ML022410083

Technical Specifications, Increase Emergency Diesel Generator Allowed Outage Time

ML022410083
Person / Time
Site:	Millstone
Issue date:	08/26/2002
From:	NRC/NRR/DLPM/LPD1
To:
References
TAC MB3125
Download: ML022410083 (13)

Text

REACTOR COOLANT SYSTEM 3/4.4.3 PRESSURIZER STARTUP AND POWER OPERATION LIMITING CONDITION FOR OPERATION 3.4.3.1. The pressurizer shall be OPERABLE with:

a. at least two groups of pressurizer heaters, each having a capacity of I at least 175 kW; and

b. water level maintained at programmed level +/-6%of full scale (Figure 3.4-5).

APPLICABILITY: MODES 1 and 2.

ACTION:

a. With only one group of pressurizer heaters OPERABLE, restore at least I two groups to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

b. With pressurizer water level outside the parameters described in Figure 3.4-5, within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> restore programmed level to within +/-6%

of full scale, or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

c. With the pressurizer otherwise inoperable, be in at least HOT STANDBY with the Reactor Trip System breakers open within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

SURVEILLANCE REQUIREMENTS 4.4.3.1.1 The pressurizer water level shall be verified to be within programmed level +/- 6% of full scale at least once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

4.4.3.1.2 The capacity of each of the above required groups of pressurizer heaters shall be verified by energizing the heaters and measuring circuit current at least once each refueling interval.

MILLSTONE 0812

- UNIT 3 3/4 4-11 Amendment No. 79, 7f, 210

REACTOR COOLANT SYSTEM HOT STANDBY LIMITING CONDITION FOR OPERATION 3.4.3.2 The pressurizer shall be OPERABLE with:

a. at least two groups of pressurizer heaters, each having a capacity I of at least 175 kW; and

b. water level less than or equal to 89% of full scale.

APPLICABILITY: MODE 3 ACTION:

a. With only one group of pressurizer heaters OPERABLE, restore at least I two groups to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> of being declared inoperable, or be in HOT SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

b. With the pressurizer otherwise inoperable, be in HOT SHUTDOWN within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

SURVEILLANCE REQUIREMENTS 4.4.3.2.1 The pressurizer water level shall be determined to be less than or equal to 89% of full scale at least once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

4.4.3.2.2 The capacity of each of the above required groups of pressurizer heaters shall be verified by energizing the heaters and measuring circuit I current at least once each refueling interval.

MILLSTONE - UNIT 3 3/4 4-11b Amendment No. 09, 210 0813

REACTOR COOLANT SYSTEM RELIEF VALVES SURVEILLANCE REQUIREMENTS 4.4.4.1 In addition to the requirements of Specification 4.0.5, each PORV shall be demonstrated OPERABLE by:

a. Performance of a CHANNEL CALIBRATION at least once per 24 months; and

b. Operating the valve through one complete cycle of full travel during MODES 3 or 4 at least once per 24 months; and

c. Performance of an ANALOG CHANNEL OPERATIONAL TEST on the PORV high pressurizer pressure actuation channels, but excluding valve operation, at least once each quarter; and

d. Verify the PORV high pressure automatic opening function is enabled at least once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

4.4.4.2 Each block valve shall be demonstrated OPERABLE at least once per 92 days by operating the valve through one complete cycle of full travel unless the block valve is closed with power removed in order to meet the requirements of ACTION b.

or c. in Specification 3.4.4.

I MILLSTONE - UNIT 3 3/4 4-13 Amendment No. 7l, 7*7, I,

0814  ?, 210

3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1 A.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

a. Two physically independent circuits between the offsite transmission network and the onsite Class 1E Distribution System, and

b. Two separate and independent diesel generators, each with:

1) A separate day tank containing a minimum volume of 278 gallons of fuel,

2) A separate Fuel Storage System containing a minimum volume of 32,760 gallons of fuel,

3) A separate fuel transfer pump,

4) Lubricating oil storage containing a minimum total volume of 280 gallons of lubricating oil, and

5) Capability to transfer lubricating oil from storage to the diesel generator unit.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

