ML040650308

From kanterella
Jump to navigation Jump to search

Technical Specifications, Amd 212 and 206
ML040650308
Person / Time
Site: Catawba  Duke Energy icon.png
Issue date: 03/04/2004
From:
NRC/NRR/DLPM
To:
Peters, S, NRR/DLPM/301-415-1842
Shared Package
040650012 List:
References
TAC MB8106, TAC MB8107
Download: ML040650308 (39)


Text

RCS P/T Limits 3.4.3 MATERIALS PROPERTY BASIS Limiting Material: Lower Shell Forging 04 and Intermediate Shell Forging 05 Liniiting ART at 34 EFPY: I14-T, 420 F 3/4-T, 31°F 2500 Ilil l-- -

200041ll

- Unacceptable _

Operation -

U, CO Heatup Rate Up To 60 °F/hr _

-0 100(

Closure Head and F -

Vessel Flange m -

0 50 100 150 200 250 300 350 400 450 500 Indicated Temperature (Deg. F)

Figure 3.4.3-1 (UNIT 1 ONLY)

RCS Heatup Limitations Catawba Units 1 and 2 3.4.3-3 Amendment Nos. 212/206

RCS P/T Limits 3.4.3 MATERIALS PROPERTY BASIS Limiting Material: Intermediate Shell, B8605-2 Limiting ART at 34 EFPY: 1/4-T, 121OF 3/4-T, 106 0 F 2500 U) en Ln a)

CL)

I Cn cit 0 50 100 150 200 250 300 350 400 450 500 Indicated Temperature (Deg. F)

Figure 3.4.3-1 (UNIT 2 ONLY)

RCS Heatup Limitations Catawba Units 1 and 2 3.4.3-4 Amendment Nos. 212/206

RCS P/T Limits 3.4.3 MATERIALS PROPERTY BASIS Limiting Material: Lower Shell Forging 04 and Intermediate Shell Forging 05 Limiting ART at 34 EFPY: 1/4-T, 420F 3/4-T, 310 F

-~ Unacceptable IOperation Acceptable -

( 1 Operation CDL (D10 Cooldown Rates (0F/hr) - ------

20 50-0015020-25-30-30-00-5050

-- - - -- - -- Closure Head & -

--- ------ Vessel Flange Lmit -

0 0 50 100 150 200 250 300 350 400 450 500 Indicated Temperature (Deg. F)

Figure 3.4.3-2 (UNIT I ONLY)

RCS Cooldown Limitations Catawba Units 1 and 2 3.4.3-5 Amendment Nos. 212/206

RCS P/T Limits 3.4.3 MATERIALS PROPERTY BASIS Limiting Material: Intermediate Shell, B8605-2 Limiting ART at 34 EFPY: 1/4-T, 121°F 3/4-T, 106°F 2500 11I j I... .. ... II..~41~iII#:1f-1]1-1 i~jI 4II 1 1$-- IIi1-14 tli- .. . . . . . .

-- 2000-

._4 Unacceptable 0- Operation Acceptable a) Operation

, 1500-cn C,) . I .-  : 1-:

0) cn Cooldown Rates (°F/hr)

-o 1000 0, 20, 40, 60, & 100

0) - 1. q-0

. 5 I I I I I I I I I C 500- -'F-.

Closure Head &

Vessel Flange Limit 0 -4F-11-1 11 , . , l l l l l l l l l l i

0 50 100 150 200 250 300 350 400 450 500 Indicated Temperature (Deg. F)

Figure 3.4.3-2 (UNIT 2 ONLY)

RCS Cooldown Limitations Catawba Units I and 2 3.4.3-6 Amendment Nos. 212/206

RCS Loops - MODES 4 3.4.6 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.6 RCS Loops-MODE 4 LCO 3.4.6 Two loops consisting of any combination of RCS loops and residual heat removal (RHR) loops shall be OPERABLE, and one loop shall be in operation.


NOTES-------------------------------------------------

1. All reactor coolant pumps (RCPs) and RHR pumps may be de-energized for < 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> per 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> period provided:
a. No operations are permitted that would cause introduction of coolant into the RCS with boron concentration less than required to meet the SDM of LCO 3.1.1 and maintain kenf <

0.99; and

b. Core outlet temperature is maintained at least 100 F below saturation temperature.
2. No RCP shall be started with any RCS cold leg temperature < 210 0 F l unless the secondary side water temperature of each steam generator (SG) is < 500F above each of the RCS cold leg temperatures.

APPLICABILITY: MODE 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One RCS loop A.1 Initiate action to restore a Immediately OPERABLE. second loop to OPERABLE status.

AND Two RHR loops inoperable.

(continued)

Catawba Units I and 2 3.4.6-1 Amendment Nos. 212/206

RCS Loops - MODES 5, Loops Filled 3.4.7 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.7 RCS Loops -MODE 5, Loops Filled LCO 3.4.7 One residual heat removal (RHR) loop shall be OPERABLE and in operation, and either:

a. One additional RHR loop shall be OPERABLE; or
b. The secondary side water level of at least two steam generators (SGs) shall be > 12% narrow range.

NOTES-----------------------------------------

1. The RHR pump of the loop in operation may be de-energized for

< 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> per 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> period provided:

a. No operations are permitted that would cause introduction of coolant into the RCS with boron concentration less than required to meet the SDM of LCO 3.1.1; and
b. Core outlet temperature is maintained at least 10F below saturation temperature.
2. One required RHR loop may be inoperable for up to 2 hours0.0833 days <br />0.0119 weeks <br />0.00274 months <br /> for surveillance testing provided that the other RHR loop is OPERABLE and in operation.
3. No reactor coolant pump shall be started with one or more RCS cold leg temperatures < 21 0F unless the secondary side water temperature of each SG is < 50'F above each of the RCS cold leg temperatures.
4. All RHR loops may be removed from operation during planned heatup to MODE 4 when at least one RCS loop is in operation.

APPLICABILITY: MODE 5 with RCS loops filled.

Catawba Units 1 and 2 3.4.7-1 Amendment Nos. 212/206

Pressurizer Safety Valves 3.4.10 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.10 Pressurizer Safety Valves LCO 3.4.10 Three pressurizer safety valves shall be OPERABLE with lift settings

> 2435 psig and < 2559 psig.

APPLICABILITY: MODES 1, 2, and 3, MODE 4 with all RCS cold leg temperatures > 210'F. I


NOTE--------------------------------------------

The lift settings are not required to be within the LCO limits during MODES 3 and 4 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions. This exception is allowed for 54 hours2.25 days <br />0.321 weeks <br />0.074 months <br /> following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One pressurizer safety A.1 Restore valve to 15 minutes valve inoperable. OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours0.25 days <br />0.0357 weeks <br />0.00822 months <br /> associated Completion Time not met. AND OR B.2 Be in MODE 4 with any 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> RCS cold leg temperatures Two or more pressurizer < 21 00F. I safety valves inoperable.

Catawba Units I and 2 3.4.1 0-1 Amendment Nos. 212/206

LTOP System 3.4.12 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.12 Low Temperature Overpressure Protection (LTOP) System LCO 3.4.12 An LTOP System shall be OPERABLE with a maximum of two pumps (charging pumps, safety injection pumps, or charging and safety injection pumps) capable of injecting into the RCS, the accumulators isolated, reactor coolant pump operation limited as specified in Table 3.4.12-1 and either a, b, or c below: I

a. Two power operated relief valves (PORVs) with nominal lift setting =

400 psig (as left calibrated), allowable value < 425 psig (as found),

with RCS cold leg temperature > 700F; or I

b. Two residual heat removal (RHR) suction relief valves with lift settings > 417 psig and < 509 psig with an indicated RCS cold leg temperature > 700F; or
c. A combination of any one PORV and one RHR suction relief valve, each with lift settings as described above.

