ML033010645

From kanterella
Jump to navigation Jump to search
Final As-Administered Scenario 1 for the Point Beach Initial Examination - Sept/Oct 2003
ML033010645
Person / Time
Site: Point Beach  NextEra Energy icon.png
Issue date: 09/29/2003
From: Short P
Nuclear Management Co
To:
Office of Nuclear Reactor Regulation
Shared Package
ML032890563 List:
References
50-266/03-301, 50-301/03-301
Download: ML033010645 (29)


Text

Appendix D Scenario Outline Form ES-D-1 Facility: Point Beach Scenario No.: 1 OP-Test No.: 2003301 Examiners: ______________________ Operators: ______________________

Initial Conditions: Unit 1 is at 100% Power, MOL, equilibrium xenon conditions. Unit 2 is at 100% Power.

Turnover: G-02 EDG is out of service for annual maintenance. It was taken OOS 2 days ago, and is expected to be returned to service in 3 days. G-01 EDG is aligned to 4.16 kV buses 1A-05 and 2A-05 IAW OI-35A.

1P-2C Charging Pump is out of service due to a failed motor bearing. The failure occurred 16 hours1.851852e-4 days <br />0.00444 hours <br />2.645503e-5 weeks <br />6.088e-6 months <br /> ago and has been tagged out for repair.

1P-15A Safety Injection Pump has just been tagged out (4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> ago) due to high vibration that was identified during In-service Testing. The pump is not available.

Today is Sunday, present clock time is real time. A normal shift complement is available with exception of the 3rd SRO. An RP Tech is on-site along with two mechanics who are working on the diesel. A maintenance crew has just been called in for 1P-15A.

The objective of the shift is to maintain stable plant conditions.

Event Malf. Event Event No. No. Type* Description C - BOP 1 Service Water Pump Trip.

SRO I - RO 2 Controlling Pressurizer Pressure channel PT-431 fails high.

SRO C - RO 3 1P-2A Charging Pump belt failure.

SRO I - RO 4 Turbine First Stage Pressure Transmitter PT-485 fails low.

SRO 5 M - All RCS Leak develops to SBLOCA, requiring reactor trip.

C - RO 6 Reactor trip breakers fail to open - (ATWS).

SRO C - BOP 7 Safety Injection Pump 1P-15B fails to start.

SRO

  • (N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor NUREG-1021, Draft Revision 9

DYNAMIC EXAM SCENARIO ID#: SES-2003301: #1 SIMULATOR SHIFT TURNOVER:

Per Scenario Outline.

SIMULATOR SCENARIO SET UP STEP COUNTERS ON _________

INIT into IC _________

PBF-6802, Communicator Telephone Log, available _________

PBF-6801, Simulator Setup Checklist, completed _________

PBF-6806, Simulator Book Preparation Checklist, completed _________

PBF-6807, Simulator Scenario Briefing Sheet, completed _________

TI 9.0 Attachment 1 (Part 1), PBNP Simulator Security Checklist, completed _________

SCENARIO GUIDE:

1. Initialize to a Unit 1 100% Power IC or saved specific SES IC.
2. Ensure SI Pump 1P-15A control switch is in pullout, suction valve 1SI-896A is shut , and 1SI-866A is shut. Place a danger tag on all components.
3. Ensure Charging Pump 1P-2C control switch is in pullout (1P-2A and 1P-2B should be running with 1P-2A in Automatic). Balance charging/letdown flows as necessary. Place a danger tag on control switch for 1P-2C.
4. Ensure G-01 EDG is aligned to 1A05 and 2A05.
5. Ensure G-02 Mode Selector switch is in Local. Place Danger Tags on the G-02 Mode Selector switch, breaker 1A52-66 control switch, and breaker 2A52-67 control switch. C02 alarms will have to be acknowledged after going to RUN.
6. Ensure that RTO is using the LEFM inputs.
7. Preload (or verify preloaded) the following simulator codes:

Initiation Action or Action Tagname Malf. Ramp Delay Time Trigger Verification Cue Component Value Time Performed Description Event Oper. Ready Inserted Criteria Init. #

PRELOAD 1-SI-896A, SI VLV1SIS046 1 - - - -

PUMP SUCTION ISOL (FAIL CONTRL FUSE)