Inoperable Equipment Required Action

a. One offsite a.1 Perform Surveillance Requirement circuit 4.8.1.1.1.a for remaining offsite circuit within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> prior to or after entering this condition, and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND a.2 Restore the inoperable offsite circuit to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

b. One diesel b.1 Perform Surveillance Requirement generator 4.8.1.1.1.a for the offsite circuits within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> prior to or after entering this condition, and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND b.2 Demonstrate OPERABLE diesel generator is not inoperable due to common cause failure within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or perform Surveillance Requirement 4.8.1.1.2.a.5 for the OPERABLE diesel generator within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

____ ___ ___ ___ AND MILLSTONE 0815

- UNIT 3 3/4 8-1 Amendment No. M 97, 7l,, 210

.ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION ACTION (continued)

Inoperable Equipment Required Action

b. One diesel b.3 Verify all required systems, subsystems, generator trains, components, and devices that depend on the remaining OPERABLE diesel generator as a source of emergency power are OPERABLE, and the steam-driven auxiliary feedwater pump is OPERABLE (MODES 1, 2, and 3 only). If these conditions are not satisfied within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND b.4 (Applicable only if the 14 day allowed outage time specified in Action Statement b.5 is to be used). Verify the required Millstone Unit No. 2 diesel generator(s) is/are OPERABLE and the Millstone Unit No. 3 SBO diesel generator is available within I hour prior to or after entering this condition, and at least once per 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> thereafter. Restore any inoperable required Millstone Unit No. 2 diesel generator to OPERABLE status and/or Millstone Unit No. 3 SBO diesel generator to available status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND b.5 Restore the inoperable diesel generator to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> (within 14 days if Action Statement b.4 is met) or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the followinq 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

c. One offsite I

+

C. One offsite c.1 Perform Surveillance Requirement circuit 4.8.1.1.1.a for remaining offsite circuit within I hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND AND One diesel generator c.2 Demonstrate OPERABLE diesel generator is not inoperable due to common cause failure within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> or perform Surveillance Requirement 4.8.1.1.2.a.5 for the OPERABLE diesel generator within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.

AND I

MILLSTONE - UNIT 3 3/4 8-2 Amendment No. 210 0815

ELECTRICAL POWER SYSTEMS ITMTTING CONDITION FOR OPERATION ACTION (continued)

Inoperable Equipment Required Action

c. One offsite c.3 Verify all required systems, subsystems, circuit trains, components, and devices that depend on the remaining OPERABLE diesel generator AND as a source of emergency power are OPERABLE, and the steam-driven auxiliary One diesel feedwater pump is OPERABLE (MODES 1, 2, and generator 3 only). If these conditions are not satisfied within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND c.4 Restore one inoperable A.C. source to OPERABLE status within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND c.5 Restore remaining inoperable A.C. source to OPERABLE status following the time requirements of Action Statements a. or b.

above based on the initial loss of the remaining inoperable A.C. source.

d. Two offsite d.1 Restore one of the inoperable offsite circuits sources to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

AND d.2 Following restoration of one offsite source, restore remaining inoperable offsite source to OPERABLE status following the time requirements of Action Statement

a. above based on the initial loss of the remaining inoperable offsite source.

e. Two diesel e.1 Perform Surveillance Requirement generators 4.8.1.1.1.a for the offsite circuits within I hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND MILLSTONE - UNIT 3 3/4 8-3 Amendment No. 210 0815

ELECTRICAL POWER SYSTEMS ItTMITTTN CONDITION FOR OPERATION ITMTTING CONDITION FOR OPERATION ACTION (continued)

Inoperable Equipment Required Action

e. Two diesel e.2 Restore one of the inoperable diesel generators generators to OPERABLE status within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND e.3 Following restoration of one diesel generator, restore remaining inoperable diesel generator to OPERABLE status following the time requirements of Action Statement b. above based on the initial loss of the remaining inoperable diesel generator.

SIIRVFI LLANCE REOUXIREMENTS 4.8.1.1.1 Each of the above required independent circuits between the offsite transmission network and the Onsite Class IE Distribution System shall be:

a. Determined OPERABLE at least once per 7 days by verifying correct breaker alignments, indicated power availability, and

b. Demonstrated OPERABLE at least once per 18 months during shutdown by transferring (manually and automatically) unit power supply from the normal circuit to the alternate circuit.

