case, the MSS overpressurization case is analyzed assuming the STDP assumptions with respect to initial conditions and uncertainties and also assumes BOC reactivity feedback conditions. However, it differs from the primary RCS overpressurization case in that automatic pressurizer pressure control is assumed in order to delay reactor trip.
- b. The loss of load event results in a primary system heatup and is therefore conservatively analyzed assuming minimum reactivity feedback consistent with BOC conditions. This includes assuming a moderator temperature coefficient (MTC) value consistent with BOC hot-full power (HFP) conditions (i.e., zero MTC) and a least negative Doppler power coefficient (DPC). Maximum feedback (end of cycle (EOC)) cases that were previously considered in the USAR are no longer analyzed since they have been determined (as part of the Westinghouse methodology for the analysis of this event) to be non-limiting with respect to the minimum DNBR, peak primary RCS pressure, and peak MSS pressure.
- c. It is conservative to assume that the reactor is in manual control. If the reactor were in automatic control, the control rod banks would move prior to trip and reduce the severity of the transient.
- d. No credit is taken for the operation of the steam dump system or SG power-operated relief valves (PORVs). The SG pressure rises to the safety valve setpoints, where steam release through the MSSVs limits the secondary side steam pressure to the setpoint values. As detailed in Section 5.1.0.4, staggered lift setpoints were modeled for the MSSVs in the loss of load licensing basis analysis, including a +3% accumulation and
+ 1% setpoint tolerance. By maximizing the pressure transient in the MSS, the saturation temperature in the SGs is maximized, resulting in limiting pressure and temperature conditions in the RCS.
- e. Three cases are analyzed:
- 1. For the case analyzed for DNB, automatic pressurizer pressure control is assumed.
Thus, full credit is taken for the effect of the pressurizer spray and PORVs in reducing or limiting the primary coolant pressure. Safety valves are also available and are modeled assuming a - 1% setpoint tolerance.
- 2. For the case analyzed for primary RCS overpressure concerns, it is assumed that automatic pressurizer pressure control is not available. Therefore, no credit is taken for the effect of the pressurizer spray or PORVs in reducing or limiting the primary coolant pressure. Safety valves are assumed operable, but are modeled assuming a
+1% setpoint tolerance. The effects of the PSV loop seals are also conservatively modeled in the analysis.
- 3. For the case analyzed for MSS overpressure concerns, it is assumed that automatic pressurizer pressure control is available. Credit is taken for the effect of the pressurizer spray and PORVs in reducing or limiting the primary coolant pressure, thus conservatively delaying the actuation of the RPS until an OTAT reactor trip signal is generated. Delaying the reactor trip ensures that the energy input to the secondary system, and subsequently the MSS pressure, is maximized.
- f. Main feedwater flow to the SGs is assumed to be lost at the time of turbine trip. No credit is taken for AFW flow since a stabilized plant condition will be reached before AFW initiation is normally assumed to occur for full-power cases. However, the AFW pumps would be expected to start on a trip of the main feedwater pumps. The AFW flow would remove core decay heat following plant stabilization.
- g. The analysis is performed for operation with 422V+ fuel and a maximum steam generator tube plugging level (uniform) for Kewaunee of <10%.
Results The transient responses for a total loss of load from full power operation are shown in Figures 14.1.9-1 through 14.1.9-16 for the three cases assuming BOC reactivity feedback conditions with and without automatic pressurizer pressure control (pressurizer spray and PORVs).
Figures 14.1.9-1 through 14.1.9-6 show the transient responses for the total loss of steam load at BOC (minimum feedback reactivity coefficients) assuming full credit for the pressurizer spray and PORVs to calculate the transient DNBR response. Following event initiation, the pressurizer pressure and average RCS temperature increase due to the rapidly reduced steam flow and heat removal capacity of the secondary side. The peak pressurizer pressure and water volume and RCS average temperature are reached shortly after the reactor is tripped by the OTAT trip function. The DNBR initially increases slightly, then decreases until the reactor trip is tripped, and finally, following reactor trip, increases rapidly. The minimum DNBR remains well above the safety analysis limit value. The MSSVs actuate to limit the MSS pressure below 110% of the SG shell design pressure.
The total loss of load event was also analyzed assuming the plant to be initially operating at full power at BOC with no credit taken for the pressurizer spray or PORVs to maximize the primary RCS pressure response. Figures 14.1.9-7 through 14.1.9-11 show the transients for this case.
The neutron flux remains relatively constant prior to reactor trip, while pressurizer pressure, pressurizer water volume and RCS average temperature increase due to the sudden reduction in primary to secondary heat transfer. The reactor is tripped on the high pressurizer pressure trip signal. In this case the PSVs are actuated and maintain the primary RCS pressure below 110%
of the design value. The MSSVs actuate to limit the MSS pressure below 110% of the SG shell design pressure.
Figures 14.1.9-12 through 14.1.9-16 show the transient responses for the total loss of steam load at BOC (minimum feedback reactivity coefficients) assuming full credit for the pressurizer spray and PORVs to maximize the MSS pressure response. Following event initiation, the pressurizer pressure and average RCS temperature increase due to the rapidly reduced steam flow and heat removal capacity of the secondary side. The peak pressurizer pressure and water volume and RCS average temperature are reached shortly after the reactor is tripped by the OTAT trip function. The MSS pressure increases, resulting in the actuation of the first three MSSVs, and then decreases rapidly following reactor trip. The MSSVs actuate to limit the MSS pressure below 110% of the SG shell design pressure.
Conclusions The results of the analyses show that the plant design is such that a total logs of external electrical load without a direct or immediate reactor trip presents no hazard to the integrity of the primary RCS or MSS. Pressure relieving devices that have been incorporated into the plant design are adequate to limit the maximum pressures to within the safety analysis limits, i.e., 2750 psia for the primary RCS and 1210 psia for the MSS. The integrity of the core is maintained by operation of the RPS, i.e., the minimum DNBR is maintained above the safety analysis limit value.
Auto Control Loss of External Electric Load - BOC Reactor Power vs. Time 1.100 1.000 0.900 0.800 0.700 C
0 0.600 0
04-U ca 0.500 0
IL 0.400 0.300 0.200 0.100 25 30 35 40 45 50 0 5 10 15 20 Time [s]
Rev. 16 Figure 14.1.9-1 12/01/2000
1-6111t~ a-i3!A
[spuoo3s] ew!l 001 0a 09 o0I 01 0
aI I
- - - - - - - I- Z.
I I I II
- I I
- -i I I I 0 CD I
a a a
~12 a a a I a a 0
! I I a I
- a a
!+--------------------+----------
a a a a a a a a a ai a
a a aI a ai
! a Z-I LUII -SA "I;MOd ieapnN (ascj fN[(I) IOJlUO: aimssaij olnV ql!A, PeO-1 lC3.U)p33' JiuJlaI3 Jo ssO-
Auto Control Loss of External Electric Load - BOC Tinlet vs. Time 580.0 575.0 . .
. °° o° 570.0 565.0 .........
S. /..............
..... .. .. i I o 560.0 0)--
CL 555.0 E
(D
) /... ........... ......................
550.0 5 ...... 5 545.0 ------------- ------- ------- ------- 2-----
540.C 0 5 00 35 40_ 4 5
/0 5 Time [s]
Figure 14.1.9-2 Rev. 16 1210112000
Loss of External Electrical Load With Auto Pressure Control (DNB Case)
Vessel Average and Core Inlet Temperature vs. Time Core Inlet Vessel Average 600 I II
\\3 II3
- I I I\\
I I\
I \
I I
-I I 570 --- - - - -- -- - ----- --- -- -------------
/
L=.
-4 560 - --- -. -. -
U L.
0) 550 - -- .---
54I I Figure 14.1.9-2
oooz/io/zl 9T -A"a C;-6"rt17 aJn*I.A
[s] W!Il o0 Gz o 9L 0o L 9 0 nc v
sj7 OV sc I.
YSL8 1
. ............................... ........-........ 0*096 L 0,00 .LZ -u CD C=
'SL LZ 0 Co.
-~~ ..... ....
~ -----..... ----------------------------
0"00oty 0OSS9 OWU!l -SA ejnssBJd jaz!unssBJd IOJiuoo olnV 008 - peo-I o3ul39l3 jBW3 1o sso-0
Loss of External Electrical Load With Auto Pressure Control (DNB Case)
Pressurizer and RCP Exit Pressure vs. Time Pressur izer
.. .RCP Exi t 2500 I II
- III 2-o- * - I . . Iv . .. . .I... .. . .. .
IIIT I I
' I* II
- I *I II
/ *I ,I I I I II \ I I I,
II II
- III L..
2300 ----- ---- -- +-'--'---------------4------------------ ..
U)
Im ' . II SO * , II 13_
2200III 18 0 i
- I J i I I I I I Figure 14.1.9-3
oooZlTolUT 91 "Aaa 17-6"I'PI alanf! U
[s] Wt!Il 0 9s2 oz S 0 I. 9 0 09 v st' O0 se 0,06
---------- -----------L...........
O'SC S
. .. .. .. . *I-... . . . . . . . . . .-.. . . . .- . . .r . . . . . --.* --
" .---. .--.. . . . . . ." . . . . . . . .. .", . . . . . . . . . . . ." . . . .. .. .. .. . . . . . . . . . .! O'OV 0"sir rCD
. ......... . ..... .................... .............................. S........:....... CD 0"09 0l<
0 0,99 0*09
................ ......... ...... 0"99 OOL O'SL WIj "SA laAB-1 JaIBeM JazpunSSGJd IOJUOO olnV 0030 - peoI 3!Ju3la3 lew~x3 1o sso-0
Loss of External Electrical Load With Auto Pressure Control (DNB Case)
Pressurizer Water Volume vs. Time 800 I
75OI I
I
.0I0 .. .. . . . . I
.. IaI 75-----------------+---------+--------------
o I
E 6 0 .. . .I I.
I II I I
,.I-I
'4 I 60..
L . .* +-
0--------------
+----------.-------------------
, I
(:3 55OII 500 Figure 14.1.9-4
Loss of External Electric Load - BOC Auto Control Minimum DNBR vs. Time 3.00 2.75 S.---- -.. -------- ---
2.50 2.25 -.....................
2.00 1.75 .........
z 0
E 1.50 E
1.25 Lit = 1.14
- HTP MDN 1.00 0.75 MD =:1.681:
- Minimum:
0.50
/~0.2 5 10 15 20 25 30 35 40 45 50 0
Time [s]
Figure 14.1.9-5 Rev. 16 12/01/2000
Loss of External Electrical Load With Auto Pressure Control (DNB Case)
Steam Generator Pressure vs. Time 1200 3 3 3
.- !3 I 3 3 3 3 3 3 I 0 03. . -+ 3!.
S1000-------- - -- - - - -
U)III (I,.-I O 33
".4-C 3 390 E
0 3 03 70 3 3 m 3 Figure 14.1.9-5
Auto Control Loss of External Electric Load - EOC Reactor Power vs. Time 1.100 1.000 0.900 0.800
(' 0.700 ..........
E 0
C 0.600 o-.
0.500 ci_
0 0.400 Rev..16 0.F igure 1 0.100.............................................
15 20 25 30 35 40 45 50 0 5 10 Time [s]
Figure 14.1.9-6 Rev. 16 12/1/12000
Loss of External Electrical Load With Auto Pressure Control (DNB Case)
DNBR vs. Time 4.5 oI ci I o I I m!
3 -
I I, 2.---- -- ------------------------- ---
I I
E L. I 4--
1.5 Figure 14.1.9-6
Loss of External Electric Load - EOC Auto Control Tinier vs. Time/
580.0 575.0 570.0
- --- ..- -- -- -- --I-- --
565.0
.LL U,
0) 560.0 a)
CD
,H -- - - - - - - - - - - - - - - -- - - - - - - - - -
ni 555.C . .--. -. -- . .
Ec i
550.(
545.(
540.(
n J 0 5 10 15 20 25 30 35 40 45 50 Time [s]
Figure 14.1.9-7 Rev. 16 1210112000
L 1'171 atn&A 0
T z
CD
-u 0
- E (D
L -A Z*l
.IWIL 'SA 13MOd IC;)[Ontq (ainssa.jd.iaAo Sj-d) IOJIUOJ a.[nSSaJj OjnV IUOql!AA, PCOl JC3Uj3aj2j [HU.1311a JO SSOl
oooZ/10/lT 91 "A*s 8-6"t'171 a-in l.2A
[S] aWli AC c;j7 0t7 sc OC S9 O SI. 01. 9; 0 I nc qt, ...........T
)0"08 L 0096 L
................ I.......................
- ........ ............. ......... ---------- --- --------------------- -------- 0,00 2.
-- ----------- co CD o~co Co oo0S*
O'OsOz IO'SLI73 OWLL -SAejnssBJd jazunssaJd joiluoo OInV 003 - P80-1 OP13813 lOwOlx3 10 ssOl
Loss of External Electrical Load Without Auto Pressure Control (RCS Overpressure)
Vessel Average and Core Inlet Temperature vs. Time Core Inlet Vessel Averoge 600 I I / I" I I /
I I I 590 -I I /
I III I
I III I I n~4 I I I .I
- I I I I I I II I
I I
I ,I
/I I * - ~
580 I I, I I I I I - I I 0-) - I I I I I I ED "o
-II I
- II 570
-I-
- I p- -I I 560 -
I I I I I I I I I I I
- I I
- II I 4-.. . . + -
II I I 550 I I I II I I
- I i 540 0 44 8 I I 12 16 20 Time [seconds]
Figure 14.1.9-8
oooZ/lolUT 91 -^*a 6-6"'1t'I 3l.I*A
[s] aw!+/-l O sti OV se oc SZ O si. 0t 5 0OS i........... i........... i...........
i-........... i...........
S.......... ..I--------
0*0...
........... ........... I S..........~~~~~ i.... . . . . . . ........
i......i......i...... ... O CD 0009
---.... --.------- i...........
...... i...........i...... ............
..... Iiiii i........
i...........
00SL
,GUJol iA -SA o 7 JOeiM ju Z.UnssWJd IjoiUOO olnV 003 - peoTDP1 o~lale1u~lX3 10 sso-I
Loss of External Electrical Load Without Auto Pressure Control (RCS Overpressure)
Pressurizer and RCP Exit Pressure vs. Time Pressu rizer RCP Exit 2700 I/\I S.......... --- - - * - - - - - - + -
2600 2500 /. I / 3 3 II
,I / I It I 3 I .
ll // Ii 3 IV) a 3 3/ I (D
L.
2400 ZI/
V)
V) 2300 1 t ftiI I 3 2200 2100 16 0 4 8 12 20 Time [seconds]
Figure 14.1.9-9
oooZl/ol0T 91 -,,al 01-6"I'17I a.=n2!,l
[s] awUJl 09 st v Q7 s e OC sz o z s S. .................... ......!..... ..... t 01. 9 0 00 0 .
499'V LUIONON WflWIUIV¶I 091. 3
. . .----- ----------------- 0 z
S~oot IOJlU.O o...v - p-o- .03 o-----l3 lewe sso 10-x3 -
Loss of External Electrical Load Without Auto Pressure Control (RCS Overpressure)
Pressurizer Water Volume vs. Time 620 L J I 3 I I I I
_J-Eo I8 Ii+
0 56- - -- - - - - - - - - - - - - ----- ---- -- --- - -
I-i33 E
- 3 CS 520 I U)
OL 540. . . . . . . . . .. .
54- i ! '
- I ' : ; 3ti Figure 14.1.9-10
Control Loss of External Electric Load - BOC Manual Reactor Power vs. Time 1.1000 1.9000 0.100 ...
0.900-- -
0.800------
'- 0 .8 0 0 ...........
"- 0 .60 0 -----
.. /'*...........
0
- a. 0 .6 00 ------.... ...... .. ..... -- ----
0 0.400 ooi;. . . . .
0.2 00-.-------............. i.......... ........... i........... i............. ...........
10 15 20 25 30 35 40 45 50 0 5 Time [s]
Rev. 16 Figure 14.1.9-11 12/01/2ooo
Loss of External Electrical Load Without Auto Pressure Control (RCS Overpressure)
Steam Generator Pressure vs. Time 1200 I I 1100 - . .. .
- I I I (L
91 00 - - - - - - -- -- - -- - - - - -- - -- - -- - -- - -- - --
0 L,.,
(-5 o I o I 8O0 700 Time [seconds]
Figure 14.1.9-11
Loss of External Electric Load - BOC Manual Control Tinlet vs. Time 580.0 575.0 570.0
- ---------...............- 7 . . . . . ..............-- - - - ..- ........
565.0
- 1) . ...... .....
D -- ......... .
560.0
-- -- -- -- I ...........
0 CU (D
I-555.0 E
550.0 545.0 540.0
.......... ~----------- ----- ------------ -----
0 5 10 15 20 25 30 35 40 45 50 Time [s]
Figure 14.1.9-12 Rev. 16 1210112000
ZI-6-13, I amiA 0
Z' 0
ZI XUII -SA jamod mpnN (ainssa.idj;)Ao SSW) IOAIUOJ a.[nSSaJa OjnV q)!AA, PROl 193143aig ICUJaJXa JO SSO'I
91 "^'Aa-6I'H aln2.!,4
[s] eawl 0: st, O se3 0 53 Oz s1 0L 9 0 0091.
-------------------- -------- ---- 0'0961 0003L; -u (D
S......... +... +...++
--- O'SL L Cl)
Cl)
CD (U)
IJUOIfUV I el318 IQ IUJP IOS~ to.
000VCZ ewj s ans+ jzns~
09L'OOV o y*ol -.. . . . . .
-eu .. . .3. . . . . . . . . . . .3 ... . . . . . . . . . . .1 0. . . .
Loss of External Electrical Load With Auto Pressure Control (MSS Overpressure)
Vessel Average and Core Inlet Temperature vs. Time Core Inlet Vessel Averoge 610 600 590 I !
ELJ 580 "L.
I, l Ii l l l ~ I :I 1 570 I--
560 550 540 U 6 12 18 24 30 Time [seconds]
Figure 14.1.9-13
OOOZIToUlT t,1-6"Tl't~n2'A ~*!
9T "^aa
[s] eawl O9 9v 0 8 OC 08 sz Oz 5t 0 L. 0 O'.S O'SV i .. i. - - - - -- ...........--- .0
............. 0"1'
. .-----.-- - - - I....
........4 -- .. .. .. . ..----
. . . L..--- --- --- .. -- . ----
rCD CD O'Og 0-0
-, - I 1 --- -- -- i .....- ..--.--
-...... .......... ----------- *i ........... -- --- -... .... --- ----- --
0"09 099 O'OL O'SL SjlO~UOO lenueyq OOs - P8o-1 opBeUJaleex3 IJO1 10 sso71
Loss of External Electrical Load With Auto Pressure Control (MSS Overpressure)
Pressurizer and RCP Exit Pressure vs. Time Pressur i zer RCP Exit 2500 Il I I i I I
.. .. . . . . . 7I.. . - I
/ \
2400 I I 2300
- N N V)
N.' I \
I-I. . ..