PRELOAD 1-SI-866A, VLV1SIS035 1 - - - -

1P15A DISCH STOP CHECK (FAIL CNTRL FUSE)

PRELOAD 1B-5220A P- BKR1CVC007 6 - - - -

2C CHARGING PUMP CKTBKR (FAIL CNTRL FUSE)

PRELOAD 1-EP-1A5259R LOA1EPS102 RACKOUT - - - -

1-A05 BKR 59 RACKOUT, 1P15A (RACKOUT)

PRELOAD 0-P32D PMP1SWS004C 90 - - - -

SERVICE WATER PUMP D HEAD CAPACITY

Initiation Action or Action Tagname Malf. Ramp Delay Time Trigger Verification Cue Component Value Time Performed Description Event Oper. Ready Inserted Criteria Init. #

PRELOAD 1-A52-02 STA BKR1EPS002 5 - - - -

SERV TRANS NO 1-X11 NORMAL (FAIL AS IS)

PRELOAD 1-A5215 STA BKR1EPS003 5 - - - -

SERV TRANS NO 1-X12 SUPPLY (FAIL AS IS)

PRELOAD 1-B5204B BKR1EPS023 5 - - - -

480V BUS 1-B01 NORMAL FEED (FAIL AS IS)

PRELOAD 1-B5205B BKR1EPS024 5 - - - -

480V BUS 1-B02 NORMA FEED (FAIL AS IS)

PRELOAD REACTOR MAL1PPL001A 3 - - - -

TRIP BREAKER 52/RTA FAILURE (FAILS TO OPEN)

PRELOAD REACTOR MAL1PPL001B 3 - - - -

TRIP BREAKER 52/RTB FAILURE (FAILS TO OPEN)

PRELOAD 1-A5265 P- BKR1SIS002 4 - - - -

15B SAFETY INJ PUMP CKTBKR (FAIL AUTO CLOSE)

The following events will be entered when requested by the lead examiner.

Initiation Action or Action Tagname Malf. Ramp Delay Time Trigger Verification Cue Component Value Time Performed Description Event Oper. Ready Inserted Criteria Init. #

EVENT 1: SERVICE WATER PUMP TRIP PLE 1-B5210C P- BKR1SWS001 1 - - 1 32A SERVICE WATER PUMP (TRIP)

EVENT 2: CONTROLLING PRESSURIZER PRESSURE CHANNEL PT-431 FAILS HIGH.

PLE 1-PT431 XMT1RCS019A 2500 00:00:30 0 0 2 PRZR PRESSURE 30 Sec.

FIXED OUTPUT (HIGH)

EVENT 3: CHARGING PUMP, 1P-2A BELT FAILURE.

PLE 1P-2A PMP1CVC004C 0 - - - 3 CHARGING PUMP NO 1-P2A FLOW CAPACITY EVENT 4: TURBINE FIRST STAGE PRESSURE TRANSMITTER, 1PT-485 FAILS LOW.

PLE 1-PT-485 XMT1MSS008A 0 00:00:30 0 0 4 FIRST STAGE 30 Sec.

PRESSURE XMTR FIXED OUTPUT (LOW)

EVENT 5: RCS LEAK DEVELOPS TO SBLOCA, REQUIRING REACTOR TRIP PLE RCS LEAK MAL1RCS002F 20 00:20:00 - - 5 LOOP B INT LEG 1200 Sec

Initiation Action or Action Tagname Malf. Ramp Delay Time Trigger Verification Cue Component Value Time Performed Description Event Oper. Ready Inserted Criteria Init. #

EVENT 6: REACTOR TRIP BREAKERS FAIL TO OPEN - ATWS WHEN REACTOR MAL1PPL001A DELETE - - - -

directed by TRIP Crew, BREAKER THEN 52/RTA FAILURE (FAILS TO OPEN)

WHEN REACTOR MAL1PPL001B DELETE - - - -

directed by TRIP Crew, BREAKER THEN 52/RTB FAILURE (FAILS TO OPEN)

ANTICIPATED BOOTH COMMUNICATION/GUIDANCE:

Event 1: This event is a failure of Service Water Pump P-32A. Following the SW Pump trip, the AO will be directed to check out P-32A in the Pump House. You will report, if asked, that the motor is very hot to the touch. There are no other signs of damage. If an AO is sent to the breaker, it has tripped on over-current. If asked to check out the Service Water Pump that was started, report back that it appears to be running fine. An AO will also be asked to check power to the Zurn strainers during AOP-9A implementation. Report back that power is available.