4.8.1.1.2 Each diesel generator shall be demonstrated OPERABLE:*

a. At least once per 31 days on a STAGGERED TEST BASIS by:

1) Verifying the fuel level in the day tank,

2) Verifying the fuel level in the fuel storage tank,

3) Verifying the fuel transfer pump starts and transfers fuel from the storage system to the day tank,

4) Verifying the lubricating oil inventory in storage,

5) Verifying the diesel starts from standby conditions and achieves generator voltage and frequency at 4160 + 420 volts and 60 + 0.8 Hz. The diesel generator shall be started for this test by using one of the following signals:

a) Manual, or

• All planned starts for the purpose of these surveillances may be preceded by an engine prelube period.

MILLSTONE - UNIT 3 3/4 8-3a Amendment No. 19, f#, 717, jg#, 210 0815

REACTOR COOLANT SYSTEM BASES 3/4.4.3 PRESSURIZER (cont'd.)

The 12-hour periodic surveillances require that pressurizer level be maintained at programmed level within + 6% of full scale. The surveillance is performed by observing the indicated level. The 12-hour interval has been shown by operating practice to be sufficient to regularly assess level for any deviation and to ensure that the appropriate level exists in the pressurizer.

During transitory conditions, i.e., power changes, the operators will maintain programmed level, and deviations greater than 6% will be corrected within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />. Two hours has been selected for pressurizer level restoration after a transient to avoid an unnecessary downpower with pressurizer level outside the operating band. Normally, alarms are also available for early detection of abnormal level indications.

Electrical immersion heaters, located in the lower section of the pressurizer vessel, keep the water in the pressurizer at saturation temperature and maintain a constant operating pressure. A minimum required available capacity of pressurizer heaters ensures that the RCS pressure can be maintained.

The capability to maintain and control system pressure is important for maintaining subcooled conditions in the RCS and ensuring the capability to remove core decay heat by either forced or natural circulation of the reactor coolant. Unless adequate heater capacity is available, the hot high-pressure condition cannot be maintained indefinitely and still provide the required subcooling margin in the primary system. Inability to control the system pressure and maintain subcooling under conditions of natural circulation flow in the primary system could lead to a loss of single-phase natural circulation and decreased capability to remove core decay heat.

The LCO requires two groups of OPERABLE pressurizer heaters, each with a capacity of at least 175 kW. The heaters are capable of being powered from either the offsite power source or the emergency power supply. The minimum heater capacity required is sufficient to maintain the RCS near normal operating pressure when accounting for heat losses through the pressurizer insulation. By maintaining the pressure near the operating conditions, a wide margin to subcooling can be obtained in the loops. The requirement for two groups of pressurizer heaters, each having a capacity of 175 kW, is met by verifying the capacity of the pressurizer heater groups A and B. Since the pressurizer heater groups A and B are supplied from the emergency 480V electrical buses, there is reasonable assurance that these heaters can be energized during a loss of offsite power to maintain natural circulation at HOT STANDSY. Providing an emergency (Class IE) power source for the required pressurizer heaters meets the requirement of NUREG-0737, "A Clarification of TMI Action Plan Requirements,"

II.E.3.1, "Emergency Power Requirements for Pressurizer Heaters."

If one required group of pressurizer heaters is inoperable, restoration is required within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. The Completion Time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> is reasonable considering that a demand caused by loss of offsite power would be unlikely in this time period. Pressure control may be maintained during this time using normal station powered heaters.

MODE 3 The requirement for the pressurizer to be OPERABLE, with a level less than or equal to 89%, ensures that a steam bubble exists. The 89% level preserves the steam space for pressure control. The 89% level has been established to ensure the capability to establish and maintain pressure control for MODE 3 and to ensure a bubble is present in the pressurizer. Initial pressurizer level is not significant for those events analyzed for MODE 3 in Chapter 15 of the FSAR.

MILLSTONE - UNIT 3 B 3/4 4-2a Amendment No. 00, 210 0816

3/4.8 ELECTRICAL POWER SYSTEMS BASES 3/4.8.1, 3/4.8.2, and 3/4.8.3 A.C. SOURCES, D.C. SOURCES, and ONSITE POWER DISTRIBUTION The OPERABILITY of the A.C. and D.C. power sources and associated distribu tion systems during operation ensures that sufficient power will be available to supply the safety-related equipment required for: (1) the safe shutdown of the facility, and (2) the mitigation and control of accident conditions within the facility. The minimum specified independent and redundant A.C. and D.C.

power sources and distribution systems satisfy the requirements of General Design Criterion 17 of Appendix A to 10 CFR Part 50.