APPLICABILITY: MODE 4 when any RCS cold leg temperature is < 210 0F, I MODE 5, MODE 6 when the reactor vessel head is on.


NOTE--------------------------------

Accumulator isolation is only required when accumulator pressure is greater than or equal to the maximum RCS pressure for the existing RCS cold leg temperature allowed by the P/T limit curves provided in Specification 3.4.3.

Catawba Units 1 and 2 3.4.1 2-1 Amendment Nos. 212/206

LTOP System 3.4.12 ACTIONS

-NOT E------------------------------------

LCO 3.0.4 is not applicable.

CONDITION REQUIRED ACTION COMPLETION TIME A. More than two pumps A.1 Initiate action to verify a Immediately (charging, safety maximum of two pumps injection, or charging are capable of injecting and safety injection) into the RCS.

capable of injecting into the RCS.

B. Reactor coolant pump B.1 Initiate action to limit pump Immediately operation not limited as operation as specified in specified in Table Table 3.4.12-1.

3.4.12-1.

C. An accumulator not C.1 Isolate affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> isolated when the accumulator.

accumulator pressure is greater than or equal to the maximum RCS pressure for existing cold leg temperature allowed in Specification 3.4.3.

(continued)

Catawba Units 1 and 2 3.4.1 2-2 Amendment Nos. 212/206

LTOP System 3.4.12 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. Required Action and D.1 Increase RCS cold leg 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> associated Completion temperature to > 21 0F. I Time of Condition C not met. OR D.2 Depressurize affected 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> accumulator to less than the maximum RCS pressure for existing cold leg temperature allowed by Specification 3.4.3.

E. One required RCS relief E.1 Restore required RCS 7 days valve inoperable in relief valve to OPERABLE MODE 4. status.

F. One required RCS relief F.1 Restore required RCS 24 hours1 days <br />0.143 weeks <br />0.0329 months <br /> valve inoperable in MODE 5 or 6.

relief valve to OPERABLE status.

I (continued)

Catawba Units 1 and 2 3.4.1 2-3 Amendment Nos. 212/206

LTOP System 3.4.12 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME G. Two required RCS relief G.1 Initiate action to ensure a Immediately valves inoperable. maximum of one charging pump or one safety OR injection pump is capable of injecting into the RCS.

Required Action and associated Completion AND Time of Condition A, D, E, or F, not met. G.2 Depressurize RCS and 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> establish RCS vent of > 4.5 OR square inches.

LTOP System AND inoperable for any reason other than G.3 Verify RCS vent > 4.5 Once per 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> Condition A, C, D, E, or square inches is open. for unlocked vent F. valve(s)

AND Once per 31 days for locked open vent valve(s)

Catawba Units 1 and 2 3.4.12-4 Amendment Nos. 212/206

LTOP System 3.4.12 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.1 2.1 Verify a maximum of two pumps (charging, safety 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> injection, or charging and safety injection) are capable of injecting into the RCS.

SR 3.4.12.2 Verify each accumulator is isolated. 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> SR 3.4.12.3 Verify RHR suction isolation valves are open for each 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> required RHR suction relief valve.

SR 3.4.12.4 Verify PORV block valve is open for each required 72 hours3 days <br />0.429 weeks <br />0.0986 months <br /> PORV.

SR 3.4.12.5 -------------------------------- NOTE----------------------------------

Not required to be met until 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> after decreasing RCS cold leg temperature to < 210F. I Perform a COT on each required PORV, excluding 31 days actuation.

SR 3.4.12.6 Perform CHANNEL CALIBRATION for each required 18 months PORV actuation channel.

SR 3.4.12.7 Verify associated RHR suction isolation valves are open, 31 days with operator power removed and locked in removed position, for each required RHR suction relief valve.

Catawba Units 1 and 2 3.4.1 2-5 Amendment Nos. 212/206

LTOP System 3.4.12 Table 3.4.12-1 (Page 1 of 1)

(UNIT 1 ONLY)

Reactor Coolant Pump Operating Restrictions for Low Temperature Overpressure Protection Reactor Coolant System Cold Leg Maximum Number of Pumps Allowed in Temperature Operation

> 70'F 2 I

> 126 0 F 4 I Catawba Units 1 and 2 3.4.1 2-6 Amendment Nos. 212/206

LTOP System 3.4.12 Table 3.4.12-1 (Page 1 of 1)

(UNIT 2 ONLY)

Reactor Coolant Pump Operating Restrictions for Low Temperature Overpressure Protection Reactor Coolant System Cold Leg Maximum Number of Pumps Allowed in Temperature Operation

> 70'F 1 I

> 140'F 4 I Catawba Units 1 and 2 3.4.12-7 Amendment Nos. 212/206

RCS P/T Limits B 3.4.3 B 3.4 REACTOR COOLANT SYSTEM (RCS)

B 3.4.3 RCS Pressure and Temperature (PIT) Limits BASES BACKGROUND All components of the RCS are designed to withstand effects of cyclic loads due to system pressure and temperature changes. These loads are introduced by startup (heatup) and shutdown (cooldown) operations, power transients, and reactor trips. This LCO limits the pressure and temperature changes during RCS heatup and cooldown, within the design assumptions and the stress limits for cyclic operation.

This Specification contains P/T limit curves for heatup, cooldown, inservice leak and hydrostatic (ISLH) testing, and data for the maximum rate of change of reactor coolant temperature.

Each PIT limit curve defines an acceptable region for normal operation.

The usual use of the curves is operational guidance during heatup or cooldown maneuvering, when pressure and temperature indications are monitored and compared to the applicable curve to determine that operation is within the allowable region.

The LCO establishes operating limits that provide a margin to brittle failure of the reactor vessel and piping of the reactor coolant pressure boundary (RCPB). The vessel is the component most subject to brittle failure, and the LCO limits apply mainly to the vessel. The limits do not apply to the pressurizer, which has different design characteristics and operating functions.

10 CFR 50, Appendix G (Ref. 1), requires the establishment of PIT limits for specific material fracture toughness requirements of the RCPB materials. Reference 1 requires an adequate margin to brittle failure during normal operation, anticipated operational occurrences, and system hydrostatic tests. It mandates the use of the American Society of Mechanical Engineers (ASME) Code, Section 1I1,Appendix G (Ref. 2).

The neutron embrittlement effect on the material toughness is reflected by increasing the nil ductility reference temperature (RTNDT) as exposure to neutron fluence increases.

The actual shift in the RTNDT of the vessel material will be established periodically by removing and evaluating the irradiated reactor vessel material specimens, in accordance with ASTM E 185 (Ref. 3) and Appendix H of 10 CFR 50 (Ref. 4). The operating P/T limit curves will be adjusted, as necessary, based on the evaluation findings and the recommendations of Regulatory Guide 1.99 (Ref. 5).

Catawba Units 1 and 2 B 3.4.3-1 Revision No. 1

RCS P/T Limits B 3.4.3 BASES BACKGROUND (continued)

A second program that employs excore cavity dosimetry to monitor the reactor vessel neutron fluence will be installed in each unit. This program will meet the requirements of 10 CFR 50 Appendix H.

