ML031210545

Tech Spec Pages for Amendment No. 217 Modifying TS 2.3.a, to Extend the Allowed Outage Time for a Single Low Pressure Safety Injection Pump from the Existing 24 Hours to 7 Days

ML031210545
Person / Time
Site:	Fort Calhoun
Issue date:	04/29/2003
From:	NRC/NRR/DLPM
To:
Wang A, NRR/DLPM, 415-1445
Shared Package
ml031210100	List: ML031200487 ML031210545
References
TAC MB6469
Download: ML031210545 (4)

Text

2.0 LIMITING CONDITIONS FOR OPERATION 2.3 Emergency Core Cooling System Applicability Applies to the operating status of the emergency core cooling system.

Objective To assure operability of equipment required to remove decay heat from the core.

Specifications (1) Minimum Requirements The reactor shall not be made critical unless all of the following conditions are met:

a. The SIRW tank contains not less than 283,000 gallons of water with a boron concentration of at least the refueling boron concentration at a temperature not less than 50 0F.

b. One means of temperature indication (local) of the SIRW tank is operable.

c. All four safety injection tanks are operable and pressurized to at least 240 psig with a tank level of at least 116.2 inches (67%) and a maximum level of 128.1 inches (74%) with refueling boron concentration.

d. One level and one pressure instrument is operable on each safety injection tank.

e. One low-pressure safety injection train is operable on each associated 4,160 V engineered safety feature bus.

f. One high-pressure safety injection pump is operable on each associated 4,160 V engineered safety feature bus.

g. Both shutdown heat exchangers are operable.

h. Piping and valves shall be operable to provide two flow paths from the SIRW tank to the reactor coolant system.

i. All valves, piping and interlocks associated with the above components and required to function during accident conditions are operable. HCV-2914, 2934, 2974, and 2954 shall have power removed from the motor operators by locking open the circuit breakers in the power supply lines to the valve motor operators FCV-326 shall be locked open.

2-20 Amendment No. 17,32,43,103,117, 4 493 3AA4AA5 7A1t75, 217

2.0 LIMITING CONDITIONS FOR OPERATION 2.3 Emergency Core Cooling System (Continued)

(2) Modification of Minimum Requirements During power operation, the Minimum Requirements may be modified to allow one of the following conditions to be true at any one time. If the system is not restored to meet the minimum requirements within the time period specified below, the reactor shall be placed in a hot shutdown condition within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. If the minimum requirements are not met within an additional 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> the reactor shall be placed in a cold shutdown condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

a. One low-pressure safety injection train may be inoperable provided the train is restored to operable status within seven (7) days.

b. One high-pressure safety injection pump may be inoperable provided the pump is restored to operable status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

c. One shutdown heat exchanger may be inoperable for a period of no more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

d. Any valves, interlocks or piping directly associated with one of the above components and required to function during accident conditions shall be deemed to be part of that component and shall meet the same requirements as listed for that component.

e. Any valve, interlock or piping associated with the safety injection and shutdown cooling system which is not covered under d. above but which is required to function during accident conditions may be inoperable for a period of no more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

f. One safety injection tank may be inoperable for reasons other than g. or h. below for a period of no more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

g. Level and/or pressure instrumentation on one safety injection tank may be inoperable for a period of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

h. One safety injection tank may be inoperable due to boron concentration not within limits for a period of no more than 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

i. Components in excess of those allowed by Conditions a, b, d, and e may be inoperable provided they are returned to operable status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> when performing the quarterly recirculation actuation logic channel functional test (Table 3-2 item 20) under administrative controls. This allowance applies only to the remaining portion of Cycle 20 and all of Cycle 21.

2-21 Amendment No. 49,171,175,186, 208,217

2.0 LIMITING CONDITIONS FOR OPERATION 2.3 Emergency Core Cooling System (Continued)

The USAR Loss of Coolant Accident analysis assumes a minimum SIRW tank inventory of 250,000 gallons has been pumped from the SIRW tank when recirculation begins. Technical Specification 2.3(1) requires that the SIRW tank contains a minimum of 283,000 gallons of usable water. This additional volume over that assumed in the USAR analysis provides sufficient margin to account for instrument uncertainty. The SIRW tank contains water containing a boron concentration of at least the refueling boron concentration. This is sufficient boron concentration to provide a shutdown margin of 5%, including allowances for uncertainties, with all control rods withdrawn and a new core at a temperature of 68'F.(2 )

The limits for the safety injection tank pressure and volume assure the required amount of water injection during an accident and are based on values used for the accident analyses. The minimum 116.2 inch level corresponds to a volume of 825 ft3 and the maximum 128.1 inch level corresponds to a volume of 895.5 ft3. Prior to the time the reactor is brought critical, the valving of the safety injection system must be checked for correct alignment and appropriate valves locked. Since the system is used for shutdown cooling, the valving will be changed and must be properly aligned prior to start-up of the reactor.