LCO 3.8.1.1.a LCO 3.8.1.1.a requires two independent offsite power sources. With both the RSST and the NSST available, either power source may supply power to the vital busses to meet the intent of Technical Specification 3.8.1.1. The FSAR, and Regulatory Guide 1.32, 1.6, and 1.93 provide the basis for requirements concerning off-site power sources. The basic requirement is to have two independent offsite power sources. The requirement to have a fast transfer is not specifically stated. An automatic fast transfer is required for plants without a generator output trip breaker, where power from the NSST is lost on a turbine trip. The surveillance requirement for transfer from the normal circuit to the alternate circuit is required for a transfer from the NSST to the RSST in the event of an electrical failure. There is no specific requirement to have an automatic transfer from the RSST to the NSST.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility operation commensurate with the level of degradation. The OPERABILITY of the power sources are consistent with the initial condition assumptions of the safety analyses and are based upon maintaining at least one redundant set of onsite A.C. and D.C.

power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss-of-offsite power and single failure of the other onsite A.C. source. The A.C. and D.C. source allowable out-of service times are based in part on Regulatory Guide 1.93, "Availability of Electrical Power Sources," December 1974. Technical Specification 3.8.1.1 Action Statements b.2 and c.2 provide an allowance to avoid unnecessary testing of the other OPERABLE diesel generator. If it can be determined that the cause of the inoperable diesel generator does not exist on the OPERABLE diesel generator, Surveillance Requirement 4.8.1.1.2.a.5 does not have to be performed.

If the cause of inoperability exists on the other OPERABLE diesel generator, the other OPERABLE diesel generator would be declared inoperable upon discovery, Action Statement e. would be entered, and appropriate actions will be taken.

Once the failure is corrected, the, common cause failure no longer exists, and the required Action Statements (b., c., and e.) will be satisfied.

If it can not be determined that the cause of the inoperable diesel generator does not exist on the remaining diesel generator, performance of Surveillance Requirement 4.8.1.1.2.a.5, within the allowed time period, suffices to provide assurance of continued OPERABILITY of the diesel generator. If the inoperable diesel generator is restored to OPERABLE status prior to the determination of the impact on the other diesel generator, evaluation will continue of the possible common cause failure. This continued evaluation is no MILLSTONE - UNIT 3 B 3/4 8-1 Amendment No. J77, 210 0817

3/4.8 ELECTRICAL POWER SYSTEMS BASES longer under the time constraint imposed while in Action Statements b.2 or c.2.

The determination of the existence of a common cause failure that would affect the remaining diesel generator will require an evaluation of the current failure and the applicability to the remaining diesel generator. Examples that would not be a common cause failure include, but are not limited to:

1. Preplanned preventative maintenance or testing; or

2. An inoperable support system with no potential common mode failure for the remaining diesel generator; or

3. An independently testable component with no potential common mode failure for the remaining diesel generator.

When one diesel generator is inoperable, there is an additional ACTION requirement (b.3 and c.3) to verify that all required systems, subsystems, trains, components and devices, that depend on the remaining OPERABLE diesel generator as a source of emergency power, are also OPERABLE, and that the steam driven auxiliary feedwater pump is OPERABLE. This requirement is intended to provide assurance that a loss-of-offsite power event will not result in a complete loss of safety function of critical systems during the period one of the diesel generators is inoperable. The term, verify, as used in this context means to administratively check by examining logs or other information to determine if certain components are out-of-service for maintenance or other reasons. It does not mean to perform the Surveillance Requirements needed to demonstrate the OPERABILITY of the component.

If one Millstone Unit No. 3 diesel generator is inoperable in MODES 1 through 4, a 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> allowed outage time is provided by Action Statement b.5 to allow restoration of the diesel generator, provided the requirements of Action Statements b.1, b.2, and b.3 are met. This allowed outage time can be extended to 14 days if the additional requirements contained in Action Statement b.4 are also met. Action Statement b.4 requires verification that the Millstone Unit No. 2 diesel generators are OPERABLE as required by the applicable Millstone Unit No. 2 Technical Specification (2 diesel generators in MODES 1 through 4, and 1 diesel generator in MODES 5 and 6) and the Millstone Unit No. 3 SBO diesel generator is available. The term verify, as used in this context, means to administratively check by examining logs or other information to determine if the required Millstone Unit No. 2 diesel generators and the Millstone Unit No. 3 SBO diesel generator are out of service for maintenance or other reasons. It does not mean to perform Surveillance Requirements needed to demonstrate the OPERABILITY of the required Millstone Unit No. 2 diesel generators or availability of the Millstone Unit No. 3 SBO diesel generator.