The P/T limit curves are composite curves established by superimposing limits derived from stress analyses of those portions of the reactor vessel and head that are the most restrictive. At any specific pressure, temperature, and temperature rate of change, one location within the reactor vessel will dictate the most restrictive limit. Across the span of the P/T limit curves, different locations are more restrictive, and, thus, the curves are composites of the most restrictive regions.

The heatup curve represents a different set of restrictions than the cooldown curve because the directions of the thermal gradients through the vessel wall are reversed. The thermal gradient reversal alters the location of the tensile stress between the outer and inner walls.

The criticality limit curve includes the Reference 1 requirement that it be

> 400F above the heatup curve or the cooldown curve, and not less than the minimum permissible temperature for ISLH testing. However, the criticality curve is not operationally limiting; a more restrictive limit exists in LCO 3.4.2, "RCS Minimum Temperature for Criticality."

The consequence of violating the LCO limits is that the RCS has been operated under conditions that can result in brittle failure of the RCPB, possibly leading to a nonisolable leak or loss of coolant accident. In the event these limits are exceeded, an evaluation must be performed to determine the effect on the structural integrity of the RCPB components.

The ASME Code, Section Xi, Appendix E (Ref. 6), provides a recommended methodology for evaluating an operating event that causes an excursion outside the limits.

APPLICABLE The P/T limits are not derived from Design Basis Accident (DBA)

SAFETY ANALYSES analyses. They are prescribed during normal operation to avoid encountering pressure, temperature, and temperature rate of change conditions that might cause undetected flaws to propagate and cause nonductile failure of the RCPB, an unanalyzed condition. Although the P/T limits are not derived from any DBA, the P/T limits are acceptance limits since they preclude operation in an unanalyzed condition.

RCS P/T limits satisfy Criterion 2 of 10 CFR 50.36 (Ref. 7).

Catawba Units 1 and 2 B 3.4.3-2 Revision No. 1

RCS P/T Limits B 3.4.3 BASES LCO The two elements of this LCO are:

a. The limit curves for heatup, cooldown, and ISLH testing; and
b. Limits on the rate of change of temperature.

The LCO limits apply to all components of the RCS, except the pressurizer. These limits define allowable operating regions and permit a large number of operating cycles while providing a wide margin to nonductile failure.

The limits for the rate of change of temperature control the thermal gradient through the vessel wall and are used as inputs for calculating the heatup, cooldown, and ISLH testing P/T limit curves. Thus, the LCO for the rate of change of temperature restricts stresses caused by thermal gradients and also ensures the validity of the P/T limit curves.

Violating the LCO limits places the reactor vessel outside of the bounds of the stress analyses and can increase stresses in other RCPB components. The consequences depend on several factors, as follows:

a. The severity of the departure from the allowable operating P/T regime or the severity of the rate of change of temperature;
b. The length of time the limits were violated (longer violations allow the temperature gradient in the thick vessel walls to become more pronounced); and
c. The existences, sizes, and orientations of flaws in the vessel material.

APPLICABILITY The RCS P/T limits LCO provides a definition of acceptable operation for prevention of nonductile failure in accordance with 10 CFR 50, Appendix G (Ref. 1). Although the P/T limits were developed to provide guidance for operation during heatup or cooldown (MODES 3, 4, and 5) or ISLH testing, their Applicability is at all times in keeping with the concern for nonductile failure. The limits do not apply to the pressurizer.

During MODES 1 and 2, other Technical Specifications provide limits for operation that can be more restrictive than or can supplement these P/T limits. LCO 3.4.1, "RCS Pressure, Temperature, and Flow Departure from Nucleate Boiling (DNB) Limits"; LCO 3.4.2, NRCS Minimum Temperature for Criticality"; and Safety Limit 2.1, "Safety Limits," also provide operational restrictions for pressure and temperature and maximum pressure. Furthermore, MODES 1 and 2 are above the temperature range of concern for nonductile failure, and stress analyses have been performed for normal maneuvering profiles, such as power ascension or Catawba Units 1 and 2 B 3.4.3-3 Revision No. 1

RCS P/T Limits B 3.4.3 BASES APPLICABILITY (continued) descent.

ACTIONS A.1 and A.2 Operation outside the P/T limits during MODE 1, 2, 3, or 4 must be corrected so that the RCPB is returned to a condition that has been verified by stress analyses.

The 30 minute Completion Time reflects the urgency of restoring the parameters to within the analyzed range. Most violations will not be severe, and the activity can be accomplished in this time in a controlled manner.

Besides restoring operation within limits, an evaluation is required to determine if RCS operation can continue. The evaluation must verify the RCPB integrity remains acceptable and must be completed before continuing operation. Several methods may be used, including comparison with pre-analyzed transients in the stress analyses, new analyses, or inspection of the components.

ASME Code, Section Xl, Appendix E (Ref. 6), may be used to support the evaluation. However, its use is restricted to evaluation of the vessel beltline.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time is reasonable to accomplish the evaluation.

The evaluation for a mild violation is possible within this time, but more severe violations may require special, event specific stress analyses or inspections. A favorable evaluation must be completed before continuing to operate.

Condition A is modified by a Note requiring Required Action A.2 to be completed whenever the Condition is entered. The Note emphasizes the need to perform the evaluation of the effects of the excursion outside the allowable limits. Restoration alone per Required Action A.1 is insufficient because higher than analyzed stresses may have occurred and may have affected the RCPB integrity.

B.1 and B.2 If a Required Action and associated Completion Time of Condition A are not met, the plant must be placed in a lower MODE because either the RCS remained in an unacceptable P/T region for an extended period of increased stress or a sufficiently severe event caused entry into an unacceptable region. Either possibility indicates a need for more careful Catawba Units 1 and 2 B 3.4.3-4 Revision No. 1

RCS PIT Limits B 3.4.3 BASES ACTIONS (continued) examination of the event, best accomplished with the RCS at reduced pressure and temperature. In reduced pressure and temperature conditions, the possibility of propagation with undetected flaws is decreased.

If the required restoration activity cannot be accomplished within 30 minutes, Required Action B.1 and Required Action B.2 must be implemented to reduce pressure and temperature.

If the required evaluation for continued operation cannot be accomplished within 72 hours3 days <br />0.429 weeks <br />0.0986 months <br /> or the results are indeterminate or unfavorable, action must proceed to reduce pressure and temperature as specified in Required Action B.1 and Required Action B.2. A favorable evaluation must be completed and documented before returning to operating pressure and temperature conditions.

Pressure and temperature are reduced by bringing the plant to MODE 3 within 6 hours0.25 days <br />0.0357 weeks <br />0.00822 months <br /> and to MODE 5 with RCS pressure < 500 psig within 36 hours1.5 days <br />0.214 weeks <br />0.0493 months <br />.

The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

C.1 and C.2 Actions must be initiated immediately to correct operation outside of the P/T limits at times other than when in MODE 1, 2, 3, or 4, so that the RCPB is returned to a condition that has been verified by stress analysis.

The immediate Completion Time reflects the urgency of initiating action to restore the parameters to within the analyzed range. Most violations will not be severe, and the activity can be accomplished in this time in a controlled manner.

Besides restoring operation within limits, an evaluation is required to determine if RCS operation can continue. The evaluation must verify that the RCPB integrity remains acceptable and must be completed prior to entry into MODE 4. Several methods may be used, including comparison with pre-analyzed transients in the stress analyses, or inspection of the components.

ASME Code, Section Xl, Appendix E (Ref. 6), may be used to support the evaluation. However, its use is restricted to evaluation of the vessel beltline.

