Text

R. E. Ginna, Proposed Changes to the Previously Submitted Revision to Safety Limits and Instrumentation Setpoints
	ML042470114
Person / Time
Site:	Ginna
Issue date:	08/27/2004
From:	Korsnick M; Constellation Energy Group
To:	Clark R; Document Control Desk, Office of Nuclear Reactor Regulation
References
	Download: ML042470114 (179)
	v • d • e

Maria Korsnick 1503 Lake Road Vice President Ontario, New York 14519-9364 585.771.3494 585.771.3943 Fax mara.korsnick@ constellation.com Constellation Energy R.E. Ginna Nuclear Power Plant August 27, 2004 Mr. Robert L. Clark Office of Nuclear Regulatory Regulation U.S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555

Subject:

Proposed Changes to the Previously Submitted Revision to Safety Limits and Instrumentation Setpoints R. E. Ginna Nuclear Power Plant Docket No. 50-244

Reference:

Letter from Robert C. Mecredy (RG&E) to Guy S. Vissing (NRC), "Application for Amendment to Facility Operating License Revision to Safety Limits and Instrumentation Setpoints", dated April 9, 2002.

Dear Mr. Clark:

In the above Reference, RG&E submitted a proposed change to the Improved Technical Specifications (TS) associated with the Safety Limits and Instrumentation Setpoints requirements. Subsequent to the submittal, as the result of recent discussions with the NRC staff, Ginna LLC would like to provide the attached revised pages associated with the instrument setpoints. These revised pages provide a proposed solution for addressing the NRC concerns with the use of Method 3 in ISA-RP67.04-1994, Part II, "Methodologies for the Determination of Setpoints for Nuclear Safety-Related Instrumentation".

Enclosure I provides the revision of the previously provided mark-up of the existing instrumentation TS pages to show the proposed changes. Enclosure 2 provides a complete new set of revised (clean) TS pages. Enclosure 3 provides the revision of the previously provided mark-up of the existing instrumentation TS Bases pages to show the proposed changes, for informational purposes. There are no new regulatory commitments associated with this submittal.

The changes provided in the enclosures do not invalidate the No Significant Hazards Consideration Determination associated with the referenced submittal and will continue to ensure that the trip setpoints are maintained consistent with the setpoint methodology and the plant safety analysis. o\

I0 II11.

As the result of the number of calculations and station procedures that are affected by these changes, and the associated training, Ginna LLC requests that upon NRC approval, this LAR should be effective immediately and formally implemented within 12 months.

Any questions concerning this submittal should be directed to Thomas Harding, Nuclear Safety and Licensing at (585) 771-3384.

Ver truly yours,

Enclosures:

1. Proposed Instrumentation Technical Specification Changes (markup) 2 Revised Technical Specification Pages (complete set)

3. Proposed Instrumentation Technical Specification Bases Changes (markup)

STATE OF NEW YORK:

TO WNIT:

COUNTY OF WAYNE :

I, Mary G. Korsnick, being duly sworn, state that I am Vice President - R.E. Ginna Nuclear Power Plant, LLC (Ginna LLC), and that I am duly authorized to execute and file this response on behalf of Ginna LLC. To the best of my knowledge and belief, the statements contained in this document are true and correct. To the extent that these statements are not based on my personal knowledge, they are based upon information provided by other Ginna LLC employees and/or consultants. Such information has been reviewed in accordance with company practice and I believe it to be reliable.

Subscribed and sworn before me, a Notary Public n and for the State of New York and County of _____h_ _ _,this;AX day of 4 2004.

WITNESS my Hand and Notarial Seal: ____________

Notary Public My Commission Expires:

Date

xc: Mr. Robert L. Clark (Mail Stop 0-8-C2)

Project Directorate I Division of Licensing Project Management Office of Nuclear Regulatory Regulation U.S. Nuclear Regulatory Commission One White Flint North 11555 Rockville Pike Rockville, MD 20852 Regional Administrator, Region I U.S. Nuclear Regulatory Commission 475 Allendale Road King of Prussia, PA 19406 U.S. NRC Ginna Senior Resident Inspector James M. Petro Jr., Esquire Counsel Constellation Energy 750 East Pratt Street, 5th Floor Baltimore, MD 21202 Daniel F. Stenger Ballard Spahr Andrews & Ingersoll, LLP 601 13' Street, N.W., Suite 1000 South Washington, DC 20005 Mr. Peter R. Smith New York State Energy, Research, and Development Authority 17 Columbia Circle Albany, NY 12203-6399 Mr. Paul D. Eddy Electric Division NYS Department of Public Service 3 Empire State Plaza, 10th Floor Albany, NY 12223

Enclosure 1 R.E. Ginna Nuclear Power Plant Proposed Technical Specification Changes (markup)

RTS Instrumentation FITS Instrumentation 3.3.1 3.3 INSTRUMENTATION 3.3.1 Reactor Trip System (RTS) Instrumentation LCO 3.3.1 The RTS instrumentation for each Function in Table 3.3.1-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.1-1.

ACTIONS

-NOTE-Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION 1COMPLETION TIME A. One or more Functions A.1 Enter the Condition Immediately with one channel referenced in Table 3.3.1-1 inoperable. for the channel(s).

OR Two source range channels inoperable.

B. As required by Required B.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A.1 and referenced OPERABLE status.

by Table 3.3.1-1.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition B not AND met.

C.2 Initiate action to fully insert 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months all rods.

AND C.3 Place Control Rod Drive 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months System in a condition incapable of rod withdrawal.

R.E. Ginna Nuclear Power Plant 3.3.1 -1 AmendmentfJ~o

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION COMPLETION TIME D. As required by Required D.1 Action A.1 and referenced ------------------

by Table 3.3.1-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months E. As required by Required E.1 ReduceTHERMALPOWER 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months Action A.1 and referenced to < 5E-11 amps.

by Table 3.3.1-1.

OR E.2

-NOTE-Required Action E.2 is not applicable when:

a. Two channels are inoperable, or

b. THERMAL POWER is

< 5E-11 amps.

Increase THERMAL 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months POWER to 2 8% RTP.

F. As required by Required F.1 Open RTBs and RTBBs Immediately upon Action A.1 and referenced upon discovery of two discovery of two by Table 3.3.1-1. inoperable channels. inoperable channels AND F.2 Suspend operations Immediately involving positive reactivity additions.

AND F.3 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

R.E. Ginna Nuclear Power Plant 3.3.1 -2 Amendment(80

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION COMPLETION TIME G. Required Action and G.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition D, E, or F is not met.

H. As required by Required H.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months from Action A.1 and referenced channel to OPERABLE discovery of two by Table 3.3.1-1. status upon discovery of two inoperable channels inoperable channels.

AND H.2 Suspend operations Immediately involving positive reactivity additions.

AND H.3 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

I. Required Action and 1.1 Initiate action to fully insert Immediately associated Completion all rods.

Time of Condition H not met. AND 1.2 Place the Control Rod Drive 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months System in a condition incapable of rod withdrawal.

J. As required by Required J.1 Suspend operations Immediately Action A.1 and referenced involving positive reactivity by Table 3.3.1-1. additions.

AND J.2 Perform SR 3.1.1.1. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months AND Once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter R.E. Ginna Nuclear Power Plant 3.3.1 -3 Amendmentts

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION COMPLETION TIME K. As required by Required K.1 Action A.1 and referenced_____________---

by Table 3.3.1-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months L. Required Action and L.1 ReduceTHERMALPOWER 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion to < 8.5% RTP.

Time of Condition K not met.

M. As required by Required M.1 Action A.1 and referenced ---------------

by Table 3.3.1-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months N. As required by Required N.1 Restore channel to 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Action A.1 and referenced OPERABLE status.

by Table 3.3.1-1.

0. Required Action and 0.1 ReduceTHERMALPOWER 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion to < 50% RTP.

Time of Condition M or N not met.

P. As required by Required Ri Action A.1 and referenced -- --- -- ------- -

by Table 3.3.1-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months R.E. Ginna Nuclear Power Plant 3.3.1 -4 Amendment CO

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION I COMPLETION TIME

0. Required Action and Q.1 ReduceTHERMALPOWER 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Associated Completion to < 50% RTP.

Time of Condition P not met. AND Q.2.1 Verify Steam Dump System 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months is OPERABLE.

OR 0.2.2 Reduce THERMAL POWER 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months to <.8% RTP.

R. As required by Required R.1 Action A.1 and referenced ------------------

by Table 3.3.1-1. - NOTE -

One train may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing provided the other train is OPERABLE.

Restore train to OPERABLE 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months status.

S. As required by Requir'ed S.1 Verify interlock is in required 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Action A.1 and referenced state for existing plant by Table 3.3.1-1. conditions.

OR S.2 Declare associated RTS 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Function channel(s) inoperable.

R.E. Ginna Nuclear Power Plant 3.3. 1-5 AmendmentX1~

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION COMPLETION TIME T;- As required by Required T.1 Action A.1 and referenced ------------------

by Table 3.3.1-1. - NOTE -

1. One train may be bypassed for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months for surveillance testing, provided the other train is OPERABLE.

2. One RTB may be bypassed for up to 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months for maintenance on undervoltage or shunt trip mechanisms, provided the other train is OPERABLE.

Restore train to OPERABLE 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months status.

U. As required by Required U.1 Restore at least one trip 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months from Action A.1 and referenced mechanism to OPERABLE discovery of two by Table 3.3.1-1. status upon discovery of two inoperable trip RTBs with inoperable trip mechanisms mechanisms.

AND U.2 Restore trip mechanism to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

V. Required Action and V.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition R, S, T, or U not met.

W. As required by Required W.1 Restore at least one trip 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months from Action A.1 and referenced mechanism to OPERABLE discovery of two by Table 3.3.1-1. status upon discovery of two inoperable trip RTBs with inoperable trip mechanisms mechanisms.

AND R.E. Ginna Nuclear Power Plant 3.3.1 -6 Amendment K~

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION COMPLETION TIME W.2 Restore trip mechanism or 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months train to OPERABLE status.

X. Required Action and X.1 Initiate action to fully insert Immediately associated Completion all rods.

Time of Condition W not met. AND X.2 Place the Control Rod Drive 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months System in a Condition incapable of rod withdrawal.

SURVEILLANCE REQUIREMENTS

-NOTE-Refer to Table 3.3.1-1 to determine which SRs apply for each RTS Function.

SURVEILLANCE FREQUENCY SR 3.3.1.1 Perform CHANNEL CHECK. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months SR 3.3.1.2 - NOTE -

Required to be performed within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after THERMAL POWER is Ž 50% RTP.

Compare results of calorimetric heat balance 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months calculation to Nuclear Instrumentation System (NIS) channel output and adjust if calorimetric power is

> 2% higher than indicated NIS power.

SR 3.3.1.3 ---- TE-

- NOTE -

1. Required to be performed within 7 days after THERMAL POWER is 2 50% RTP but prior to exceeding 90% RTP following each refueling and if the Surveillance has not been performed within the last 31 EFPD.

2. Performance of SR 3.3.1.6 satisfies this SR.

Compare-results of the incore detector measurements 31 effective full to NIS AFD and adjust if absolute difference is 2 3%. power days (EFPD)

R.E. Ginna Nuclear Power Plant 3.3.1 -7 Amendmentuo

RTS Instrumentation 3.3.1 SURVEILLANCE FREQUENCY SR 3.3.1.4 Perform TADOT. 31 days on a STAGGERED TEST BASIS SR 3.3.1.5 Perform ACTUATION LOGIC TEST. 31 days on a STAGGEREDTEST BASIS SR 3.3.1.6 - NOTE -

Not required to be performed until 7 days after THERMAL POWER is > 50% RTP, but prior to exceeding 90% RTP following each refueling.

Calibrate excore channels to agree with incore 92 EFPD detector measurements.

SR 3.3.1.7 - NOTE-Not required to be performed for source range instrumentation prior to entering MODE 3 from MODE 2 until 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after entering MODE 3.

Perform COT. 92 days SR 3.3.1.8 - NOTE -

1. Not required for power range and intermediate range instrumentation until 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after reducing power < 6% RTP.

2. Not required for source range instrumentation until 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after reducing power < 5E-11 amps.

Perform COT. 92 days SR 3.3.1.9 ----------------------------------

- NOTE -

Setpoint verification is not required.

Perform ______TADOT______92__days_.

Perform TADOT. 92 days R.E. Ginna Nuclear Power Plant 3.3.1 -8 AmendmentW:O

RTS Instrumentation 3.3.1 SURVEILLANCE FREQUENCY SR 3.3.1.10 -NOTE-Neutron detectors are excluded.

Perform CHANNEL CALIBRATION. 24 months SR 3.3.1.11 Perform TADOT. 24 months SR 3.3.1.12 -NOTE-Setpoint verification is not required.