- 3 (D
0 0.. 2200 2100 i I 2000 I - -
12 18 24 30 Time [seconds]
Figure 14.1.9-14
Loss of External Electric Load - BOC Manual Control Minimum DNBR vs. Time 3.00 "i".. .. ....... -----------------------.....
z 0
E E
C:
........... -.......... . ........... ,........... i .......... . .. .....
- 2. 00 .-.--
0 5 10 15 20 25 30 35 40 45 50 Time [s]
Figure 14.1.9-15 Rev. 16 1210112o0o
Loss of External Electrical Load With Auto Pressure Control (MSS Overpressure)
Pressurizer Water Volume vs. Time 750 "
I I 700 - -- - - - - - -- - - - - - ------- -- - - - -= - - -
t-I (D
- 650 - -- - -
ED 0
(D I I C._
I I 5
550. . .. .
500 Figure 14.1.9-15
Control Loss of External Electric Load - EOC Manual Reactor Power vs. Time 1.100 ....................................
1.000 0.900 S.......... i 0.800 -- - - - - - - - .. . ...................... ......................
C" 0.700
.C 0
0.600 0
4 0.500 0
0~
0.400 0.300 0.200 0.1 .. ......... -.---........ ...........
5 10 15 20 25 30 35 40 45 50 0
Time [s]
Figure 14.1.9-16 Rev.
12/01/2000 16
Loss of External Electrical Load With Auto Pressure Control (MSS Overpressure)
Steam Generator Pressure vs. Time 1250 I I 1200 -- 1 - - - - - -I- - I - - - - - - - - - - - - - -! - - - -
U, I I
/ I
( 1100 - -- - - - - - -- - - --- .- - -- - - -- I - -- - - --. - - -
U.) I CL o
- - 1050 -. -- - -- - .--- - -- -- - -- - -- - - --.- -- -- - --
C5 1 0 - - - - - - - - - - - - - I - - - - - - -I - - - - - - -I - - - -
95 0 T
- -- - -- - ........I I
- - - -- --I--
I 90 -- .. .. .. ..
850 Figure 14.1.9-16
Loss of External Electric Load - EOC Manual Control Tinlet vs. Time 580.0
........ :...... ......=... .. ... "
S.. "
575.0 S................. -...................... ---
570.0 565.0 .. . .
UL o 560.0
( 555.0 - ---------- ------- ....... ----
CL E
1(!D 550.0 545.0 540.0 0 5 10 15 20 25 30 35 40 45 50 Time [s]
Figure 14.1.9-17 Rev. 16 12/01/2000
Manual Control Loss of External Electric Load - EOC Pressurizer Pressure vs. Time 2550.0 2475.0 2400.0 2325.0 2250.0 CL 2175.0 (D
- 3 w.
2100.0 2025.0 1950.0 1875.'
15 20 25 30 35 40 45 50 0 5 10 Time [s]
Rev. 16 Figure 14.1.9-18 1210112000
EOC Manual Control Loss of External Electric Load -
Pressurizer Water Level vs. Time 75.0 70.0 65.0 60.0 55.0 (D)
I 50.0 0,
45.0 40.0 35.0 30.
20 25 30 35 40 45 50 0 5 10 15 Time [s]
Rev. 16 12/01/2000 Figure 14.1.9-19
Control Loss of External Electric Load - EOC Manual Minimum DNBR vs. Time 3.00 2.75------
2.50 2.00
- m 1.75 z
E Lin-t 1.14 WP12MD
-- 11...
o.......
... .....B.. .------
0.50..------------------------- --.................
- .00 L L 10 15 20 25 30 35 40 45 50 0 5 Time [s]
Rev. 16 Figure 14.1.9-20 12/01/2000
Figures 14.1.9-6 through 14.1.9-10 show the responses for the total loss of load at end of cycle with the most negative moderator temperature coefficient (-4.OE-4 Ak/.F). The rest of the plant operating conditions are the same as the case above.
The loss-of-load accident is also analyzed assuming manual RCCA control. In addition, no credit is taken for the pressurizer spray, pressurizer power-operated relief valves, or steam dump system. Figures 14.1.9-11 through 14.1.9-15 show the manual control beginning of cycle transient with zero moderator coefficient. Figures 14.1.9-16 through 14.1.9-20 show the manual control transient results at end of cycle.
The following table shows the comparison of the important calculated safety parameters to their respective acceptance criteria (Calculated Value/Acceptance Criterion):
Loss of Load MDNBR RCS Pressure MSS Pressure (psia)
(p~sia)
BOC Manual Control 1.681/1.14 2501/2750 1182/1210
- BOC Auto Control 1.681/1.14 2474/2750 1184/1210 EOC Manual Control 1.681/1.14 2481/2750 1182/1210 CEOC Auto Control 1.681/1.14 2377/2750 1198/1210 Conclusions
-The safety analysis indicates that a total loss of load without a direct or immediate reactor trip
ý, " presents no hazard to the integrity of the Reactor Coolant System or the Steam o-.of LjF System. Pressure relieving devices incorporated in the two systems are adequate to limit the maximum pressures to within safety analysis limits. The integrity of the core is maintained by the Reactor Protection System. The MDNBR does not fall below its initial value, which is above the MDNBR limit.
14.1.10 LOSS OF NORMAL FEEDWATER ccident wDescription A loss o a] feedwater (from a pipe break, pump failure, valve malfunctions, or loss of off site power) resu a reduction in capability of the secondary system to remove the heat generated in the reactor If the reactor is not tripped during this accident, Reactor Coolant System damage could possib r from a sudden loss of heat sink. If an alternative supply of feedwater is not supplied to the p residual heat following reactor trip heats the coolant to the point where water relief from the pr . er occurs. Significant loss of water from the Reactor Coolant System could conceivably lead t e damage.
The following provides the necessary protection against a loss oa feedwater:
- 1. Reactor trip on Low-Low water level in either steam generator.
Rev. 16 14.1-27 12/01/2000
- X ,'. L__._
- 2. eactor trip on steam flow-feedwater flow mismatch in coincidence with low water level in 'ther steam generator.
- 3. Two tor driven auxiliary feedwater pumps which are started automatically on:
a) Low- w level in either steam generator, or b) Opening both feedwater pump circuit breakers, or c) Safety Injecti signal, or d) Loss of off-site p er, or e) Steam generator AM C low-low level, or
- 1) Manually
- 4. One turbine driven pump which i started automatically on:
a) Low-Low level in both steam ge rators, or b) Loss of voltage on both 4 kV. buses, r c) Steam generator AMSAC low-low level, r d) Manually The motor-driven auxiliary feedwater pumps are supplie power by the diesel generators if a loss of outside power occurs. The turbine-driven pum uses steam from the secondary system. The turbine exhausts the secondary steam to the at ere. The auxiliary feedwater pumps take suction directly from the condensate storage t for delivery to the steam generators.
Three auxiliary feedwater pumps are provided in the plant (two mot driven and one turbine driven). Necessary protection against consequences of a loss of no feedwater including that caused by loss of off-site power is therefore available, allowing for ctive failure on one of the operable auxiliary feedwater pumps even when one of the pumps is ut-of-service.
When all three pumps are operable there is considerable backup in equipmen nd control to insure that reactor trip and automatic auxiliary feedwater flow occur following s of normal feedwater.
Method of Analysis Rev. 16 14.1-28 12/01/2000
analysis was performed using a digital simulation of the plant to show that following a loss of n al feedwater, the Auxiliary Feedwater System is adequate to remove stored and residual heat.
The follo' g assumptions are made:
- 1. The initia team generator water level (in both steam generators) when the reactor trip occurs is as med to be at the Low-Low level tap. This is conservative, because this level would result a reactor trip and automatic initiation of the auxiliary feedwater flow.
- 2. The plant is initia operating at 102% of 1650 MWt.
- 3. Off-Site power is not vailable, resulting in natural circulation flow in the Reactor Coolant System.
- 4. A conservative core residu heat generation based upon long-term operation at the initial power level preceding the tr.
- 5. Only one motor-driven auxiliary dwater (AFW) pump is available 630 seconds after the accident is initiated.
- 6. Auxiliary feedwater is delivered to o one steam generator, at a flow rate of 176 gpm.
- 7. Secondary system steam relief is through e self-actuated safety valves. Nominal safety valve settings and rated safety valve flow apacities (Section 10.2.2) are assumed. To maximize the pressurizer insurge and React Coolant System heatup, the safety valve blowdown settings are assumed to be at 0%. team relief would in fact, be through the power-operated relief valves or condenser dump valves for most cases of loss of normal feedwater. However, these are assumed to be una ilable in the analysis).
Results Figures 14.1.10-1 through 14.1.10-5 show the plant paramet s following a loss of normal feedwater accident with the assumptions listed above. Followin'the reactor and turbine trip from full load, the water level in the steam generators falls due o the reduction of steam generator void fraction and because steam flow through the safety v es continues to dissipate the stored and generated heat. The auxiliary feedwater pump is deliv*ng flow 630 seconds following the initiation of the low-low level trip, thus reducing th rate of water level decrease. The capacity of the auxiliary feedwater pump is such that the wa level in the steam generator being fed does not recede below the lowest level at which sufficien at transfer area is available to dissipate core residual heat without water relief from the prim system relief or safety valves.
Prom Figures 14.1.10-1 through 14.1.10-5, it can be seen that at no time is the be sheet uncovered in the steam generator receiving auxiliary feedwater flow and at no tim *s there Rev. 16 14.1-29 12/01/2000
water *effrom the pressurizer. I the auxiliary feed delivered is greater than that of one motor drive ump, the initial reactor power is < 102% of 1650 MWt, or the steam generator water level in on r both steam generators is above the Low-Low level trip point at the time of trip, then the resu . a steam generator minimum water level higher than shown and an increased margin to the po at which reactor coolant water relief occurs.
The following table shows the con .son of the important calculated safety parameters (Calculated Value/Acceptance Criterion):
MDNBR RCS Prese MS Pressure (psia)
~(psia)
Loss of Feedwater 1.681/1.14 2500/2750 65/1210 Conclusion The loss of normal feedwater does not result in any adverse condition in the core, because it does not result in water relief from the pressurizer relief or safety valves, nor does it result in uncovering the tube sheets of the steam generator being supplied with water.
ANTICIPATED TRANSIENTS WITHOUT SCRAM An Anticipated Transient Without Scram (ATWS) is a postulated anticipated operational
$i0 occurrence (such as loss of feedwater, loss of condenser vacuum, or loss of off-site power) that is accompanied by a failure of the Reactor Protection System (RPS) to shut down the reactor.
The Kewaunee Nuclear Power Plant was originally licensed based on the results of a study of ATWS presented in WCAP 7486 (see Reference 9). The conclusions of this study are that there is very little likelihood of failure to trip the reactor and that even in the hypothetical case of no protective reactor trip, there is no gross fuel damage. WCAP 8330 presented the results of generic ATWS analysis for 2, 3, and 4 loop Westinghouse plants. The results of these analyses showed that the consequences of an ATWS were acceptable as long as the turbine was tripped and AFW initiated in a timely fashion. Acceptable consequences are defined as RCS pressure remaining below 3200 psig and no fuel failure. The results of the analyses in WCAP 8330 also showed that the most severe ATWS transients were those which entailed a loss of main feedwater. Subsequent to the operational license at KNPP and based on the studies cited above, additional ATWS protection was required as described below.
The Code of Federal Regulations (CFR), Section 10 CFR 50.62 (Reference 10) specifies ATWS mitigation system requirements. The Westinghouse Owners Group developed a set of conceptual ATWS Mitigating System Actuation Circuitry (AMSAC) designs (Reference 11). The AMSAC actuation on low steam generator water level design has been implemented, with the exception that AMSAC is armed at all power levels (the "c-20 permissive" signal is not used). The logic of AMSAC is to trip the turbine and start all three auxiliary feedwater pumps when low-low steam generator water level signals are present on 3 of 4 channels for a specified time period. However, as discussed in Section 6.6, manual Rev. 16 14 1.1-30 12/01/2000
initiation of auxiliary feedwater may be required at low power levels (< 15%). The level setpoint and time delay criteria are described in Reference 11.
The NRC Safety Evaluation Report (Reference 12) and a subsequent NRC Special Inspection Report (Reference 13) reviewed the Kewaunee design and installation against 14 key elements for compliance. The NRC concluded that the Kewaunee AMSAC is acceptable and in compliance with the ATWS rule, 10 CFR 50.62.
In 1998, in response to an engineering evaluation of the AFW system, a plant design change added a Diverse Scram System (DSS). The DSS is initiated on a signal from the existing AMSAC system and de-energizes the Rod Drive MG Set exciter field. Removing the Rod Drive MG set exciter field will interrupt power to the control rod grippers, allowing the control rods to free fall into the core, ending the ATWS event.
The DSS was installed to ensure the AFW pumps would continue to run throughout a loss of main feedwater ATWS. The DSS in conjunction with the AMSAC system will end the transient before the AFW flow to the steam generators increases to a point where AFW pump NPSH could be lost. The loss of main feedwater ATWS, mitigated by the DSS and AMSAC system, was analyzed using a similar methodology as the loss of main feedwater transient described in Section 14.1.10.
1.40 The original AMSAC submittal to the NRC was amended to include the DSS. The NRC Safety Evaluation Report (Reference 15) concluded that the Kewaunee DSS design was acceptable. The WPSC Safety Evaluation for the original AMSAC and the DSS included a review of the 14 key elements of ATWS compliance used by the NRC. This review concluded that the original AMSAC design reviewed by the NRC was unaffected by the addition of the DSS.
14.1.12 LOSS OF AC POWER TO THE PLANT AUXILIARIES In the ev of a complete loss of off-site power and a turbine trip, there will be a loss of power to the plant au aries, i.e., the reactor coolant pumps, main feedwater pumps, etc. The events following a loss of -site power with turbine trip are described in the sequence below.
- a. The reactor is tripped an nt vital instruments are supplied by the emergency power sources.
- b. The diesel generators start on loss-of-volta n the 4kV buses to supply plant vital loads.
- c. As the steam system pressure subsequently increases, e steam system power-operated relief valves are automatically opened to the atmosphere. dump to the condenser is Q assumed not available because of loss of the circulating water pu s.
- d. If the steam flow rate through the power-operated relief valves is not suffic t (or if the power-operated relief valves are not available), the steam generator self-actuat safety Rev. 16 14.1-31 12/01/2000
va es may lift to dissipate the sensible heat of the fuel and coolant plus the residual heat pro ced in the reactor.
- e. As the n -load temperature is approached, the steam power-operated relief valves (or self actuated s ety valves if the power-operated relief valves are not available for any reason) are used to issipate the residual heat and to maintain the plant at the hot shutdown condition.
The auxiliary feedwat system is started automatically on loss of off-site power. The turbine driven auxiliary feedw er pump uses steam from the secondary system and exhausts to the atmosphere. The motor riven auxiliary feedwater pumps are supplied by power from the diesel generators. The p ps take suction directly from the condensate storage tank for delivery to the steam generat s. The auxiliary feedwater system ensures feedwater flow upon loss of power to the plant au *i The flow rate assumed in the safety analysis for each of ies.
the two motor-driven auxiliary edwater pumps and the turbine-driven auxiliary feedwater pump is the same as that discusse* Section 14.1.1.10.
The turbine-driven pump can be te ed at any time by admitting steam to the turbine driver. The motor-driven pumps also cabe tested at any time. The auxiliary feedwater control valves can be operationally tested whene r the plant is at hot shutdown and the remaining valves in the system are operationally teste when the pumps are tested.
Upon the loss of power to the reactor coolant p mps, coolant flow necessary for core cooling and the removal of residual heat is maintained natural circulation in the reactor coolant loops. The natural circulation flow was calculated or the conditions of equilibrium flow and maximum loop-flow impedance.
In response to Generic Letter 81-21, the ability to cool wn via natural circulation without voiding the upper head of the reactor vessel was rev wed. The NRC concluded in Reference 14 that Kewaunee has adequately demonstrated e ability to cooldown without voiding the reactor vessel head and determined that sufficie condensate supply exists to support its cooldown procedures.
The average temperature, pressurizer water volume, and steam gen ator level assuming the most conservative initial plant conditions and equipment av i bility are shown in Figures 14.1.10-1, 14.1.10-2,14.1.10-3, and 14.1.10-4 fora loss of norm feedwater including a loss of off-site power, and reactor coolant system natural circulati . It is shown in Section 14.1.10 that a loss of normal feedwater from any cause including loss of off-site power does not result in water relief from the pressurizer relief or safety val Conclusion The loss of off-site power to the plant auxiliaries does not cause any adverse conditi in the core since it does not result in water relief from the pressurizer relief or safety valves does it result in the loss of the steam generator(s) as a heat sink for residual heat removal.
Rev. 16 14.1-32 12/01/2000
LOSS OF NORMAL FEEDWATER A c TAVE vs. TIME 600 590 580 "LL 570 C) w
<560 550 540 530 0 1000 2000 3000 4000 5000 Time (Sec)
FIGURE 14.1.10-1 Rev. 15 05/01/99
LOSS OF NORMAL FEEDWATER cog cpcc PRESSURIZER LIQUID VOLUME vs. TIME 1000 900 800 700
. 600 S500 "3
400
- D
- L 300 200 100 0
1000 2000 3000 4000 5000 0
Time (Sec)
Rev. 15 FIGURE 14.1.10-2 05/01/99
LOSS OF NORMAL FEEDWATER SG A WIDE RANGE LEVEL vs. TIME 48 44 40 36
"-32 S28
_J CD c)
- 24
-o20
( 16 (n
12 8
4 0
0 1000 2000 3000 4000 5000 Time (Sec)
FIGURE 14.1.10-3 Rev. 15 05/01/99
LOSS OF NORMAL FEEDWATER SG B WIDE RANGE LEVEL vs. TIME 48 44 40 36
'32 S28
- 'Q) 24 220 S16 (I) 12 8
4 0
2000 3000 4000 5000 0 1000 Time (Sec)
Rev. 15 05/01/99 FIGURE 14.1.10-4 A,
LOSS OF NORMAL FEEDWATER (f
PRESSURIZER PRESSURE vs. TIME 2500 2400 2300 2200 2100 U')
01) 2000 L,..
oN 1900 U)
(U) 13_
1800 1700 1600 a-1500 Rev. 15 FIGURE 14.1.10-5 05/01199
14.1.10 Loss of Normal Feedwater Accident
Description:
in a reduction A loss of normal feedwater (from a pipe break, pump failure, or valve malfunction) results were of the ability of the secondary system to remove the heat generated in the reactor core. If the reactor heat sink. If an not tripped during this accident, core damage could possibly occur from a sudden loss of reactor trip and alternate supply of feedwater were not supplied to the plant, residual heat following water relief from the reactor coolant pump heat would heat the primary system water to the point where coolant system (RCS). A pressurizer would occur, resulting in a substantial loss of water from the reactor Since the reactor is significant loss of water from the RCS could conceivably lead to core damage.
primary system never tripped well before the steam generator heat transfer capability is reduced, the may be violated.
approaches a condition where the departure from nucleate boiling ratio (DNBR) limit The following features provide the necessary protection against a loss of normal feedwater:
- a. Reactor trip on low-low water level in either steam generator.
level in
- b. Reactor trip on steam flow-feedwater flow mismatch coincident with low water either steam generator.