Event 2: This event is a failure of the controlling Pressurizer Pressure channel, PT-431. Following the failure of PT-431, the Instructor SM will field crew requests for I&C, STA, and DCS support. There are no anticipated booth communications.

Event 3: This event is a failure (belt shredding) of Charging Pump 1P-2A. If an AO is sent to inspect the pump, inform the crew that the belt is completely destroyed and is lying in pieces on the floor (motor running, pump is not).

Event 4: This event is a failure of Turbine First Stage Pressure Transmitter, 1PT-485. There are no anticipated communications. This event will immediately transition to the next event (RCS leak) after control rods are placed in Manual.

Event 5: This event is an RCS leak inside Containment, eventually reaching the point where a Reactor Trip is required due to lowering Pressurizer level. There are no anticipated communications.

Event 6, 7: When a Reactor Trip is directed (Event 5), all attempts to trip the reactor will fail. This results in transition to CSP-S.1. The Instructor SM will act as the STA to monitor Status Trees. The crew will request an AO to locally open the Reactor Trip Breakers. After sufficient time has elapsed (2-3minutes), then delete the two malfunctions referenced for Event 6 and report back that the breakers are open. Requests will also be made for the status of valves SW-LW-61&62. It should be reported that both valves are shut. Requests for any maintenance support, review of the E-plan, etc. will be fielded by the Instructor SM.

Op-Test No: 2003301 Scenario No: 1 Event No: 1 Page 8 of 28 Event

Description:

P-32A Service Water Pump Trips on overload Time Position Applicants Actions or Behavior At discretion of Lead Examiner, activate Trigger 1.

BOP Acknowledges/responds to receipt of annunciators C01 A 3-5 and B 3-4.

(Additional low EDG cooling flow alarms will be received on C02)

- Identify P-32A has tripped (white light lit above control switch)

- Recognize SW header pressure has dropped.

- Reference Alarm Response Book

- Notify DOS

- Carry out actions of AOP-9A as directed by the DOS.

Note: The BOP Operator may start an additional service water pump immediately upon recognizing that P-32A has tripped and Service Water Header pressure is low. Referencing of the ARB and AOP entry are expected for verification of these actions.

DOS Entry into AOP-9A, Service Water System Malfunction based on ARB C01 A 3-5.

DOS/BOP Check Forebay Level > -11 feet on PPCS (points 1/2LT-3586B) or recorder YR-5832.

DOS/BOP Check Pumpbay Level > -11 feet on PPCS (points 1/2LT-3586A) or recorder YR-5832.

DOS/BOP Check Traveling Screen Differential Level High Alarm clear (C01 A 4-5)

Op-Test No: 2003301 Scenario No: 1 Event No: 1 Page 9 of 28 Event

Description:

P-32A Service Water Pump Trips on overload Time Position Applicants Actions or Behavior DOS/BOP Check Service Water header Pressure Alarm clear (C01A 3-5) - DOS should answer this question as NO even if alarm is now clear (additional pump may have been already started) in order to verify proper operator response actions.

- Start a non-running SW pump to restore SW header pressure between 50 -90 psig (if a service water pump has already been started, then this step is merely verification of the action).

- DOS proceeds to step 9 of AOP-9A DOS Requests SM make notification to DCS, implement the Emergency Plan, and enter applicable TS Action Conditions.(Note: the Instructor SM will ask the DOS to assess TS when time permits).

- Properly assesses LCO 3.7.8 LCO is not met.

- Condition A and Required Action A.1 of LCO 3.7.8 are applicable (with one SW pump inoperable, there is a completion time of 7 days AND 14 days from discovery of failure to meet the LCO). Applies to both units.