Perform TADOT. Prior to reactor startup if not performed within previous 31 days SR 3.3.1.13 Perform COT. 24 months R.E. Ginna Nuclear Power Plant 3.3.1 -9 Amendmen(Fo

RTS Instrumentation

/ =172C 3.3.1 4Y5r5M IY

< S YS r6M (aS Table 3.3.1-1 Reactor Trip System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED REQUIRED SURVEILLANCE TRIP FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS (T

1. Manual Reactor Trip 1,2, 2 B,C SR 3.3.1.11 NA 3 1a), 4 (a). 5 (a)

2. Power Range o'tE Neutron Flux

a. High 1,2 4 D,G SR 3.3.1.1 SR 3.3.1.2 RTP SR 3.3.1.7 SR 3.3.1.10

b. Low 1 (b), 2 4 D.G SR 3.3.1.1 SH4l. RTP SR 3.3.1.8 SR 3.3.1.10

3. Intermediate Range 1 (b), 2 2 E,G SR 3.3.1.1 (c)

Neutron Flux SR 3.3.1.8 SR 3.3.1.10

4. Source Range 2 (d) 2 F,G SR 3.3.1.1 (c)

Neutron Flux SR 3.3.1.8 SR 3.3.1.10 3 (a), 4 (a) 5 (a) 2 H,A SR 3.3.1.1 (c)

SR 3.3.1.7 SR 3.3.1.10 3 (e), 4 (e) 5 (e) 1 J SR 3.3.1.1 NA SR 3.3.1.10

5. Overtemperature AT 1,2 4 D,G SR 3.3.1.1 Refer to SR 3.3.1.3 Note 1 SR 3.3.1.6 SR 3.3.1.7 SR 3.3.1.10

6. Overpower AT 1,2 4 DG SR 3.3.1.1 Refer to R SR 3.3.1.7 Note 2 it~13 SR 3.3.1.10 R.E. Ginna Nuclear Power Plant 3.3.1-1 0 Amendmentcl

RTS Instrumentation Lm.t 3 .5 3.3.1 Table 3.3.1-1

$IYIXM o 5 Fr.

-rtJ; Reactor Trip System Instrumentation APPLICABLE MODES OR OTHER REQUIRED SURVEILLANCE TRIP SPECIFIED FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS (LSEITOINT

7. Pressurizer Pressure

a. Low 1 (f) 4 K,L SR 3.3.1.1 Ž6rpig SR 3.3.1.7 SR 3.3.1.10 3 SR 3.3.1.1 9sig

b. High 1,2 D,G SR 3.3.1.7 6>

SR 3.3.1.10

8. Pressurizer Water 1.2 3 D,G SR 3.3.1.1 Level-High SR 3.3.1.7 SR 3.3.1.10

9. Reactor Coolant Flow-Low

'E3

a. Single Loop 1(g) 3 per loop M,O SR 3.3.1.1 20Z%

SR 3.3.1.7 SR 3.3.1.10

b. Two Loops 1 (h) 3 per loop K,L SR 3.3.1.1 2qgo SR 3.3.1.7 SR 3.3.1.10

10. Reactor Coolant Pump (RCP)

Breaker Position

a. Single Loop 1(g) 1 per RCP N,O SR 3.3.1.11 NA

b. Two Loops 1 per RCP K,L SR 3.3.1.11 NA

11. Undervoltage- 1 (f) 2 per bus K,L SR 3.3.1.9 (c)

Bus 11A and 11B SR 3.3.1.10

12. Underfrequency- 1 (f) 2 per bus K,L SR 3.3.1.9 2 57.5 HZ Bus 11A and 11B SR 3.3.1.10 R.E. Ginna Nuclear Power Plant 3.3.1-1 1 Amendment(N)

RTS Instrumentation

. .3.1 Table 3.3.1-1 (yE Prrs Reactor Trip System Instrumentation APPLICABLE MODES OR N OTHER SPECIFIED REQUIRED SURVEILLANCE FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS

13. Steam Generator 1,2 3 per SG D,G SR 3.3. 1.1 >gi, ".

(SG) Water Level-Low Low SR 3.3.1.7 SR 3.3.1.10 <o

14. Turbine Trip

a. Low Autostop 3 P.O SR 3.3.1.10 (c)

Oil Pressure SR 3.3.1.12

b. Turbine Stop 1 2)(k) 2 PQ SR 3.3.1.12 NA Valve Closure

15. Safety Injection (SI) 1, 2 2 R,V SR 3.3.1.11 NA Input from Engineered Safety Feature Actuation System (ESFAS)

R.E. Ginna Nuclear Power Plant 3.3.1 -12 Amendmentgs

RTS Instrumentation LTMa4rr,6 3.3.1 Table 3.3.1-1 Reactor Trip System Instrumentation _E w<

APPLICABLE MODES OR OTHER SPECIFIED REQUIRED SURVEILLANCE FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS

16. Reactor Trip System Interlocks

a. Intermediate 2 (d) 2 SV SR 3.3.1.10 2 5E-11 Range SR 3.3.1.13 amp Neutron Flux, P-6

b. Low Power 1(f) 4 (power range S,v SR 3.3.1.10 RTP Reactor Trips only) SR 3.3.1.13 Block, P-7

c. Power Range 1() 4 Sv SR 3.3.1.10 a 6 RTP Neutron Flux, SR 3.3.1.13 P-8

d. Power Range 1(k) 4 S,v SR 3.3.1.10 sVo RTP Neutron Flux, SR 3.3.1.13 P-9 1 i) 4 S,v SR 3.3.1.10 21 RTP SR 3.3.1.13

e. Power Range 1 (b), 2 4 S.V SR 3.3.1.10 >5oRTP Neutron Flux, SR 3.3.1.13 P-10

17. Reactor Trip 1.2 2 trains T,V SR 3.3.1.4 NA t

Breakers l) 3 (a), 4 (a), 5(a) 2 trains WX SR 3.3.1.4 NA

18. Reactor Trip 1,2 1 each per RTB U,V SR 3.3.1.4 NA Breaker 3 (a), 4 (a), 5 (a) 1 each per RTB WX SR 3.3.1.4 NA Undervoltage and Shunt Trip Mechanisms

19. Automatic Trip Logic 1, 2 2 trains R,V SR 3.3.1.5 NA 3 (a) 4 (a) 5 (a) 2 trains W.X SR 3.3.1.5 NA R.E. Ginna Nuclear Power Plant 3.3.1-13 Amendmentd

RTS Instrumentation

,.0. II

.'31

> (;a With Control Rod Drive (CRD) System capable of rod withdrawal or all rods not fully inserted.

(C) (b) THERMAL POWER < 6% RTP.

Cd ) (c) UFSAR Table 7.2-3.

(c) (d) Both Intermediate Range channels < 5E-11 amps.

({) (e) With CRD System incapable of withdrawal and all rods fully inserted. In this condition, the Source Range Neutron Flux function does not provide a reactor trip, only indication.

(S) (f) THERMAL POWER 28.5% RTP.

(Lh) (g) THERMAL POWER Ž 50% RTP.

( (h) THERMAL POWER 2 8.5% RTP and Reactor Coolant Flow-Low (Single Loop) trip Function blocked.

(5) (i) THERMAL POWER 2 8.5% RTP and RCP Breaker Position (Single Loop) trip Function blocked.

C() (j) THERMAL POWER > 8% RTP, and either no circulating water pump breakers closed, or condenser vacuum 5 20".

(I) (k) THERMAL POWER 2 50% RTP, 1 of 2 circulating water pump breakers closed, and condenser vacuum > 20".

t (I) Including any reactor trip bypass breakers that are racked in and closed for bypassing an RTB.

le=tec R.E. Ginna Nuclear Power Plant 3.3.1-14 Amendment 86

(a) A channel is OPERABLE when both of the following conditions are met:

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the COT Acceptance Criteria. The COT Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

COT uncertainty The COT uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP is the desired setting and shall not exceed the Limiting Safety System Setting (LSSS). The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

RTS Instrumentation 3.3.1 Table 3.3.1-1 (Note 1)

Overtemperature AT

- NOTE -

t i 5pJ4 4y ger/vSe The Overtemperature AT Function r etpontis defined by:

Overtemperature AT s ATo {Kj + K2 (P-P') - K3 (T-T') [(1+t.s) / (1+T2 s)] - f(Al))

Where:

AT is measured RCS AT, "F.

AT0 is the indicated AT at RTP, OF.

s is the Laplace transform operator, sec".

T is the measured RCS average temperature, 0F.

T' is the nominal Tavg at RTP, OF.

P is the measured pressurizer pressure, psig.

P' is the nominal RCS operating pressure, psig.

K, is the Overtemperature AT reactor trip setpoint,(0j-fiCI)

K2 istheOvertemperature AT reactor trip depressurization setpoint penalty coefficient, XP 0psi.

K3 is the Overtemperature AT reactor trip heatup setpoint penalty coefficient, 0.020 OF.

tl is the measured lead fime constant, 4econds. (0C.'

T2 is the measured~ead-Ag time constant,(E9econds. g f(AI) is a function of the indicated difference between the top and bottom detectors of the Power Range Neutron Flux channels where qt and qb are the percent power in the top and bottom halves of the core, respectively, and qt + qb is the total THERMAL POWER in percent RTP.

f(AI) = 0 when qt - qb is <6O RTP f(Al) = qt - qb) - 6I when qt - qb is >bo/ RTP R.E. Ginna Nuclear Power Plant 3.3.1-15 Amendmentgj

RTS Instrumentation 3.3.1 Table 3.3.1-1 (Note 2)

Overpower AT

- NOTE-The Overpower AT Function s defined by:

Overpower AT

ATo [K 4 - K5 (T-T') - K6 [(t 3 sT) / (t 3 s+1 )] - f(Al))

Where:

AT is measured RCS AT, OF.

ATo is the indicated AT at RTP, "F.

s is the Laplace transform operator, sec' .

T is the measured RCS average temperature, OF.

T' is the nominal Tavg at RTP, CF.

K4 is the Overpower AT reactor trip setpoint,(gi <(

K5 is the Overpower AT reactor trip heatup setpoint penalty coefficient which is:

ra <9oF for T < T'and;

) 0I/OF for T 2 T'.

K6 is the Overpower AT reactor trip thermal time delay setpoint penalty which is:

0. 2F for increasing T and; I F for decrai T T3 is the measured ~4kiag time constant, 6Veconds.

f(AI) is a function of the indicated difference between the top and bottom detectors of the Power Range Neutron Flux channels where qt and qb are the percent power in the top and bottom halves of the core, respectively, and qt + qb is the total THERMAL POWER in percent RTP.

f(AI) ____ when qt - qb is <bo5 RTP f(Al) = ( lt - qb) - when qt - qb is >izIio RTP

d. Gina e Powe Plant 3.3.1- >----------16-----------

X/=C iA CL R.E. Ginna Nuclear Power Plant 3.3.1-16 Amendment&

ESFAS Instrumentation 3.3.2 3.3 INSTRUMENTATION 3.3.2 Engineered Safety Feature Actuation System (ESFAS) Instrumentation LCO 3.3.2 OPERABLE.

APPLICABILITY: According to Table 3.3.2-1.

ACTIONS

-NOTE-Separate Condition entry is allowed for each Function.

CONDITION I REQUIRED ACTION jCOMPLETION TIME A. One or more Functions A.1 Enter the Condition Immediately with one channel or train referenced in Table 3.3.2-1 inoperable, for the channel or train.

B. As required by Required B.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A.1 and referenced OPERABLE status.

by Table 3.3.2-1.

C. Required Action and C.1i Be in MODE 2. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition B not met.

D. As required by Required D.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A. 1 and referenced OPERABLE status.

by Table 3.3.2-1.

E. As required by Required E.1 Restore train to OPERABLE 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Action A. 1 and referenced status.

by Table 3.3.2-1.

R.E. Ginna Nuclear Power Plant332-Am 3.3.2-1 n m t~

Amendmentg

ESFAS Instrumentation 3.3.2 CONDITION I REQUIRED ACTION COMPLETION TIME F. As required by Required F.1 Action A.1 and referenced ------------------

by Table 3.3.2-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of the other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months G. Required Action and G.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition D, E, or AND F not met.

G.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months H. As required by Required H.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A.1 and referenced OPERABLE status.

by Table 3.3.2-1.

I. As required by Required 1.1 Restore train to OPERABLE 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Action A.1 and referenced status.

by Table 3.3.2-1.

J. As required by Required J.1 Action A.1 and referenced ------------------

by Table 3.3.2-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of the other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months K. Required Action and K.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition H, I, or AND J not met.

K.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months R.E. Ginna Nuclear Power Plant 3.3.2-2 Amendmentgr

ESFAS Instrumentation 3.3.2 CONDITION I REQUIRED ACTION COMPLETION TIME L. As required by Required L.1 Action A.1 and referenced ------------------

by Table 3.3.2-1. -NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of the other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months M. Required Action and M.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition L not AND met.