Catawba Units 1 and 2 B 3.4.3-5 Revision No. 1

RCS P/T Limits B 3.4.3 BASES ACTIONS (continued)

Condition C is modified by a Note requiring Required Action C.2 to be completed whenever the Condition is entered. The Note emphasizes the need to perform the evaluation of the effects of the excursion outside the allowable limits. Restoration alone per Required Action C.1 is insufficient because higher than analyzed stresses may have occurred and may have affected the RCPB integrity.

SURVEILLANCE SR 3.4.3.1 REQUIREMENTS Verification that operation is within the specified limits is required every 30 minutes when RCS pressure and temperature conditions are undergoing planned changes. This Frequency is considered reasonable in view of the control room indication available to monitor RCS status.

Also, since temperature rate of change limits are specified in hourly increments, 30 minutes permits assessment and correction for minor deviations within a reasonable time.

Surveillance for heatup, cooldown, or ISLH testing may be discontinued when the definition given in the relevant plant procedure for ending the activity is satisfied.

This SR is modified by a Note that only requires this SR to be performed during system heatup, cooldown, and ISLH testing. No SR is given for criticality operations because LCO 3.4.2 contains a more restrictive requirement.

REFERENCES 1. 10 CFR 50, Appendix G.

2. ASME, Boiler and Pressure Vessel Code,Section III, Appendix G.
3. ASTM E 185-73, 1973 (Unit 1), E 185-82, 1982 (Unit 2).
4. 10 CFR 50, Appendix H.
5. Regulatory Guide 1.99, Revision 2, May 1988.
6. ASME, Boiler and Pressure Vessel Code, Section Xi, Appendix E.
7. 10 CFR 50.36, Technical Specifications, (c)(2)(ii).

Catawba Units 1 and 2 B 3.4.3-6 Revision No. 1

RCS Loops - MODE 4 B 3.4.6 BASES LCO (continued) performed during the startup testing program is the validation of rod drop times during cold conditions, both with and without flow. The no flow test may be performed in MODE 3, 4, or 5 and requires that the pumps be stopped for a short period of time. The Note permits the de-energizing of the pumps in order to perform this test and validate the assumed analysis values. If changes are made to the RCS that would cause a change to the flow characteristics of the RCS, the input values must be revalidated by conducting the test again. The 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> time period is adequate to perform the test, and operating experience has shown that boron stratification is not a problem during this short period with no forced flow.

Utilization of Note 1 is permitted provided the following conditions are met along with any other conditions imposed by initial startup test procedures:

a. No operations are permitted that would dilute the RCS boron concentration with coolant with boron concentrations less than required to meet SDM of LCO 3.1.1 and maintain keff < 0-99, therefore maintaining an adequate margin to criticality. Boron reduction with coolant at boron concentrations less than required to assure SDM and maintain ketf < 0.99 is prohibited because a uniform concentration distribution throughout the RCS cannot be ensured when in natural circulation; and
b. Core outlet temperature is maintained at least I 0F below saturation temperature, so that no vapor bubble may form and possibly cause a natural circulation flow obstruction.

Note 2 requires that the secondary side water temperature of each SG be

< 501F above each of the RCS cold leg temperatures before the start of an RCP with any RCS cold leg temperature < 210cF. This restraint is to prevent a low temperature overpressure event due to a thermal transient when an RCP is started.

An OPERABLE RCS loop comprises an OPERABLE RCP and an OPERABLE SG in accordance with the Steam Generator Tube Surveillance Program, which has the minimum water level specified in SR 3.4.6.2. The water level is maintained by an OPERABLE AFW train in accordance with LCO 3.7.5, "Auxiliary Feedwater System."

Similarly for the RHR System, an OPERABLE RHR loop comprises an OPERABLE RHR pump capable of providing forced flow to an OPERABLE RHR heat exchanger. RCPs and RHR pumps are OPERABLE if they are capable of being powered and are able to provide forced flow if required.

Catawba Units 1 and 2 B 3.4.6-2 Revision No. 2

RCS Loops - MODE 5, Loops Filled B 3.4.7 BASES LCO (continued) reactor coolant pump (RCP) with an RCS cold leg temperature < 21 0F.

This restriction is to prevent a low temperature overpressure event due to a thermal transient when an RCP is started.

Note 4 provides for an orderly transition from MODE 5 to MODE 4 during a planned heatup by permitting removal of RHR loops from operation when at least one RCS loop is in operation. This Note provides for the transition to MODE 4 where an RCS loop is permitted to be in operation and replaces the RCS circulation function provided by the RHR loops.

An OPERABLE RHR loop is comprised of an OPERABLE RHR pump capable of providing forced flow to an OPERABLE RHR heat exchanger.

If not in its normal RHR alignment from the RCS hot leg and returning to the RCS cold legs, the required RHR loop is OPERABLE provided the system may be placed in service from the control room, or may be placed in service in a short period of time by actions outside the control room and there are no restraints to placing the equipment in service. RHR pumps are OPERABLE if they are capable of being powered and are able to provide flow if required. An OPERABLE SG can perform as a heat sink when it has an adequate water level and is OPERABLE in accordance with the Steam Generator Tube Surveillance Program.

APPLICABILITY In MODE 5 with RCS loops filled, this LCO requires forced circulation of the reactor coolant to remove decay heat from the core and to provide proper boron mixing. One loop of RHR provides sufficient circulation for these purposes. However, one additional RHR loop is required to be OPERABLE, or the secondary side narrow range water level of at least two SGs is required to be 2 12%.

Operation in other MODES is covered by:

LCO 3.4.4, "RCS Loops-MODES 1 and 2";

LCO 3.4.5, "RCS Loops-MODE 3";

LCO 3.4.6, "RCS Loops-MODE 4";

LCO 3.4.8, 'RCS Loops-MODE 5, Loops Not Filled";

LCO 3.4.17 "RCS Loops-Test Exceptions";

LCO 3.9.4, "Residual Heat Removal (RHR) and Coolant Circulation-High Water Level" (MODE 6); and LCO 3.9.5, "Residual Heat Removal (RHR) and Coolant Circulation-Low Water Level" (MODE 6).

Catawba Units 1 and 2 B 3.4.7-3 Revision No. 3

Pressurizer Safety Valves

.B3.4.10 B 3.4 REACTOR COOLANT SYSTEM (RCS)

B 3.4.10 Pressurizer Safety Valves BASES BACKGROUND The pressurizer safety valves provide, in conjunction with the Reactor Protection System, overpressure protection for the RCS. The pressurizer safety valves are totally enclosed pop type, spring loaded, self actuated valves with backpressure compensation. The safety valves are designed to prevent the system pressure from exceeding the system Safety Limit (SL), 2735 psig, which is 110% of the design pressure.

Because the safety valves are totally enclosed and self actuating, they are considered independent components. The relief capacity for each valve, 420,000 lb/hr, is based on postulated overpressure transient conditions resulting from a locked rotor. This event results in the maximum surge rate into the pressurizer, which specifies the minimum relief capacity for the safety valves. The discharge flow from the pressurizer safety valves is directed to the pressurizer relief tank. This discharge flow is indicated by an increase in temperature downstream of the pressurizer safety valves or increase in the pressurizer relief tank temperature or level.

Overpressure protection is required in MODES 1, 2, 3, 4, and 5; however, in MODE 4, with one or more RCS cold leg temperatures 5 21 00 F, and MODE 5 and MODE 6 with the reactor vessel head on, overpressure protection is provided by operating procedures and by meeting the requirements of LCO 3.4.12, 'Low Temperature Overpressure Protection (LTOP) System."