When using the 14 day allowed outage time provision and the Millstone Unit No. 2 diesel generator requirements and/or Millstone Unit No. 3 SBO diesel generator requirements are not met, 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> is allowed for restoration of the required Millstone Unit No. 2 diesel generators and the Millstone Unit No. 3 SBO diesel generator. If any of the required Millstone Unit No. 2 diesel generators and/or Millstone Unit No. 3 SBO diesel generator are not restored within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, and one Millstone Unit No. 3 diesel generator is still inoperable, Millstone Unit No. 3 is required to shut down.

MILLSTONE - UNIT 3 B 3/4 8-1a Amendment No. 7J1, 210 0817

3/4.8 ELECTRICAL POWER SYSTEMS BASES The 14 day allowed outage time for one inoperable Millstone Unit No. 3 diesel generator will allow performance of extended diesel generator maintenance and repair activities (e.g., diesel inspections) while the plant is operating.

To minimize plant risk when using this extended allowed outage time the following additional Millstone Unit No. 3 requirements must be met:

1. The charging pump and charging pump cooling pump in operation shall be powered from the bus not associated with the out of service diesel generator. In addition, the spare charging pump will be available to replace an inservice charging pump if necessary.

2. The extended diesel generator outage shall not be scheduled when adverse or inclement weather conditions and/or unstable grid conditions are predicted or present.

3. The availability of the Millstone Unit No. 3 SBO DG shall be verified by test performance within 30 days prior to allowing a Millstone Unit No. 3 EDG to be inoperable for greater than 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

4. All activity in the switchyard shall be closely monitored and controlled. No elective maintenance within the switchyard that could challenge offsite power availability shall be scheduled.

5. A contingency plan shall be available (OP 3314J, Auxiliary Building Emergency Ventilation and Exhaust) to provide alternate room cooling to the charging and CCP pump area (24'6" Auxiliary Building) in the event of a failure of the ventilation system prior to commencing an extended diesel generator outage.

In addition, the plant configuration shall be controlled during the diesel generator maintenance and repair activities to minimize plant risk consistent with the Configuration Risk Management Program, as required by 10 CFR 50.65(a)(4).

The OPERABILITY of the minimum specified A.C. and D.C. power sources and associated distribution systems during shutdown and refueling ensures that:

(1) the facility can be maintained in the shutdown or refueling condition for extended time periods, and (2) sufficient instrumentation and control capa bility is available for monitoring and maintaining the unit status.

The Surveillance Requirements for demonstrating the OPERABILITY of the diesel generators are in accordance with the recommendations of Regulatory Guides 1.9, "Selection of Diesel Generator Set Capacity for Standby Power Supplies," March 10, 1971; 1.108, "Periodic Testing of Diesel Generator Units Used as Onsite Electric Power Systems at Nuclear Power Plants," Revision 1, August 1977; and 1.137, "Fuel-Oil Systems for Standby Diesel Generators,"

Revision 1, October 1979.

LCO 3.8.1.1 Action statement b.3 and c.3 Required ACTION Statement b.3 and c.3 requires that all systems, subsystems, trains, components, and devices that depend on the remaining OPERABLE diesel as a source of emergency power be verified OPERABLE. The Fuel Building Exhaust Filter System is not considered to be a required system under ACTION 3.8.1.1.b or ACTION 3.8.1.1.c based on the following:

MILLSTONE - UNIT 3 B 3/4 8-lb Amendment No. 177, 210 0817

3/4.8 ELECTRICAL POWER SYSTEMS BASES The Fuel Building Exhaust Filter System is described in Technical Specification 3.9.12. This system is no_ required as long as there is no evolution involving the movement of fuel within the storage pool or crane operations with loads above the fuel pool. With one diesel inoperable in MODES 1-4 operation in the fuel building may continue as long as there is one remaining diesel OPERABLE and OPERABILITY requirements for the Fuel Building Exhaust Filter System are met. Technical Specification Bases section 3/4.9.12 states that the limitations on the Fuel Building Exhaust Filter System ensure that all radioactive material related from an irradiated fuel assembly will be filtered through the HEPA and charcoal filters prior to discharge. This establishes the fact that the fuel building filters are installed to support a specialized fuel handling accident rather than a DBA LOCA.