- c. Two motor-driven auxiliary feedwater (AFW) pumps, which are started on:
- 1. Low-low level in two-out-of-three level channels in either steam generator
- 2. Opening of both feedwater pump circuit breakers
- 3. Any safety injection signal
- 4. Loss of offsite power
- 5. Steam generator anticipated transient without scram (ATWS) mitigation system actuation circuitry (AMSAC) low-low level
- 6. Manual actuation.
- d. One turbine-driven AFW pump, which is started on:
- 1. Low-low level in two-out-of-three channels in both steam generators
- 2. Loss of voltage on both 4 kV buses.
- 3. Steam generator AM SAC low-low level
- 4. Manual actuation.
The AFW system is started automatically on the signals described above. Below 15% of rated thermal power (RTP), selected AFW valves (AFW-2A & A!FW-2B and AFW-10A & AFW-10B) can be placed in the closed position, thereby precluding AFW flow to the steam generators. For this condition, manual operator action to re-initiate AFW flow after it has been isolated has been justified. The motor-driven AFW pumps (MDAFWP) are supplied by the diesel generators if a loss of offsite power occurs, and the turbine-driven AFW pump (TDAFWP) utilizes steam from the secondary system and exhausts the steam to the atmosphere. The AFW pumps take suction from the condensate storage tank (CST) for delivery to the steam generators.
The analysis shows that following a loss of normal feedwater, the AFW system is capable of removing the stored energy, residual decay heat and reactor coolant pump heat, thus preventing overpressurization of the RCS and a loss of water from the reactor core.
Method of Analysis:
The loss of normal feedwater transient is analyzed using the RETRAN computer code. The code simulates the neutron kinetics, RCS including natural circulation, pressurizer, pressurizer relief and safety valves, pressurizer heaters, pressurizer spray, steam generators, feedwater system and main steam safety valves.
The code computes pertinent plant variables including steam generator mass, pressurizer water volume and reactor coolant average temperature.
The major assumptions are summarized below.
- a. The plant is initially operating at 102% of 1780 MWt.
- b. Reactor trip occurs on steam generator low-low water level at 0% of narrow range span (NRS). Turbine trip occurs coincident with reactor trip.
- c. A conservative core residual heat generation is assumed, based on the ANS 5.1-1979 decay heat model plus 2 sigma.
- d. One minute after the low-low steam generator water level setpoint is reached, the AFW system provides 176 gpm of flow split equally between the two steam generators (equal split is the limiting case). This AFW flow assumption is conservative with respect to the worst case scenario for available AFW flow during a loss of normal feedwater event, as the TDAFWP (single failure) and the second MDAFWP are assumed to be unavailable.
The AFW enthalpy is assumed to be 90.8 BTU/Ibm (1 20"F and 1100 psia).
- e. Secondary system steam relief is achieved through the main steam safety valves (MSSVs), which include a + 2% setpoint tolerance, a 5 psi ramp for the valve to pop
open and a pressure difference from the steam generator to the safety valves of approximately 42 psi. Steam relief through the steam generator power-operated relief valves (PORVs) or condenser dump valves is assumed to be unavailable.
- f. The initial reactor coolant average temperature is assumed to be 6F higher than the nominal full power value of 573.0"F because this results in a greater expansion of the RCS water during the transient, thus, resulting in a higher pressurizer water level.
- g. The initial pressurizer pressure is assumed to be 50 psi above the nominal value.
- h. Normal reactor control systems are not assumed to function. However, the pressurizer PORVs, pressurizer heaters and pressurizer spray are assumed to operate normally. This assumption results in a conservative transient with respect to the peak pressurizer water level. If these control systems did not operate, the pressurizer safety valves would maintain peak RCS pressure around the actuation setpoint throughout the transient.
- i. Credit is assumed for the operators to trip the reactor coolant pumps at 15 minutes following reactor trip, thereby minimizing the overall heat that the AFW system must remove from the RCS.
The loss of normal feedwater analysis is performed to demonstrate the adequacy of the reactor protection system (RPS) and engineered safeguards features (ESF) (e.g., the AFW system) to remove long-term decay heat, stored energy and reactor coolant pump heat, thus preventing excessive heatup or overpressurization of the RCS. As such, the assumptions used in the analysis are designed to minimize the energy removal capability of the system and maximize the possibility of water relief from the RCS by maximizing the expansion of the RCS inventory, as noted in the assumptions listed above.
Results:
Figures 14.1.10-1 through 14.1.10-6 show the significant plant responses following a loss of normal feedwater.
Following the reactor and turbine trip from full load, the water level in the steam generators falls due to the reduction of the steam generator void fraction and because steam flow through the MSSVs continues to dissipate the stored and generated heat. One minute after the initiation of the low-low level trip, flow from the available motor-driven AFW pump is credited, thus reducing the rate of water level decrease in the steam generators.
The capacity of one motor-driven AFW pump is such that the water level in the steam generators does not recede below the lowest level at which sufficient heat transfer area is available to dissipate core residual heat, stored energy and reactor coolant pump heat without water relief through the pressurizer PORVs or safety valves. Figure 14.1.10-4 shows that at no time is there water relief from the pressurizer as the peak pressurizer water volume is less than the limit of 1010.10 f13. Plant procedures may be followed to further cool down the plant. The maximum MSS pressure is less than 110% of the steam generator design pressure. The RCS overpressurization limit is also not challenged during this transient. However, note that the pressurizer PORVs are assumed to be operable so as to maximize the potential for pressurizer filling. This event is bounded by the Loss of External Electrical Load (Section 14.1.9) with respect to peak RCS and MSS pressures.
Conclusions:
The results of the analysis show that a loss of normal feedwater does not adversely affect the core, the RCS, or the MSS. The AFW capacity is sufficient to dissipate core residual heat, stored energy and reactor coolant pump heat such that reactor coolant water is not relieved through the pressurizer relief or safety valves. Pressure relieving devices that have been incorporated into the plant design are adequate to limit the maximum pressures to within the safety analysis limits, i.e., 2750 psia for the primary RCS and 1210 psia for the MSS.
Loss of Normal Feedwater Nuclear Power vs. Time 1.2 I I
- I
- I
- I I I I I I I I I I I I I 1- 9.------+
I I I I I I
- I I I
- I I I
- I
- I C I I I I E .8 I I S4-------+-----
0 I I I I I I 0 I I
(
C I I I I 0 I I I I I I
.6 ---------- 4----- *----+------+-----
I I I I I I O3 I I
- I o__ I I I I 0 I I I' I I I I I I
.4- *----4.------4-----
I I I I I I I I I I I I I I I I I I
.2 ----- +------+
I I I I I I I I I I
- I I I
- I I I I:IIIJ I I 111111. I I -
0 12 10 10 3 4 10 10 10 Time [seconds]
Figure 14.1.10-1
Loss of Normal Feedwater Vessel Average Temperature vs. Time 610 I I C.L 0 I5 5 0l I I I II l I I I I I II I I II1 I 58 - -- - - - -- - - - -----
I I - -- - - - i 560 Time [seconds]
Figure 14.1.10-2
Loss of Normal Feedwater Pressurizer Pressure vs. Time 2450 2400 - - - - - - - - - -- - - - - - - - - - -
S2300 - -- - - ------------.. ..
2 0 l m i f i l I III III 2200 -.-- - - - - - - -- - - - - - - -- - . -. -. -. -.
I I Time [seconds]
Figure 14.1.10-3
Loss of Normal Feedwater Pressurizer Water Volume vs. Time 1000 900
°--,
.2
"-3 800 0
0 E
0 700 C)4
.1B n) 600 500 400 Figure 14.1.10-4
Loss of Normal Feedwater Steam Generator Pressure vs. Time 1200 1150 1100 O}
0 950 - - - - - ----- - - - - --- - -- - - - - - - - - - - - -
E a a I 80 - I I H iI I I I I II fill 0 2 10 10 10 10 10 Time [seconds]
Figure 14.1.10-5
Loss of Normal Feedwater Steam Generator Mass vs. Time 100000 a a
! a I I I I
! I I I I I 0 a I I
! I
! I
! I O 60000 a- a F 1 0 0O I-I 60 01)} 0! 10 - 0 10 10 c!
II) 40000 I I I a 1{a01 a01 Tim ascns 10ig0r1 10.1110
14.1.12 Loss of All AC Power to the Plant Auxiliaries Accident
Description:
A complete loss of non-emergency AC power results in the loss of all power to the plant auxiliaries, i.e., the reactor coolant pumps, condensate pumps, etc. The loss of power may be caused by a complete loss of the offsite grid accompanied by a turbine generator trip at the station, or by a loss of the onsite AC distribution system.
The events following a loss of AC power with turbine and reactor trip are described in the sequence listed below.
- 1. Plant vital instruments are supplied from emergency power sources.
- 2. Steam dump to the condenser and steam generator PORVs are unavailable; therefore, the main steam safety valves lift to dissipate the sensible heat of the fuel and coolant plus the residual decay heat.
- 3. As the no-load temperature is approached, the steam generator PORVs (or the safety valves, if the PORVs are not available) are used to dissipate the residual decay heat and maintain the plant at the hot shutdown condition.
- 4. The standby diesel generators, started on loss of voltage on the plant emergency busses, begin to supply plant vital loads.
The AFW system is started automatically, as discussed in the loss of normal feedwater analysis (Section 14.1.10).
The TDAFWP utilizes steam from the secondary system and exhausts to the atmosphere. The motor-driven AFW pumps are supplied by power from the diesel generators. The pumps take suction directly from the condensate storage tank for delivery to the steam generators.
Upon the loss of power to the reactor coolant pumps, coolant flow necessary for core cooling and the removal of residual heat is maintained by natural circulation in the reactor coolant loops. Following the RCP coastdown caused by the loss of AC power, the natural circulation capability of the RCS removes residual and decay heat from the core, aided by the AFW in the secondary system.
Method of Analysis:
The loss of all AC power to the station auxiliaries transient is analyzed using the RETRAN computer code. The code simulates the neutron kinetics, RCS including natural circulation, pressurizer, pressurizer relief and safety valves, pressurizer heaters, pressurizer spray, steam generators, feedwater system and main steam safety valves.
The code computes pertinent plant variables including steam generator mass, pressurizer water volume and reactor coolant average temperature.
below.
Major assumptions made in the loss of all auxiliary AC power analysis are summarized
- a. The plant is initially operating at 102% of the 1780 MWt.
Turbine
- b. Reactor trip occurs on steam generator low-low level at 0% of narrow range span.
trip occurs coincident with reactor trip.
sigma
- c. A conservative core residual heat generation based on ANS 5.1-1979 decay heat plus 2 is assumed.
reactor
- d. The amount of heat transfer assumed to occur in the steam generators following the coolant pump coastdown is based on RCS natural circulation conditions.
the AFW
- e. One minute after the low-low steam generator water level setpoint is reached, system provides 176 gpm of flow split equally between the two steam generators (equal split case is the limiting case). The AFW flow assumption is conservative with respect to the worst as the scenario for available AFW flow during a loss of all auxiliary AC power event, TDAIFWP (single failure) and the second MDAFWP are assumed to be unavailable. The AFW enthalpy is assumed to be 90.8 BTUIlbm (120'F and 1100 psia).
which
- f. Secondary system steam relief is achieved through the main steam safety valves, include a +2% setpoint tolerance, a 5 psi ramp for the valve to pop open and a pressure relief difference from the steam generator to the safety valves of approximately 42 psi. Steam valves through the steam generator power-operated relief valves (PORVs) or condenser dump is assumed unavailable.
lower than the nominal
- g. The initial reactor coolant average temperature is assumed to be 6°F the value of 573.0F because this results in a greater expansion of the RCS water during transient, thus, resulting in a higher pressurizer water level.
- h. The initial pressurizer pressure is assumed to be 50 psi above its nominal value. An additional 0.1-psi uncertainty has been determined to be negligible.
- i. Nominal reactor control systems are not assumed to function. However, the pressurizer This PORVs, pressurizer heaters and pressurizer spray are assumed to operate normally.
level.
assumption results in a conservative transient with respect to the peak pressurizer water peak If these control systems did not operate, the pressurizer safety valves would maintain RCS pressure around the actuation setpoint throughout the transient.
14.1.10) except that The assumptions used in the analysis are similar to the loss of normal feedwater (Section power is assumed to be lost to the reactor coolant pumps due to the reactor trip.
Results:
Figures 14.1.12-1 through 14.1.12-6 show the significant plant responses following a loss of all AC power to the station auxiliaries event.
The first few seconds after the loss of power to the reactor coolant pumps will closely resemble the simulation of the complete loss of flow accident (FSAR Section 14.1.8), where core damage due to rapidly increasing core temperature is prevented by promptly tripping the reactor.
After the reactor trip, stored and residual decay heat must be removed to prevent damage to either the RCS or 3
the core. The peak pressurizer water volume is less than the limit of 1010.10 ft . The maximum steam generator pressure calculated was less than 110% of the design pressure of 1085 psig. The RCS overpressurization limit is not challenged during this transient. However, note that the pressurizer PORVs are assumed to be operable so as to maximize the potential for pressurizer filling. This event is bounded by the Loss of External Electrical Load (Section 14.1.9) with respect to peak RCS and MSS pressures.
The RETRAN code results show that the reactor coolant natural circulation flow available is sufficient to provide adequate core decay heat removal following reactor trip and RCP coastdown.
Conclusions:
The results of the analysis show that a loss of all AC power to the station auxiliaries does not adversely affect the core, the RCS, or the MSS. The AFW capacity is sufficient to dissipate core residual heat. Consequently, reactor coolant is not relieved through the pressurizer relief or safety valves. Pressure relieving devices that have been incorporated into the plant design are adequate to limit the maximum pressures to within the safety analysis limits, i.e., 2750 psia for the primary RCS and 1210 psia for the MSS.
Loss of AC Power to the Plant Auxiliaries Nuclear Power vs. Time 1.2 I I I I
- I I I
- I I I I I
- I
- I I I
- I I I I I
- I ----- S4.------4.-----
I I
- I
- I I I I I I I I I I I
- - - - - - - - - - I I I I E S ~ I I I S4-------+-----
z8 I I 0
'4 7I S ~ I I I
I I
I I I I 0 I I
- I C: I I 0
- I r I I o
+6 .6 ----------- 4---
I I S4-------+-----
I I I I I I I I I I I I I I I I I I aa i igit I I
- I
.4 - -- - -- - ---- *----4-------4------
- 23) I I I I U I I I I I I I I I I I I I I
+------4------
-2 ------ ------ ---- -----
- I
- I
- I I I I I I I I I I I I I IIIII* I I I 11111.
00 [ J 1 I I l l [ . . . . . . . .. . . . . . . . .
- I 4
0 2 1 10 10 10 10 10 Time [seconds]
Figure 14.1.12-1
Loss of AC Power to the Plant Auxiliaries Vessel Average Temperature vs. Time 590 585 r-o "0
LLJ 0
"1~
580 0
a E
0 I-0 a*
L.
0D 575 CR
<C 0t 570 565 10 Time [seconds]
Figure 14.1.12-2
Loss of AC Power to the Plant Auxiliaries Pressurizer Pressure vs. Time 2450
- a a
22 0I*II I I I I I I I I I I I III o a 240---------- +0-10 ---
Time [seconds]
Figure 14.1.12-3
Loss of AC Power to the Plant Auxiliaries Pressurizer Water Volume vs. Time 700 650
°-4 U
E
-O 600 N
L.
U)
U) a)
5.50 500 10 Time [seconds]
Figure 14.1.12-4
Loss of AC Power to the Plant Auxiliaries Steam Generator Pressure vs. Time 1200 I I I I I I I I I I I I I I I I
- I I I
- I 1100 - -----+-----
- I I I "U) I I
I
- I
- I
- I Co
- I irn
- I
- I L3. -- 4------4.-----
1000
- I
- I
- I
- I
- I
- I
- I
- I
- I C - I 900 - --- 4------+------
- I F - l I I III I I I I I I U') I I I I I I I I
- I
- I 800- --- 4------4.-----
- I I I
- I
- I I I I I I I I I I I I 111111 700 2 3 10 10 10 10 10 Time [seconds]
Figure 14.1.12-5
Loss of AC Power to the Plant Auxiliaries Steam Generator Mass vs. Time 100000 I I I I
- I I I I I I I
- I
- I 80000-E
-a 60000 I I 1 I 0) 0 SI I SI I
(. SI I 40000 !I I E
- I
!I I
- 0) I I V)
- I
- I 111 I i ii! iiii 1 1 I 20000 0
0 2 3 4 10 10 10 10 10 Time [seconds]
Figure 14.1.12-6
- 42f'C1'1flN
- = .'-. -
lzi
-. 1 1.
(WPSC) dated May 10,
- 2. Letter WPS-90-160 from KB Chesko (Westinghouse) to ML Marchi 1990 Caused by Power System
- 3. Baldwin, MS et al., "An Evaluation of Loss of Flow Accidents 1, June 1975 Frequency Transients in Westinghouse PWRs", WCAP-8424, Revision dated February, 1985
- 4. 1983 Islanding Study of the Wisconsin-Upper Michigan Systems Vassallo (NRC), Supplemental
- 5. Letter NS-CE-934 from C Eicheldinger (Westinghouse) to DB 1976 Information to WCAP-8424, Revision 1 dated February 3,
--- - ,,-'-: ' P.C,:,D L* T,.u -MisinAna-lysis" 6 o,_. -^ .--- 1:1 Nucice RePoad-Safety-EvalPn 41 G --.l e D" ationd-cK-ewaunerNuciean-PowerTPlanl
-- &1 8 ,
78.. i k, o Nl ' RI ,
-. l .,y E Yl, KA a i oV J G -
R e po.., 4"O .itf. . . . .P, "e.-
Transients in Westinghouse
- 9. WC Gangloff, "An Evaluation of Anticipated Operational Pressurized Water Reactors" WCAP 7486, May 1971 anticipated transients without scram
- 10. 10CFR50.62, Requirements for reduction of risk from (ATWS) events for light-water-cooled nuclear power plants Revision 1, July 1987
- 11. MR Adler, "AMSAC Generic Design Package" WCAP-10858P-A, (WPS) Letter No. K-88-202 dated
- 12. NRC Safety Evaluation Report, JG Giitter (NRC) to DC Hintz August 25, 1988 Evers (WPS), Letter No. K-89-209
- 13. NRC Special Inspection Report, RW Cooper Iu(NRC) to KH dated October 25, 1989 (WPS), Letter No. K-83-170
- 14. NRC Safety Evaluation Report, SA Varga (NRC) to CW Giesler dated August 15, 1983 the NRC SER approving the
- 15. Letter from WO Long (NRC) to ML Marchi (WPSC), transmitting AMSAC Modification, Letter No. K-98-101 dated July 19,1998 H ,. .,4o13olo o, "- Analysis of Thf- 12/01/2 14.1-33ev 1/ 1620
14.2 STANDBY SAFETY FEATURES ANALYSIS Adequate provisions have been included in the design of the plant, and its standby engineered safcguai-dz io likut pottential exposure of the public to below the guidelines of 10 CFR 100 for situations which have a very low probability of occurrence, but which could conceivably involve uncontrolled releases of radioactive materials to the environment. The situations, which have been considered, are:
- Fuel Handling Accidents
- Accidental Release of Waste Liquid
- Accidental Release of Waste Gases
- Rupture of a Steam Generator Tube
+ Steam Line Break
+ Rupture of a Control Rod Drive Mechanism Housing - RCCA Ejection
+ Turbine Missile Damage to Spent Fuel Pool 14.2.1 FUEL HANDLING ACCIDENTS NOT TA 5co PE The following fuel-handling accidents are evaluated to ensure that no hazards are created:
- a. A fuel assembly becomes stuck inside the reactor vessel
- b. A fuel assembly or Rod Cluster Control Assembly (RCCA) is dropped onto the floor of the reactor refueling cavity or spent fuel pool
- c. A fuel assembly becomes stuck in the penetration valve
- d. A fuel assembly becomes stuck in the transfer tube or the carriage becomes stuck.