The upper pressure limit of +3% is consistent with the ASME requirement (Ref. 1) for lifting pressures above 1000 psig. The lower pressure limit of

-2% is selected such that the minimum LCO lift pressure remains above the uncertainty adjusted high pressure reactor trip setpoint. The lift setting is for the ambient conditions associated with MODES 1, 2, and 3. This requires either that the valves be set hot or that a correlation between hot and cold settings be established.

The pressurizer safety valves are part of the primary success path and mitigate the effects of postulated accidents. OPERABILITY of the safety valves ensures that the RCS pressure will be limited to 110% of design pressure. The consequences of exceeding the American Society of Catawba Units 1 and 2 B 3.4.1 0-1 Revision No. I

Pressurizer Safety Valves B 3.4.1 0 BASES LCO (continued)

The limit protected by this Specification is the reactor coolant pressure boundary (RCPB) SL of 110% of design pressure. Inoperability of one or more valves could result in exceeding the SL if a transient were to occur.

The consequences of exceeding the ASME pressure limit could include damage to one or more RCS components, increased leakage, or additional stress analysis being required prior to resumption of reactor operation.

APPLICABILITY In MODES 1, 2, and 3, and portions of MODE 4 above the LTOP arming temperature, OPERABILITY of three valves is required because the combined capacity is required to keep reactor coolant pressure below 110% of its design value during certain accidents. MODE 3 and portions of MODE 4 are conservatively included, although the listed accidents may not require the safety valves for protection.

The LCO is not applicable in MODE 4 when all RCS cold leg temperatures are

  • 210F or in MODE 5 because LTOP is provided.

Overpressure protection is not required in MODE 6 with the reactor vessel head removed.

The Note allows entry into MODES 3 and 4 with the lift settings outside the LCO limits. This permits testing and examination of the safety valves at high pressure and temperature near their normal operating range, but only after the valves have had a preliminary cold setting. The cold setting gives assurance that the valves are OPERABLE near their design condition. Only one valve at a time will be removed from service for testing. The 54 hour6.25e-4 days <br />0.015 hours <br />8.928571e-5 weeks <br />2.0547e-5 months <br /> exception is based on 18 hour2.083333e-4 days <br />0.005 hours <br />2.97619e-5 weeks <br />6.849e-6 months <br /> outage time for each of the three valves. The 18 hour2.083333e-4 days <br />0.005 hours <br />2.97619e-5 weeks <br />6.849e-6 months <br /> period is derived from operating experience that hot testing can be performed in this timeframe.

ACTIONS A.1 With one pressurizer safety valve inoperable, restoration must take place within 15 minutes. The Completion Time of 15 minutes reflects the importance of maintaining the RCS Overpressure Protection System. An inoperable safety valve coincident with an RCS overpressure event could challenge the integrity of the pressure boundary.

Catawba Units 1 and 2 B 3.4.1 0-3 Revision No. 1

Pressurizer Safety Valves B 3.4.1 0 BASES ACTIONS (continued)

B.1 and B.2 If the Required Action of A.1 cannot be met within the required Completion Time or if two or more pressurizer safety valves are inoperable, the plant must be brought to a MODE in which the requirement does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 6 hours0.25 days <br />0.0357 weeks <br />0.00822 months <br /> and to MODE 4 with any RCS cold leg temperatures < 210OF within 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems. With any RCS cold leg temperatures at or below 210 0F, overpressure protection is provided by the LTOP System. The change from MODE 1, 2, or 3 to MODE 4 reduces the RCS energy (core power and pressure), lowers the potential for large pressurizer insurges, and thereby removes the need for overpressure protection by three pressurizer safety valves.

SURVEILLANCE SR 3.4.10.1 REQUIREMENTS SRs are specified in the Inservice Testing Program. Pressurizer safety valves are to be tested in accordance with the requirements of Section XI of the ASME Code (Ref. 4), which provides the activities and Frequencies necessary to satisfy the SRs. No additional requirements are specified.

The pressurizer safety valve setpoint is +3% and -2% of the nominal setpoint of 2485 psig for OPERABILITY; however, the valves are reset to

+/- 1% during the Surveillance to allow for drift.

REFERENCES 1. ASME, Boiler and Pressure Vessel Code, Section IlIl.

2. UFSAR, Chapter 15.
3. UFSAR, Section 5.2.
4. ASME, Boiler and Pressure Vessel Code, Section Xl.
5. 10 CFR 50.36, Technical Specifications, (c)(2)(ii).

Catawba Units 1 and 2 B 3.4.10-4 Revision No. 1

Pressurizer PORVs B 3.4.1 1 BASES APPLICABILITY (continued)

Pressure increases are less prominent in MODE 3 because the core input energy is reduced, but the RCS pressure is high. Therefore, the LCO is applicable in MODES 1, 2, and 3. The LCO is not applicable in MODE 4 when both pressure and core energy are decreased and the pressure surges become much less significant. The PORV setpoint is reduced for LTOP in MODES 4 < 210F, 5, and 6 with the reactor vessel head in place. LCO 3.4.12 addresses the PORV requirements in these MODES.

ACTIONS Note 1 has been added to clarify that all pressurizer PORVs are treated as separate entities, each with separate Completion Times (i.e., the Completion Time is on a component basis). The exception for LCO 3.0.4, Note 2, permits entry into MODES 1, 2, and 3 to perform cycling of the PORVs or block valves to verify their OPERABLE status. Testing is not performed in lower MODES.

A.1 With the PORVs inoperable and capable of being manually cycled, either the PORVs must be restored or the flow path isolated within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. The block valves should be closed but power must be maintained to the associated block valves, since removal of power would render the block valve inoperable. Although a PORV may be designated inoperable, it may be able to be manually opened and closed, and therefore, able to perform its function. PORV inoperability may be due to seat leakage or other causes that do not prevent manual use and do not create a possibility for a small break LOCA. For these reasons, the block valve may be closed but the Action requires power be maintained to the valve. This Condition is only intended to permit operation of the plant for a limited period of time not to exceed the next refueling outage (MODE 6) so that maintenance can be performed on the PORVs to eliminate the problem condition.

Normally, the PORVs should be available for automatic mitigation of overpressure events and should be returned to OPERABLE status prior to entering startup (MODE 2). (This statement simply describes normal plant operations.)

Quick access to the PORV for pressure control can be made when power remains on the closed block valve. The Completion Time of 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> is based on plant operating experience that has shown that minor problems can be corrected or closure accomplished in this time period.

Catawba Units 1 and 2 B 3.4.1 1-3 Revision No. 2

LTOP System B 3.4.12 B 3.4 REACTOR COOLANT SYSTEM (RCS)

B 3.4.12 Low Temperature Overpressure Protection (LTOP) System BASES BACKGROUND The LTOP System controls RCS pressure at low temperatures so the integrity of the reactor coolant pressure boundary (RCPB) is not compromised by violating the pressure and temperature (PIT) limits of 10 CFR 50, Appendix G (Ref. 1). The reactor vessel is the limiting RCPB component for demonstrating such protection. This specification provides the maximum allowable actuation logic setpoints for the power operated relief valves (PORVs) and LCO 3.4.3, "RCS Pressure and Temperature (P/T) Limits," provides the maximum RCS pressure for the existing RCS cold leg temperature during cooldown, shutdown, and heatup to meet the Reference 1 requirements during the LTOP MODES.