DOS/BOP Check supply header integrity

- North and south header pressures approximately equal

- C01 A 3-5 Alarm clear

- Area sump alarms clear DOS/BOP Check Zurn Strainer

- Power available

- Strainer High DP alarms clear

Op-Test No: 2003301 Scenario No: 1 Event No: 1 Page 10 of 28 Event

Description:

P-32A Service Water Pump Trips on overload Time Position Applicants Actions or Behavior DOS/BOP Verify Service Water Header Valves Open

- SW-2890, 2891, 2869, 2870 DOS/BOP Check Component Alarms Clear - high temperature, low flow.

DOS Returns to step 1 of AOP-9A Loops through the same procedure steps as above, except this time around, service water header pressure is OK and eventually exits AOP-9A at step 8.

DOS/BOP At DOS discretion, the control switch for P-32A may be placed in pullout to clear the Motor Breaker Trip annunciator.

At the discretion of the lead examiner, proceed to the next event.

Op-Test No: 2003301 Scenario No: 1 Event No: 2 Page 11 of 28 Event

Description:

Pressurizer Pressure Channel (PT-431) fails high which causes Pressurizer Spray valves to open and RCS pressure to lower.

Time Position Applicants Actions or Behavior RO Acknowledge and respond to receipt of annunciator ARB 1C04 1C 1-2, Pressurizer PRESSURE HIGH or LOW and ARB 1C04 1C 3-2, Pressurizer High Pressure Channel Alert Operator Actions:

- Check for associated alarms.

- Check whether pressure is high or low (Identify Failed Instrument).

- Take manual control of pressurizer control system and close the Pressurizer Spray valves. (Manual control of the Pressurizer Spray valves is established by placing the Master Pressurizer Pressure Controller in Manual; or placing the individual Pressurizer Spray Valve controllers in Manual; or placing the override switches for each spray valve to Closed.)

DOS Direct entry into AOP-24, Response to Instrument Malfunctions.

RO Identify Failed Instrument - PT-431 (PZR Pressure Blue Channel)

RO Check if failed instrument is a controlling channel - PT-431 is a controlling channel for Pressurizer Pressure Control.

RO Establish Manual Control - If not previously performed, manual control of the Pressurizer Spray valves is established via the individual controllers OR the Master Pressurizer Pressure Controller OR the Override switches - the spray valves are shut manually.

RO/DOS Return Affected Parameter(s) to desired value(s).

- Energize back-up heaters to restore plant pressure to 2235 psig.

- Manual control of pressurizer spray is required if needed.

Op-Test No: 2003301 Scenario No: 1 Event No: 2 Page 12 of 28 Event

Description:

Pressurizer Pressure Channel (PT-431) fails high which causes Pressurizer Spray valves to open and RCS pressure to lower.

Time Position Applicants Actions or Behavior Direct entry into 0-SOP-IC-001, Routine Maintenance Procedure DOS Removal of Safeguards or Protection Sensor from Service.

- Obtain and implement 0-SOP-IC-001

- Review precautions and limitations

- Identify applicable Technical Specifications (reference 0-SOP-IC-002):

- Table 3.3.1-1 Items 5, 7a & 7b

- Table 3.3.2-1 Items 1d, 3c, 4d-2, 4e-2, 5c, 6c & 8

- Table 3.3.5-1 Item 2

- Channel required to be placed in trip within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />

- Table 3.3.3-1 Item 5c

- LCO met due to only 2 channels required

- Conduct pre-job brief for removing PT-431 from service

- Note: PT-429 will be the controlling channel after removal of PT-431 from service.

- Obtain DSS permission to remove channel from service

- Direct 0-SOP-IC-001Attachment A for PT-431 removal from service

Op-Test No: 2003301 Scenario No: 1 Event No: 2 Page 13 of 28 Event

Description:

Pressurizer Pressure Channel (PT-431) fails high which causes Pressurizer Spray valves to open and RCS pressure to lower.

Time Position Applicants Actions or Behavior RO/BOP/DOS Perform actions as directed by DOS from Attachment A for PT-431 removal.

- Place RC-430 and 431C (PZR PORVs) in the close position (RO)

- Place HC-431K (pressurizer pressure controller) in MANUAL (RO)

- Place pressurizer pressure defeat switch in DEFEAT BLUE inside C-110 (BOP)

- Place HC-431K in AUTO, unless directed otherwise by DSS (RO)

- Place RC-430 and 431C in AUTO, unless directed otherwise by DSS (RO)

- Place the following bistables to TRIP inside C-116: (BOP)

- Verify alarms and trip status lights are proper (RO)

1. High Pressure Trip
2. Low Pressure Trip
3. Safety Injection
4. Unblock Safety Injection
5. Over-temperature Trip
6. Over-temperature Rod Stop

- Remove PT-431 from scan (BOP)

DOS Inform DSS PT-431 removed from service and that DCS and STA notifications need to be made.