M.2 Reduce pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months pressure to < 2000 psig.

N. As required by Required N.1 Declare associated Auxiliary Immediately Action A.1 and referenced Feedwater pump inoperable by Table 3.3.2-1. and enter applicable condition(s) of LCO 3.7.5, "Auxiliary Feedwater (AFW)

System."

SURVEILLANCE REQUIREMENTS

-NOTE-Refer to Table 3.3.2-1 to determine which SRs apply for each ESFAS Function.

SURVEILLANCE FREQUENCY SR 3.3.2.1 Perform CHANNEL CHECK. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months SR 3.3.2.2 Perform COT. 92 days SR 3.3.2.3 - NOT-E-Verification of relay setpoints not required.

Perform TADOT. 92 days R.E. Ginna Nuclear Power Plant 3.3.2-3 Amendmentg-

ESFAS Instrumentation 3.3.2 SURVEILLANCE I FREQUENCY SR 3.3.2.4 - NOTE -

Verification of relay setpoints not required.

Perform TADOT. 24 months SR 3.3.2.5 Perform CHANNEL CALIBRATION. 24 months SR 3.3.2.6 Verify the Pressurizer Pressure-Low and Steam Line 24 months Pressure-Low Functions are not bypassed when pressurizer pressure > 2000 psig.

SR 3.3.2.7 Perform ACTUATION LOGIC TEST. 24 months R.E. Ginna Nuclear Power Plant 3.3.2-4 Amendmentyr/8

ESFAS Instrumentation

.3.2 Table 3.3.2-1 s '/f7t4 Engineered Safety Feature Actuation Systeht Instrumentation

/

APPLICABLE MODES OR SURVEIL-

)

OTHER LANCE SPECIFIED REQUIRED CONDI- REQUIRE-FUNCTION CONDITIONS CHANNELS TIONS MENTS

1. Safety Injection

a. Manual 2 D,G SR 3.3.2.4 NA Initiation

b. Automatic 1,2,3,4 2 trains I,K SR 3.3.2.7 NA Actuation Logic and Actuation Relays

c. Containment 1,2,3,4 3 J,K SR 3.3.2.1 S<( sig S 4.0 psig Pressure-High SR 3.3.2.2 SR 3.3.2.5

d. Pressurizer Pressure-Low

(

1,2,3(a)

All 4c4 4 4y vi 3 L,M jelEll;) I4creW/e SR 3.3.2.1 SR 3.3.2.2 SR 3.3.2.5 psig 2 1750 psig SR 3.3.2.6

(

e. Steam Line 3 per steam L,M SR 3.3.2.1 >2Tpsig 2 514 psig Pressure-Low line SR 3.3.2.2 SR 3.3.2.5 SR 3.3.2.6 R.E. Ginna Nuclear Power Plant 3.3.2-5 Amendmentoj

ESFAS II itation 3.3.2 Table 3.3.2-1 APPLICABLE MODES OR OTHER

2. Containment Spray

a. Manual Initiation Left 1,2,3,4 1 HK SR 3.3.2.4 NA pushbutton Right 1,2,3,4 1 HK SR 3.3.2.4 NA pushbutton

b. Automatic 1,2,3,4 2 trains lK SR 3.3.2.7 NA Actuation Logic and Actuation Relays

c. Containment 1,2,3,4 3 per set J,K SR 3.3.2.1 /

Pressure-High SR 3.3.2.2 \

High SR 3.3.2.5

3. Containment rs 1S1 / F

P$ (A^' v- ) )

Isolation QfZP 6Jp W;

a. Manual 1,2,3,409 2 HK SR 3.3.2.4 NA Initiation

b. Automatic 1,2,3,4 2 trains I,K SR 3.3.2.7 NA Actuation Logic and Actuation Relays

c. Safety Refer to Function 1 (Safety Injection) for all initiation Injection functions and requirements.

R.E. Ginna Nuclear Power Plant 3.3.2-6 Amendment s

ESFAS Instrm tation LThrr/A~. t.3.2 Table 3.3.2-1 X YerT mn~ a)

Engineered Safety Feature Actuation System Instrumentation SPTJW6S APPLICABLE MODES OR SURVEIL- i OTHER LANCE ALLOW v SPECIFIED REQUIRED CONDI- REQUIRE- ABLE TRIP FUNCTION CONDITIONS CHANNELS TIONS MENTS VALUE SETPOINT

4. Steam Line Isolation

(~3

a. Manual 1,20,3V 1 per loop D,G SR 3.3.2.4 NA NA Initiation

b. Automatic 2 trains EG SR 3.3.2.7 NA NA Actuation Logic and Actuation Relays

c. Containment 1,29SW 3 F,G SR 3.3.2.1 S~rpsig s 18 psig Pressure-High SR 3.3.2.2 High SR 3.3.2.5

d. High Steam 1G ( ""

TWi,( 2 per steam F,G SR 3.3.2.1 s 0.4E6 Flow line SR 3.3.2.2 Ibm/hr @ Ibm/hr e SR 3.3.2.5 1005 psig 1005 psig Coincident Refer to Function 1 (Safety Injection) for all initiation with Safety functions and requirements.

Injection and Coincident 1,2A3: 2 per loop F,G SR 3.3.2.1

>C > 5450 F with Tav.,Low SR 3.3.2.2 SR 3.3.2.5

e. High-High 1,2Ub' 2 per steam F,G SR 3.3.2.1 S 3.6E6 Steam Flow line SR 3.3.2.2 Ibm/hr @ Ibm/hr @

SR 3.3.2.5 755 psig I 755 psig Coincident Refer to Function 1 (Safety Injection) for all initiation with Safety functions and requirements.

Injection R.E. Ginna Nuclear Power Plant 3.3.2-7 Amendment ~

ESFAS Instrumentation

= 3. 3.3.2 Table 3.3.2-1 f Ye7r C (cj Engineered Safety Feature Actuation System Instrumentation 5t i APPLICABLE MODES OR SURVEIL- t,_o OTHER LANCE ALW ,

SPECIFIED REQUIRED CONDI- REOUIRE- ABE TI\

FUNCTION CONDITIONS CHANNELS TIONS MENTS iETPOIN

5. Feedwater Isolation GED

a. Automatic ,1 C 2 trains E.G SR 3.3.2.7 NA NA Actuation Logic and Actuation Relays c l

b. SG Water 1,20, 3 per SG FG SR 3.3.2.1 O 85%

Level-High SR 3.3.2.2 SR 3.3.2.5

c. Safety Refer to Function 1 (Safety Injection) for all initiation Injection functions and requirements.

R.E. Ginna Nuclear Power Plant 3.3.2-8 Amendmente

ESFAS Instru ntation LI T6

3.3.2 Table 3.3.2-1

YfWA ("If Engineered Safety Feature Actuation System Instrumentation 11' S APPLICABLE MODES OR SURVEIL-OTHER LANCE AL SPECIFIED REQUIRED CONDI- REQUIRE- ABLE TRIP 6.

FUNCTION Auxiliary Feedwater CONDITIONS CHANNELS TIONS MENTS I ETPOINT N

(AFW)

a. Manual Initiation AFW 1,2.3 1 per pump N SR 3.3.2.4 NA NA Standby AFW 1,2,3 1 per pump N SR 3.3.2.4 NA NA

b. Automatic 1,2,3 2 trains EG SR 3.3.2.7 NA NA Actuation Logic and Actuation Relays

c. SG Water 1,2,3 3 per SG F,G SR 3.3.2.1 2 17%

Level-Low Low SR 3.3.2.2 SR 3.3.2.5

d. Safety Refer to Function 1 (Safety Injection) for all initiation Injection functions and requirements.

(Motor driven pumps only)

e. Undervoltage - 1,2,3 2 per bus D,G SR 3.3.2.3 2 2 2579 V Bus 11A and SR 3.3.2.5 with S 3.6 with S 3.6 11 B (Turbine sec time sec time driven pump delay delay only)

f. Trip of Both 1 2 per MFW BC SR 3.3.2.4 NA NA Main pump Feedwater Pumps (Motor driven pumps only)

R.E. Ginna Nuclear Power Plant 3.3.2-9 Amendmentg

ESFAS Instrumentation (3) t;ML> !23.3.2 C) Pressurizer Pressure 2 2000 psig.

( Cb) Except when both MSIVs are closed and de-activated.

\ S ( Except when all Main Feedwater Regulating and associated bypass valves are closed and de-activated or isolated by a closed manual valve.

R Ginn c Power PAn 3.3.2-1 A me ndme kV,;4e tIdatzev fe!

g,5ee f.,i /6- C bere vljte R.E. Ginna Nuclear Power Plant 3.3.2-10 Amendments

(a) A channel is OPERABLE when both of the following conditions are met:

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the COT Acceptance Criteria. The COT Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

COT uncertainty The COT uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP is the desired setting and shall not exceed the Limiting Safety System Setting (LSSS). The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

LOPStart Instrumentation DG LOP DG Start Instrumentation 3.3.4 3.3 INSTRUMENTATION 3.3.4 Loss of Power (LOP) Diesel Generator (DG) Start Instrumentation LCO 3.3.4 Each 480 V safeguards bus shall have two OPERABLE channels of LOP DG Start Instrumentation.

APPLICABILITY: MODES 1, 2, 3, and 4, When associated DG is required to be OPERABLE by LCO 3.8.2, "AC Sources - MODES 5 and 6."

ACTIONS

- NOTE -

Separate Condition entry is allowed for each 480 V safeguards bus.

CONDITION J REOUIRED ACTION COMPLETION TIME A. One or more 480 V A.1 Place channel(s) in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months bus(es) with one channel inoperable.

B. Required Action and B.1 Enter applicable Immediately associated Completion Condition(s) and Required Time of Condition A not Action(s) for the associated met. DG made inoperable by LOP DG start OR instrumentation.

One or more 480 V bus(es) with two channels inoperable.

R.E. Ginna Nuclear Power Plant 3.3.4-1 Amendment(8W

LOP DG Start Instrumentation 3.3.4 SURVEILLANCE REQUIREMENTS

-NOTE-When a channel is placed in an inoperable status solely for the performance of required Surveillances, entry into the associated Conditions and Required Actions may be delayed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months provided the second channel maintains LOP DG start capability.

SURVEILLANCE FREQUENCY SR 3.3.4.1 Perform TADOT. 131 days SR 3.3.4 W.2 Perform CHANNEL CALIBRATION withy 24 months !

o e each 480 V bus as follows: r

a. Loss of voltage: 5e 44ls (SA) '5' Allowable Value Trip Setpoint Bus voltage 2 368 V 2 372.8 V Time delay < 2.75 sec 2.4 +/- 0.12 sec

b. Degraded voltage:

Allowable Value Trip Setnoint Busvoltage Ž414V Ž419.2V e delay < 1520sec 152=5e

= -

/ a. Loss of voltage LSSS 2 371.6 V and

378.0 V with a time delay of 2 1.64 seconds and 5 2.61 seconds.

b. Degraded v6ltage LSSS 2 419.6 V and 5 424.4 V with a time delay of 2 30.7 seconds and 5 1589 seconds (@ 416.8 V) and 2 25.1 seconds and 5 494.9 seconds (@ 368 V).

R.E. Ginna Nuclear Power Plant 3.3.4-2 Amendment

(a) A channel is OPERABLE when both of the following conditions are met:

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the CHANNEL CALIBRATION Acceptance Criteria.

The CHANNEL CALIBRATION Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

CHANNEL CALIBRATION uncertainty The CHANNEL CALIBRATION uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP is the desired setting and shall not exceed the LSSS. The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

Containment Ventilation Isolation Instrumentation 3.3.5 3.3 INSTRUMENTATION 3.3.5 Containment Ventilation Isolation Instrumentation LCO 3.3.5 The Containment Ventilation Isolation instrumentation for each Function in Table 3.3.5-1 shall be OPERABLE.

APPLICABILITY: D S1, 2, 3, and 4, M

During CORE ALTERATIONS, During movement of irradiated fuel ass m le ihnc nan et ACTIONS

-NOTE-Separate Condition entry is allowed for each Function.

CON DITION)I REQUIRED AC TION) COMPLETION TIME A. One radiation monitoring A.1 Restore the affected 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months channel inoperable, channel to OPERABLE status.

B. B.1 Enter applicable Conditions Immediately

and Required Actions of

- NOTE- LCO 3.6.3, "Containment Only applicable in MODE Isolation Boundaries," for 1, 2, 3, or 4. containment mini-purge isolation valves made One or more Functions inoperable by isolation with one or more manual* instrumentation.

or automatic actuation trains inoperable.

OR Both radiation monitoring channels inoperable.

OR Required Action and associated Completion Time of Condition A not met.

R.E. Ginna Nuclear Power Plant3351 3.3.5-1 m n Amendment(8Oetc

Containment Ventilation Isolation Instrumentation 3.3.5 CONDITION . REQUIRED ACTION COMPLETION TIME C. C.1 Place and maintain Immediately

__containment purge and

- NOTE - exhaust valves in closed Only applicable during position.