Causes and Assumptions The possibility of a fuel handling incident of the severity considered in the analysis is very remote because of the many administrative controls and physical limitations imposed on fuel handling operations. All refueling operations are conducted in accordance with prescribed procedures under direct surveillance of a supervisor technically trained in nuclear safety. Also, before any refueling operations begin, verification of complete RCCA insertion is obtained by weighing each control rod drive mechanism individually to verify that the control rods are disengaged from the control rod drive mechanisms. Boron concentration in the coolant is raised to the refueling concentration and verified by sampling. Refueling boron concentration is sufficient to maintain the clean, cold, fully loaded core sub-critical with all RCCAs withdrawn. The refueling cavity is filled with water meeting the same boric acid specifications.
As the vessel head is removed, a visual check is made to verify that RCCA drive shafts are free of the mechanism housings.
Rev. 16 142-1 12/01/2000
After the vessel bead is removed, the RCCA drive shafts are disconnected from their respective assemblies using the manipulator crane and the shaft-unlatching tool. A spring scale is used to indicate that the drive shaft is free of the RCCA as the lifting force is applied.
The fuel handling manipulators and hoists are designed so that fuel cannot be raised above a position which provides adequate shield water depth for the safety of operating personnel. This safety feature applies to handling facilities in both the containment and in the spent fuel pool area. In the spent fuel pool, the design of storage racks and manipulation facilities is such that:
Fuel at rest is positioned by positive restraints in a safe, always sub-critical, geometrical array, with no credit for boric acid in the water.
Fuel can be manipulated only one assembly at a time.
Violation of procedures, by placing one fuel assembly in juxtaposition with any group of assemblies in racks does not result in criticality.
Crane facilities do not permit the handling of heavy objects, such as a spent fuel-shipping container, over the spent fuel storage area. A detailed description of crane movement limitations appears in Section 9.5.
Adequate cooling of fuel during underwater handling is provided by convective heat transfer to the surrounding water. The fuel assembly is immersed continuously while in the Refueling Cavity or Spent Fuel Pool.
Even if a spent fuel assembly becomes stuck in the transfer tube, the fuel assembly is completely immersed and natural convection maintains adequate cooling to remove the decay heat. The fuel handling equipment is described in detail in Section 9.5.
Two Nuclear Instrumentation System source-range channels are continuously in operation and provide warning of any approach to criticality during refueling operations. This instrumentation provides a continuous audible signal in the containment, and would annunciate a local horn and an annunciator in the plant control room if the count rate increases above a preset low level.
Refueling boron concentration is sufficient to maintain the clean, cold, fully loaded core sub-critical by at least 5% Ak/k with all RCCAs inserted. At this boron concentration, the core would also be more than 2% sub-critical with all control rods withdrawn.
All these safety features make the probability of a fuel-handling incident very low. Nevertheless, it is possible that a fuel assembly could be dropped during the handling operations. Therefore, this incident is analyzed both from the standpoint of radiation exposure and accidental criticality.
Special precautions are taken in all fuel handling operations to minimize the possibility of damage to fuel assemblies during transport to and from the spent fuel pool and during installation in the reactor. All handling operations of irradiated fuel are conducted under Rev. 16 14.2-2 12/01/2000
designed and water. The handling tools used in the fuel handling operations are conservatively the associated devices are of a fail-safe design.
any possibility In the fuel storage area, the fuel assemblies are spaced in a pattern that prevents of a criticality accident.
to a low maximum The motions of the cranes, which move the fuel assemblies, are limited assembly from striking speed. Caution is exercised during fuel handling to prevent the fuel building.
another fuel assembly or structures in the containment or fuel storage position during fuel The fuel handling equipment suspends the fuel assembly in the vertical movements, except when the fuel is moved through the transport tube.
by grid clips which The design of the fuel assembly is such that the fuel rods are restrained fuel rod at the end of provide a total restraining force of approximately 40 pounds on each is limited to the (grid life. The force transmitted to the fuel rods during normal handling If the fuel rods frictional) restraining force and is not sufficient to breach the fuel rod cladding.
have to slide against are not in contact with the fuel assembly bottom nozzles, the rods would energy and thus limit the 40-pound friction force. This would dissipate an appreciable amount of the impact force on the individual fuel rods.
would occur that would If one assembly is lowered on top of another, no damage to the fuel rods the fuel rods would breach the cladding. Considerable deformation would have to occur before the rods. Based on the contact the top nozzle adapter plate and apply any appreciable load to rods during handling.
above, it is unlikely that any damage would occur to the individual fuel should strike against If during handling and subsequent translational motion the fuel assembly along its length with a flat surface, the fuel assembly lateral loads would be distributed axially in any fuel rods.
reaction forces at the grid clips and essentially no damage would be expected and strikes a rigid Analyses have been made assuming that fuel assembly is dropped vertically of a dropped surface and where one fuel assembly is dropped vertically on another. The analysis and any possible fuel assembly striking a rigid surface considers the stresses in the fuel cladding show that the buckling load at buckling of the fuel rods between the grid supports. The results is below the critical the bottom section of the fuel rod, which would receive the highest loading, which a fuel assembly buckling load and the stresses are below the yield stress. For the case in is transmitted through the is assumed to be dropped on top of another assembly, the impact load any of the loads reach the top nozzle and the RCCA guide tubes of the struck assembly before by the top nozzle of the fuel rods. As a result, a significant amount of kinetic energy is absorbed the energy available struck assembly and bottom nozzle of the falling assembly, thereby limiting buckling load on the fuel for fuel rod deformation. The results of this analysis indicated that the below yield.
rods is below the critical buckling load and stresses in the cladding are load without excessive Prototype fuel assemblies have been subjected to 3000 pounds of axial to be experienced in service lateral or axial deformation. The maximum column load expected Rev. 16 14.2-3 12/01/2000
( Mo-rTA ýcoPK) is approximately 1000 pounds. This information is used in the fuel handling equipment design to establish the limits for inadvertent axial loads.
For the purporcs of evah-ating the environmental consequences of a fuel-handling incident, a conservative upper limit of damage is assumed by considering the cladding rupture of all rods in one complete fuel assembly. The remaining fuel assemblies are so protected by the storage rack structure that no lateral bending loads would be imposed.
Activity Release Characteristics For the assumed accident, there is a sudden release of the gaseous fission products held in the fuel gap between the pellets and cladding of one fuel assembly. The low temperature of the during handling operations precludes further significant release of gases from the pellets themselves after the cladding is breached. Molecular halogen release is also greatly minimized due to their low volatility at these temperatures. The strong tendency for iodine in vapor and particulate form to be scrubbed out of gas bubbles during their ascent to the water surface further reduces the quantity released from the water surface.
The fuel assembly gap activity was conservatively calculated assuming an initial heavy metal loading of 411 kg of Uranium at 5 weight percent U-235. The plant is assumed to be operated a
at 1721 MWh. Additionally, all of the rodlets in the assembly are assumed to be operated at peak radial power ratio of 1.70 and a range of bumups up to 60 GWD/MTU. Activity levels are corresponding to 48 GWD/MTU were identified as limiting. The iodine gap activities be 30%
assumed to be 12% of total fuel iodine activity. The Kr-85 gap activity is assumed to the of the total fuel Kr-85 activity. All other noble gas gap activities are assumed to be 10% of to be present total fuel noble gas activity. The noble gas and iodine fission products calculated in the fuel rod gap at 100 hours0.00116 days <br />0.0278 hours <br />1.653439e-4 weeks <br />3.805e-5 months <br /> following shutdown are given in Table D.3-2 of Appendix D.
In examining the expected behavior of fission product halogens released from the damaged fuel cladding gap to the spent fuel pool or reactor cavity water, it was predicted that a significant portion of the halogens would be absorbed into the solution from the bubbles and fixed gases. Early experiments indicate that gaseous iodine (admixed with fixed gases) is readily transferred to the aqueous boric acid solution and that a high stripping efficiency results in a pool decontamination factor (DF) on the order of I03, i.e., only 1/1000 of the incident halogen reaches the pool surface and is available for release to the environment.
Studies have been performed by Westinghouse to confirm this stripping efficiency with laboratory tests that better represent the conditions of the assumed accident (Reference 1). An experimental arrangement, consisting of a 9-inch diameter vertical column containing boric acid solution at a depth of up to 7.5 feet, was utilized in the study. At the bottom of the column, a gas injection vessel was provided to permit the introduction of a fixed gas (nitrogen) containing and iodine vapor at the design basis concentration. The gas mixture was injected in the solution the stripping efficiency for the molecular iodine was determined by inventor-f of the fraction, which escaped from the aqueous solution, compared to the quantity retained in the solution. The bubble size was controlled, as was the solution depth, so that the relationship between DF and these variables could be determined.
Rev. 16 14.2-4 12/01/2000
The results of these studies indicate that the boric acid solution is an efficient getter for the iodine and that a DF for the 40-foot deep spent fuel pool is in excess of 500 for gas bubble diameters up to I inch.
As an extension of the laboratory studies, a full-scale fuel assembly mockup was fabricated to permit the examination of bubble diameters that would result from the damage of all fuel tubes in an assembly. The mockup simulated in exact detail the cross section of an assembly and was fabricated in a manner to permit the simultaneous release of gap gases from all fuel tubes into a deep (25 feet) water pool.
Close examination of the gas bubbles rising from the mockup demonstrates that, for the most part, the bubble diameters are near 1 inch and below. Some few exceptions are noted, resulting from coalescence of a fraction of the smaller bubbles giving rise to diameters larger than I inch, but only after several feet of bubble travel through the pool water. These large-scale tests confirm the high stripping efficiencies for the halogens and that DFs of greater than 500, as indicated by the quantitative laboratory-scale tests, are reasonably expected values.
Method of Analysis The volatile gaseous activities associated with the fuel handling accident could be released either inside the Containment Building or in the Auxiliary Building. Both of these areas have ventilation systems in operation under administrative control during fuel handling operations. Radioactivity monitors provide continuous indication of radiation levels and signal evacuation of these areas on high alarm. The Containment Building high-level alarm automatically closes the purge supply and exhaust ducts. Administrative evaluation of the containment activity would determine when purging could be resumed. A high-level alarm on the Auxiliary Building Vent Monitor would automatically activate the Zone Special Ventilation (SV) System with subsequent absolute and charcoal filtration. This system is described in Section 9.
The fuel handling accident in containment with the personnel air lock doors open has been determined to be the limiting accident. In this analysis, all of the rods of one assembly (179 rodlets) are assumed to be damaged releasing the entire gap activity. Scrubbing of iodine by the borated water results in a decrease in the radioiodine activity available for release. A conservative value of 0.01 for scrubbing by the water is assumed. The activity released from the water surface mixes into the containment atmosphere. Following the containment ventilation system isolation, there is a limited driving force for a release to the environment even with the personnel air lock doors open. However, a conservative value for containment discharge of 6000 scfmn is assumed. Additionally, a conservative value for containment volume is assumed to be 1.00E6 f 3. Taking no credit for containment closure the release is assumed to continue for 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> at which point the release is stopped. Using these assumptions (i.e., volume and flow) a reduction of 0.5 is applied to the activity release.
Dispersion of this activity is computed using the Gaussian plume dispersion formula and taking credit for building wake dilution. A wind velocity of 1.5 meters per second is assumed to remain Rev. 16 14.2-5 12/01/2000
in one direction for the duration of the accident under Pasquill F conditions. The dispersion characteristics are discussed in Section 2.7 and curves, corrected for building wake effect by the volumetric source method, are presented on Figure 2.7-5. The site boundary, Exclusion Area Boiuxidary X!Q, dispersion factor is 1E-4 sec/m 3 . The Low Population Zone X/Q is 3.977E-5 33 .
sec/m The dose to the thyroid has been determined to be limiting. With the ICRP 30 dose conversion factors applied and the above mentioned conservative inputs the thyroid doses at the site boundary and low population zone are 24.4 and 4.4 rem respectively.
Thus, it is concluded that a dropped fuel assembly would present no criticality hazard and would result in radiation levels at the site boundary and low population zone that are well below the 10 CFR 100 guidelines. This analysis was reviewed and approved by the NRC in Reference 2.
14.2.2 ACCIDENTAL RELEASE-RECYCLE OF WASTE LIQUID Accidents in the Auxiliary Building that result in the release of radioactive liquids are those that involve the rupture or leaking of system pipe lines or storage tanks. The largest vessels are the three liquid holdup tanks, sized such that two tanks can hold more than one reactor coolant liquid volume, used to store the normal recycle or water fluids produced. The contents of one tank are passed through the liquid processing train while the other tanks are being filled.
All liquid waste components except the reactor coolant drain tank are located in the Auxiliary Building and any leakage from the tank or piping will be collected in the building sump to be pumped back into the liquid waste system. The building sump and basement volume are sufficient to hold the full volume of a liquid holding tank without overflowing to areas outside the building. This also is true for the tanks in the Auxiliary Building.
The holdup tanks are also equipped with safety pressure relief and designed to accept the established seismic forces at the site. Liquids in the Chemical and Volume Control System flowing into and out of these tanks are controlled by manual valve operation and governed by prescribed administrative procedures.
The volume control tank design philosophy is similar in many respects to that applied for the holdup tanks. Level alarms, pressure relief valves and automatic tank isolation and valve control assure that a safe condition is maintained during system operation. Excess letdown flow is directed to either the holdup tanks via the reactor coolant drain tank or the volume control tank. The waste holdup tank is a horizontal tank, which is continuously maintained at atmospheric pressure. Its vent is routed to the atmosphere through the Auxiliary Building exhaust ducts.
The potential hazard from these process or waste liquid releases is derived only from the volatilized components. The releases are described and their effects summarized in Section 14.2.3.
Rev. 16 14.2-6 12/01/2000
The evaluation of the credibility of the accidental release of radioactive fluids above maximum normal concentration (4E-5 pCi/cc) from the Waste Disposal System discharge is based upon the following review of waste discharge operating procedure, monitoring function description, monitor failure mode and the consequences of a monitor failure.
The process for discharging liquid wastes is as follows:
- a. A batch of waste is collected in one Steam Generator Blowdown Treatment tank (capacity 10,000 gal); other lesser volume tank(s) can be used and follow the same process;
- b. The tank, or tanks, is (are) isolated;
- c. The tank(s) contents are recirculated to mix the liquid;
- d. A sample is taken for radiochemical analysis;
- e. If analysis indicates that release can be made within permissible limits, the quantity of activity to be released is recorded on the basis of the liquid volume in the tank(s) and its activity concentration. Each tank or batch is assessed for its radiological impact prior to and/or after each release. If release can not be made within permissible limits, the waste is returned for additional cleanup. Then the process begins again.
- f. To release the liquid, the last stop valve in the discharge line (which is normally locked shut) must be unlocked and opened; a second valve, which trips shut automatically on high radiation signal from the effluent monitor, must be opened manually; a pump for the tank being released must be started manually and a flow rate established. The release flow rate is set at or below the maximum release flow rate as listed on the Radiological Liquid Waste Discharge Permit. Liquid is now being pumped to the discharge canal.
As the operating procedure indicates, the release of liquid waste is under administrative control. The effluent monitor is provided to maintain surveillance over the release.
The effluent monitor is provided with the following features:
- a. A check source is provided to permit the operator to check the operation of the monitor before discharge from the control room.
- b. If the monitor falls off scale at any time, an alarm condition is indicated in the control room and the waste disposal discharge valve is tripped closed automatically.
- c. If the AC power supply to the monitor fails, a high radiation alarm is annunciated. The trip valve also closes.
- d. The normally closed radiation trip valve fails closed.
Rev. 16 14.2-7 12/01/2000
It is concluded that the administrative controls imposed on the operator combined with the safety features built into the equipment provide a high degree of assurance against accidental release of waste liquids.
Should a complete failure of any tank located in the Auxiliary Building occur, its contents be remains in this building. Any subsequent discharge of radioactive liquid to the lake is conducted under the controls described above and does not result in activity concentrations in excess of the limits given in the Off-Site Dose Calculation Manual (ODCM).
Dilution of off-site liquid releases is discussed in Section 2.6.4.
14.2.3 ACCIDENTAL RELEASE-WASTE GAS Gas Decay Tank Rupture Causes and Assumptions The gas decay tanks contain the gases vented from the Reactor Coolant System the volume control tank, and the liquid holdup tanks. Sufficient volume is provided in each of four tanks to store the gases evolved during a reactor shutdown. The system is adequately sized to permit storage of these gases for forty-five days prior to discharge.
This period is selected as the maximum foreseeable holdup time because in this period the shorter-lived radioactive gaseous isotopes received by the waste system will have decayed to a level, which is less significant than that of long-lived Kr".
The waste gas accident is defined as an unexpected and uncontrolled release to the atmosphere of the radioactive xenon and krypton fission gases that are stored in the waste gas storage system. Failure of a gas decay tank or associated piping could result in a release of this gaseous activity. This analysis shows that even with the worst expected conditions, the off-site doses following release of this gaseous activity would be very low.
The leakage of fission products through cladding defects can result in a buildup of radioactive gases in the reactor coolant. Based on experience with other operational closed cycle, pressurized water reactors, the number of defective fuel elements and the gaseous activity in the coolant is expected to be low. The principal source of radioactive gases in the Waste Disposal System is the bleeding of effluents from the Reactor Coolant System.
Nonvolatile fission product concentrations are greatly reduced as the cooled Reactor Coolant System liquid is passed through the purification demineralizers. (The removal factor for iodine, for example, is at least 10). The decontamination factor for iodine between the liquid and vapor phases, for example, is expected to be on the order of 10,000. Based on the above analysis and operating experience at Yankee-Rowe and Saxton, activity stored in a gas decay tank consists of the noble gases released from the processed coolant with only negligible quantities of the less volatile isotopes.
Rev. 16 14.2-8 12/01/2000
The components of the waste gas system are not subjected to any high pressures or stresses, are Class I design (see Appendix B), and are designed to the standards given in Table 11.1-2. A rupture or failure is highly unlikely. However, a rupture of a gas decay tank was analyzed to define the hazard caused by a malfunction in the radioactive waste disposal system.