DOS/RO Return controls to automatic if desired.

- any Pressurizer Heaters turned on manually may be returned to Auto at this time unless needed.

DOS Check failure for Technical Specification or TRM applicability.

(Tech Specs impacted by this failure are listed on previous page).

Op-Test No: 2003301 Scenario No: 1 Event No: 2 Page 14 of 28 Event

Description:

Pressurizer Pressure Channel (PT-431) fails high which causes Pressurizer Spray valves to open and RCS pressure to lower.

Time Position Applicants Actions or Behavior DOS Exit AOP-24 Proceed to next event at the Lead Examiners discretion.

Op-Test No: 2003301 Scenario No: 1 Event No: 3 Page 15 of 28 Event

Description:

Charging Pump 1P-2A belt fails causing pump flow to decrease to zero.

Time Position Applicants Actions or Behavior RO Acknowledge and respond to receipt of annunciator ARB 1C04 1C 1-8, Charging Pump Speed Control Limit HIGH or LOW and ARB 1C03 1D 2-1, 1P-1A or B RCP Labyr Seal DP LOW Operator Actions:

- Check for associated alarms.

- Check charging pump/flow indications.

- Attempt manual control of charging pump speed to determine which pump is affected

- Adjust charging pump 1P-2B speed to restore parameters Direct entry into AOP-1D, Chemical and Volume Control System DOS Malfunction.

DOS/RO Review foldout page criteria DOS/RO Check for Charging Pump Malfunction - 1P-2A not operating properly.

- 1P-2A should be secured following local report of belt failure DOS/RO Check any Charging Pump Running - 1P-2B is running DOS/RO Check Charging Flow Stable DOS/RO Check Charging Pump Relief Not Lifted

Op-Test No: 2003301 Scenario No: 1 Event No: 3 Page 16 of 28 Event

Description:

Charging Pump 1P-2A belt fails causing pump flow to decrease to zero.

Time Position Applicants Actions or Behavior DOS/RO Check Charging Pump Suction Supply Adequate Note : this is a Continuous Action Step Check Charging System Response - Adjust charging flow as necessary to DOS/RO restore PZR level while maintaining labyrinth seal DP DOS Notify DCS and Return to Procedure and Step in Effect DOS Check TS applicability:

DOS should determine that TLCO 3.5.1 is not met.

- Action Condition B is entered. Required Action is to restore a Charging Pump to operable status in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

Proceed to next Event at the Lead Examiners Discretion.

Op-Test No: 2003301 Scenario No: 1 Event No: 4 Page 17 of 28 Event

Description:

First Stage Turbine Impulse Pressure (PT-485) Fails Low causing inward rod motion.

Time Position Applicants Actions or Behavior RO/BOP Identify Failure of PT-485 (First Stage Turbine Pressure)

- Rods will automatically move in the inward direction (RO)

- PT-485 indication on 1C03 is pegged low (BOP)

- Actual turbine load is constant (BOP)

- Tavg/Tref indicator on 1C04 indicates RCS is above program (RO)

NOTE: DOS may choose to first enter AOP 24 Response To Instrument Malfunctions. In either case, both AOP-24 and AOP-6C would need to be utilized to ensure all procedural requirements are met. The following steps of AOP-6C & AOP-24 are included due to lead examiner discretion of when to initiate the next event. The intent is to initiate the next event prior to implementation of AOP-24 and removing the channel from service. AOP-24 & 0-SOP-IC-001 were previously exercised during the PT-431 failure.

DOS Direct entry into AOP-6C, Uncontrolled Motion of RCCA(s)

CREW Check rod motion required:

- Change in turbine load

- Change in steam demand

- Tavg/Tref mismatch > 1.5 degrees F. (Note: Tavg/Tref indicator on 1C04 will not indicate properly - other indications will have to be utilized).