CORE ALTERATIONS or movement of irradiated OR fuel assemblies within containment.

-containment C.2 Enter applicable Conditions Immediately and Required Actions of One or more Functions LCO 3.9.3, "Containment with one or more manual Penetrations," for or automatic actuation containment purge and trains inoperable. exhaust isolation valves made inoperable by OR isolation instrumentation.

Both radiation monitoring channels inoperable.

OR Required Action and associated Completion Time for Condition A not met.

SURVEILLANCE REQUIREMENTS

- NOTE-Refer to Table 3.3.5-1 to determine which SRs apply for each Containment Ventilation Isolation Function.

SURVEILLANCE 1 FREQUENCY SR 3.3.5.1 Perform CHANNEL CHECK. 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months SR 3.3.5.2 Perform COT. 92 days SR 3.3.5.3 Perform ACTUATION LOGIC TEST. 24 months SR 3.3.5.4 Perform CHANNEL CALIBRATION. 24 months R.E. Ginna Nuclear Power Plant 3.3.5-2 Amendmentg

Containment Ventilation Isolation Instrumentation TM I3M.l33.5 5FferY Table 3.3.5-1 5*YJ10 6 4 Containment Ventilation Isolation Instrumentation \57' FUNCTION OfD6J

-APP2Ie4CL6 REQUIRED SURVEILLANCE /

A$J o6TH

/ A CHANNELS REQUIREMENTS (SETPOINTI

1. Automatic Actuation Logic and Actuation Relays 2 trains SR 3.3.5.3 NA

2. Containment Radiation

a. Gaseous 1 SR 3.3.5.1 SR 3.3.5.2 SR 3.3.5.4

b. Particulate SR 3.3.5.1 (a)

I, ~9 R~ SR 3.3.5.2 SR 3.3.5.4

3. Containment Isolation 00%., _ , Refer to LCO 3.3.2, 'ESFAS Instrumentation,"

Function 3 for all initiation functions and requirements.

4. Containment Spray-Manual Initiation Refer to LCO 3.3.2, TESFAS Instrumentation,"

Function 2.a, for all initiation functions and requirements.

if Per Radiological Effluent Controls Program.

AI co W- 1 - ; "I II -(

- xA _ -

E . G nna N l ea rPeowr Pl n 3.c o 3 .5- 2, Fm AS enrd me R.E. Ginna Nuclear Power Plant 3.3.5-3 Amendment 60

(a) A channel is OPERABLE when both of the following conditions are met:

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the COT Acceptance Criteria. The COT Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

COT uncertainty The COT uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP is the desired setting and shall not exceed the Limiting Safety System Setting (LSSS). The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

Enclosure 2 R.E. Ginna Nuclear Power Plant Revised Technical Specification Pages

SLs 2.0 2.0 SAFETY LIMITS (SLs) 2.0 SLs and SL Violations 2.1 SLs 2.1.1 Reactor Core SLs In MODES 1 and 2, the combination of THERMAL POWER, Reactor Coolant System (RCS) average temperature, and pressurizer pressure shall not exceed the limits specified in the COLR; and the following SLs shall not be exceeded:

2.1.1.1 The departure from nucleate boiling ratio (DNBR) shall be maintained 2 1.17 for the WRB-1 correlation.

2.1.1.2 The peak fuel centerline temperature shall be maintained < 50801F, decreasing by 580 F per 10,000 MWD/MTU of burnup.

2.1.2 RCS Pressure SL In MODES 1, 2, 3, 4, and 5, the RCS pressure shall be maintained < 2735 psig.

2.2 SL Violations 2.2.1 If SL 2.1.1 is violated, restore compliance and be in MODE 3 within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

2.2.2 If SL 2.1.2 is violated:

2.2.2.1 In MODE 1 or 2, restore compliance and be in MODE 3 within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

2.2.2.2 In MODE 3, 4, or 5, restore compliance within 5 minutes.

R.E. Ginna Nuclear Power Plant 2.0-1 Amendment

RTS Instrumentation 3.3.1 3.3 INSTRUMENTATION 3.3.1 Reactor Trip System (RTS) Instrumentation LCO 3.3.1I The RTS instrumentation for each Function in Table 3.3.1-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.1-1.

ACTIONS

- NOTE -

Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Enter the Condition Immediately with one channel referenced in Table 3.3.1-1 inoperable. for the channel(s).

OR Two source range channels inoperable.

B. As required by Required B.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A.1 and referenced OPERABLE status.

by Table 3.3.1-1.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition B not AND met.

C.2 Initiate action to fully insert 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months all rods.

AND C.3 Place Control Rod Drive 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months System in a condition incapable of rod withdrawal.

R.E. Ginna Nuclear Power Plant 3.3.1 -1 Amendment

RTS Instrumentation 3.3.1 CONDITION E REQUIRED ACTION (COMPLETION TIME D. As required by Required D.1 Action A.1 and referenced ------------------

by Table 3.3.1-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months E. As required by Required E.A ReduceTHERMALPOWER 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months Action A.1 and referenced to < 5E-11 amps.

by Table 3.3.1-1.

OR E.2

-NOTE-Required Action E.2 is not applicable when:

a. Two channels are inoperable, or

b. THERMAL POWER is

< 5E-11 amps.

Increase THERMAL 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months POWER to Ž 8% RTP.

F. As required by Required F.1 Open RTBs and RTBBs Immediately upon Action A.1 and referenced upon discovery of two discovery of two by Table 3.3.1-1. inoperable channels. inoperable channels AND F.2 Suspend operations Immediately involving positive reactivity additions.

AND F.3 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

R.E. Ginna Nuclear Power Plant 3.3.1 -2 Amendment

RTS Instrumentation 3.3.1 CONDITION E REQUIRED ACTION COMPLETION TIME G. Required Action and GA Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition D, E, or F is not met.

H. As required by Required H.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months from Action A.1 and referenced channel to OPERABLE discovery of two by Table 3.3.1-1. status upon discovery of two inoperable channels inoperable channels.

AND H.2 Suspend operations Immediately involving positive reactivity additions.

AND H.3 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

I. Required Action and 1.1 Initiate action to fully insert Immediately associated Completion all rods.

Time of Condition H not met. AND 1.2 Place the Control Rod Drive 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months System in a condition incapable of rod withdrawal.

J. As required by Required J.1 Suspend operations Immediately Action A.1 and referenced involving positive reactivity by Table 3.3.1-1. additions.

AND J.2 Perform SR 3.1.1.1. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months AND Once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter R.E. Ginna Nuclear Power Plant 3.3. 1-3 Amendment

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION l_COMPLETION TIME K. As required by Required K.1 Action A.1 and referenced -----------------

by Table 3.3.1-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months L. Required Action and L.1 Reduce THERMAL POWER 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion to < 8.5% RTP.

Time of Condition K not met.

M. As required by Required M.1 Action A.1 and referenced ------------------

by Table 3.3.1-1. -NOTE-The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months N. As required by Required N.1 Restore channel to 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Action A.1 and referenced OPERABLE status.

by Table 3.3.1-1.

0. Required Action and 0.1 ReduceTHERMAL POWER 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion to < 50% RTP.

Time of Condition M or N not met.

R As required by Required P.1 Action A.1 and referenced -----------------

by Table 3.3.1-1. - NOTE -

by TablThe inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months R.E. Ginna Nuclear Power Plant 3.3.14 Amendment

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION COMPLETION TIME

0. Required Action and Q.1 Reduce THERMAL POWER 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Associated Completion to < 50% RTP.

Time of Condition P not met. AND Q.2.1 Verify Steam Dump System 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months is OPERABLE.

OR Q.2.2 ReduceTHERMALPOWER 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months to < 8% RTP.

R. As required by Required R.1 Action A.1 and referenced --- __-__-__-___

by Table 3.3.1-1. - NOTE -

One train may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing provided the other train is OPERABLE.

Restore train to OPERABLE 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months status.

S. As required by Required S.1 Verify interlock is in required 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Action A.1 and referenced state for existing plant by Table 3.3.1-1. conditions.

OR S.2 Declare associated RTS 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Function channel(s) inoperable.

R.E. Ginna Nuclear Power Plant 3.3 .1-5 Amendment

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION COMPLETION TIME T. As required by Required T.1 Action A.1 and referenced - __ _ __-_------

by Table 3.3.1-1. - NOTE -

1. One train may be bypassed for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months for surveillance testing, provided the other train is OPERABLE.

2. One RTB may be bypassed for up to 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months for maintenance on undervoltage or shunt trip mechanisms, provided the other train is OPERABLE.

Restore train to OPERABLE 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months status.

U. As required by Required U.1 Restore at least one trip 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months from Action A.1 and referenced mechanism to OPERABLE discovery of two by Table 3.3.1-1. status upon discovery of two inoperable trip RTBs with inoperable trip mechanisms mechanisms.

AND U.2 Restore trip mechanism to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

V. Required Action and V.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition R, S, T, or U not met.

W. As required by Required W.1 Restore at least one trip 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months from Action A.1 and referenced mechanism to OPERABLE discovery of two by Table 3.3.1-1. status upon discovery of two inoperable trip RTBs with inoperable trip mechanisms mechanisms.

AND R.E. Ginna Nuclear Power Plant 3.3.1 -6 Amendment

RTS Instrumentation 3.3.1 CONDITION REQUIRED ACTION ]_COMPLETION TIME W.2 Restore trip mechanism or 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months train to OPERABLE status.

X. Required Action and X.1 Initiate action to fully insert Immediately associated Completion all rods.

Time of Condition W not met. AND X.2 Place the Control Rod Drive 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months System in a Condition incapable of rod withdrawal.

R.E. Ginna Nuclear Power Plant 3.3.1 -7 Amendment

RTS Instrumentation 3.3.1 SURVEILLANCE REQUIREMENTS

- NOTE -

Refer to Table 3.3.1-1 to determine which SRs apply for each RTS Function.

SURVEILLANCE FREQUENCY SR 3.3.1.1 Perform CHANNEL CHECK. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months SR 3.3.1.2 ---- - NOTE -

Required to be performed within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after THERMAL POWER is 2 50% RTP.

Compare results of calorimetric heat balance 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months calculation to Nuclear Instrumentation System (NIS) channel output and adjust if calorimetric power is

> 2% higher than indicated NIS power.

SR 3.3.1.3 ----

- NOTE -

1. Required to be performed within 7 days after THERMAL POWER is 2 50% RTP but prior to exceeding 90% RTP following each refueling and if the Surveillance has not been performed within the last 31 EFPD.

2. Performance of SR 3.3.1.6 satisfies this SR.

Compare results of the incore detector measurements 31 effective full to NIS AFD and adjust if absolute difference is 2 3%. power days (EFPD)

SR 3.3.1.4 Perform TADOT. 31 days on a STAGGERED TEST BASIS SR 3.3.1.5 Perform ACTUATION LOGIC TEST. 31 days on a STAGGERED TEST BASIS 5R 3.3.1.6 -NOTE-Not required to be performed until 7 days after THERMAL POWER is 2 50% RTP, but prior to exceeding 90% RTP following each refueling.

Calibrate excore channels to agree with incore 92 EFPD detector measurements.

R.E. Ginna Nuclear Power Plant 3.3.1 -8 Amendment

RTS Instrumentation 3.3.1 SURVEILLANCE FREQUENCY SR 3.3.1.7@5oo

'-NOTE- ' -OE Not required to be performed for source range instrumentation prior to entering MODE 3 from MODE 2 until 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after entering MODE 3.

Perform COT. 92 days SR 3.3.1.8 --- - -

-NOTE-

1. Not required for power range and intermediate range instrumentation until 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after reducing power < 6% RTP.

2. Not required for source range instrumentation until 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after reducing power < 5E-11 amps.

Perform COT. 92 days SR 3.3.1.9 ----

-NOTE-Setpoint verification is not required.

Perform TADOT. 92 days SR 3.3.1.10 -NOTE-Neutron detectors are excluded.

Perform CHANNEL CALIBRATION. 24 months SR 3.3.1.11 Perform TADOT. 24 months SR 3.3.1.12 -NOTE-Setpoint verification is not required.