The reactor vessel material is less tough at low temperatures than at normal operating temperature. As the vessel neutron exposure accumulates, the material toughness decreases and becomes less resistant to pressure stress at low temperatures (Ref. 2). RCS pressure, therefore, is maintained low at low temperatures and is increased only as temperature is increased.

The potential for vessel overpressurization is most acute when the RCS is water solid, occurring only while shutdown; a pressure fluctuation can occur more quickly than an operator can react to relieve the condition.

Exceeding the RCS P/T limits by a significant amount could cause brittle cracking of the reactor vessel. LCO 3.4.3 requires administrative control of RCS pressure and temperature during heatup and cooldown to prevent exceeding the specified limits.

This LCO provides RCS overpressure protection by having a minimum coolant input capability and having adequate pressure relief capacity.

Limiting coolant input capability requires all but two pumps incapable of I injection into the RCS, isolating the accumulators, and limiting reactor coolant pump operation at low temperatures. The pressure relief capacity requires two redundant RCS relief valves. One RCS relief valve is the I overpressure protection device that acts to terminate an increasing pressure event.

With minimum coolant input capability, the ability to provide core coolant addition is restricted. The LCO does not require the makeup control system deactivated or the safety injection (SI) actuation circuits blocked.

Due to the lower pressures in the LTOP MODES and the expected core Catawba Units 1 and 2 B 3.4.12-1 Revision No. 1

LTOP System B 3.4.12 BASES BACKGROUND (continued) decay heat levels, the makeup system can provide adequate flow via the makeup control valve. If conditions require the use of more than one charging pump for makeup in the event of loss of inventory, then additional pumps can be made available through manual actions.

The LTOP System for pressure relief consists of two PORVs with reduced lift settings or two residual heat removal (RHR) suction relief valves or one PORV and one RHR suction relief valve. Two RCS relief valves are required for redundancy. One RCS relief valve has adequate relieving capability to keep from overpressurization for the required coolant input capability.

PORV Requirements As designed for the LTOP System, each PORV is signaled to open if the RCS pressure reaches 400 psig (as left calibrated), allowable value S 425 psig (as found), when the PORVS are in the "lo-press" mode of operation.

If the PORVs are being used to meet the requirements of this Specification, then indicated RCS cold leg temperature is limited to 2 700 F in accordance with the LTOP analysis. When all Reactor Coolant Pumps are secured, this temperature is measured at the outlet of the residual heat removal heat exchanger. This location will provide the most conservative (lower) temperature measurement of water capable of being delivered into the Reactor Coolant System. The LTOP actuation logic monitors both RCS temperature and RCS pressure. The signals used to generate the pressure setpoints originate from the wide range pressure transmitters. The signals used to generate the temperature permissives originate from the wide range RTDs. Each signal is input to the appropriate NSSS protection system cabinet where it is converted to an internal signal and then input to a comparator to generate an actuation signal. If the indicated pressure meets or exceeds the calculated value, a PORV is signaled to open.

This Specification presents the PORV setpoints for LTOP. Having the setpoints of both valves within the limits ensures that the Reference 1 limits will not be exceeded in any analyzed event.

When a PORV is opened in an increasing pressure transient, the release of coolant will cause the pressure increase to slow and reverse. As the PORV releases coolant, the RCS pressure decreases until a reset pressure is reached and the valve is signaled to close. The pressure continues to decrease below the reset pressure as the valve closes.

Catawba Units 1 and 2 B 3.4.12-2 Revision No. 1

LTOP System B 3.4.12 BASES BACKGROUND (continued)

RHR Suction Relief Valve Requirements During LTOP MODES, the RHR system is operated for decay heat removal and low-pressure letdown control. Therefore, the RHR suction isolation valves (there are two suction isolation valves per line) are open in the piping from the RCS hot legs to the inlets of the RHR pumps. While these valves are open, the RHR suction relief valves are exposed to the RCS and are able to relieve pressure transients in the RCS.

The RHR suction isolation valves must be open with operator power removed to make the RHR suction relief valves OPERABLE for RCS overpressure mitigation. The RHR suction relief valves are spring loaded, bellows type water relief valve with pressure tolerances and accumulation limits established by Section III of the American Society of Mechanical Engineers (ASME) Code (Ref. 8) for Class 2 relief valves.

APPLICABLE Safety analyses (Ref. 3) demonstrate that the reactor vessel is adequately SAFETY ANALYSES protected against exceeding the Reference 1 P/T limits. In MODES 1, 2, and 3, and in MODE 4 with RCS cold leg temperature exceeding 2101F, the pressurizer safety valves will prevent RCS pressure from exceeding the Reference 1 limits. At about 210 0 F and below, overpressure prevention falls to two OPERABLE RCS relief valves. Each of these means has a limited overpressure relief capability.

The actual temperature at which the pressure in the P/T limit curve falls below the pressurizer safety valve setpoint increases as the reactor vessel material toughness decreases due to neutron embrittlement. Each time the P/T curves are revised, the LTOP System must be re-evaluated to ensure its functional requirements can still be met using the RCS relief valve method.

Any change to the RCS must be evaluated against the Reference 3 analyses to determine the impact of the change on the LTOP acceptance limits.

Transients that are capable of overpressurizing the RCS are categorized as either mass or heat input transients, examples of which follow:

Mass InDut Type Transients

a. Inadvertent safety injection of one safety injection pump and one charging pump; or
b. Charging/letdown flow mismatch.

Catawba Units 1 and 2 B 3.4.12-3 Revision No. 1

LTOP System B 3.4.12 BASES APPLICABLE SAFETY ANALYSES (continued)

Heat Input Type Transients

a. Inadvertent actuation of pressurizer heaters;
b. Loss of RHR cooling; or
c. Reactor coolant pump (RCP) startup with temperature asymmetry within the RCS or between the RCS and steam generators.

The following are required during the LTOP MODES to ensure that mass and heat input transients do not occur, which either of the LTOP overpressure protection means cannot handle:

a. Rendering all but two pumps incapable of injection;
b. Deactivating the accumulator discharge isolation valves in their closed positions;
c. Limiting RCP operation based on the existing temperature in the RCS cold legs; and
d. Disallowing start of an RCP if secondary temperature is more than 500 F above primary temperature in any one loop. LCO 3.4.6, "RCS Loops-MODE 4,' and LCO 3.4.7, "RCS Loops-MODE 5, Loops Filled," provide this protection.

The Reference 3 analyses demonstrate that one RCS relief valve can maintain RCS pressure below limits when any two pumps (charging and/or safety injection) are actuated. Thus, the LCO allows two pumps OPERABLE during the LTOP MODES. The LCO also requires the accumulators be isolated when accumulator pressure is greater than or equal to the maximum RCS pressure for the existing RCS cold leg temperature allowed in LCO 3.4.3.

The isolated accumulators must have their discharge valves closed and power removed.

The restrictions on the number of RCPs in operation at a given temperature ensures that during a LTOP mass injection event that the pressure/temperature (P/T) limits of 10 CFR 50, Appendix G to protect the Catawba Units 1 and 2 B 3.4.12-4 Revision No. I

LTOP System B 3.4.12 BASES APPLICABLE SAFETY ANALYSES (continued) reactor vessel are not exceeded. During startup and shutdown, when the RCPs are operated, their induced flows create a pressure drop across the vessel. This pressure drop along with the difference in elevation between the beltline region and the instrumentation locations are additive to the peak pressure from the mass injection event.