Activity Release Characteristics The activity in a gas decay tank is taken to be the maximum amount that could accumulate from operation with cladding defects in 1% of the fuel elements. This is at least ten times the expected number of defective fuel elements. The maximum activity is obtained by assuming the noble gases, xenon and krypton, are accumulated with no release over a full core cycle. This postulated amount of activity, one Reactor Coolant System equilibrium cycle inventory, is given in Appendix D. This value is particularly conservative because some of this activity would normally remain in the coolant, some would have been dispersed earlier through the vent, and the shorter-lived isotopes would have decayed substantially.
Samples taken from gas storage tanks in pressurized water reactor plants in operation show no appreciable amount of iodine.
To define the maximum doses, the release is assumed to result from gross failure of any process system storage tank, here represented by a gas decay tank giving an instantaneous release of its volatile and gaseous contents to the atmosphere.
Volume Control Tank Rupture Causes and Assumptions The volume control tank contains fission gases and low concentrations of halogens, which are normally a source of waste gas activity, vented to a gas decay tank. The iodine concentrations and volatility are quite low at the temperature, pH, and pressure of the fluid in the volume control tank. The same assumptions detailed in the preceding subsection apply to this tank. As the volume control tank and associated piping are not subjected to any high pressures or stresses, failure is very unlikely. However, a rupture of the volume control tank is analyzed to define the limit of the exposure that could result from such an occurrence.
Activity Release Characteristics Rupture of the volume control tank is assumed to release all the contained noble gases and 1%
of the halogen inventory of the tank plus that amount contained in the 40-gpm flow from the demineralizers, which would continue for up to five minutes before isolation would occur. The 1% halogen release is a very conservative estimate of the decontamination factor expected for these conditions.
Based on 1% fuel defects, the activities available for release are given in Table D.6-1.
Rev. 16 14.2-9 12/01/2000
Method of Analysis In calculating off-site plume centerline exposure, it is assumed that the activity is discharged to the atmosphere at ground level and is dispersed as a Gaussian plume do, 'mw;dtaking into account building wake dilution.
No credit is taken for the buoyant lift effect of the hydrogen present in the released gas. Dispersion coefficients based on the on-site meteorology program are used. A wind velocity of 1.5 meters per second is assumed to remain in one direction for the duration of the accident under Pasquill F conditions. The dispersion characteristics are discussed in Section 2.7.4 and curves corrected for building wake effects by the volumetric source method, are present on Figure 2.7-8.
The following parameters have been used in the dose assessment:
3
- A 0-2 hour C/Q value of 2.23E-4 sec/m 3
- Breathing rate equal to 3.47E-4 m /sec
- The effective decay energies for noble gases found in Table D.8-1.
- The ICRP 2 thyroid dose conversion factors for iodine inhalation.
- The volume control tank specific activities are found in Table D.6-1.
- The gas decay tank activities are found in Table D.7-1.
Summary of Calculated Doses The following tabulation summarizes the whole body and thyroid doses at the site boundary (exclusion distance), consistent with a receptor on the plume centerline.
Thyroid Dose Whole Body Dose Gas Decay Tank Rupture Negligible 0.327 rem Volume Control Tank Rupture 1.06E-3 rem 0.082 rem 10 CFR 100 Guidelines 300 rem 25 rem It is concluded that a rupture in the waste gas system or in the volume control tank would present no undue hazard to public health and safety.
14.2.4 STEAM GENERATOR TUBE RUPTURE Accident Description The accident examined is the complete severance of a single steam generator tube (for additional information on steam generator tubes, see Sections 14.3.10 and 14.3.11), with the reactor at power. This accident leads to an increase in contamination of the secondary system due to leakage of radioactive coolant from the Reactor Coolant System. In the event of a coincident loss of off-site power, or failure of the condenser dump system, discharge of activity to the atmosphere takes place via the steam generator safety and/or power operated relief valves.
Rev. 16 14.2-10 12/01/2000
EOTA SCOPE7
ýr The activity that is available for release from the system is limited by:
- 1. Activities in the steam generator secondary that are a consequence of operational leakage prior to the com.plete tube rupture.
- 2. The activity concentration in the reactor coolant, which is conservatively assumed to arise from 1% defective fuel clad.
- 3. Operator actions to isolate the mixed primary and secondary leakage to atmosphere.
The steam generator tube material is Inconel 600 and, as the material is highly ductile, it is considered that the assumption of a complete severance is conservative. The more probable mode of tube failure would be one or more minor leaks of undetermined origin. Activity in the Steam and Power Conversion System is subject to continuous surveillance and an accumulation of minor leaks that cause the activity to exceed the limits established in the Technical Specifications is not permitted during reactor operation.
The operator determines that a steam generator tube rupture has occurred, and identifies and isolates the faulty steam generator on a restricted time scale in order to minimize contamination of the secondary system and ensure termination of radioactive release to the atmosphere from the faulty unit. The recovery procedure is carried out on a time scale that ensures that break flow to the secondary system is terminated before water level in the faulty steam generator rises into the main steam line. Sufficient indications and controls are provided to enable the operator to carry out these functions satisfactorily. Consideration of the indications provided on the control board together with the magnitude of the break flow leads to the conclusion that the isolation procedure can be completed within thirty minutes of accident initiation.
Assuming normal operation of the various plant control systems, the following sequence of events is initiated by a tube rupture:
- 1. Pressurizer low-pressure and low-level alarms are actuated and, prior to plant trip, charging pump flow increases in an attempt to maintain pressurizer level. On the secondary side there is a steam flow/feedwater flow mismatch before trip, as feedwater flow to the faulty steam generator is reduced due to the additional break flow which is now being supplied to that generator.
- 2. Loss of reactor coolant inventory leads to falling pressure and level in the pressurizer until a reactor trip signal is generated by low pressurizer pressure. Resultant plant cooldown following reactor trip leads to a rapid change of pressurizer level, and the safety injection signal, initiated by low pressurizer pressure, follows soon after the reactor trip. The safety injection signal automatically terminates normal feedwater supply and initiates auxiliary feedwater addition; as discussed in Section 6.6; manual initiation of auxiliary feedwater may be required at low power levels.
- 3. The steam generator blowdown liquid monitor and the air-ejector radiation monitor will alarm, indicating a sharp increase in radioactivity in the secondary system.
Rev. 16 14.2-11 12/01/2000
MoF TA $ScoPti power is
- 4. The plant trip automatically shuts off steam supply to the turbine and if off-site open permitting steam dump to the condenser. In available the condenser steam dump valves off-site power, the condenser steam dump valves the event of a coincident loss of increases automatically close to protect the condenser. The steam generator pressure rapidly andfor resulting in steam discharge to the atmosphere through the steam generator safety power-operated relief valves.
safety
- 5. Following plant trip, the continued action of auxiliary feedwater supply and borated provide a heat sink, which injection flow (supplied from the Refueling Water Storage Tank) of loss absorbs some of the decay heat. Thus, steam bypass to the condenser, or in the case in which of off-site power, steam relief to atmosphere, is attenuated during the thirty minutes the recovery procedure leading to isolation is being carried out.
after trip at
- 6. Safety injection flow results in increasing pressurizer water level. The time upon the which the operator can clearly see returning level in the pressurizer is dependent amount of operating auxiliary equipment.
Results In determining the mass transfer from the Reactor Coolant System through the broken tube, several conservative assumptions are made as follows:
- a. Plant trip occurs automatically as a result of low pressurizer pressure.
are
- b. Following the initiation of the Safety Injection Signal, both Safety Injection Pumps actuated and continue to deliver flow for thirty minutes.
flow
- c. After plant trip the break flow equilibrates at the point where incoming safety injection flow is balanced by outgoing break flow as shown in Figure 14.2.4-1. The resultant break persists from plant trip until thirty minutes after the accident.
- d. The steam generators are controlled at the safety valve setting rather than the power-operated relief valve setting.
steam
- e. The operator identifies the accident type and terminates break flow to the faulty generator within thirty minutes of accident initiation.
total amount of The above assumptions lead to a conservative estimate of 120,000 lbs. for the accident.
reactor coolant transferred to the faulty steam generator as a result of a tube rupture Environmental Consequences of a Tube Rupture The occurrence of a steam generator tube rupture, followed by immediate lbss of off-site analyzed electrical power, has an extremely low probability. The effects have, however, been and the results show that the public health and safety are not endangered.
Rev. 16 14.2-12 12/01/2000
Toetic abov e The chronology of events subsequent to the tube failure is discussed above.
i- assessing the consequences of the assnuned a-rccii-z, 1 ýtntory of halogens and noble gases available for release from the faulty steam generator is based on the following:
- 1. The activity concentration in the reactor coolant is assumed to arise from continuous operation with 1% defective fuel clad (see Table D.4-1).
- 2. It is assumed that the plant has been operating with a 5 gpm primary to secondary leak rate for a period of time sufficient to establish radionuclide equilibrium in the secondary loop without credit for blowdown treatment.
- 3. The corresponding iodine activity in the secondary system is the sum of the equilibrium value due to the pre-existing tube leak and that amount transferred with the reactor coolant due to the complete tube rupture. The value of this activity is 209 Ci of I'M equivalent, which is assumed at a uniform concentration in the secondary coolant.
- 4. The total noble gas inventory available for release is the sum of the equilibrium value due to the pre-existing tube leak, and that amount transferred with reactor coolant due to the 3
complete tube rupture, and is equal to 21,700 Ci of Xe..equivalent.
- 5. All releases are made by atmospheric steam dump from the faulty steam generator with an assumed decontamination factor of 10 applied to the iodines.
In calculating off-site plume centerline exposure, it is assumed that the activity is discharged to the atmosphere at ground level and is dispersed as a Gaussian plume downwind taking into account building wake dilution.
Dispersion coefficients based on the on-site meteorology program are used. A wind velocity of 1.5 meters per second is assumed to remain in one direction for the duration of the accident under Pasquill F conditions. The dispersion characteristics are discussed in Section 2.7.4 and curves corrected for building wake effects by the volumetric source method, are presented in Figure 2.7-8.
The following parameters have been used in the dose assessment:
3
- A 0-2 hour x/Q value of 2.23E-4 sec/m 3
+ Breathing rate equal to 3.47E-4 M /sec.
- An I" equivalent dose conversion factor equal to 1.48E+6 rem/curie.
3
- AXe' 33 dose conversion factor equal to 5.27E-2 rem-m /curielsec.
Summary of Calculated Doses The following tabulation summarizes the two-hour whole body and thyroid doses at the exclusion distance, consistent with a receptor on the plume centerline.
Rev. 16 14.2-13 12/01/2000
(N1Dr -A .56OP67 Thyroid Dose Whole Body Dose Steam Generator Tube Rupture 2.4 rem 0.26 rem 10 CFR 100 Guidelines 300 rem 25 rem It is concluded that the complete failure of a steam generator tube preceded by a long-term leak history prior to its failure would present no undue hazard to public health and safety.
In 1992, Westinghouse completed a study (Reference 3) addressing the radiological tube consequences of steam generator tube bundle uncovery coincident with a steam generator that there was little effect on rupture, following a reactor trip. The results of the study indicated It radiological release due to tube uncovery, and that the 10 CFR 100 limits continued to be met.
the was concluded that steam generator tube uncovery did not have significant impact on accident analysis for steam generator tube rupture, and that no modifications to the analysis were NRC necessary. A Westinghouse letter (Reference 4) transmitted the Westinghouse and resolution stating that the issue was closed.
Recovery Procedure The immediately apparent symptoms of a tube rupture accident such as falling pressurizer pressure and level, and increased cha*__ing pump flow are also symptoms of small steam-line breaks and loss of coolant accidents. I is therefore important for the operator to determine that the accident is a rupture of a steam generator tube to carry out the correct recovery procedure. The steam generator tube rupture is uniquely identified by high condenser air eector radiation, high steam generator blowdown radiation, high steam line radiation, and feedwater flow to the ruptured steam generator before the reactor trip. When the operators observe these indications, they enter the steam generator tube rupture recovery procedure.
steam The operators perform the following steps, which lead to isolation of the ruptured generator and termination of the leak.
levels
- 1. Identify the ruptured steam generator by observing a higher level or higher radiation in one steam generator.
other
- 2. Isolate the ruptured steam generator by closing the main steam isolation valve and smaller valves.
level
- 3. Stop auxiliary feedwater flow to the ruptured steam generator when the narrow range returns to scale.
level
- 4. Control auxiliary feedwater flow in the intact steam generator so that the narrow range remains on scale.
- 5. If off-site power is available, use condenser steam dumps to cool the Reactor Coolant System If to enable RCS pressure to be reduced below the pressure of the ruptured steam generator.
Rev. 16 14.2-14 12/01/2000
off-site power is not available, atmospheric steam dumps or steam generator power-operated relief valves are used.
- 6. If off-site power is available, depressurize the RCS to below the pressure of the ruptured steam generator using pressurizer spray valves. If off-site power is not available, the reactor coolant pumps would not be running, making spray unavailable. In this case pressurizer power-operated relief valves or auxiliary spray are used for the depressurization.
- 7. Stop safety injection pumps.
- 8. Cool the Reactor Coolant System to cold shutdown. The ruptured steam generator is depressurized by either backfill into the RCS, blowdown into the Steam Generator Blowdown Treatment System, or steam dump into the condenser or atmosphere.
After the Residual Heat Removal System (RHR) is in operation, the condensate accumulated in the secondary system can be sampled and processed.
There is ample time to carry out the above recovery procedure such that isolation of the ruptured steam generator is established before water level rises into the main steam lines. The available time scale is improved by the termination of auxiliary feedwater flow to the faulty steam 1
generator. Normal operator vigilance therefore assures that excessive water level is not attained.
14.2.5 STEAM LINE BREAK Accident Description A steam-line break results in an uncontrolled steam release from a steam generator. The steam release results in an initial increase in steam flow, which decreases during the accident as the steam pressure falls. The energy removal from the Reactor Coolant System causes a reduction of coolant temperature and pressure. In the presence of a negative coolant temperature coefficient, the cooldown results in a reduction of core shutdown margin. If the most reactive RCCA is assumed stuck in its fully withdrawn position, there is an increased probability that the core becomes critical and returns to power. A return to power following a steam line break is a potential problem mainly because of the high hot channel factors that exist when the most reactive RCCA is assumed stuck in its fully withdrawn position. Assuming the most pessimistic combination of circumstances, which could lead to power generation following a steam-line break, the core is ultimately shut down by boric acid injection delivered by the Emergency Core Cooling System.
The analysis of a steam line break is performed to demonstrate that:
- 1. Assuming a stuck RCCA, with or without off-site power, and assuming a single failure in the engineered safety features, there is no consequential damage to the primary system and the core remains in place and intact.
Rev. 16 IA 7-1S 12/0112000
- 2. Energy release to the containment from the worst steam line break does not cause failure of the containment structure.
The following systems and components provide the necessary protection against steam line breaks:
- 1. Safety Injection System actuation from any of the following:
- Two-out-of-three low pressurizer pressure signals.
- Two-out-of-three low-pressure signals in either steam line.
1I + Two-out-of-three high containment pressure signals.
in
- 2. The overpower reactor trips (neutron flux and AT) and the reactor trip occurring conjunction with receipt of the Safety Injection Signal.
would cause
- 3. Redundant isolation of the main feedwater lines: Sustained high feedwater flow the additional cooldown. Therefore, in addition to the normal control action, which closes main feedwater valves, a safety injection signal rapidly closes all feedwater control valves, trips the main feedwater pumps, and closes the feedwater pump discharge valves.
designed to
- 4. Trip of the fast-acting main steam isolation valves (MSIVs). These valves are close in less than five seconds on:
from the
+ The coincidence of a Safety Injection Signal with either Hi-Hi steam flow respective steam line (one-out-of-two per line) or Hi steam flow from the respective steam line (one-out-of-two per line) in coincidence with Lo-Lo T.,, (two-out-of-four).
- Two-out-of-three Hi containment pressure signals. 'U check valve. These t" Each steam line has a fast-closing MSIV with a downstream non-return 0
four valves prevent blowdown of more than one steam generator for any break location even if one valve fails to close. For example, in the case of a break upstream of the MSIV in one valve in that line or the MSIV in the other line line, closure of either the non-return check will prevent blowdown of the other steam generator. This arrangement precludes blowdown damage of more than one steam generator inside the containment 1 thus prevents structural to the containment I-,, is * -fs;nira
- nozzle.'
- ef
" " ow restricto i
- 5. c-hCiame .
,oa;ti-ee1ii w "tr serve to limit the rate of release of steam.
Rev. 16 14.2-16 12101/2000
USAR Insert 14.2.5-1 A limited amount of fuel failure is not prohibited in order to ensure that the core remains in place and intact. However, the steam line break analysis described herein demonstrates compliance with the more restrictive acceptance criterion of no DNB for any break assuming the most reactive rod stuck in its fully withdrawn position.
Analysis - Core Response The analysis of the steam line break has been performed to determine:
- 1. The core heat flux and Reactor Coolant System temperature and pressure resulting from the cooldown following the steam line break. A full plant digital computer simulation has been used.
- 2. The thermal and hydraulic behavior of the core following a steam line break. A detailed thermal and hydraulic digital computer calculation has been used to determine if DNB occurs for the core conditions computed in (1) above.
The following conditions are assumed to exist at the time of a steam-line break.
re: end-of-life shutdown margin at no-load, equilibrium xenon conditions, with the most reactive rod stuck in its fully withdrawn position.
- 2. The negative moderator coefficient corresponding to the end-of-life rodded core with the most active rod in the fully withdrawn position. The variation of the coefficient with temperature and pressure has been included. The k vs. temperature relationship corresponding to the negative moderator temperature coefficient used is shown in Figure 14.2.5-1. In computing the power generation following a steam-line break, the local reactivity feedback from the high neutron flux in the region of the core near the stuck control rod has been included in the overall reactivity balance. The local reactivity feedback is composed of Doppler reactivity from the high fuel temperatures near the stuck control rod and moderator feedback from the high water enthalpy near the stuck rod. The effect of power generation in the core on total core reactivity is shown in Figure 14.2.5-2.
- 3. Minimum capability for injection of high concentration boric acid solution corresponding to the most restrictive single failure in the Safety Injection System. This corresponds to the flow delivered by one high-head Safety Injection Pump (see Figure 14.2.5-3). Boric acid concentration delivered to the reactor coolant loops corresponds to the minimum concentration of the Re elin Wate Tank wcch is 2400 Zm. n ft, LtCCV~m o-f-$Sve Cto-s ere rh el IVI . rlthhtirn7 ron conceaf-rf ion a so
- 4. To maximize the reactor cooldown steam generator tube plugging is at 00/,!