Perform TADOT. Prior to reactor startup if not performed within previous 31 days SR 3.3.1.13 Perform COT. 24 months R.E. Ginna Nuclear Power Plant 3.3.1-9 Amendment

RTS Instrumentation 3.3.1 Table 3.3.1-1 Reactor Trip System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

1. Manual Reactor Trip 1.2, 2 BsC SR 3.3.1.11 NA 3 (b), 4 (b), 5 (b)

2. Power Range Neutron Flux I a. High 1,2 4 D,G SR 3.3.1.1 S 112.27%

SR 3.3.1.2 RTP SR 3.3.1.7 SR 3.3.1.10 I b. Low 1 (c), 2 4 D,G SR 3.3.1.1 S 29.28%

SR 3.3.1.8 RTP SR 3.3.1.10

3. Intermediate Range 1(c), 2 2 EG SR 3.3.1.1 (d)

Neutron Flux SR 3.3.1.8 SR 3.3.1.10

4. Source Range 2 F.G SR 3.3.1.1 (d) 2 (e)

Neutron Flux SR 3.3.1.8 SR 3.3.1.10 3 (b), 4 (b), 5 (b) 2 H,1 SR 3.3.1.1 (d)

SR 3.3.1.7 SR 3.3.1.10 3(0, 4 (f), 5(0 1 J SR 3.3.1.1 NA SR 3.3.1.10

5. Overtemperature AT 1,2 4 D,G SR 3.3.1.1 Refer to SR 3.3.1.3 Note 1 SR 3.3.1.6 SR 3.3.1.7 SR 3.3.1.10 R.E. Ginna Nuclear Power Plant 3.3.1 -10 Amendment

RTS Instrumentation 3.3.1 Table 3.3.1-1 Reactor Trip System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

6. Overpower AT 1,2 4 D,G SR 3.3.1.1 Refer to SR 3.3.1.3 Note 2 I SR 3.3.1.6 SR 3.3.1.7 SR 3.3.1.10

7. Pressurizer Pressure I a. Low 1 (g) 4 K,L SR 3.3.1.1 2 1791.3 SR 3.3.1.7 psig SR 3.3.1.10 I b. High 1,2 3 D,G SR 3.3.1.1 s 2396.2 SR 3.3.1.7 psig SR 3.3.1.10 I 8. Pressurizer Water 1,2 3 D,G SR 3.3.1.1 s 96.47%

Level-High SR 3.3.1.7 SR 3.3.1.10

9. Reactor Coolant Flow-Low I a. Single Loop 1 (h) 3 per loop M,O SR 3.3.1.1 2 89.86%

SR 3.3.1.7 SR 3.3.1.10 I b. Two Loops I° 3 per loop K,L SR 3.3.1.1 2 89.86%

SR 3.3.1.7 SR 3.3.1.10

10. Reactor Coolant Pump (RCP)

Breaker Position

a. Single Loop I(h) I per RCP N,O SR 3.3.1.11 NA

b. Two Loops 1a) I per RCP K,L SR 3.3.1.11 NA R.E. Ginna Nuclear Power Plant 3.3.1-1 1 Amendment

RTS Instrumentation 3.3.1 Table 3.3.1-1 Reactor Trip System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

11. Undervoltage- 1(9) 2 per bus K,L SR 3.3.1.9 (d)

Bus 11A and 11B SR 3.3.1.1 0 I 12. Underfrequency- 1 (9) 2 per bus KL SR 3.3.1.9 t 57.5 HZ Bus 11A and 11B SR 3.3.1.10 I 13. Steam Generator 1, 2 3 per SG D,G SR 3.3.1.1 2 13.88%

(SG) Water Level- SR 3.3.1.7 Low Low SR 3.3.1.1 0

14. Turbine Trip

a. Low Autostop 1 (kfll) 3 PRO SR 3.3.1.1 0 (d)

Oil Pressure SR 3.3.1.12

b. Turbine Stop 1 (k)(l) 2 PRQ SR 3.3.1.12 NA Valve Closure

15. Safety Injection (SI) 1.2 2 RV SR 3.3.1.11 NA Input from Engineered Safety Feature Actuation System (ESFAS)

R.E. Ginna Nuclear Power Plant 3.3.1 -12 Amendment

RTS Instrumentation 3.3.1 Table 3.3.1-1 Reactor Trip System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

16. ReactorTrip System Interlocks I a. Intermediate 2 (e) 2 Sv SR 3.3.11.10 2 5E-11 Range SR 3.3.1.13 amp Neutron Flux, P-6 I b. Low Power 1(g) 4 (power range Sv SR 3.3.1.10 s 8.0% RTP Reactor Trips only) SR 3.3.1.13 Block, P-7 I c. Power Range 1(h) 4 SNV SR 3.3.1.10 S 49.0%

Neutron Flux, SR 3.3.1.13 RTP P-8 I d. Power Range 1°) 4 Sv SR 3.3.1.10 S 50.0%

Neutron Flux, SR 3.3.1.13 RTP P-9 l 1 (k) 4 Sv SR 3.3.1.10 s 8.0% RTP SR 3.3.1.13 I e. Power Range 1 (c), 2 4 Sv SR 3.3.1.10 2 6.0% RTP Neutron Flux, SR 3.3.1.13 P-1 0

17. Reactor Trip 1,2 2 trains TV SR 3.3.1.4 NA Breakers(m) 3 (b), 4 (b), 5 (b) 2 trains WX SR 3.3.1.4 NA

18. Reactor Trip 1,2 1 each per RTB Uv SR 3.3.1.4 NA Breaker 3 (b), 4 (b), 5 (b) 1 each per RTB WX SR 3.3.1.4 NA Undervoltage and Shunt Trip Mechanisms

19. Automatic Trip Logic 1,2 2 trains RV SR 3.3.1.5 NA 3 (b), 4 (b), 5 (b) 2 trains WX SR 3.3.1.5 NA R.E. Ginna Nuclear Power Plant 3.3.1 -13 Amendment

RTS Instrumentation 3.3.1 (a)

A channel is OPERABLE when both of the following conditions are met

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the COT Acceptance Criteria. The COT Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

COT uncertainty The COT uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP Is the desired setting and shall not exceed the Limiting Safety System Setting (LSSS). The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

(b) With Control Rod Drive (CRD) System capable of rod withdrawal or all rods not fully inserted.

(c) THERMAL POWER < 6% RTP.

(d) UFSAR Table 7.2-3.

(e) Both Intermediate Range channels < 5E-1 1 amps.

(f) With CRD System incapable of withdrawal and all rods fully inserted. In this condition, the Source Range Neutron Flux function does not provide a reactor trip, only indication.

(g) THERMAL POWER 2 8.5% RTP.

(h) THERMAL POWER 2 50% RTP.

(i) THERMAL POWER 2 8.5% RTP and Reactor Coolant Flow-Low (Single Loop) trip Function blocked.

U) THERMAL POWER 2 8.5% RTP and RCP Breaker Position (Single Loop) trip Function blocked.

(k) THERMAL POWER > 8% RTP, and either no circulating water pump breakers closed, or condenser vacuum s 20".

(I) THERMAL POWER 2 50% RTP, 1 of 2 circulating water pump breakers closed, and condenser vacuum > 20".

(m) Including any reactor trip bypass breakers that are racked in and closed for bypassing an RTB.

R.E. Ginna Nuclear Power Plant 3.3.1 -14 Amendment

RTS Instrumentation 3.3.1 Table 3.3.1-1 (Note 1)

Overtemperature AT

- NOTE -

The Overtemperature AT Function Limiting Safety System Setting is defined by:

Overtemperature AT

ATo {Kj + K2 (P-P') - K3 (T-T') [(1 +T1 s)/ (1+ 2 S)] - f(Al))

Where:

AT is measured RCS AT, "F.

ATo is the indicated AT at RTP, "F.

s is the Laplace transform operator, sec 1 .

T is the measured RCS average temperature, OF.

T' is the nominal Tavg at RTP, "F.

P is the measured pressurizer pressure, psig.

P' is the nominal RCS operating pressure, psig.

K, is the Overtemperature AT reactor trip setpoint, [*].

K2 is the Overtemperature AT reactor trip depressurization setpoint penalty coefficient, [*]/psi.

K3 is the Overtemperature AT reactor trip heatup setpoint penalty coefficient, [*Y/F.

x1 is the measured lead time constant, [*] seconds.

t 2 is the measured lag time constant, [*] seconds.

f(AI) is a function of the indicated difference between the top and bottom detectors of the Power Range Neutron Flux channels where qt and qb are the percent power in the top and bottom halves of the core, respectively, and qt + qb is the total THERMAL POWER in percent RTP.

f(AI) = 0 when qt - qb is < [*]% RTP f(AI) = [*] {(qt - qb) - [*]} when qt - qb is > [*]% RTP

These values denoted with [*] are specified in the COLR.

R.E. Ginna Nuclear Power Plant 3.3.1 -15 Amendment

RTS Instrumentation 3.3.1 Table 3.3.1-1 (Note 2)

Overpower AT

- NOTE -

The Overpower AT Function Limiting Safety System Setting is defined by:

Overpower AT

ATo {K4 - K5 (T-T`) - K6 [(x3 sT) / (r3 s+1)] - f(Al)}

Where:

AT is measured RCS AT, OF.

ATo is the indicated AT at RTP, "F.

s is the Laplace transform operator, sec-1.

T is the measured RCS average temperature, "F.

T' is the nominal Tavg at RTP, OF.

K4 is the Overpower AT reactor trip setpoint, [*].

K5 is the Overpower AT reactor trip heatup setpoint penalty coefficient which is:

[*]/OF for T < T'and;

[*]/OF for T 2 T.

K6 is the Overpower AT reactor trip thermal time delay setpoint penalty which is:

[*]/OF for increasing T and;

[*]/OF for decreasing T.

r3 is the measured impulse/lag time constant, [*] seconds.

f(AI) is a function of the indicated difference between the top and bottom detectors of the Power Range Neutron Flux channels where qt and qb are the percent power in the top and bottom halves of the core, respectively, and qt + qb is the total THERMAL POWER in percent RTP.

f(Al) = [*] when qt - qb is s [*]% RTP f(AI) = [* {(qt - qb) - [*]} when qt - qb is > [*]% RTP

These values denoted with [*] are specified in the COLR.

R.E. Ginna Nuclear Power Plant 3.3. 1-1 6 Amendment

ESFAS Instrumentation 3.3.2 3.3 INSTRUMENTATION 3.3.2 Engineered Safety Feature Actuation System (ESFAS) Instrumentation LCO 3.3.2 The ESFAS instrumentation for each Function in Table 3.3.2-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.2-1.

ACTIONS

- NOTE -

Separate Condition entry Is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Enter the Condition Immediately with one channel or train referenced in Table 3.3.2-1 inoperable. for the channel or train.

B. As required by Required B.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A.1 and referenced OPERABLE status.

by Table 3.3.2-1.

C. Required Action and C.1 Be in MODE 2. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition B not met.

D. As required by Required D.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A.1 and referenced OPERABLE status.

by Table 3.3.2-1.

E. As required by Required E.1 Restore train to OPERABLE 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Action A.1 and referenced status.

by Table 3.3.2-1.

R.E. Ginna Nuclear Power Plant 3.3.2-1 Amendment

ESFAS Instrumentation 3.3.2 CONDITION REQUIRED ACTION COMPLETION TIME F. As required by Required F.1 Action A.1 and referenced ------------------

by Table 3.3.2-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of the other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months G. Required Action and G.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition D, E, or AND F not met.

G.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months H. As required by Required H.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Action A.1 and referenced OPERABLE status.

by Table 3.3.2-1.

I. As required by Required 1.1 Restore train to OPERABLE 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Action A.1 and referenced status.

by Table 3.3.2-1.

J. As required by Required J.1 Action A.1 and referenced ------------------

by Table 3.3.2-1. - NOTE-The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of the other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months K. Required Action and K.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition H, I, or AND J not met.

K.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months R.E. Ginna Nuclear Power Plant 3.3.2-2 Amendment

ESFAS Instrumentation 3.3.2 CONDITION REQUIRED ACTION COMPLETION TIME L. As required by Required L.1 Action A.1 and referenced ------------------

by Table 3.3.2-1. - NOTE -

The inoperable channel may be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of the other channels.

Place channel in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months M. Required Action and M.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition L not AND met.

M.2 Reduce pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months pressure to < 2000 psig.

N. As required by Required N.1 Declare associated Auxiliary Immediately Action A.1 and referenced Feedwater pump inoperable by Table 3.3.2-1. and enter applicable condition(s) of LCO 3.7.5, "Auxiliary Feedwater (AFW)

System."

R.E. Ginna Nuclear Power Plant 3.3.2-3 Amendment

ESFAS Instrumentation 3.3.2 SURVEILLANCE REQUIREMENTS

- NOTE -

Refer to Table 3.3.2-1 to determine which SRs apply for each ESFAS Function.

SURVEILLANCE FREQUENCY SR 3.3.2.1 Perform CHANNEL CHECK. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months SR 3.3.2.2 Perform COT. 92 days SR 3.3.2.3 - NOTE -

Verification of relay setpoints not required.

Perform TADOT. 92 days SR 3.3.2.4 -NOTE-Verification of relay setpoints not required.

Perform TADOT. 24 months SR 3.3.2.5 Perform CHANNEL CALIBRATION. 24 months SR 3.3.2.6 Verify the Pressurizer Pressure-Low and Steam Line 24 months Pressure-Low Functions are not bypassed when pressurizer pressure > 2000 psig.