The amount of the pressure at the reactor vessel beltline region from the RCPs is dependent on the number of RCPs operated. Adequate margin to prevent exceeding the P/T limits is assured by restricting the number of RCPs operated. Since LTOP events are basically acknowledged as being steady-state events, these RCP operating restrictions are designed to work with the LTOP setpoint to provide protection from exceeding the steady-state Appendix G P/T limits.

Fracture mechanics analyses established the temperature of LTOP Applicability at 21 0F.

The consequences of a small break loss of coolant accident (LOCA) in LTOP MODE 4 conform to 10 CFR 50.46 and 10 CFR 50, Appendix K (Refs. 4 and 5), requirements by having a maximum of two pumps (charging and/or safety injection) OPERABLE and SI actuation enabled.

PORV Performance The fracture mechanics analyses show that the vessel is protected when the PORVs are set to open at or below the specified limit. The setpoints are derived by analyses that model the performance of the LTOP System, assuming the limiting LTOP transient of one charging pump and one safety injection pump injecting into the RCS. These analyses consider pressure overshoot and undershoot beyond the PORV opening and closing, resulting from signal processing and valve stroke times. The PORV setpoints at or below the derived limit ensures the Reference 1 P/T limits will be met.

The PORV setpoints will be updated when the revised P/T limits conflict with the LTOP analysis limits. The P/T limits are periodically modified as the reactor vessel material toughness decreases due to neutron embrittlement caused by neutron irradiation. Revised limits are determined using neutron fluence projections and the results of examinations of the reactor vessel material irradiation surveillance specimens. The Bases for LCO 3.4.3, `RCS Pressure and Temperature (P/T) Limits," discuss these examinations.

Catawba Units 1 and 2 B 3.4.12-5 Revision No. 1

LTOP System B 3.4.12 BASES APPLICABLE SAFETY ANALYSES (continued)

The PORVs are considered active components. Thus, the failure of one PORV is assumed to represent the worst case, single active failure.

RHR Suction Relief Valve Performance The RHR suction relief valves do not have variable pressure and temperature lift setpoints like the PORVs. Analyses show that one RHR suction relief valve with a setpoint at or between 417 psig and 509 psig will pass flow greater than that required for the limiting LTOP transient while maintaining RCS pressure less than the P/T limit curve. Assuming all relief flow requirements during the limiting LTOP event, an RHR suction relief valve will maintain RCS pressure to within the valve rated lift setpoint, plus an accumulation < 10% of the rated lift setpoint.

Although each RHR suction relief valve may itself meet single failure criteria, its inclusion and location within the RHR system does not allow it to meet single failure criteria when spurious RHR suction isolation valve closure is postulated. Also, as the RCS P/T limits are decreased to reflect the loss of embrittlement, the RHR suction relief valves must be analyzed to still accommodate the design basis transients for LTOP.

The RHR suction relief valves are considered to be active components.

Thus, the failure of one valve is assumed to represent the worst case single active failure.

The LTOP System satisfies Criterion 2 of 10 CFR 50.36 (Ref. 6).

LCO This LCO requires that the LTOP System is OPERABLE. The LTOP System is OPERABLE when the minimum coolant input and pressure relief capabilities are OPERABLE. Violation of this LCO could lead to the loss of low temperature overpressure mitigation and violation of the Reference 1 limits as a result of an operational transient.

To limit the coolant input capability, the LCO permits a maximum of two pumps (charging and/or safety injection) capable of injecting into the RCS and requires all accumulator discharge isolation valves closed and immobilized when accumulator pressure is greater than or equal to the maximum RCS pressure for the existing RCS cold leg temperature allowed in LCO 3.4.3. The LCO also limits RCP operation based on existing RCS cold leg temperature as required by the LTOP analysis.

The elements of the LCO that provide low temperature overpressure mitigation through pressure relief are:

Catawba Units 1 and 2 B 3.4.12-6 Revision No. 1

LTOP System B 3.4.12 BASES LCO (continued)

a. Two OPERABLE PORVs (NC-32B and NC-34A); or A PORV is OPERABLE for LTOP when its block valve is open, its lift setpoint is set to the specified limit and testing proves its automatic ability to open at this setpoint, and motive power is available to the valve and its control circuit.
b. Two OPERABLE RHR suction relief valves (ND-3 and ND-38); or An RHR suction relief valve is OPERABLE for LTOP when both of its RHR suction isolation valves are open, its setpoint is at or between 417 psig and 509 psig, and testing has proven its ability to open in this pressure range.
c. One OPERABLE PORV and one OPERABLE RHR suction relief valve.

Each of these methods of overpressure prevention is capable of mitigating the limiting LTOP transient.

APPLICABILITY This LCO is applicable in MODE 4 when any RCS cold leg temperature is

< 210F, in MODE 5, and in MODE 6 when the reactor vessel head is on.

The pressurizer safety valves provide overpressure protection that meets the Reference 1 P/T limits above 210F. When the reactor vessel head is off, overpressurization cannot occur.

LCO 3.4.3 provides the operational P/T limits for all MODES. LCO 3.4.10, "Pressurizer Safety Valves," requires the OPERABILITY of the pressurizer safety valves that provide overpressure protection during MODES 1, 2, and 3, and MODE 4 above 210F.

Low temperature overpressure prevention is most critical during shutdown when the RCS is water solid, and a mass or heat input transient can cause a very rapid increase in RCS pressure when little or no time allows operator action to mitigate the event.

The Applicability is modified by a Note stating that accumulator isolation is only required when the accumulator pressure is more than or at the maximum RCS pressure for the existing temperature, as allowed by the P/T limit curves. This Note permits the accumulator discharge isolation valve Surveillance to be performed only under these pressure and temperature conditions.

Catawba Units 1 and 2 B 3.4.1 2-7 Revision No. I

LTOP System B 3.4.12 BASES ACTIONS LCO 3.0.4 is not applicable for entry into LTOP operation.

A.1 With more than two pumps (charging and/or safety injection) capable of injecting into the RCS, RCS overpressurization is possible.

To immediately initiate action to restore restricted coolant input capability to the RCS reflects the urgency of removing the RCS from this condition.

B.1 With RCP operation not limited in accordance with Table 3.4.12-1, RCS overpressurization is possible.

To immediately initiate action to limit pump operation reflects the urgency of removing the RCS from this condition.

C.1, D.1 and D.2 An unisolated accumulator requires isolation within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. This is only required when the accumulator pressure is at or more than the maximum RCS pressure for the existing temperature allowed by the P/T limit curves.

If isolation is needed and cannot be accomplished in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, Required Action D01 and Required Action D.2 provide two options, either of which must be performed in the next 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br />. By increasing the RCS temperature to > 210 0F, an accumulator pressure of 678 psig cannot exceed the LTOP limits if the accumulators are fully injected.

Depressurizing the accumulators below the LTOP limit also gives this protection.

The Completion Times are based on operating experience that these activities can be accomplished in these time periods and on engineering evaluations indicating that an event requiring LTOP is not likely in the allowed times.

E.1 In MODE 4 when any RCS cold leg temperature is

  • 210 0F, with one RCS relief valve inoperable, the RCS relief valve must be restored to OPERABLE status within a Completion Time of 7 days. Two RCS relief valves (in any combination of the PORVs and RHR suction relief valves) are required to provide low temperature overpressure mitigation while withstanding a single failure of an active component.

Catawba Units 1 and 2 B 3.4.12-8 Revision No. 1

LTOP System B 3.4.12 BASES ACTIONS (continued)

The Completion Time considers the facts that only one of the RCS relief valves is required to mitigate an overpressure transient and that the likelihood of an active failure of the remaining valve path during this time period is very low.