RO/DOS Rod motion determined to NOT be required, rods are placed in Manual.

Note: Rods may have been placed in Manual upon initial identification of the instrument failure. In this case, rods should be verified to be in Manual at this step.

Op-Test No: 2003301 Scenario No: 1 Event No: 4 Page 18 of 28 Event

Description:

First Stage Turbine Impulse Pressure (PT-485) Fails Low causing inward rod motion.

Time Position Applicants Actions or Behavior DOS Maintain RCS Tavg:

- Greater than 540 degrees F

- Less than 574 degrees F

- Within 7 degrees F of program Tavg Note: this is a continuous action step. Additional actions are required per the RNO column should any of the above conditions not be met.

RO/DOS Check RCS Tavg at or trending to Tref.

- Tavg will be less than Tref due to the inward rod motion.

- Tavg may be restored either via rod motion in Manual or adjusting turbine load (fuel has been conditioned).

RO/DOS Check control rods above the minimum insertion limit.

Rods should be above the limit. If not, boration must be initiated within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> to restore the rods above the insertion limit within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

RO/DOS Verify AFD within the limit:

- PPCS axial flux alarm clear (DFMOOB)

- At least 3 control board meters within the limit No axial flux problems should be present.

Note: this is a continuous action step. Additional actions are required per the RNO column should any of the above conditions not be met.

CREW Check rod motion due to instrument failure:

Rod motion determined to be due to failure of PT-485, DOS should leave AOP-6C and go to AOP-24 Response to Instrument Malfunctions.

Op-Test No: 2003301 Scenario No: 1 Event No: 4 Page 19 of 28 Event

Description:

First Stage Turbine Impulse Pressure (PT-485) Fails Low causing inward rod motion.

Time Position Applicants Actions or Behavior DOS Enter AOP-24, Response to Instrument Malfunctions RO/DOS Identify failed instrument as PT-485.

RO/DOS Identify PT-485 is a controlling channel.

- Control rods placed in Manual or verified in Manual.

RO/DOS Return affected parameter to desired value - Tavg should be matched to Tref either by manual rod withdrawal or lowering turbine load (see AOP-6C).

Remove failed instrument channel from service per 0-SOP-IC-001 DOS Routine Maintenance Procedure Removal of Safeguards or Protection Sensor from Service.

DOS Check Tech Specs and TRM for applicability:

- DOS should determine that LCO 3.3.1 is not met. Action Condition A is entered immediately - Required Action is to enter the Condition referenced in Table 3.3.1-1 for the channel.

- Condition S is referenced from Table 3.3.1-1, Function 17.b.2.

Required Action is to verify within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> that the interlock (P-7) is in its required state for existing unit conditions OR be in Mode 2 in 7 hours8.101852e-5 days <br />0.00194 hours <br />1.157407e-5 weeks <br />2.6635e-6 months <br />.

Following identification of the failed channel and placing Rod Control in Manual, proceed to the next event at the discretion of the Lead Examiner.

Op-Test No: 2003301 Scenario No: 1 Event No: 5 Page 20 of 28 Event

Description:

A small RCS leak develops in the B RCS Loop, degrading to a SBLOCA requiring a reactor trip.

Time Position Applicants Actions or Behavior CREW Identify RCS leak. The following are some indications available which will enable the crew to identify that an RCS leak exists inside containment.

- Containment Sump A level rising and associated alarm (BOP)

- Containment humidity and pressure rising (BOP)

- RMS alarms inside containment (RO/BOP)

- Auto Charging Pump speed rising (RO)

- Pressurizer level lowering (RO)

DOS AOP-1A Reactor Coolant Leak is entered based on the above indications.

RO/DOS Check Safety Injection Not Required.

- Pressurizer level within 10% of program level.

- RCS subcooling greater than 30 °F.

Note: this is a continuous action step. Additional actions are required per the RNO column should any of the above conditions not be met.

RO/DOS Check Reactor Trip Not Required

- Check reactor critical

- Check charging pump suction aligned to the VCT.

Note: this is a continuous action step. Additional actions are required per the RNO column should any of the above conditions not be met.

Check PZR Level - Stable At Or Trending To Program Level.

RO/DOS

- Manual control of Charging Pump 1P-2B should be established and Charging flow increased.