SR 3.3.2.7 Perform ACTUATION LOGIC TEST. 24 months R.E. Ginna Nuclear Power Plant 3.3.2-4 Amendment

ESFAS Instrumentation 3.3.2 Table 3.3.2-1 Engineered Safety Feature Actuation System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

Safety Injection

a. Manual 1,2,3,4 2 D,G SR 3.3.2.4 NA Initiation

b. Automatic 1,2,3.4 2 trains IK SR 3.3.2.7 NA Actuation Logic and Actuation Relays

c. Containment 1,2,3,4 3 J,K SR 3.3.2.1 s4.61 psig Pressure-High SR 3.3.2.2 SR 3.3.2.5

d. Pressurizer 1,2 ,3 (b) 3 L,M SR 3.3.2.1 2 1744.8 Pressure-Low SR 3.3.2.2 psig SR 3.3.2.5 SR 3.3.2.6

e. Steam Line 1,2,3(b) 3 per steam line L.M SR 3.3.2.1 > 393.8 psig Pressure-Low SR 3.3.2.2 SR 3.3.2.5 SR 3.3.2.6 R.E. Ginna Nuclear Power Plant 3.3.2-5 Amendment

ESFAS Instrumentation 3.3.2 Table 3.3.2-1 Engineered Safety Feature Actuation System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGSt a)

2. Containment Spray

a. Manual Initiation Left 1.2,3,4 1 H,K SR 3.3.2.4 NA pushbutton Right 1,2,3,4 1 H,K SR 3.3.2.4 NA pushbutton

b. Automatic 1.2,3,4 2 trains IK SR 3.3.2.7 NA Actuation Logic and Actuation Relays

c. Containment 1,2,3.4 3 per set J,K SR 3.3.2.1 *31.11 psig Pressure-High SR 3.3.2.2 (narrow High SR 3.3.2.5 range) s 28.6 psig (wide range)

3. Containment Isolation

a. Manual 2 HK SR 3.3.2.4 NA I 1,2,3,4,(C)

Initiation

b. Automatic 1,2,3,4 2 trains IK SR 3.3.2.7 NA Actuation Logic and Actuation Relays I c. Safety Refer to Function 1 (Safety Injection) for all automatic Initiation Injection functions and requirements.

R.E. Ginna Nuclear Power Plant 3.3.2-6 Amendment

ESFAS Instrumentation 3.3.2 Table 3.3.2-1 Engineered Safety Feature Actuation System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

4. Steam Line Isolation

a. Manual 1, 2 (d)*3 (d) 1 per loop DG SR 3.3.2.4 NA Initiation

b. Automatic 1 ,2(d),3(d) 2 trains EG SR 3.3.2.7 NA Actuation Logic and Actuation Relays I c. Containment 1 ,2(d),P() 3 FG SR 3.3.2.1 s 18.0 psig Pressure-High SR 3.3.2.2 High SR 3.3.2.5 I d. High Steam 1,2(d),3(d) 2 per steam line FG SR 3.3.2.1 s 0.42E6 Flow SR 3.3.2.2 Ibm/hr SR 3.3.2.5 @ 1005 psig Coincident Refer to Function I (Safety Injection) for all initiation functions and with Safety requirements.

Injection and I Coincident 1 ,2 (d), 3(d) 2 per loop F,G SR 3.3.2.1 2 544.980 F with T,, 9-Low SR 3.3.2.2 SR 3.3.2.5

e. High-High 1,2(d),3(d) 2 per steam line FG SR 3.3.2.1 s 3.63E6 Steam Flow SR 3.3.2.2 Ibm/hr SR 3.3.2.5 @ 755 psig Coincident Refer to Function 1 (Safety Injection) for all initiation functions and with Safety requirements.

Injection R.E. Ginna Nuclear Power Plant 3.3.2-7 Amendment

ESFAS Instrumentation 3.3.2 Table 3.3.2-1 Engineered Safety Feature Actuation System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

5. Feedwater Isolation

a. Automatic 1 ,2 (e),3 (e) 2 trains EG SR 3.3.2.7 NA Actuation Logic and Actuation Relays I b. SG Water 1,2 (e),3(e) 3 per SG FG SR 3.3.2.1 S 91.15%

Level-High SR 3.3.2.2 SR 3.3.2.5

c. Safety Refer to Function I (Safety Injection) for all Initiation functions and Injection requirements.

R.E. Ginna Nuclear Power Plant 3.3.2-8 Amendment

ESFAS Instrumentation 3.3.2 Table 3.3.2-1 Engineered Safety Feature Actuation System Instrumentation APPLICABLE MODES OR LIMITING OTHER SAFETY SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS CONDITIONS REQUIREMENTS SETTINGS(a)

6. Auxiliary Feedwater (AFW)

a. Manual Initiation AFW 1,2,3 1 per pump N SR 3.3.2.4 NA StandbyAFW 1,2,3 1 perpump N SR3.3.2.4 NA

b. Automatic 1,2,3 2 trains EG SR 3.3.2.7 NA Actuation Logic and Actuation Relays

c. SGWater 1,2,3 3perSG FG SR 3.3.2.1 a13.88%

Level-Low Low SR 3.3.2.2 SR 3.3.2.5

d. Safety Refer to Function 1 (Safety Injection) for all Initiation functions and Injection requirements.

(Motor driven pumps only)

X e. Undervoltage - 1,2,3 2 per bus D,G SR 3.3.2.3 > 2597 V Bus 11A and SR 3.3.2.5 with s 3.6 11B (Turbine sec time driven pump delay only)

f. Trip of Both 1 2 per MFW B,C SR 3.3.2.4 NA Main pump Feedwater Pumps (Motor driven pumps only)

R.E. Ginna Nuclear Power Plant 3.3.2-9 Amendment

ESFAS Instrumentation 3.3.2 (a)

A channel is OPERABLE when both of the following conditions are met:

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the COT Acceptance Criteria. The COT Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

COT uncertainty The COT uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP is the desired setting and shall not exceed the Limiting Safety System Setting (LSSS). The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

(b) Pressurizer Pressure Ž 2000 psig.

(c) During CORE ALTERATIONS and movement of irradiated fuel assemblies within containment.

(d) Except when both MSIVs are closed and de-activated.

(e) Except when all Main Feedwater Regulating and associated bypass valves are closed and de-activated or isolated by a closed manual valve.

R.E. Ginna Nuclear Power Plant 3.3.2-10 Amendment

LOP DG Start Instrumentation 3.3.4 3.3 INSTRUMENTATION 3.3.4 Loss of Power (LOP) Diesel Generator (DG) Start Instrumentation LCO 3.3.4I - Each 480 V safeguards bus shall have two OPERABLE channels of LOP DG Start Instrumentation.

APPLICABILITY: MODES 1, 2,3, and 4, When associated DG is required to be OPERABLE by LCO 3.8.2, "AC Sources - MODES 5 and 6."

ACTIONS

-NOTE-Separate Condition entry is allowed for each 480 V safeguards bus.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more 480 V A.1 Place channel(s) in trip. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months bus(es) with one channel inoperable.

B. Required Action and B.1 Enter applicable Immediately associated Completion Condition(s) and Required Time of Condition A not Action(s) for the associated met. DG made inoperable by LOP DG start Oinstrumentation.

One or more 480 V bus(es) with two channels inoperable.

R.E. Ginna Nuclear Power Plant 3.3.4-1 Amendment

LOP DG Start Instrumentation 3.3.4 SURVEILLANCE REQUIREMENTS

-NOTE-When a channel is placed in an inoperable status solely for the performance of required Surveillances, entry into the associated Conditions and Required Actions may be delayed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months provided the second channel maintains LOP DG start capability.

SURVEILLANCE FREQUENCY SR 3.3.4.1 Perform TADOT. 31 days SR 3.3.4.2 Perform CHANNEL CALIBRATION with Limiting 24 months Safety System Settings (LSSS)(a) for each 480 V bus as follows:

a. Loss of voltage LSSS 2 371.6 V and

378.0 V with a time delay of 2 1.64 seconds and

2.61 seconds.

b. Degraded voltage LSSS 2 419.6 V and

424.4 V with a time delay of 2 30.7 seconds and

1589 seconds (@ 416.8 V) and 2 25.1 seconds and < 494.9 seconds (@ 368 V).

(a)

A channel is OPERABLE when both of the following conditions are met:

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the CHANNEL CALIBRATION Acceptance Criteria. The CHANNEL CALIBRATION Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

CHANNEL CALIBRATION uncertainty The CHANNEL CALIBRATION uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP is the desired setting and shall not exceed the LSSS.

The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

R.E. Ginna Nuclear Power Plant 3.3.4-2 Amendment

Containment Ventilation Isolation Instrumentation 3.3.5 3.3 INSTRUMENTATION 3.3.5 Containment Ventilation Isolation Instrumentation LCO 3.3.' 5 The Containment Ventilation Isolation instrumentation for each Function in Table 3.3.5-1 shall be OPERABLE.

I APPLICABILITY: According to Table 3.3.5-1.

ACTIONS

-NOTE-Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One radiation monitoring A.1 Restore the affected 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months channel inoperable. channel to OPERABLE status.

B. B.1 Enter applicable Conditions Immediately

_ - -_ and Required Actions of

- NOTE- LCO 3.6.3, "Containment Only applicable in MODE Isolation Boundaries," for 1, 2, 3, or 4. containment mini-purge isolation valves made One or more Functions inoperable by isolation with one or more manual instrumentation.

or automatic actuation trains inoperable.

Both radiation monitoring channels inoperable.

Required Action and associated Completion Time of Condition A not met.

R.E. Ginna Nuclear Power Plant 3.3.5-1 Amendment

Containment Ventilation Isolation Instrumentation 3.3.5 CONDITION REQUIRED ACTION COMPLETION TIME C. C.1 Place and maintain Immediately

.____ - -_ containment purge and

- NOTE - exhaust valves in closed Only applicable during position.

CORE ALTERATIONS or movement of irradiated fuel assemblies within containment.

-- containm t C.2 Enter applicable Conditions Immediately and Required Actions of One or more Functions LCO 3.9.3, "Containment with one or more manual Penetrations," for or automatic actuation containment purge and trains inoperable. exhaust isolation valves made inoperable by OR isolation instrumentation.

Both radiation monitoring channels inoperable.

OR Required Action and associated Completion Time for Condition A not met.

R.E. Ginna Nuclear Power Plant 3.3.5-2 Amendment

Containment Ventilation Isolation Instrumentation 3.3.5 SURVEILLANCE REQUIREMENTS

-NOTE-Refer to Table 3.3.5-1 to determine which SRs apply for each Containment Ventilation Isolation Function.

SURVEILLANCE FREQUENCY SR 3.3.5.1 Perform CHANNEL CHECK. 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months SR 3.3.5.2 Perform COT. 92 days SR 3.3.5.3 Perform ACTUATION LOGIC TEST. 24 months SR 3.3.5.4 Perform CHANNEL CALIBRATION. 24 months R.E. Ginna Nuclear Power Plant 3.3.5-3 Amendment

Containment Ventilation Isolation Instrumentation 3.3.5 Table 3.3.5-1 Containment Ventilation Isolation Instrumentation LIMITING APPLICABLE MODES SAFETY AND OTHER SPECIFIED REQUIRED SURVEILLANCE SYSTEM FUNCTION CONDITIONS CHANNELS REQUIREMENTS SETTINGS(a)

1. Automatic Actuation 2 trains SR 3.3.5.3 NA I

Logic and Actuation Relays

2. Containment Radiation

a. Gaseous I SR 3.3.5.1 (C)

I SR 3.3.5.2 SR 3.3.5.4

b. Particulate 1,2.3.4,b) 1 SR 3.3.5.1 (c) l SR 3.3.5.2 SR 3.3.5.4 1 3. Containment Isolation - Refer to LCO 3.3.2. TESFAS Instrumentation," Function 3.a, for all Manual Initiation Initiation functions and requirements.

4. Containment Spray - Refer to LCO 3.3.2, ESFAS Instrumentation," Function 2.a, for all Manual Initiation initiation functions and requirements.

I55. Safety Injection Refer to LCO 3.3.2. "ESFAS Instrumentation," Function 1, for all initiation functions and requirements.

R.E. Ginna Nuclear Power Plant 3.3.5-4 Amendment

Containment Ventilation Isolation Instrumentation 3.3.5 (a)

A channel is OPERABLE when both of the following conditions are met:

1. The absolute difference between the as-found Trip Setpoint (TSP) and the previous as-left TSP is within the COT Acceptance Criteria. The COT Acceptance Criteria is defined as:

las-found TSP - previous as-left TSPI

COT uncertainty The COT uncertainty shall not include the calibration tolerance.