The operable status of the various systems and components is to be demonstrated by periodic tests. A large fraction of these tests will be performed while the reactor is operating in the power range.

If a component is found to be inoperable, it will be possible in most cases to effect repairs and restore the system to full operability within a relatively short time. For a single component to be inoperable does not negate the ability of the system to perform its function. If it develops that the inoperable component is not repaired within the specified allowable time period, or a second component in the same or related system is found to be inoperable, the reactor will initially be put in the hot shutdown condition to provide for reduction of cooling requirements after a postulated loss-of-coolant accident. This will also permit improved access for repairs in some cases. After a limited time in hot shutdown, if the malfunction(s) is not corrected, the reactor will be placed in the cold shutdown condition utilizing normal shutdown and cooldown procedures. In the cold shutdown condition, release of fission products or damage of the fuel elements is not considered possible.

The plant operating procedures will require immediate action to effect repairs of an inoperable component and therefore in most cases repairs will be completed in less than the specified allowable repair times. The limiting times to repair are intended to assure that operability of the component will be restored promptly and yet allow sufficient time to effect repairs using safe and proper procedures.

The time allowed to repair a safety injection tank is based on the deterministic and probabilistic analyses of Reference (8). The time allowed to repair a LPSI train is based on the deterministic and probabilistic analyses of Reference (9). These analyses concluded that the overall risk impact of the completion times are either risk-beneficial or risk neutral.

The requirement for core cooling in case of postulated loss-of-coolant accident while in the hot shutdown condition is significantly reduced below the requirements for a postulated loss-of-coolant accident during power operation. Putting the reactor in the hot shutdown condition reduces the consequences of a loss-of-coolant accident and also allows more free access to some of the engineered safeguards components in order to effect repairs.

Failure to complete repairs within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> of going to the hot shutdown condition is considered indicative of a requirement for major maintenance and, therefore, in such a case, the reactor is to be put into the cold shutdown condition.

2-23 Amendment No. 32,39,47,49,74,179,186,217 July 15, 1999

2.0 LIMITING CONDITIONS FOR OPERATION 2.3 Emergency Core Cooling System (Continued)

Components in excess of those allowed by Conditions a, b, d, and e may be inoperable provided they are returned to operable status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> when performing the quarterly recirculation actuation logic channel functional test (Table 3-2 item 20) under administrative controls. This allowance applies only to the remaining portion of Cycle 20 and all of Cycle 21. This prevents violating Technical Specifications or necessitating a unit shutdown due to inability to perform the quarterly recirculation actuation logic channel functional test. These administrative controls consist of stationing three dedicated operators at the Engineered Safeguards Features (ESF) panel controls in the control room. In this way, the following conditions are maintained and actions can be rapidly performed should a valid ESF actuation occur:

• the appropriate Safety Injection Refueling Water Tank (SIRWT) to Safety Injection (SI) and Containment Spray (CS) pumps suction valve control switch is maintained in the OPEN position (spring-return switch),

• the appropriate SI and CS pumps to SIRWT recirculation minimum flow valve control switch is maintained in the OPEN position (spring-return switch),

• the appropriate Recirculation Actuation Signal (RAS) lockout relays and initiating signal can be rapidly reset,

• the appropriate SI and CS pumps to SIRWT recirculation minimum flow valve control switch can be rapidly returned to the AUTO position,

• the appropriate SIRWT to SI and CS pumps suction valve control switch can be rapidly returned to the AUTO position, and

• the appropriate Containment Sump to SI and CS pumps suction valve control switch can be rapidly returned to the AUTO position.

The appropriate SI and CS pumps to SIRWT recirculation minimum flow valve control switch and the appropriate SIRWT to SI and CS pumps suction valve control switch are held in the OPEN position during the test to enhance the reliability of the appropriate SI and CS pumps by maintaining the associated valves open.

References (1) USAR, Section 14.15.1 (2) USAR, Section 6.2.3.1 (3) USAR, Section 14.15.3 (4) USAR, Appendix K (5) Omaha Public Power District's Submittal, December 1, 1976 (6) Technical Specification 2.1.2, Figure 2-1B (7) USAR, Section 4.4.3 (8) CE NPSD-994, "CEOG Joint Applications Report for Safety Injection Tank AOT/SIT Extension," May 1995.

(9) CE NPSD-995, "CEOG Joint Applications Report for Low Pressure Safety Injection System AOT Extension," May 1995.

2-23b Amendment No. 47,64,74,179,206,217