- 5. Hot channel factors.corresponding to the worst stuck rod at end-of-core life. The hot channel factors depend upon the core power, temperature, pressure, and flow.
lý5+ 1-mor lIine)breo%. Sýcelnor'ýoS
- 6. &e iehave been considered in determining the core response transient.
a) Complete severance of a pipe., with the plant initially at no-load conditions ani * .......... ,,
Rev. 16 lii 91 A*.* Jk I 12/01/2000
b) Complete severance *~ ~ of a pipe'
~ " ~ ~ *l -* ~ .. at~th . .- ulto-v... h ... - 4agnff n ril r= nng n-with the plant at no-load conditions an both...*.at... _,,
A 1-i-eRIO-p, t Oteim of ofn p oft et Va-abe.r "Imitimn;iv15the 1Lr'rln-+O- OWer- qfHtp- " reafor+P1,
( Initial hot shutdown con itions were consider for a o above cases since this represents the most pessimistic initial condition fo Should the reactor be critical at the time of a steam-line break, it would be tripped by the normal overpower protection system when power level reaches a trip point. Following a trip at power, the reactor coolant system contains more stored energy than at no-load, the average coolant temperature is higher than at no-load, and there is appreciable energy stored in the fuel. Thus, the additional stored energy is removed via the cooldown caused by the steam-line break before the no-load conditions of reactor coolant system temperature and shutdown margin assumed in the analyses are reached. After the additional stored energy has been removed, the cooldown and reactivity insertions proceed in the same manner as in the analysis that assumes no-load condition at time zero. However, since the initial steam generator water inventory is greatest at no-load, the magnitude and duration of the Reactor Coolant System cooldown are less for steam breaks occurring at power.
- 7. Steam break flow is given by WB,,- AB,, (t)
- G(hP) where AB,, (t) is the specified break area as a function of time and G(hP) is the mass flow rate per unit area. G is evaluated from Moody flow tables (Reference 5). For a break in the steam line perfect moisture separation in the steam generator is assumed. 6tow dowrl {-rn, 8 .on-rf, .... . n_-t4J +o_ ccw.SvtiVe(Y Olw R esults The results presented are a conservative indication of the events that would occur assuming a Smain steamn-line break, since it is postulated that all of the conditions described above occur 1 2.5 i Figures jhro ugh how the results following a main steam-line break (complete W severance o e pipe a t initial no-load conditions and with 04 outside power available.
The analysis assumes the boric acid of the Safety Injection System is mixed with, and diluted by, the water flowing in the RCS prior to entering the reactor core. The concentration after mixing depends upon the relative flow rates in the Reactor Coolant System and in the Safety Injection System. The variation of mass flow rate in the RCS due to water density changes is included in the calculation, as is the variation of flow rate in the Safety Injection System due to changes in the Reactor Coolant System pressure. The Safety Injection System flow calculation includes6TýZthe line the 5 5i- losses in 1_2 1 as well as the pump head curve.
stem Rev. 16 12/0112000 14.2-18
REPLACE WITN LISAR -TNSetýrJ4 -3
1111, 191:1 Cad 1:d"a to the ff-en higbef maxim-im -- e beat flux;- a-ineadd-Analysis - Containment Response CKEc P a steam-line There are four major factors that influence the release of mass and energy following to secondary heat transfer, break. These are the initial steam generator fluid inventory, primary The following is protective system operation, and the state of the secondary fluid blowdown.
of these factors.
a list of those plant variables that determine the influence of each
- Plant Power Level
- Main Feedwater System Design
- Auxiliary Feedwater System Design
- Break Type, Area, Location
- Availability of Offsite Power
- Steam Generator Design
- Safety System Failures
- SG Reverse Heat Transfer and Reactor Coolant System Metal Heat Capacity selected based on All of these variables are considered in the analyses and are conservatively Kewaunee plant design.
of five parameters in the Steam-line break analysis cases are described based on a specific set following manner:
- 1. Power Level: 0, 30, 70, and 102% for the rated power level.
- 2. Break Size and Location:
restrictor. Upstream a) Location is either upstream or downstream of the steam line flow case is a large (4.29 If) break; downstream cases are 1.4 ft or less.
Rev. 16 14.2-19 12/01/2000
USAR Insert 14.2.5-2 In addition to negative reactivity feedback from rising fuel temperatures and increased enthalpy in the region of the stuck rod, boron injection from both the passive accumulators and one high head safety injection pump act to limit the peak core heat flux.
USAR Insert 14.2.5-3 The peak core heat flux calculated for this case is significantly less than that calculated for the case with offsite power available. The loss of offsite power causes the reactor coolant pumps to trip, which reduces the primary-to-secondary heat transfer capability, and thus lessens the severity of the reactor coolant system cooldown.
USAR Insert 14.2.5-4 The case with a loss of offsite power is bounded by the case with offsite power available. The analysis demonstrates that the DNB design basis is satisfied for each main steam line break case, i.e., the minimum DNBR is greater than the limit value.
b) Break size:
"* Break downstream of the flow restrictor with an effective area equal to that of the flow restrictor (ArR = 1.4 fe).
"* Break downstream of the flow restrictor with an area less than AFR. (Break areas ranging from 1.4 f11 to 0.1 ft2 are considered)
"* Split break with maximum area for which MSIV isolation results from a containment signal and entrainment does not occur.
"* Break upstream from the flow restrictor with an area equal to the SG outlet nozzle (4.2911) for the broken SG and equal to AR for the other SG.
- 3. Single Failures: There are three single failures which are:
"* One Feedwater (FW) Regulating Valve fails to isolate. This is denoted as R.
"* One Main Steam Isolation Valve (IMSIV) fails to isolate. This is denoted as M.
"* One Containment Safeguards Train (one containment safeguard train is: one internal containment spray train and two containment fan cooler units) fails to activate. This is denoted as N.
- 4. Off-Site Power: Cases with and without the availability of off-site power are considered.
- 5. Entrainment: The quality of steam exiting the break is explicitly modeled and is dependent on break size and power level.
Based on the above parameters, steam-line break analysis cases are designated as follows:
+ Break Size (Units of W)
- Off-Site Power Y -Yes N -No
- Entrainment Y -Yes
+ Power Level 0-0%
3 - 300/%
7 - 70%
2 - 102%
Rev. 16 14.2-20 12/01/2000
For identification purposes, the cases are represented by a six number/letter identification tag. For example:
14NYY3 represents the steam line break case with:
14 = 1.4 ft2 break N = single active failure is one containment safeguards train Y = off-site power is available Y entrainment is modeled 3 initial power level is 30%
Further descriptions of the methods for steam-line break analysis follow:
- 1. The main feedwater flow is calculated using the following assumptions:
a) The feedwater pumps are running at full speed at the start of the transient and are tripped off on the safety injection signal. A conservative flow coastdown is modeled.
b) The condensate pumps are running at full speed throughout the transient.
c) The regulating valve for the unfaulted Loop remains at its initial position until the time at which it strokes to its fully-closed position at a rate of 5%/dsec following an isolation signal. At that time, the valve is closed instantaneously.
d) The behavior of the regulating valve for the faulted loop is assumed to begin opening at t = 0.0 sec at an 80/o/sec rate until the time the isolation signal occurs. It is held at that position until the time at which it strokes to its fully-closed position at a rate of 5*/o/sec following the isolation signal. At that time, the valve is closed instantaneously. For cases with a regulating valve failure, isolation is produced by closure of the FW isolation valve. The assumption used for the isolation valve is that it begins to close, at the time of the isolation signal, from full-open at a rate of 1.1 80/o/sec. The initial opening of the regulating valve and the instantaneous FW isolation valve closure at the end of the stroke time are the same as for the case without a regulating valve closure failure.
- 2. The auxiliary feedwater (AFW) flow split between the two SGs is modeled the AFW is initiated, prior to the time for the activation signal, at full capacity and using a conservatively high enthalpy. All three AFW pumps are assumed to be operating.
- 3. The core physics parameters are based on a bounding set corresponding to end-of-cycle conditions and minimum technical specification shutdown requirements. The scram worth includes having the most reactive rod stuck out.
- 4. The dynamic reactor coolant pump model is used, which includes the gravity head and pump heat effects.
- 5. Conservative setpoints and time delays are used throughout.
Rev. 16 14.2-21 12/01/2000
t4
- 6. No credit is taken for charging flow. 0
- 7. No credit is taken for SG tube plugging.
- 8. The following considerations are made in modeling the steam lines.
lines a) The pressure balancing line is modeled to allow communication between the steam in an unrestricted manner.
b) Main steam isolation for the unfaulted loop is assumed to occur instantaneously at the time required for the non-return check valve to close in the faulted loop, which is 5 seconds after the break occurs.
c) MSIV failure is modeled as a failure of the non-return check valve in the faulted loop. Steam flow from the unfaulted loop continues until the MSIV in the unfaulted main steam line closes. A closure assumption of 5 seconds is used for the MSIV. The time from the event initiation until MSIV closure signal receipt, plus signal instrumentation delays as applicable to the accident sequence analyzed, is added to the 5 second MSIV closure time assumption. At the time of the MSIV closure, the entire faulted and unfaulted loop steam lines from the MSIV to the turbine and the pressure balancing line are added to the total fluid mass and energy input to containment.
- 9. Entrainment analysis methods are used to obtain the time dependent quality of the faulted steam-line break flow which is power level and break size dependent. The quality of the unfaulted steam line break flow is conservatively assumed to be 1.0.
time
- 10. The turbine is tripped at t = 0.0 seconds for 0% power cases, and prior to or at the actual of reactor trip for at power cases. These are conservative assumptions that maximize the available steam for blowdown.
- 11. A constant containment back pressure of 14.7 psia is conservatively assumed in all cases.
- 12. A conservatively high RCS flow rate is assumed.
- 13. Steam generator fluid inventory is maximized. Initial steam generator water level is 50.0%
nominal narrow range level for all cases.
Results Figures 14.2.5-19 and 14.2.5-20 present containment pressure and temperature responses for the limiting containment response steam line break analysis cases. The table below shows, for these limiting cases, the peak calculated containment pressure, temperature and the corresponding acceptance criteria. All cases analyzed result in a maximum containment pressure that is less than the containment design pressure limit of 60.7 psia. In addition, the limiting containment temperature profile has been evaluated and it does not create an equipment qualification Rev. 16 14.2-22 12/01/2000
concern. Although the limiting temperature profile exceeds the containment design temperature of 268*F, containment structural limits are not exceeded. The short duration of the temperature spike and the method of heat transfer to the containment shell precludes shell temperature from exceeding the design temperature.
MSLB Containment Peak Containment Peak Pressure (psia) Temperature (EF) tA0 14MYY0 60.5/60.7 267.7/330.0 01NYYO 39.3/60.7 298.9/330.0 Conclusions The analyses have shown that the main steam line break acceptance criteria are satisfied.
Although DNB and possible clad perforation are not precluded in thethe sysisha demonstrated that DNB does not occtid-re tThe peak pressure for the limiting containment response cases can not exceed the containment design pressure. The limiting temperature profile also does not create an environmental qualification concern for equipment in containment. e Based on the preceding analyses, the radiological significance of a steam line break would depend on the activity levels in the secondary loop of the failed steam generator. The consequence of a long-term 5-gpm leak rate has been considered in Section 14.2.4. However, even if it is conservatively assumed that all of the reactor coolant activity associated with 1%
defective fuel cladding is suddenly expelled into the steam generator the resultant thyroid dose at the site boundary would be 4.7 rem and the resultant whole body dose would be 0.51 rein. A decontamination factor of 10 has been applied to the iodine inventory. The consequences of these postulated accidents are well below the guidelines of 10 CFR 100.
(RCCA 14.2.6 RUPTURE OF A CONTROL ROD DRIVE MECHANISM HOUSING EJECTION)
Description of Accident This accident is a result of an extremely unlikely mechanical failure of a control rod mechanism pressure housing such that the Reactor Coolant System pressure would then eject the RCCA and drive shaft. The consequences of this mechanical failure, in addition to being a minor loss-of coolant accident, may also be a rapid reactivity insertion together with an adverse core power distribution, possibly leading to localized fuel rod damage for severe cases. The resultant core thermal power excursion is limited by the Doppler reactivity effect of the increased fuel temperature and terminated by reactor trip actuated by high neutron flux signals.
Certain features in Westinghouse pressurized water reactors are designed to preclude the to possibility of a rod ejection accident, and to limit the consequences if the accident were Rev. 16 14 2-23 12/01/2000
Main Steam Line Break Variation of Reactivity with Core Temperature at 1000 psia for EOL Rodded Core with One Stuck Rod (Zero Power) 06 ~...-.... -
1 .052 1 .044 o...
. -.6.;--. --. . . ........ . . . .----.. . . . . .
.02- ---------...- ----.--.-.-.--.---..............4 1 .036
.n ,
1
.028 4-.
1 .0 2 02 --- -- --
U
'4 0)
'4 ci, I
.___].uu==
~~~~~ ...................... ~ i ~ -------- -" ----...............
1996-........-.... - - .. -
0.988 n.qn 20025.30.30.00.5050 ............... -............ ... .....------------ .......
0.980 ---------
200 250 300 350 400 450 500 50 Core Average Temperature [Deg F]
Rev. 1\6 Figure 14.2.5-1 e016.000 12/01/2000
MAIN STEAM LINE BREAK AT CONSTANT VARIATION OF REACTIVITY WITH POWER CORE AVERAGE TEMPERATURE 0.1
-0.0025
-0.0050 4'
_0 -0.0075 F:
r--
w
-0.0100
-0.0125
-0.0150 0.4 0.6 0.8 0.0 0.2 FRACTION OF FULL POWER FIGURE 14.2.5-2 NOV . I N9 NOV 0 1 1997
MAIN STEAM LINE BREAK SAFETY INJECTION FLOW RATE VS REACTOR COOLANT PRESSURE 2000 1750 I-u'i LI) 1500 1250 1000 0
ccw 750 cr-u.
500 250 0
0 25 50 75 SI FLOW RATE (LBM/SEC)
FIGURE 14.2.5-3 NOV 0 1 m-]q
Restrictor (Case 43MYYO)
Main Steam Line Break - Upstream of Flow Tave vs. Time 542.5 525.0 507.5
- 0) 490.0 (D
472.5 co~
(D E 455.0 I--
437.5 420.0 402.5 385.0 72 84 96 1 0 12 24 36 48 60 Time [s]
Figure 14.2.5-4 Rev. 16 12/01/2000
Line Break - Upstream of Flow Restrictor (Case 43MYYO)
Main Steam Pressurizer Pressure vs. Time 2100.0 1900.0 1700.0 co' I.
IL.
(D 1500.0
()
()
0L 1300.0 1100.0 900.0 700.0 500.0 1 0 12 24 36 48 60 72 84 96 Time [s]
Rev. 16 Figure 14.2.5-5 12/1/12000
Upstream of Flow Restrictor (Case 43MYYO)
Main Steam Line Break -
Heat Flux vs. Time 0.67 0.60 0.53
=
E 0.45 0
0 co C., 0.38 I=*...
4-0 0.30 (D
Mr 0.22 0.15 0.07 0.00 72 84 96 1 0 12 24 36 48 60 Time [s]
Figure 14.2.5-6 Rev. 16 12/01/2000
Restrictor (Case 43MYYO)
Main Steam Line Break - Upstream of Flow "SGB Break Flow vs. Time 10000.0 7000.0 6000.0 7a I E
-D --
5 000.0 -------- I........
4 000 .0 . .................................. .........
of Flow Restrictor (Case 43MYYO)
Main Steam Line Break - Upstream Reactivity vs. Time 0.015 0.010 0.005
-D 4-.
0.000 4-.
0 Cu CD
-0.005
-0.010
-0.015
-0.020
-0.025 72 84 96 0 12 24 36 48 60 Time [s]
Rev. 1N.
12/01/2000 Figure 14.2.5-8
MAIN STEAM LINE BREAK DOWNSTREAM FLOW RESTRICTOR TAVE vs. TIME 550 535 520 505 490 LL S475 U.)
0
> 460
<H 445 430 415 400 385 0 20 40 60 80 100 120 140 160 Time (Sec)
FIGURE 14.2.5-9 Rev. 15 05/01/99
MAIN STEAM LINE BREAK DOWNSTREAM FLOW RESTRICTOR PRESSURIZER PRESSURE vs. TIME 2200 2100 2000 1900 1800 1700 1600 1500 1400 1300 1200 1100 1000 900 800 700 600 0 20 40 60 80 100 120 140 160 Time (Sec)
FIGURE 14.2.5-10 "0Rev. 15 05/01/99
MAIN STEAM LINE BREAK DOWNSTREAM FLOW RESTRICTOR HEAT FLUX vs. TIME 0.9 0.8 0.7 0.6 0
u 0.5 O) 0.4 0.3 0.2 0.1 0.0 0 20 40 60 80 100 120 140 160 Time (Sec)
FIGURE 14.2.5-11 I Rev. 15 05/01/99
MAIN STEAM LINE BREAK DOWNSTREAM FLOW RESTRICTOR SG2 BREAK FLOW vs. TIME 3000 2750 2500 2250 2000 E 1750 0
C,) 1500*
LL Coj 1250 1000 750 500 250 0
60 80 100 1 0 20 40 Time (Sec)
FIGURE 14.2.5-12 Rev. 15 05/01/99
MAIN STEAM LINE BREAK DOWNSTREAM FLOW RESTRICTOR REACTIVITY vs. TIME 0.006N 0.004 0.002 0.000
-0.002 004
-0.006
-0.008
-0.010
-0.012
-0.014
-0.016
-0.018
-0.020
-0.022 20 40 60 80 100 120 140 160 0
Time (Sec)
I FIGURE 14.2.5-13 Rev. 15 05/01/99
MAIN STEAM LINE BREAK SPURIOUS OPENING OF SAFETY VALVE PRESSURIZER PRESSURE vs. TIME 2200 2150 2100 2050
<*)
03
.) 2000 (I) 1._
L.
N 1950 a.)
1900 1850 1800 1750 0 50 100 150 200 250 Time (Sec)
FIGURE 14.2.5-15 Rev. 15 05/01/99
MAIN STEAM LINE BREAK SPURIOUS OPENING OF SAFETY VALVE HEAT FLUX vs. TIME 0.8 0.7 0.6 o
z 0
LL 0.5 co u-- 0.4 a,
0.3 0.2 0.1
-0.0 150 200 250 300 0 50 100 Time (Sec)
" Rev. 15 FIGURE 14.2.5-16 05/01/99
MAIN STEAM LINE BREAK SPURIOUS OPENING OF SAFETY VALVE SG2 BREAK FLOW vs. TIME 3000\
2750 2500 2250*
2000*
in 0 1750
-o 0
1500 (D
1250 C\.
(93 1000 750 500 250 0
0 50 100 150 200 250 Time (Sec)
"Rev. 15 FIGURE 14.2.5-17 05/01/99
MAIN STEAM LINE BREAK VALVE SPURIOUS OPENING OF SAFETY REACTIVITY vs. TIME 0.006 0.004 0.002 0.000
-0.002
-0.004
-0.006
-0.008
-0.010
-0.012
-0.014
-0.016
-0.018
-0.020
-(Y.022....... 160 /18 60 FIGE0 80 1. 120 140 20 40 Time (Sec)
Rev. 15 FIGURE 14.2.5-18 05/01/99
MAIN STEAM LINE BREAK CONTAINMENT PRESSURE RESPONSE 65 60 55 50 45 40 35 30 25 20 15 0 50 100 150 200 250 Time (Sec)
FIGURE 14.2.5-19 1W O1 M17
MAIN STEAM LINE BREAK CONTAINMENT TEMPERATURE RESPONSE 320 300 280 260 S240 (D
S220 E 200 180.