2. The as-left TSP is within the established calibration tolerance band about the nominal TSP. The nominal TSP is the desired setting and shall not exceed the Limiting Safety System Setting (LSSS). The LSSS and the established calibration tolerance band are defined in accordance with the Ginna Instrument Setpoint Methodology. The channel is considered operable even if the as-left TSP is non-conservative with respect to the LSSS provided that the as-left TSP is within the established calibration tolerance band.

(b) During CORE ALTERATIONS and movement of irradiated fuel assemblies within containment.

(c) Per Radiological Effluent Controls Program.

R.E. Ginna Nuclear Power Plant 3.3.5-5 Amendment

Reporting Requirements Reporting Requirements 5.6 5.0 ADMINISTRATIVE CONTROLS 5.6 Reporting Requirements The following reports shall be submitted in accordance with 10 CFR 50.4.

5.6.1 Occupational Radiation Exposure Report A tabulation on an annual basis of the number of station, utility, and other personnel (including contractors) receiving exposures > 100 mrem/yr and their associated man rem exposure according to work and job functions (e.g., reactor operations and surveillance, inservice inspection, routine maintenance, special maintenance, waste processing, and refueling).

This tabulation supplements the requirements of 10 CFR 20.2206. The dose assignments to various duty functions may be estimated based on pocket dosimeter, thermoluminescent dosimeter (TLD), or film badge measurements. Small exposures totalling < 20% of the individual total dose need not be accounted for. In the aggregate, at least 80% of the total whole body dose received from external sources should be assigned to specific major work functions. The report shall be submitted on or before April 30 of each year.

5.6.2 Annual Radiological Environmental Operatina ReDort The Annual Radiological Environmental Operating Report covering the operation of the plant during the previous calendar year shall be submitted by May 15 of each year. The report shall include summaries, interpretations, and analyses of trends of the results of the radiological environmental monitoring activities for the reporting period. The material provided shall be consistent with the objectives outlined in the Offsite Dose Calculation Manual (ODCM), and in 10 CFR 50, Appendix I, Sections IV.B.2, IV.B.3, and IV.C.

The Annual Radiological Environmental Operating Report shall include the results of analyses of all radiological environmental samples and of all environmental radiation measurements taken during the period pursuant to the locations specified in the table and figures in the ODCM, as well as summarized and tabulated results of these analyses and measurements in the format of the table in the Radiological Assessment Branch Technical Position, Revision 1, November 1979. In the event that some individual results are not available for inclusion with the report, the report shall be submitted noting and explaining the reasons for the missing results. The missing data shall be submitted in a supplementary report as soon as possible.

R.E. Ginna Nuclear Power Plant 5.6-1 Amendment

Reporting Requirements 5.6 5.6.3 Radioactive Effluent Release Report The Radioactive Effluent Release Report covering the operation of the plant shall be submitted -in accordance with 10 CFR 50.36a. The report shall include a summary of the quantities of radioactive liquid and gaseous effluents and solid waste released from the plant. The material provided shall be consistent with the objectives outlined in the ODCM and in conformance with 10 CFR 50.36a and 10 CFR 50, Appendix i,Section IV.B.1.

5.6.4 Monthly ODeratina Reports Routine reports of operating statistics and shutdown experience, including documentation of all challenges to the pressurizer power operated relief valves or pressurizer safety valves, shall be submitted on a monthly basis no later than the 15th of each month following the calendar month covered by the report.

5.6.5 CORE OPERATING LIMITS REPORT (COLR)

The following administrative requirements apply to the COLR:

a. Core operating limits shall be established prior to each reload cycle, or prior to any remaining portion of a reload cycle, and shall be documented in the COLR for the following:

2.1. "Safety Limits (SLs)";

LCO 3.1.1, 'SHUTDOWN MARGIN (SDM)";

LCO 3.1.3, 'MODERATOR TEMPERATURE COEFFICIENT (MTC)";

LCO 3.1.5, "Shutdown Bank Insertion Limit";

LCO 3.1.6, 'Control Bank Insertion Limits";

LCO 3.2.1, "Heat Flux Hot Channel Factor (FO(Z))";

LCO 3.2.2, "Nuclear Enthalpy Rise Hot Channel Factor (FN H)';

LCO 3.2.3, 'AXIAL FLUX DIFFERENCE (AFD)";

LCO 3.3.1, "Reactor Protection System (RPS) Instrumentation";

LCO 3.4.1, "RCS Pressure, Temperature, and Flow Departure from Nucleate Boiling (DNB) Limits"; and LCO 3.9.1, "Boron Concentration."

R.E. Ginna Nuclear Power Plant 5.6-2 Amendment

Reporting Requirements 5.6

b. The analytical methods used to determine the core operating limits shall be those previously reviewed and approved by the NRC, specifically those described in the following documents:

1. WCAP-9272-P-A, "Westinghouse Reload Safety Evaluation Methodology," July 1985.

(Methodology for 2.1, LCO 3.1.1, LCO 3.1.3, LCO 3.1.5, LCO 3.1.6, LCO 3.2.1, LCO 3.2.2, LCO 3.2.3, and LCO 3.9.1.)

2. WCAP-1 3677-P-A, "10 CFR 50.46 Evaluation Model Report:

WCOBRAITRAC Two-Loop Upper Plenum Injection Model Updates to Support ZIRLOTM Cladding Option," February 1994.

(Methodology for LCO 3.2.1.)

3. WCAP-8385, 'Power Distribution Control and Load Following Procedures - Topical Report," September 1974.

(Methodology for LCO 3.2.3.)

4. WCAP-12610-P-A, "VANTAGE + Fuel Assembly Reference Core Report," April 1995.

(Methodology for LCO 3.2.1.)

5. WCAP 11397-P-A, uRevised Thermal Design Procedure,"

April 1989.

(Methodology for LCO 3.4.1 when using RTDP.)

6. WCAP-1 0054-P-A and WCAP-1 0081 -A, "Westinghouse Small Break ECCS Evaluation Model Using the NOTRUMP Code," August 1985.

(Methodology for LCO 3.2.1.)

7. WCAP-10924-P-A, Volume 1, Revision 1, Westinghouse Large-Break LOCA Best-Estimate Methodology, Volume 1:

Model Description and Validation Responses to NRC Questions," and Addenda 1,2,3, December 1988.

(Methodology for LCO 3.2.1.)

8. WCAP-10924-P-A, Volume 2, Revision 2, "Westinghouse Large-Break LOCA Best-Estimate Methodology, Volume 2:

Application to Two-Loop PWRs Equipped with Upper Plenum Injection," and Addendum 1, December 1988.

(Methodology for LCO 3.2.1.)

9. WCAP-1 0924-P-A, Volume 1, Revision 1, Addendum 4, "Westinghouse Large-Break LOCA Best-Estimate Methodology, Volume 1: Model Description and Validation, Addendum 4: Model Revisions," March 1991.

(Methodology for LCO 3.2.1.)

R.E. Ginna Nuclear Power Plant 5.6-3 Amendment

Reporting Requirements 5.6

10. WCAP-8745, "Design Basis for the Thermal Overpower Delta T and Thermal Overtemperature Delta T Trip Functions,"

March 1977.

(Methodology for LCO 3.3.1.)

c. The core operating limits shall be determined such that all applicable limits (e.g., fuel thermal mechanical limits, core thermal hydraulic limits, Emergency Core Cooling Systems (ECCS) limits, nuclear limits such as SDM, transient analysis limits, and accident analysis limits) of the safety analysis are met.

d. The COLR, including any midcycle revisions or supplements, shall be provided upon issuance for each reload cycle to the NRC.

5.6.6 Reactor Coolant System (RCS) PRESSURE AND TEMPERATURE LIMITS REPORT (PTLR)

The following administrative requirements apply to the PTLR:

a. RCS pressure and temperature limits for heatup, cooldown, criticality, and hydrostatic testing as well as heatup and cooldown rates shall be established and documented in the PTLR for the following:

LCO 3.4.3, 'RCS Pressure and Temperature (P/T) Limits'

b. The power operated relief valve lift settings required to support the Low Temperature Overpressure Protection (LTOP) System, and the LTOP enable temperature shall be established and documented in the PTLR for the following:

LCO 3.4.6, ARCS Loops - MODE 4%;

LCO 3.4.7, 'RCS Loops - MODE 5, Loops Filled";

LCO 3.4.10, 'Pressurizer Safety Valves"; and LCO 3.4.12, 'LTOP System."

c. The analytical methods used to determine the RCS pressure and temperature and LTOP limits shall be those previously reviewed and approved by the NRC in NRC letter, BR.E. Ginna - Acceptance for Referencing of Pressure Temperature Limits Report, Revision 2 (TAC No. M96529)," dated November 28, 1997. Specifically, the methodology is described in the following documents:

R.E. Ginna Nuclear Power Plant 5.6-4 Amendment

Reporting- Requirements 5.6

1. Letter from R.C. Mecredy, Rochester Gas and Electric Corporation (RG&E), to Document Control Desk, NRC, Attention: Guy S. Vissing, "Application for Facility Operating License, Revision to Reactor Coolant System (RCS)

Pressure and Temperature Limits Report (PTLR)

Administrative Controls Requirements," Attachment VI, September 29, 1997, as supplemented by letter from R.C.

Mecredy, RG&E, to Guy S. Vissing, NRC, Corrections to Proposed Low Temperature Overpressure Protection System Technical Specification," October 8, 1997.

2. WCAP-14040-NP-A, "Methodology used to Develop Cold Overpressure Mitigating System Setpoints and RCS Heatup and Cooldown Limit Curves," Sections 1 and 2, January, 1996.

d. The PTLR shall be provided to the NRC upon issuance for each reactor vessel fluence period and for revisions or supplement thereto.

R.E. Ginna Nuclear Power Plant 5.6-5 Amendment

Enclosure 3 R.E. Ginna Nuclear Power Plant Proposed Technical Specification Bases Changes (markup)

RTS Instrumentation B 3.3.1 B 3.3 INSTRUMENTATION B 3.3.1 Reactor Trip System (RTS) Instrumentation BASES BACKGROUND Atomic Industry Forum (AIF) GDC 14 (Ref. 1) requires that the core protection systems, together with associated engineered safety features equipment, be designed to prevent or suppress conditions that could result in exceeding acceptable fuel design limits. The RTS Initiates a plant shutdown, based on the values of selected plant parameters, to protect against violating the c6re fuel d&sign'limits aid Reactor-Co6lant System (RCS) pressure boundary during anticipated operational occurrences (AOOs) and to assist the Engineered Safety Features (ESF)

Systems in mitigating accidents.

The installed protection and monitoring systems have been designed to assure safe operation of the reactor at all times. This is achieved by specifying limiting safety system settings (LSSS) in terms of parameters directly monitored by the RTS, as well as specifying LCOs with respect to these parameters and other reactor system parameters and equipment.

The LSSS, defined in this specification as the Trip Setpoints, in conjunction with the associated LCOs, establish the threshold for protective system action to prevent exceeding acceptable limits during Design Basis Accidents (DBAs). Brhese acceptable limits are:

a. Th Sfey iit(S) ale sal b minane t pevn

a. The Safety Limit (SL) values shall be maintained to prevent departure from nucleate boiling (DNB);

b. Fuel centerline melt shall not occur; and

c. The RCS pressure SL of 2735 psig shall not be exceeded.

Operation within the SLs of Specification 2.0, "Safety Limits (SLs),"

maintains the above values and assures that offsite dose will be within 10 CFR 100 limits (Ref; 2) during AOOs.

DBAs are events that are analyzed even though they are not expected to occur during the plant life. The DBA acceptance limit is that offsite doses shall be maintained within an acceptable fraction of 10 CFR 100 limits (Ref. 2). There are five different accident categories which are organized based on the probability of occurrence (Ref. 3). Each accident category is allowed a different fraction of the 10 CFR 100 limits, inversely proportioned to the probability of occurrence. Meeting the acceptable dose limit for an accident category is considered as having acceptable consequences for that event.

R.E. Ginna Nuclear Power Plant B 3.3.1 -1 Revision 18

RTS Instrumentation B 3.3.1 The RTS instrumentation is segmented into three distinct but interconnected modules as described in UFSAR, Chapter 7 (Ref. 4):

a. Field transmitters or process sensors;

b. Signal process control and protection equipment; and

c. Reactor trip switchgear.

These modules are shown in Figure B 3.3.1-1 and discussed in more detail below.

Field Transmitters and Process 'Sensors Field transmitters and process sensors provide a measurable electronic signal based on the physical characteristics of the parameter being measured. To meet the design demands for redundancy and reliability, two, three, and up to four field transmitters or sensors are used to measure required plant parameters. To account for the calibration tolerances and instrument drift, which is assumed to occur between calibrations, statistical allowances are provided. These statistical allowances provide the basis for determining acceptable<7as-109andGas-foundccalibration values for each transmitter or sensor as provided in established plant procedures.