- The crew should manually isolate letdown per this continuous action step if pressurizer level continues to lower.

Op-Test No: 2003301 Scenario No: 1 Event No: 5 Page 21 of 28 Event

Description:

A small RCS leak develops in the B RCS Loop, degrading to a SBLOCA requiring a reactor trip.

Time Position Applicants Actions or Behavior RO/DOS Check PZR Pressure - Stable At Or Trending To Desired Pressure Check Reactor Makeup Control at the proper concentration, armed, and in RO/DOS auto.

Notify DCS and implement Emergency Plan (this action will be requested DOS of the DSS)

The remainder of the steps in AOP-1A are diagnostic steps and can be performed in any order. Due to the availability of only one Charging Pump and the magnitude of the leak, it is doubtful that any further steps will be performed in AOP-1A. When PZR level cannot be maintained within 10% of program a manual reactor trip will need to be initiated per AOP-1A step 1 RNO. When the manual reactor trip is directed, proceed to the next event.

Note: A manual Reactor Trip, Safety Injection, and Containment Isolation should be directed by the DOS.

However, when the reactor does not trip, a manual Safety Injection should NOT be performed.

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 22 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior DOS/RO/BOP Carry out immediate actions of EOP-0

- Verify reactor trip (not tripped)

- Attempt manual reactor trip

- De-energize rod drive motor generators (breakers fail to open)

- Start monitoring Critical Safety Functions

- Go to CSP-S.1 Critical Task: Crew inserts negative reactivity into the core by continuous control rod insertion.

RO/BOP Carry out immediate actions of CSP-S.1

- Verify reactor trip (not tripped, ensures continuous rod insertion)

- Verify turbine tripped DOS Verify immediate actions have been performed and reviews foldout page criteria with crew ROBOP Verify AFW Actuation (Note: depending on crew timing, an Auto SI may or may not have occurred.)

- IF an Auto SI has occurred, then start verification of both Motor Driven Pumps and the Turbine Driven AFP should occur.

- IF an SI has NOT occurred, then the steam supply valves to the Turbine Driven AFP must be manually opened and both Motor Driven Pumps manually started.

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 23 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior RO/BOP Align Charging pump suction to RWST

- OPEN 1CV-112B

- SHUT 1CV-112C RO/BOP Initiate emergency boration:

- Establish maximum charging by fully opening HC-142 - only 1 Charging Pump (1P-2B ) is available.

- Start a boric acid transfer pump

- Open 1CV-350

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 24 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior DOS/BOP Recognize SI Verification criteria applies and directs the BOP to perform Attachment A of CSP-S.1. Major steps of this attachment include:

- Verify Safeguards Buses energized

- Verify Feedwater Isolation

- Verify Containment Isolation NOTE: Manually starting SI Pump B is a critical task. This task may be performed in CSP-S.1, however, this is an EOP-0 critical task and must be performed prior to exiting EOP-0 at step16 (transition to EOP-1).

- Check SI Pumps running (SI Pump B should be manually started if not previously started)

- Check RHR pumps running

- Check CCW pumps-only one running

- Verify SW system alignment

- Verify Containment Accident Cooling Units running

- Check Control Room Fans armed

- Check Control Room Ventilation in accident mode

- Check if Main Steam Lines can remain open

- Verify Spray not required

- Check 4160 Vac Safeguards buses both powered by offsite power RO/BOP Check pressurizer pressure < 2335 psig RO/BOP/DOS Check if the reactor trip breakers have opened and if the turbine has tripped

- Dispatch an AO to locally open reactor trip breakers (if not already completed.)

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 25 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior RO/BOP Stabilize intact S/G level

- Control feed flow to maintain at least 400 GPM AFW until intact S/G level between [51%] 29 % to 65 %.

- If SG levels are within the required band, then AFW flows should be reduced to minimize the RCS cooldown. This may require securing one or more AFW pumps due to the minimum flow requirements.