F.1 The consequences of operational events that will overpressurize the RCS are more severe at lower temperature (Ref. 7). Thus, with one of the two RCS relief valves inoperable in MODE 5 or in MODE 6 with the head on Completion Time to restore two valves to OPERABLE status is 24 hours1 days <br />0.143 weeks <br />0.0329 months <br />.

The Completion Time represents a reasonable time to investigate and repair several types of relief valve failures without exposure to a lengthy period with only one OPERABLE RCS relief valve to protect against overpressure events.

G.1 and G.2 Steps must be taken immediately to limit potential mass input into the RCS, and the RCS must be depressurized and a vent must be established within 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> when:

a. Both required RCS relief valves are inoperable; or
b. A Required Action and associated Completion Time of Condition A, D, E, or F is not met; or
c. The LTOP System is inoperable for any reason other than Condition A, C, D, E, or F.

The Reference 3 analyses demonstrate that with the mass input into the RCS reduced to that of one injection pump (charging or safety injection) an RCS vent of > 4.5 square inches can maintain RCS pressure below limits. Therefore the Condition requires action to be taken immediately to reduce the input to that of one injection pump (charging or safety injection) prior to commencing RCS pressure reduction and establishing the required RCS vent. This action is needed to protect the RCPB from a low temperature overpressure event and a possible brittle fracture of the reactor vessel.

The capacity of a vent this size is greater than the flow of the limiting transient for the LTOP configuration, one charging pump or one safety Catawba Units 1 and 2 B :3.4.12-9 Revision No. I

LTOP System B 3.4.12 BASES ACTIONS (continued) injection pump OPERABLE, maintaining RCS pressure less than the maximum pressure on the PIT limit curve. The required vent capacity may be provided by one or more vent paths. The vent path(s) must be above the level of reactor coolant, so as not to drain the RCS when open.

The RCS vent size will be re-evaluated for compliance each time the P/T limit curves are revised based on the results of the vessel material surveillance.

The RCS vent is passive and is not subject to active failure.

The Completion Time considers the time required to place the plant in this Condition and the relatively low probability of an overpressure event during this time period due to increased operator awareness of administrative control requirements.

G.3 The RCS vent of > 4.5 square inches is proven OPERABLE by verifying its open condition either:

a. Once every 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> for a valve that is not locked, (valves that are sealed or secured in the open position are considered "locked" in this context); or
b. Once every 31 days for other vent path(s) (e.g., a vent valve that is locked, sealed or secured in position or a removed pressurizer safety valve or open manway also fits this category).

The passive vent valve arrangement must only be open to be OPERABLE. This Required Action is required to be performed if the vent is being used to satisfy the pressure relief requirements of Required Action G.2.

SURVEILLANCE SR 3.4.12.1 and SR 3.4.12.2 REQUIREMENTS To minimize the potential for a low temperature overpressure event by limiting the mass input capability, a maximum of two pumps (charging and/or safety injection) are verified capable of injecting into the RCS and the accumulator discharge isolation valves are verified closed and power removed.

Catawba Units 1 and 2 B 3.4.1 2-1 0 Revision No. 1

LTOP System B 3.4.12 BASES SURVEILLANCE REQUIREMENTS (continued)

The pumps are rendered incapable of injecting into the RCS through removing the power from the pumps by racking the breakers out under administrative control. An alternate method of LTOP control may be employed using at least two independent means to prevent a pump start such that a single failure or single action will not result in an injection into the RCS. This may be accomplished through two valves in the discharge flow path being closed.

The Frequency of 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> is sufficient, considering other indications and alarms available to the operator in the control room, to verify the required status of the equipment.

SR 3.4.12.3 Each required RHR suction relief valve shall be demonstrated OPERABLE by verifying its RHR suction isolation valves are open and by testing it in accordance with the Inservice Testing Program. This Surveillance is only required to be performed if the RHR suction relief valve is being used to meet this LCO.

The RHR suction isolation valves are verified to be opened every 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br />. The Frequency is considered adequate in view of other administrative controls such as valve status indications available to the operator in the control room that verify the RHR suction isolation valves remain open.

The ASME Code, Section Xl (Ref. 9), test per Inservice Testing Program verifies OPERABILITY by proving relief valve mechanical motion and by measuring and, if required, adjusting the lift setpoint.

SR 3.4.1 2.4 The PORV block valve must be verified open every 72 hours3 days <br />0.429 weeks <br />0.0986 months <br /> to provide the flow path for each required PORV to perform its function when actuated. The valve must be remotely verified open in the main control room. This Surveillance is performed if the PORV satisfies the LCO.

The block valve is a remotely controlled, motor operated valve. The power to the valve operator is not required removed, and the manual operator is not required locked in the inactive position. Thus, the block valve can be closed in the event the PORV develops excessive leakage or does not close (sticks open) after relieving an overpressure situation.

Catawba Units 1 and 2 B .3.4.12-1 I Revision No. 1

LTOP System B 3.4.12 BASES SURVEILLANCE REQUIREMENTS (continued)

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Frequency is considered adequate in view of other administrative controls available to the operator in the control room, such as valve position indication, that verify that the PORV block valve remains open.

SR 3.4.12.5 Performance of a COT is required within 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> after decreasing RCS temperature to < 21 0F and every 31 days on each required PORV to verify and, as necessary, adjust its lift setpoint. The COT will verify the setpoint is within the allowed maximum limits. PORV actuation could depressurize the RCS and is not required.

The 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Frequency considers the unlikelihood of a low temperature overpressure event during this time.

A Note has been added indicating that this SR is required to be met 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> after decreasing RCS cold leg temperature to

  • 21 0F. The COT cannot be performed until in the LTOP MODES when the PORV lift setpoint can be reduced to the LTOP setting. The test must be performed within 12 hours0.5 days <br />0.0714 weeks <br />0.0164 months <br /> after entering the LTOP MODES.

SR 3.4.1 2.6 Performance of a CHANNEL CALIBRATION on each required PORV actuation channel is required every 18 months to adjust the whole channel so that it responds and the valve opens within the required range and accuracy to known input.

SR 3.4.12.7 Each required RHR suction relief valve shall be demonstrated OPERABLE by verifying its RHR suction isolation valves are open and by testing it in accordance with the Inservice Testing Program. (Refer to SR 3.4.12.3 for the RHR suction isolation valves Surveillance and for a description of the Inservice Testing Program.) This Surveillance is only required to be performed if the RHR suction relief valve is being used to meet this LCO.

Each 31 days the RHR suction isolation valves are verified open, with power to the valve operator removed and locked in the removed position, to ensure that accidental closure will not occur. The "locked open in the removed position" power supply must be locally verified in its open Catawba Units 1 and 2 B 3.4.12-12 Revision No. 0

LTOP System B 3.4.12 BASES SURVEILLANCE REQUIREMENTS (continued) position with the power supply to the valve locked in its inactive position.

The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve position.

REFERENCES 1. 10 CFR 50, Appendix G.

2. Generic Letter 88-1 1.
3. UFSAR, Section 5.2
4. 10 CFR 50, Section 50.46.
5. 10 CFR 50, Appendix K.
6. 10 CFR 50.36, Technical Specifications, (c)(2)(ii).
7. Generic Letter 90-06.
8. ASME, Boiler and Pressure Vessel Code, Section IlIl.
9. ASME, Boiler and Pressure Vessel Code, Section Xl.

Catawba Units 1 and 2 B 3.4.12-13 Revision No. 0