160 140 120 300 400 500 600 700 800 0 100 200 Time (Sec)
FIGURE 14.2.5-20 oVy 0 1 M7
Main Steam Line Break Variation of Keff with Core Temperature 1.050 1.045 - ...... ........... - - - - - - - - - --
1.035 1.03 0 - - - - - - - - - - -
1.02 5 - - - - - - - - - - - - - - - -
1 .02 0 - - - - - - - - - - - - - - -
-..o 1 .0 15 -- - - - - - - - - - -- - - - - -- - - - -- - --
1.010 1.005 0.985 0.980 350 400 450 500 550 200 250 300 Core Average Temperature (*F)
Figure 14.2.5-1
Main Steam Line Break Temperature Variation of Reactivity with Power at Constant Core Average 0
-0.001 - - -- "_ "-
-- -- - S
-0.002 -
-0.008 , , ,
0 -5 - - - --
- S
-0.006-------------------------------------------------------------.---
-w0.004 . . . .". . . . . . . . . . . .
0 5lD:
S-0.009
-0.006 . ."4.. . . .. ~~~~~~~~0
. . .0... 0..00
-0.007 nS .3 . S 0 0.05 0.1 U.15 ..
Fraction of Full Power Figure 14.2.5-2
Main Steam Line Break Safety Injection Flow Rate vs. Reactor Coolant Pressure 2250 2000 1750 U) 1500 0.
0 I-.
U_
0- 1250 E
o 0"
40 1200 U/)
O 0
0 0
C.,
0 750 500 250 0
25 50 75 100 0
Sl Flow Rate (Ibmlsec)
Figure 14.2.5-3
Main Steam Line Break With Offsite Power Available - Tave vs. Time Loop 1 Loop 2 550 I I
- I
-\-- . . . . .---- . . . . . . .-
500 I \
-E 4w0 f - -- - - -- --- I -----.-----.-----.-
I -----------.......
I I I I 500 ------------------ ----------
+-----+------------
i I I II 350 - ------------------- I I
I --
I III
\I iI I Si S '
250 0 60 120 180 240 300 Time [seconds]
Figure 14.2.5-4
Main Steam Line Break With Offsite Power Available - Pressurizer Pressure vs. lime 2500
- "" I I I.
- 0. . . . . I14, . . . . . . .i
,I I n
°r -I 1I0.. . . . . . . . . I 600 12I8 4 0 Time[scods F ig r 14..5-
Main Steam Line Break With Offsite Power Available - Heat Flux vs. Time
.3
.25 E .2 0
0 C:
4
.15 X
I-a)
.5E-01 0
Figure 14.2.5-6
Main Steam Line Break With Offsite Power Available - SG Outlet Nozzle Flow vs. Time Loop 1
. . .Loop 2 5000 S4000 -- . . . . . . . . . . . . . . . . . . . . .
------- I U)
E r* 3000 ------------ ---------------.- ... ------..
o
+-----+ ----- +------
V) lco -----------------------
- 2000 - ----------- - ----------
I I I I N II I N
- i 0
S4000 +
60 180 24 o
Time [seconds]
Figure 14.2.5-7
Main Steam Line Break With Offsite Power Available - Reactivity vs. Time
.5E-02 "0
>.- -. 5E-02 a)
-A0
-.15E-O1
-. 15E-01 Figure 14.2.5-8
Main Steam Line Break With a Loss of Offsite Power - Tave vs. Time Loop 1 Loop 2 55n 550
- 3% I I 3 \ 3\
0
-U 0 450 I \ I 3,
-I\I 3 I
\/ ,I t \ ,I L.
3'÷ 3.
÷- ..
- 400-
- , !. I I I I 350 300 I I ;
0 300 60 120 180 240 3 Time [seconds]
Figure 14.2.5-9
Main Steam Line Break With a Loss of Offsite Power - Pressurizer Pressure vs. Time 2500 2000 -- - - - -.. -. -
n I
I II C3L I I ~ I II II I I I I I I I
' I I
. ' ' I
i '_i '
- 1500 Figure 14.2.5-10
Main Steam Line Break With a Loss of Offsite Power - Heat Flux vs. Time
.1E+O0
.8E-01 E
0
" .6E-01 0
C 0
X .4E-01
- 3
-r"
.2E-01 0
Figure 14.2.5-11
Main Steam Line Break With a Loss of Offsite Power - SG Outlet Nozzle Flow vs. Time Loop 1 Loop 2 3000 I I I I
- I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I 2500 I I S4-----+-----+-----+----
I I I I I I 0 I I I I I I I U I I E
U)
- I I I I I I I
- I I I I
E
- I I
I I
I I I I I 2000
- I
-+-----+-----+-----+---- I I L--j I 0 I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I I LA I I I+----- -+----- I ---- 4----
V) 1500 I I I I U I I I I 0 7i I i
I i
I I N II I II II I
- I I I
I I I N(D I I I 0 I I I I z 1000 I I I I
-p 0
C, V) 500 -
0 F 0 60 120 180 240 300 Time [seconds]
Figure 14.2.5-12
C, I I I I I i I*I II III EII I i I
iI i PiN =
i I
'I I' ',
-+-- - - -
f
+ ....... " - ,---- 6
.i --- -CF!*
C -I -- --i -- -- -- -- -- -- -- -- -- -- -- --
,a,D coi I
\Co',,i I
Gb,1i Cý G.
b,,,*, Q.
I I lI III I I I II II
of 268*F, containment structural limits are not exceeded. The short duration of the tempr spike and the method of heat transfer to the containment shell precludes shell temperatur om exceeding the design temperature.
MSLB Containment Peak Containment Peak Pressure (psia) Temperature (*F) 14M4YY0 60.5/60.7 267.7/330.0 01NYY0 39.3/60.7 298.9/330.
Conclusions The analyses have shown that the main steam line bre acceptance criteria are satisfied.
SAlthough DNB and possible clad perforation not precluded in the acceptance criteria, the safety analysis has demonstrated that DNB es not occur, provided that core F. under steam line break conditions is
- 5.00.
the containment The peak pressure for the limitin ontainment response cases can not exceed design pressure. The limiti temperature profile also does not create an environmental qualification concern for ipment in containment.
line break would l Based on the prec ng analyses, the radiological significance of a steam depend on the tivity levels in the secondary loop of the failed steam generator. The
~o consequenc a long-term 5-gpm leak rate has been considered in Section 14.2.4. However, even if it conservatively assumed that all of the reactor coolant activity associated with 1%
j~defec e fuel cladding is suddenly expelled into the steam generator the resultant thyroid dose at e site boundary would be 4.7 rem and the resultant whole body dose would be 0.51 rem. A 0 econtamnination factor of 10 has been applied to the iodine inventory. The consequences of 14.2.6 RUPTURE OF A CONTROL ROD DRIVE MECHANISM HOUSING (RCCA EJECTION)
Description of Accident This accident is a result of an extremely unlikely mechanical failure of a control rod mechanism pressure housing such that the Reactor Coolant System pressure would then eject the RCCA and drive shaft. The consequences of this mechanical failure, in addition to being a minor loss-of coolant accident, may also be a rapid reactivity insertion together with an adverse core power distribution, possibly leading to localized fuel rod damage for severe cases. The resultant core thermal power excursion is limited by the Doppler reactivity effect of the increased fuel temperature and terminated by reactor trip actuated by high neutron flux signals.
Certain features in Westinghouse pressurized water reactors are designed to preclude the possibility of a rod ejection accident, and to limit the consequences if the accident were to Rev. 16 142-23 12/01/2000
together with occur. These include a sound conservative mechanical design of the rod housings, a nuclear design which lessens a thorough quality control (testing) program during assembly, and of assemblies inserted at high the potential ejection worth of RCCAs and minimizes the number power levels.
of the mechanical design and The mechanical design is discussed in Section 3. An evaluation mechanism housing sufficient quality control procedures indicates that a failure of a control rod not be considered credible for to allow a control rod to be rapidly ejected from the core should the following reasons:
assembled and shop-tested at
- 1. Each control rod drive mechanism housing is completely 4100-psi.
as they are installed to the head
- 2. The mechanism housings are individually hydro-tested hydro-test of the completed adapters in the reactor vessel head, and checked during the Reactor Coolant System.
system transients at power, or
- 3. Stress levels in the mechanism are not affected by anticipated induced by the design by the thermal movement of the coolant loops. Movements stress range specified by earthquake can be accepted within the allowable primary working the ASME Code, Section 1I1, for Class A components.
each a single length of forged
- 4. The latch mechanism housing and rod travel housing are at all temperatures Type-304 stainless steel. This material exhibits excellent notch toughness that are encountered. )
the large energy absorption A significant margin of strength in the elastic range, together with failure of the housing will capability in the plastic range, gives additional assurance that gross head adapter, and between the not occur. The joints between the latch mechanism housing and reinforced by canopy-type latch mechanism housing and rod travel housing, are threaded joints of these (and other) welds.
rod welds. Administrative regulations require periodic inspections housing is postulated, the operation of a chemical C Even if a rupture of the control rod mechanism limited. In general, the shim plant is such that the severity of an ejected RCCA is inherently load follow. Reactivity reactor is operated with RCCAs inserted only far enough to permit compensated by boron changes caused by core depletion and xenon transients are are selected during nuclear changes. Further, the location and grouping of control rod banks should an RCCA be ejected C design to lessen the severity of an ejected assembly. Therefore, no reactivity excursion the reactor vessel during norm al operation, there would probably be or a minor reactivity excursion if since most of the RCCAs are fully withdrawn from the core, an inserted assembly is ejected from its normal position.
normal insertions. For this However, it may occasionally be desirable to operate with larger than Operation with the RCCAs reason, a rod insertion limit is defined as a function of power level.
power distribution. The above this limit guarantees adequate shutdown capability and acceptable the control room. An alarm will occur if position of all assemblies is continuously indicated in Rev. 16 A 1) '1)A 12/01/2000 I - -
from its bank. There a bank of RCCAs approaches its insertion limit or if one assembly deviates Operating are low and low-low level insertion monitors with visual and audio signals.
The RCCA position instructions require normal boration when receiving either alarm.
monitoring and alarm systems are described in detail in Section 7.
in WCAP-7306 The reactor protection in the event of a rod ejection accident has been described (Reference 6).
rod mechanism housing Disregarding the remote possibility of the occurrence of a control due to either longitudinal failure, investigations have shown that failure of a control rod housing such that the severity or circumferential cracking does not cause damage to adjacent housings of the initial accident increases.
some fuel damage could be Due to the extremely low probability of a rod ejection accident, possibility of the off-site considered an acceptable consequence, provided there is no severe fuel damage to a consequences exceeding the guidelines of 10 CFR 100. Although this type of accident on a portion of the core may in fact be acceptable, it is difficult to treat established, sound theoretical basis. For this reason, criteria for the threshold of fuel failure are and it is demonstrated that this limit is not exceeded.
the threshold of significant Comprehensive studies of the threshold of fuel failure and of carried out as part of the conversion of the fuel thermal energy to mechanical energy have been SPERT project by the Idaho Nuclear Corporation (Reference 7). Extensive tests of U0 2 failure representative of those in PWR-type cores have demonstrated Zirconium-clad fuel rods a slightly different design thresholds in the range of 240 to 257 cal/g. However, other rods of from the TREAT have exhibited failures as low as 225 cal/g. These results differ significantly cal/g. Limited results have (Reference 8) results, which indicated a failure threshold of 280 burnup. The clad failure indicated that this threshold decreases by about 10% with fuel fracture for irradiated mechanism appears to be melting for zero burnup rods and brittle energy. This ratio rods. Also important is the conversion ratio of thermal to mechanical and 200 cal/g for irradiated becomes marginally detectable above 300 cal/g for unirradiated rods even for irradiated rods, does rods; catastrophic failure, (large fuel dispersal, large pressure rise) not occur below 300 cal/g.
Pl
.are , ,,nsw,,- ,ta litl, A-,
Is-,,
I-n view, of the abovYe exp,,r-imenWa resu-lts,, ,e'-titef
- ese of fuel dispersal in the coolant, gross lattice distortion, or severe shock way I'_ criteria are:
"*3 a. Average fuel pellet enthalpy at the hot spot below 2 -,
- b. Average clad temperature at the below the temperature at which clad embrittlement may be expected.
C c. Pe or coolant pressure much less than that which would cause damage to the Reactor Rev. 16 A * '! )* 12/01/2000 I a"l'../...-/-, o'
This is USAR Insert A Page 1 of 1 The ultimate acceptance criteria for this event is that any consequential damage to either the core or the RCS must not prevent long-term core cooling, and that any offsite dose consequences must be within the guidelines of 10 CFR 100. To demonstrate compliance with these requirements, it is sufficient to show that the RCS pressure boundary remains intact, and that no fuel dispersal in the the coolant, gross lattice distortions, or severe shock waves will occur in the core. Therefore, following acceptance criteria are applied to the RCCA Ejection accident:
- a. Maximum average fuel pellet enthalpy at the hot spot must remain below 200 cal/g (360 Btu/lbm).
- b. Peak RCS pressure must remain below that which would cause the stresses in the RCS to exceed the Faulted Condition stress limits.
- c. Maximum fuel melting must be limited to the innermost 10% of the fuel pellet at the hot spot, independent of the above pellet enthalpy limit.
mrtlmn a become a polmfrti cieti
-The tempcratur Mtwihca Strken to be T e tt pressurc imit" it7 tJ, Mt, ni.-i...
which is much le ss, 1an tht required to sr"i the re.to ve.. el or piping spec~ified yield strength.
Method of Analysis kinetics The analysis of the control rod ejection accident requires modeling of the neutron thermal hydraulics of the coolant coupled with the fuel and clad heat up condition and the response and channel. The analysis is performed by first calculating the core average neutronic for the hot spot then using the resulting core average power response as a forcing function thermal evaluation.
response since it allows A 1-D axial kinetics model is used for the analysis of the core average feedback, power for a more realistic representation of the spatial effects of axial moderator is included by correlating distribution, and RCCA movement. The moderator reactivity effect reactivity with moderator density, thereby including the effects of coolant temperature, pressure, fuel temperature. The and voiding. The Doppler reactivity effect is correlated as a function of effects, occurs in largest temperature rise during the transient, and hence the largest reactivity a 3-D space time kinetics channels where the power is higher than average. As a result, when to the average channel calculation is not performed, weighting factors are applied as multipliers effects.
Doppler reactivity feedback to account for spatial reactivity feedback by the appropriate The average core energy addition, calculated as described above, is multiplied a detailed fuel and clad transient hot channel factors, and the hot spot analysis is performed using transient temperature heat-transfer computer code. This computer code calculates the flux at the surface of the distribution in a cross-section of a metal-clad UO fuel rod, and the heat conditions. The zirconium rod, using as input the nuclear power vs time and the local coolant represented as functions water reaction is explicitly represented, and all material properties are the fuel rod.
of temperature. A parabolic radial power distribution is used within
{}_ic Sa'vce-Sai*, Tbýr-..
the fil*n eat The computer code uses e Dittus-Boelter or Jens-Lottes correlation to determine boiling correlation to determine the film boiling coefficient transfer before DNB, and' -transition-the code is forced into after DNB (Reference 9). The DNB heat flux is not calculated, instead coefficient may be DNB by specifying a conservative DNB heat flux. The gap heat-transfer full-power steady-state calculated by the code; however, it is adjusted in order to force the codes.
temperature distribution to agree with the fuel heat-transfer design catastrop l failures, rsult icf clulations S.,ince3 1 thae
- u~e the int maiu system pressurefucl-cn4JhAe&pica suge, i calcu.ated. lcmý,o,,than n the* bai, czrrcponig-Ato thoac ofcon,;,on, heat trans--fer frem thefuel. The pre"sse i ,urge modell includ, prompt heat .*iH.hO enefraion i the, system, hea.t- -trnfe in the : n uý genratr. and the4Mac-tion of coolant, fhuid transport relief .nd safet --ales. o crdit is tak4en1 for pressure reduRion c-aused by the a-m*-ed faiu*re of the contro rod pressure housing.
T6~ Co-r Ac-PCodcs u-sA *d.to'o At, perV6,1,& -The. aGol eS& arc- ictewf-ie4..
Ir Thble. i4-.o.-z. dte~AiS of: Ek imdYhodlOR*
,N WQ.§V-'SC° (Re.erenc. 10,.'). Rev. 16 o(c' ,,,,.idec 14.2-26 12/01/2000
this core. The more important parameters are discussed below. The following table presents parameters used in this analysis:
Initial Core Conditions BOC HZP BOGC FP EOC HZP EOC HFP 0.91 0.30 0.92 0.42 Ejected Rod Worth, % AK 0.70 0.70 0.50 0.50 Delayed Neutron Fraction, %
1.30 1.60 1.30 1.60 Feedback Reactivity Weighting 8.20 5.03 11.7 5.1 Fq AfterRod Ejection Number of Pumps Operational 1 2 1 The values for ejected rod worths and hot channel factors are calculated g a synthesis of one effects dimensional and two dimensional calculations. No credit is taken for e flux flattening of reactivity feedback. The calculation is performed for the m allowed bank insertion of 10% is at a given power level, as determined by the Rod Insertion Limii. An uncertainty conservatively added to the ejected rod worth.
axial and radial The total transient hot channel factor, Fq is then obtained y multiplying the factors, even though the axial peaks are not coincident er the conditions calculation.
of SModerator reactivity assumptions are conservative c pared to actual design values. Positive power case. No moderator temperature coefficient is assumed for e beginning of cycle zero
- weighting factor is applied to the moderator r c The Doppler reactivity is feedback. -iity when compared determined as a function of power level and fu temperature and is conservative to actual design values. A Doppler wei g factor is applied to account for the missing conservative when dimensions in the I-D axial kinetics sim ation. This weighting factor is
"* compared to 3-D space time kinetics co putation.
Calculations of the effective delay eutron fraction (3.efl) have yielded values of no more than 0.70% at BOC and no < 0.50% a 0G. The accident is sensitive to P if the ejected rod worth "isequal to or greater than P3, the zero power transients. No uncertainty is applied directly very to the value of 13 since the ca ulation of the rod worth and hot channel factor is considered conservative.
rod motion occurs C The trip reactivity useor the analysis is shown in Figure 14.0.1. The start of 0.5 seconds after th* gh neutron flux trip point is reached. This delay is assumed to consist of 0.2 seconds for instrument channel to produce a signal, 0.15 seconds for the trip breaker to a conservative open and 0.15 econds for the coil to release the rods. The choice of such after the trip setpoint "insertionrate d delay for rod motion means that there is over 1 second a particularly is reached fore significant shutdown reactivity is inserted into the core. This is importan conservatism for hot full-power accidents.
Res s shown in esults of the beginning and end of life full and zero power rod ejection analyses are Rev. 16 1 1-27 12/01/2000
11:1;111:1 110*t11 z 9 a g e apc l*'i d t e W+ = Uh --
- P 97 0 0 :) o__*. -- t the coolant under the most sev e exceeded. Therefore, fuel is not expected to be dispersed into conditions of this transient. /D*..