RO/BOP Verify dilution paths-ALL ISOLATED

- Blender via 1CV-111

- Chemical addition pot

- VCT drain via P-33 or P-9

- Deboration

- Demineralizer resin change-out operations RO Check RCS cold leg temperature > 543 ºF

- If not, ensure atmospheric dumps and condenser steam dumps are shut, and minimize AFW flow RO Check if uncontrolled cooldown is in progress based on RCS temperature dropping in uncontrolled manner or S/G pressure dropping in an uncontrolled manner

- If NO, Proceed to step 18

- If YES, isolate both main steam lines, identify that neither S/G faulted and proceed to step 18 RO Check Core exit thermocouples < 1200 ºF

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 26 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior RO Verify reactor sub-critical

- Power range channels < 5%

- Intermediate range SUR zero or negative RO Check if boration can be stopped

- All rods fully inserted

- Stop boration

- Adjust charging flow as necessary to control PZR level DOS Exits CSP-S.1 and directs entry into EOP-0 (Note: Depending on crew timing, it is possible that a Red Path for CSP-P.1 may develop some time during the scenario due to the uncontrolled cooldown. If this occurs, a transition to CSP-P.1 should be made.)

DOS/RO Enter at Verify Reactor Trip RNO (where exited from)

- Re-energize stripped MCCs as time permits (none should be de-energized)

- Dispatch operator to locally open reactor trip breakers (should have already been performed)

RO Verify Turbine Trip RO Verify Safeguard buses energized RO Check if SI is actuated:

- Recognize SI has actuated

- Check SI - BOTH SI & RHR pumps running Note: SI pump 1P-15B should have been manually started in CSP-S.1

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 27 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior DOS Review foldout page criteria with the crew.

DOS/RO Both RCPs must be manually tripped per foldout page criteria due to loss of subcooling.

DOS EOP-0 Attachment A Automatic Action Verification directed to be completed by the BOP operator while continuing on with EOP-0.

Note: Actions contained in this Attachment are essentially identical to the Attachment performed in CSP-S.1. Therefore, these steps are not included in this guide. This attachment would provide an additional opportunity to identify the failure to start of SI Pump B.

Manually starting SI Pump B prior to exiting EOP-0 is considered a critical task. SI Pump B may have been previously started in CSP-S.1.

RO/BOP Verify Secondary Heat Sink:

- Level in at least one S/G >[51%] 29%

- Control pumps and align valves as necessary to maintain S/G level

[51%] 29% to 65 %

RO Verify RCP Seal Cooling:

- Labyrinth seal DP > 20 inches or

- Component cooling to RCP thermal barrier-NORMAL RO/BOP Verify RCS Temperature Control:

- RCS wide range cold leg temperatures less than or equal to 547 ºF AND STABLE

- If not stable and trending lower, stop dumping steam and control AFW flow to maintain greater than or equal to 200 gpm until at least one S/G level > [51%] 29%.

- If SG levels are within the required band, then AFW flows should be reduced to minimize the RCS cooldown.

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 28 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior RO Check PORVs BOTH SHUT RO Verify PZR spray valves- SHUT

- Normal spray valves BOTH SHUT

- Auxiliary spray valves SHUT RO Check if RCPs should remain running

- Check RCS subcooling > [60 ºF] 30 ºF.

Both RCPs must be tripped at this time if not previously tripped per the Foldout page criteria.

DOS Inform STA to commence monitoring critical safety functions per CSP-ST.0 (Monitoring already in progress after first transition out of EOP-0 due to ATWS)

RO/BOP Verify Containment sump recirculation not required:

- RWST level greater than or equal to 60 %

- RCS pressure > [425 psig] 200 psig CREW Check Secondary system Intact.

CREW Check if S/G tubes are Intact.

CREW Check if RCS is Intact Inside Containment

- Check containment radiation levels NORMAL - they are not.

- Check containment sump A level NORMAL - it is not.

- Check containment pressure NORMAL - it is not.

Op-Test No: 2003301 Scenario No: 1 Event No: 6, 7 Page 29 of 28 Event

Description:

ATWS Event and Safety Injection Pump 1P-15B auto start failure with previous SBLOCA.

Time Position Applicants Actions or Behavior DOS Transition to EOP-1, Loss of Reactor or Secondary Coolant.

Upon transition to EOP-1 (or CSP-P.1 if a Red path exists) and at discretion of Lead Examiner, terminate the scenario.

Inform the Examinees that they are to remain in the simulator until any evaluator follow-up questions are answered. Do not discuss any scenario related events.