3/4.8.1, 3/4.8.2, and 3/4.8.3 A.C. SOURCES, D.C. SOURCES, and ONSITE POWER DISTRIBUTION Technical Specification 3.8.1.1.b.1 requires a minimum volume of 278 gallons be contained in each of the diesel generator day tanks. Technical Specification 3.8.1.2.b.1 requires a minimum volume of 278 gallons be contained in the required diesel generator day tank. This capacity ensures that a minimum usable volume of 189 gallons is available to permit operation of each of the diesel generators for approximately 27 minutes with the diesel generators loaded to the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> rating of 5335 kW. The shutoff level for the (two) fuel oil transfer pumps is 493 gallons (413 gallons usable volume) which corresponds to approximately 60 minutes of engine operation at the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> rating. The first pump has a make-up setpoint of 372 gallons (284 gallons usable volume) which corresponds to approximately 42 minutes of operation at the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> rating. The 278 gallon day tank low level value corresponds to the auto make-up setpoint of the second pump and is therefore the lowest value of fuel oil with auto make-up capability. Loss of the two redundant pumps would cause day tank level to drop below the minimum value.

Technical Specification 3.8.1.1.b.2 requires a minimum volume of 32,760 gallons be contained in each of the diesel generator's fuel storage systems.

Technical Specification 3.8.1.2.b.2 requires a minimum volume of 32,760 gallons be contained in the required diesel generator's fuel storage system.

This capacity ensures that a minimum usable volume (29,180 gallons) is available to permit operation of each of the diesel generators for approximately three days with the diesel generators loaded to the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> rating of 5335 kW. The ability to cross-tie the diesel generator fuel oil supply tanks ensures that one diesel generator may operate up to approximately six days. Additional fuel oil can be supplied to the site within twenty-four hours after contacting a fuel oil supplier.

Surveillance Requirements 4.8.1.1.2.a.6 (monthly) and 4.8.1.I.2.b.2 (once per 184 days) and 4.8.1.1.2.j (18 months test)

The Surveillances 4.8.1.1.2.a.6 and 4.8.1.1.2.b.2 verify that the diesel generators are capable of synchronizing with the offsite electrical system and loaded to greater than or equal to continuous rating of the machine. A minimum time of 60 minutes is required to stabilize engine temperatures, while MILLSTONE - UNIT 3 B 3/4 8-1c Amendment No. 97, 717, 177, 0817 Ig, 210

3/4.8 ELECTRICAL POWER SYSTEMS BASES minimizing the time that the diesel generator is connected to the offsite source. Surveillance Requirement 4.8.1.1.2.j requires demonstration once per 18 months that the diesel generator can start and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, Ž 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of which are at a load equivalent to 110% of the continuous duty rating and the remainder of the time at a load equivalent to the continuous duty rating of the diesel generator. The load band is provided to avoid routine overloading of the diesel generator. Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain diesel generator operability. The load band specified accounts for instrumentation inaccuracies using plant computer and for the operational control capabilities and human factor characteristics. The note (*)

acknowledges that momentary transient outside the load range shall not invalidate the test.

Surveillance Requirements 4.8.1.1.2.a.5 (Monthly), 4.8.1.1.2.b.1 (Once per 184 Days), 4.8.1.1.2.q.4.b (18 Month Test), 4.8.1.1.2.q.5 (18 Month Test) and 4.8.1.1.2.q.6.b (18 Month Test)

Several diesel generator surveillance requirements specify that the emergency diesel generators are started from a standby condition. Standby conditions for a diesel generator means that the EDG system is aligned for automatic start and loading, diesel engine coolant and lubricating oil are being circulated and temperatures are maintained within design ranges. Design ranges for standby temperatures are greater than or equal to the low temperature alarm setpoints and less than or equal to the standby "keep-warm" heater shutoff temperatures for each respective sub-system.

Surveillance Requirement 4.8.1.1.2.j (18 Month Test)

The existing "standby condition" stipulation contained in specification 4.8.1.1.2.a.5 is superseded when performing the hot restart demonstration required by 4.8.1.1.2.j.

MILLSTONE - UNIT 3 B 3/4 8-id Amendment No. 97, 7X7, 777, 0817 7g, 210