D .In all it is assumed Chat fission products are released from the gaps of all rods emntering corresponds to 2% f the core cases considered, < 15% of the rods entered DNB. (This is therefore much etter than the volume.) The position with regard to fission product release double-ended coolant pipe break.
ressure of 2250 psia, A detailed calculation of the pressure surge shows that assuming an initia 50 psia and, therefore, the peak pressure reached in the transient is well within the criteria of no damage to the Reactor Coolant System will occur.
Since the fuel rods are free to In the region of the hot spot there is a large temperature gradi n separate rods cannot produce move in the vertical direction, differential expansion betw a force gradients across .dividual rods may produce pq distortion. However, the temperature ot. Physics calculations indicate that tending to bow the mid-point of the rods toward the hot practice, no significant bowing is
- the net result of this is a negative reactivity inserti . In than sufficient to withstand the forces W anticipated since the structural rigidity of the core i ore 0 produced.
from that region. However, the fuel heat
~ Boiling in the hot spot region produces a net ow away cross flow is released to the water relatively slowl , and it is considered inconceivable that boiling,
-would be sufficient to produce signifi ant lattice forces. Even if massive and rapid etically postulated, the large void fraction in the hot spot sufficient to distort the lattice, is h reduction the total core moderator to fuel ratio, and a large region would produce a reduction_* It is in this ratio at the hot spot. e net effect would therefore be a negative feedback.
lattice concluded that no conceivabl echanism exists for a net positive feedback resulting from was conservatively pc deformation. In fact, a s 1 negative feedback would result. The effect "ignoredin the analyses.
portant calculated safety param eters to their follow ing tabl how s a com parison of the im Criterion):
respective accep ce criteria (Calculate Value/Acceptance "MaxClad Max Fuel Max Energy RCS Pressure. MS Pressure Temt. (OF) Centerline Deposition (psia)fpsia)
Control R Eection Tem .-0F)
/2700 i /4700 /200 i /2750 863/1210 BOC 1iPower 3925/4700 174/200 i /2750 1027/1210 B Zero Power 2555/2700 in2700 /*4700 01200 in/2750 864/1210 t Full Powwerr Conclusions that the fuel and clad limits were not Even on the most pessimistic basis, the analyses indicated of sudden fuel dispersal into the _)
exceeded. It was concluded that there was no danger Rev. 16 1A "*_92 12/01/2000 11"1" * /.,v
This is USAR Insert B Page 1 of 3 The overpressurization of the RCS and number of rods in DNB, as a result of a postulated ejected detailed in rod, have both been analyzed on a generic basis for Westinghouse PWRs as Reference 10.
dispersal into If the safety limits for fuel damage are not exceeded, there is little likelihood of fuel The the coolant or a sudden pressure increase from thermal-to-kinetic energy conversion.
heat pressure surge for this analysis can, therefore, be calculated on the basis of conventional transfer from the fuel and prompt heat generation in the coolant.
BOL, hot full A detailed calculation of the pressure surge for an ejection worth of one dollar at in the power, indicates that the peak pressure does not exceed that which would cause stresses analysis RCS to exceed their Faulted Condition stress limits. Since the severity of the Kewaunee result in an does not exceed this worst case analysis, the RCCA Ejection accident will not excessive pressure rise or further damage to the RCS.
Reference 10 also documents a detailed three-dimensional THINC-I11 calculation, which accident as demonstrates an upper limit to the number of rods-in-DNB for the RCCA Ejection the 10%. Since the severity of the Kewaunee analysis does not exceed this worst case analysis, which is maximum number of rods in DNB following a RCCA Ejection will be less than 10%,
size well within the 15% used in the radiological dose evaluation. The most limiting break at any resulting from a RCCA Ejection will not be sufficient to uncover the core or cause DNB 15%, the later time. Since the maximum number of fuel rods experiencing DNB is limited to fission product release will not exceed that associated with the guidelines of 10 CFR 100.
the In calculating the nuclear power and hot spot fuel rod transients following RCCA Ejection, following conservative assumptions are made:
- a. The RTDP is not used for the RCCA Ejection analysis. Instead, the STDP (maximum uncertainties in initial conditions) is employed. The analysis assumes uncertainties of 2.0% in nominal core power, 6.0'F in nominal vessel Tv,, and 50 psi in nominal pressurizer pressure.
- b. A minimum value for the delayed neutron fraction for BOC and EOC conditions is assumed which increases the rate at which the nuclear power increases following RCCA Ejection.
This is USAR Insert B Page 2 of 3
- c. A minimum value of the Doppler power defect is assumed which conservatively RCCA results in the maximum amount of energy deposited in the fuel following A
Ejection. A minimum value of the moderator feedback is also assumed.
positive moderator temperature coefficient is assumed for the beginning of cycle, zero power case.
hot channel
- d. Maximum values of ejected RCCA worth and post-ejection total calculated factors are assumed for all cases considered. These parameters are insertion at a using standard nuclear design codes for the maximum allowed bank is taken given power level as determined by the rod insertion limits. No credit for the flux flattening effects of reactivity feedback.
flux trip point
- e. The start of rod motion occurs 0.65 seconds after the high neutron is reached.
fuel and a maximum The analysis is performed to bound operation with Westinghouse 422V+
loop-to-loop steam generator tube plugging imbalance of 10%.
Results rod ejection analyses.
Results are presented for the beginning and end of life, full and zero power BOC, Full Power ejected rod worth and Control bank D is assumed to be inserted to its insertion limit. The worst 4.2, respectively. The hot channel factor are conservatively calculated to be 380 pcm and temperature reaches maximum fuel stored energy is 167.4 cal/g. The peak hot spot fuel center melting is restricted to melting, which is conservatively assumed to occur at 4900'F. However, less than 10% of the pellet.
BOC, Zero Power B and C are at their For this condition, control bank D is assumed to be fully inserted and banks conservatively calculated insertion limits. The worst ejected rod worth and hot channel factor are 144.9 cal/g. The peak to be 770 pcm and 11.0, respectively. The maximum fuel stored energy is
This is USAR Insert B Page 3 of 3 is conservatively hot spot fuel center temperature of 3901'F remains below melting, which assumed to occur at 4900'F.
EOC. Full Power rod worth and Control bank D is assumed to be inserted to its insertion limit. The worst ejected respectively. The hot channel factor are conservatively calculated to be 370 pcm and 5.69, temperature reaches maximum fuel stored energy is 170.3 cal/g. The peak hot spot fuel center is restricted to melting, which is conservatively assumed to occur at 4800"F. However, melting less than 10% of the pellet.
EOC, Zero Power banks B and C are at their For this condition, control bank D is assumed to be fully inserted and conservatively calculated insertion limits. The worst ejected rod worth and hot channel factor are is 161.6 cal/g. The peak to be 930 pcm and 13.0, respectively. The maximum fuel stored energy which is conservatively hot spot fuel center temperature of 4149°F remains below melting, assumed to occur at 4800'F.
nuclear power and hot A summary of the cases presented above is given in Table 14.2.6-1. The through 14.2.6-8.
spot and cladding temperature transients are presented in Figures 14.2.6-1 the nuclear power For all cases, reactor trip occurs very early in the transient, after which trip.
excursion is terminated. The reactor will remain subcritical following reactor
coolant. Obe pressure bourn system. The concluded that there was no danger o consequential damage to the primary coolant amount of fission products re a result of clad rupture during DNB is Stn. "- te ca-, double
".........n... coola.t.pipebre; (the...ignB.i-dnt....
rth-ev" th.faQ4-within the guidelines of 10 CFR 100.
FUEL POOL 14.2.7 TURBINE MISSILE DAMAGE TO SPENT DELETED AAI i flLoUc.-
ie s4 re-sia)Sf6 Rev. 16 12/01/2000 14.2-29
REFERENCES - SECTION 14.2 Report - Radiological Consequences of
- 1. D Malinowski, MJ Bell, ER Duhn, J Locante, "'Topical as WCAP-7828, in December a Fuel Handling Accident" WCAP 7518-L, June 1980 (Re-issued 1971)
Power Plant, Supplemental Safety
- 2. NRC Safety Evaluation Report, "Kewaunee Nuclear to ML Marchi (WPSC),
Evaluation Associated with Amendment No. 132", WO Long (NRC)
Letter No. K-98-124 dated September 3, 1998 Bundle Uncovery on Radioiodine Release'"
- 3. WCAP-1 3132, '"he Effect of Steam Generator Tube January 1992 (proprietary) representatives (WPS), Transmittal of
- 4. Letter WOG 98-066 from KJ Voytell (WOG) to primary Issue dated March 31, NRC Closure Letter on the Steam Generator Tube Rupture Uncovery 1993 Two-Phase Mixture" transactions of
- 5. FJ Moody, "Maximum Flow Rate of a Single Component, 1965, page 136.
the American Society of Mechanical Engineers, February in Westinghouse Pressurized Water
-6. TWT Burnett, "Reactor Protection System Diversity Reactor" WCAP-7306, April 1969 1968, September 1969" Idaho Nuclear
- 7. TG Taxelius, ed. "Annual Report - Spert Project, October Corporation TID-4500, June 1970 U0 2 - Core Simulated
- 8. RC Liimatainen and FJ Testa, "Studies in TREAT of Zircaloy-2-Clad, Engineering Division Semi-Annual Fuel Elements" Argonne National Laboratory Chemical Report, ANL-7225, January-June 1966 WCP,7837, i2nua-y
- 9. R. F--.man and JO Ce-mak, 'wlPog DNB Hea Tr-n-fer Dr*ing B lowdown" Cvit4 L.SJ-TC)V"Forc-c& C0AJCL6-- I4et 2r AP~.~sVO¶)~R..Sa1~r ku%%AAswAF
-Trc&-sA-r a+ VAJ I'_Arecsue_ ALeý&k ko&Aeo .
.3b"cA 4.. RCA 1 \cý..
to. wmA -qsP- ~cw'~ar I-A '
R.SB m,Ae~as) *R{s~'*_ .)V r. ; Jo(iLcA(j \D.'5. Rev. 16 14.2-30 12/01/2000
TABLE 14.2.6-1 PARAMETERS USED IN THE ANALYSIS OF THE ROD CLUSTER CONTROL ASSEMBLY EJECTION ACCIDENT Parameters BOL-HZP BOL-HFP EOL-HZP EOL-HFP Initial core power level, percent 0 102 0 102 Ejected rod worth, % Ak 0.77 0.38 0.93 0.37 Delayed neutron fraction, % 0.49 0.49 0.43 0.43 Doppler reactivity defect 1000 1000 900 900 (absolute value), pcm Doppler feedback reactivity 2.008 1.139 2.144 1.316 weighting Trip reactivity, percent Ak 1.0 3.5 1.0 3.5 FQ before rod ejection N/A 2.5 N/A 2.5 FQ after rod ejection 11.0 4.2 13.0 5.69 Number of operational pumps 1 2 1 2 Maximum fuel pellet average 3426 3867 3753 3923 temperature, 'F Maximum fuel pellet center 3901 4953 4149 4871 temperature, °F Maximum cladding average 2567 2092 2987 2120 temperature, 'F Maximum fuel stored energy, 144.9 167.4 161.6 170.3 cal/g Maximum fuel melt, percent 0.0 2.17 0.0 5.89
RCCA Ejection - BOC Full Power Reactor Power vs. Time 5.000 4.500 4.000 3.500 3.000 C:
0
.4 ------------
0 2.500 4
2.000 0
a_
1.500 1.000 0.500 1.2 1.6 2 2.4 2.8 3.2 3.6 4 0 0.4 0.8 Time [s]
Rev. 16 Figure 14.2.6-1 12/01/2000 t\-tpka"-
RCCA Ejection - BOG Full Power Rea]ctor Power vs. Time 4.
E o
I I I I
I
- II I
I. . .. . .. . .. . . .. . .. . .. . .
I I I I I I S: I I I I 0 4 6 8I1 T imeIscods Figure 14.2.6-1
RCCA Ejection - BOC Full Power Integral Reactor Power vs. Time 5.0~
4.5 4.0 3.5 r) 0n 0 3.0 13_
0~
1=...
(D 2.5
- 3 0
CL (D
a'- 2.0 1.5 1.0 0.5 2 2.4 2.8 3.2 3.6 4 0 0.4 0.8 1.2 1.6 Time Is]
Rev. 16 Figure 14.2.6-2 12/0112000
RCCA Ejection - BOC Full Power Time Fuel and Clad Temperatures vs.
5000.0 eadnAerline Temperature .
4500.0ue C g/
450............. .
Ld.Ate 4 500.0 .
/----
T ..... ..........
S 000 0
- 3p Er .-..
1500 .0 --------------..
a x-n--
...:.i ; --- . -
S--: . . ..--i . ....... --.
-- 3 0 0 0 .0 1L ..
1500.0 f:I3 c 2 2.4 2.8 3.2 3.6 4 0 0.4 0.8 1.2 1.6 S
[s]
Rev. 16 Figure 14.2.6-3 repice__12/01/2000
RCCA Ejection - BOC Full Power Fuel and Clad Temperatures vs. Time Fuel Melting - 49000 F Fuel Center Temperature I I.
II' "4 .
...- - - - -- ---- - - -- - - - -- S3000 Temperature .
- t " - -.
k,.I I 200 - -- - --
100--------------------------------------- I N 00
'-- - - - -FuClad I ~
Average Temperature N
0I 0 2 4 6 00 Time [seconds]
Figure 14.2.6-2
RCCA EJECTION BOC ZERO POWER REACTOR POWER vs. TIME 100" 90 80 70 60 50 40 FIGURE 14.2.6-4 Rev. 15 05/01/99 V-cp /C-e
RCCA Ejection - BOC Zero Power Reactor Power vs. Time 1
10 2D 0
o0 10 C
0 p
C)
O 10 10
-2 10 Figure 14.2.6-3
RCCA EJECTION BOC ZERO POWER REACTOR INTEGRATED POWER vs. TIM 4.5 4.0 3.5 cin 3.0 0
0(
2.5 a_
0_
2.0 (U3 a) 1.5 0
EU a,3 CE) 1.0 0.5 0.0 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 Time (Sec) d*er. FIGURE 14.2.6-5 , Rev, 15 05/01/99
RCCA EJECTION BOC ZERO POWER 5000 4500 4000 3500 LL a) o3000 a)2500 E
a)
F_
2000 1500
-Fuel Centerline 1000 ...
- Fuel Average
-Clad Average 2.5 3.0 3.5 4.0 0.0 0.5 1.0 1.5 2.0 Time (Sec)
Rev. 15 T-e-p 14 ce,, FIGURE 14.2.6-6 05/01/99
RCCA Ejection - BOC Zero Power Fuel and Clad Temperatures vs. Time 5000-i FT Fuel Melting - 49000 F I I
- I 40 0 - -- . -
. -- - - - - - ----------- -- - - - Fuel C enter "I - II! II I Temperature h/ '
- 1 FuelT_Average 3000 Fue- Centr-Temp~erature QI)
- 2000 - - - 4 ------ --------
- I Clad Average:
Temperature J
II 0
4 8 10 Time [seconds]
Figure 14.2.6-4
RCCA Ejection - EOC Full Power Reactor Power vs. Time 5.000 4.500 4.000 3.500 3.000 ------------
C C
0
- 4. ---------------
2.500 C.) -- - - -- - -
CO 2.000 0
a-1.500 1.000 0.500 0.1 1.6 2 2.4 2.8 3.2 3.6 4 0 0.4 0.8 1.2 Time [s]
Rev. 16 Figure 14.2.6-7 12101/2000
RCCA Ejection - EOC Full Power Reactor Power vs. Time 0 - -- - - - 3- - - - - - - - - - -- - - - - - - - - - - - -
C5 0
- II C: . . .I *.. . .
0 I I 6 8I1
- Im [scods
-rIi [s 0 .. .. 4+81 Figure 14.2.6-5
OoiIooZT~l 8-9"Z'1d Ufng!A 91 Aa!
[s] ew!z/
9T 3'C 8"F, tV'z 3 91" Z'L 8"0 VtO 00.0 17 S.. ----------------------
..................... . ..... 0 L CD CC)
CD 0
7------------D CD ci)
-----------............. ...... ..... S
. . . . . . . . -S ..................... 0" OwI.
..........-- :O~ 03-U1303V0 jjC ------- -------------
S- - - - ------
- -------- I 0------
T 0...
RCCA Ejection - EOC Full Power Fuel and Clad Temperatures vs. Time 5000.0
- .Fuel Centerline Temperature
- F 4500.0 Clad Average Temper ure ----
4000.0 -
3 5 0 0 .0 -..--------.---..-----
~~ . . . .. . .. ---
--v_n_n__qn . .. . .. . .. . .. . .. . -------.....
CL E
S2000.0 --PCTLimit- 200-FF--
1500.0
~ i......i...... ..... ....
looo~ ~ ~ ~ i * ;* ----------
~~ ~~~....o..
Maximum Thot =4652 P~
1000.0
..i...........
iT it i...........
iMaximum i----..............
i...........
------ *----- Maxr-ymumTa~e'a=3622F ----
Tclad = 2091 F
S 0.0 0 0.4 0.8 1.2 1.6 2 2.4 2.8 3.2 3.6 4 Time [s]
- ace.- Figure 14.2.6-9 Rev. 16 12/01/2000
RCCA Ejection - EOC Full Power Fuel and Clad Temperatures vs. Time 5000 Fuel Melting - 48000 F Fuel Center Temperature
'M t
, -'. Fuel Average STemperature 3000 - ------ __ _,---
I I S
- -------- ------ '- T -- - --
Clad Average"1 STemperature
+ -
1000 - ------------
I II :
I 0
4 6 8 10 Time [seconds]
Figure 14.2.6-6
RCCA EJECTION EOC ZERO POWER REACTOR POWER vs. TIME 100 90 co c
0 z
C-)
Cu (I
0 t1.
0 ca~
a) cr 4.0 Rev5. 15 fa-lp 14C C- FIGURE 14.2.6-10 05/01/99
RCCA Ejection - EOC Zero Power Reactor Power vs. Time 3
10 0 00 0 3 I o10--------- - -- S10 -
I I 10I o I I Figure 14.2.6-7
RCCA EJECTION EOCZERO POWER REACTOR INTEGRATED POWER vs. TIME 4.5 4.0 3.5 (I
0 3.0 0~
ILL 2.5 0) 70 2.0 0~
1.5 cr) 1.0 0.5 2.5 3.0 3.5 4.0 0.0 0.5 1.0 1.5 2.0 Time (Sec)
Rev.
"05/o0/9 159 FIGURE 14.2.6-11
RCCA EJECTION EOC ZERO POWER 50001 4500 4000 3500
.. 3000 a) 2500 E ,?_
2000 1500 looc "Rev- 15 c (!f-p 1(tcc--, FIGURE 14.2.6-12 05101199
RCCA Ejection - EOC Zero Power Fuel and Clod Temperatures vs. Time 5000 Fuel Melting - 48000 F I I I I Fuel Center 4000- STemperature Temperature LI (I) 3000 -4 - - - - - - - - - - - - - - - -
U)
-U)
Q) I L.
CL
- 0) 2000 -J I--
Clad Average Temperature 1000 -4 0 I i i 4 6 8 10 Time [seconds]
Figure 14.2.6-8