Sional Process Control and Protection Eauioment The process control equipment provides signal conditioning, comparable output signals'for instruments located on the main control board, and comparison of measured input signals with setpoints established by safety analyses. These setpoints are defined in UFSAR, Chapter 7 (Ref. 4), Chapter 6 (Ref. 5), and Chapter 15 (Ref. 6). If the measured value of aplant.parameter exceeds the predetermined setpoint, an output from a bistable is forwarded to the logic relays.

Generally, three or four channels of process control equipment are used for the signal processing of plant parameters measured by the field transmitters and sensors. If a parameter is used only for input to the protection circuits, three channels with a two-out-of-three logic are typically sufficient to provide the required reliability and redundancy. If one channel fails in a direction that would not result in a partial Function trip, the Function can still be accomplished with a two-out-of-two logic. If one channel fails in a direction that a partial Function trip occurs, a trip will not occur unless a second channel fails or trips in the remaining one-out-of-two logic.

R.E. Ginna Nuclear Power Plant B 3.3.1 -2 Revision 18

RTS Instrumentation B 3.3.1 If a parameter has no measurable setpoint and is only used as an input to the protection circuits (e.g., manual trip functions) two channels with a one-out-of-two logic are sufficient. A third channel is not required since no surveillance testing is required during the time period in which the parameter is required.

If a parameter is used for input to the protection system and a control function, four channels with a two-out-of-four logic are typically sufficient to provide the required reliability and redundancy.

This ensures that the circuit is able to withstand both an input failure to the control system, which may then require the protection function actuation, and a single failure in the other channels providing the.protection function actuation. Therefore, a single failure will neither cause nor prevent the protection function actuation. These requirements are described in IEEE-279-1971 (Ref. 7).

The two, three, and four process control channels discussed above all feed two logic trains. Figure B 3.3.1-1 shows a two-out-of-four logic function which provides input into two logic trains (Train A and B). Two logic trains are required to ensure that no single failure of one logic train will disable the RTS. Provisions to allow removing logic trains from service during maintenance are unnecessary because of the logic system's designed reliability. During normal operation, the two logic trains remain energized.

Reactor Trip Switchaear The reactor trip switchgear includes the reactor trip breakers (RTBs) and bypass breakers as shown on Figure B 3.3.1-1. The RTBs are in the electrical power supply line from the control rod drive motor generator set power supply to the control rod drive mechanisms (CRDMs). Opening of the RTBs interrupts power to the CRDMs, which allows the shutdown rods and control rods to fall into the core by gravity and shutdown the reactor. Each RTB may be bypassed with a bypass breaker to allow testing of the RTB while the plant is at power. During normal operation, the output from the protection system is a voltage signal that energizes the undervoltage coils in the RTBs and bypass breakers, if in use.

When the required logic matrix combination is completed, the protection system output voltage signal is removed, the undervoltage coils are de-energized, the breaker trip lever is actuated by the de-energized undervoltage coil, and the RTBs and bypass breakers are tripped open allowing the shutdown rods and control rods to fall into the core. Therefore, a loss of power to the protection system or RTBs will cause a reactor trip. In addi on to the de-energization of the undervoltage coils, each also equipped with.a shunt trip device that is energized ' to trip the breaker open upon receipt of a reactor trip signal from the protection system (except for the zirconium guide tube trip which R.E. Ginna Nuclear Power Plant B 3.3.1-3 Revision 18

iAIe'Ae o sc{erjkE/ f_ eV c RTS Instrumentation l Is J oa 4.

.j'., ~,.e B3.3.1

>PiI. re;C; t A 0,IA Hs,r* ..# , temo a n y utilizes the undervoltage coils). Either the undervoltage coil or the shunt trip mechanism is sufficient by itself to open the RTBs, thus providing diverse trip mechanisms.

Of 3 ~ec.

APPLICABLE The RTS functions to maintain the SLs during all AOOs and mitigates the SAFETY consequences of DBAs which initiate in any MODE in which the RTBs ANALYSES, are closed.

LCO, AND APPLICABILITY Each of the analyzed accidents and transients can be detected by one or more RTS Functions. -The accident analysis described in Reference 6 takes credit for most RTS trip Functions. RTS trip Functions not specifically credited in the accident analysis are qualitatively credited in the safetyanalysis and the NRC staff approved licensing basis for the plant. These RTS trip Functions may provide protection for conditions that do not require dynamic transient analysis to demonstrate Function performance. They may also serve as anticipatory trips to RTS trip Functions that were credited in the accident analysis. tr: 3 The LCO requires all instrumentation performing an RTS Function, listed in Table 3.3.1-1 in the accompanying LCO, to be OPERABLE. Failure of any instrument renders the affected channel(s) inoperable and reduces the reliability of the affected Functions.

The LCO generally requires OPERABILITY of three or four channels in each instrumentation Function, two channels of Manual Reactor Trip in each logic Function, and two trains in each Automatic Trip Logic Function. Four OPERABLE instrumentation channels in a two-out-of-four configuration are required when one RTS channel is also used as a control system input. This configuration accounts for the possibility of the shared channel failing in such a manner that it creates a trarisient that requires RTS action. In this case, the RTS will still provide protection, even with random failure of one of the other three protection channels.

Three operable instrumentation channels in a two-out-of-three configuration are generally required when there is no potential for control system and protection system interaction that could simultaneously create a need for a RTS trip and disable one RTS channel. The two-out-of-three and two-out-of-four configurations allow one channel to be tripped or bypassed during maintenance or testing without causing a reactor trip. Specific exceptions to the above en ilosophy. exist and are discussed below. H .

The LCO and Applicability of each RT uncton are rovided in Table 3.3.1-1. Included on Table 3.31-1 are e r all applicable RTS Functions. o for RTS Functions not specifically modeled in the safety analysis are based on established limits provided in the UFSAR (Reference 4 )Note that in the accomRpnying3

,n.The TripSetpoints are, R.E. Ginna Nuclear Power Plant B 3.3.1 -4 Revision 18

RTS Instrumentation B 3.3.1 Setpit _peiie inhTabe3.3.1. n considered to be properly adjusted when the 'as left value a is thin th allowable tolerance band for CHANNEL CALIBRATION accuracy as speifid wthi plnt rocedures. The channel containing the bistable i detailereddescrtionofe thetho las foundt valuer the a ripd o The p Setpoints used in the bistables are based on the analytical limi stated in References 4,-5, and 6. The selection of thes8,Trip.8etpoints is such that adequate protection is provided when all sensor and processing time delays, calibration tolerances, instrumentation uncertainties, and instrument drift are taken into account.. The Trip oare Setpoints specified in Table3.3.1ku therefore conservatively adjusted with respect to the analytcal limits used in the accident analysis. A /

detile dscrptoriofthe methodology used to verify the a'dequacy of the xistng rip etpints, including their explicit uncertaintiei provdedi Refrenc 8.

The RTS utilizes various permissive signals to ensure reactor trip Function's are in the cor'rect configuration for the current plant status.

These permissives back up operator actions to ensure protection system Functions are not bypassed during plant conditions under which the safety analysis assumes the Function is available.

In addition to the RTS Functions listed in Table 3.3.1-1, a zirconium guide tube trip function exists. This trip function was added by RG&E to prevent potential damage to the control rod drive mechanisms when cooling down due to the different thermal expansion rates of zirconium and stainless steel. This trip function is not credited in the accident analysis, and as such, is not addressed by this LCO. However, the trip function is used for testing the RTBs since the function only actuates the RTB undervoltage mechanism (versus shunt trip).

The safety analyses and OPERABILITY requirements applicable to each RTS Function and permissive provided in Table 3.3.1-1 are discussed below:

1. Manual Reactor TriD The Manual Reactor Trip Function ensures that the control room operator can initiate a reactor trip at any time by using either of two reactor trip pushbuttons on the main control board. A Manual Reactor Trip energizes the shunt trip device and de-energizes the undervoltage coils for the RTBs and bypass breakers. It is used at the discretion of the control room operators to shut down the reactor whenever any parameter is rapidly trending toward its Trip Setpoint or during other degrading plant conditions.

R.E. Ginna Nuclear Power Plant B 3.3.1 -5 Revision 18

RTS Instrumentation B 3.3.1 The LCO requires two Manual Reactor Trip channels to be OPERABLE. Each channel is controlled by a manual reactor trip pushbutton which actuates the reactor trip breaker in both trains.

Two independent channels are required to be OPERABLE so that no single failure will disable the Manual Reactor Trip Function. This function has no adjustable trip setpoint with which to associate an LSSS, therefore no setpoints are provided.

In MODE 1 or 2, manual initiation capability of a reactor trip must be OPERABLE. These are the MODES in which the shutdown rods and/or control rods are partially or fully withdrawn from the core. In MODE 3, 4,or 5, the manual initiation Function must also be

'OPERABLE if the RTBs are closed and the 'Control Rod Drive (CRD) System iscapable of withdrawing the shutdown rods or the control rods. In this condition, inadvertent control rod withdrawal is possible. In MODE 3, 4, or 5, manual initiation of a reactor trip is not required to be OPERABLE if the CRD System is not capable of withdrawing the'shutdown rods or'control rods, or if one or more RTBs are open. If the rods cannot be withdrawn from the core, there is no need to be able to trip the reactor because all of the' rods are inserted. In MODE 6, neither the shutdown rods nor the control rods are permitted to be withdrawn and the CRDMs are disconnected from the control rods and shutdown' rods. Therefore, the manual initiation Function is not required.

2. Power Range Neutron Flux The Power Range Neutron Flux trip Function ensures that protection is provided against an uncontrolled RCCA bank rod withdrawal accident. The Nuclear Instrumentation System (NIS) power range detectors (N-41, N-42, N-43, and N-44) are located external to the reactor vessel and measure neutrons leaking from the core. The NIS power range detectors provide input to the CRD System for determination of automatic rod speed and direction.

Therefore, the actuation logic must be able to withstand an input failure to the control system, which may then require the protection function actuation, and a single failure in the other channels providing the protection function actuation.

a. Power Range Neutron Flux-High The Power Range Neutron Flux-High trip Function ensures that protection is provided, from all power levels, against a positive reactivity excursion leading to DNB during power operations. These reactivity excursions can be caused by rod withdrawal or reductions in RCS temperature. Note that this Function also provides a signal to prevent automatic and manual rod withdrawal prior to initiating a reactor trip.

Limiting further rod withdrawal may terminate the transient and eliminate the need to trip the reactor.

R.E. Ginna Nuclear Power Plant B 3.3.1-6 Revision 18

RTS Instrumentation B 3.3.1 The LCO requires all four of the Power Range Neutron Flux-High trip Function channels to be OPERABLE.

In MODE 1 or 2, when a positive reactivity excursion could occur, the Power Range Neutron Flux-High trip must be OPERABLE. This Function will terminate the reactivity excursion and shut down the reactor prior to reaching a power level that could damage the fuel. In MODE 3, 4, 5, or 6, the NIS power range detectors cannot detect neutron levels in this range. In these MODES, the Power Range Neutron Flux-High trip Function is not required to be OPERABLE because the reactor is shut down and reactivity excursions into the power range are extremely unlikely.

Other RTS Functions and administrative controls provide protection against reactivity additions when in MODE 3, 4, 5, or 6.

b. Power Ranae Neutron Flux-Low The LCO requirement for the Power Range Neutron Flux-Low trip Function ensures that protection is provided against a positive reactivity excursion from low power or subcritical conditions.

The LCO requires all four of the Power Range Neutron Flux-Low trip Function channels (N-41, N-42, N-43, and N-44) to be OPERABLE.

In MODE 1, below 6% RTP, and in MODE 2, the Power Range Neutron Flux-Low trip must be OPERABLE. This Function may be manually blocked by the operator when two-out-of-four power range channels are greater than approximately 8% RTP (P-1 0 setpoint). This Function is automatically unblocked when three-out-of-four power range channels are below the P-1 0 setpoint. Above the P-1 0 setpoint, positive reactivity additions are mitigated by the Power Range Neutron Flux-High trip'Function.

In MODE 3, 4, 5, or 6, the Power Range Neutron Flux-Low trip Function is not required to be OPERABLE because the reactor is shut down and the NIS power range detectors cannot detect neutron levels in this range. Other RTS trip Functions and administrative controls provide protection against positive reactivity additions or power excursions in MODE 3, 4, 5, or6.

R.E. Ginna Nuclear Power Plant B 3.3.1-7 Revision 18

RTS Instrumentation B 3.3.1

3. Intermediate Range Neutron Flux The Intermediate Range Neutron Flux trip Function ensures that protection is provided against an uncontrolled RCCA bank rod withdrawal accident from a subcritical condition. This trip Function provides redundant protection to the Power Range Neutron Flux-Low trip Function and is not specifically modeled in the accident analysis. The NIS intermediate range detectors (N-35 and N-36) are located external to the reactor vessel and measure neutrons leaking from the core. The NIS intermediate range detectors do not provide any input to control systems. Note that this Function also provides a signal to prevent automatic and manual rod withdrawal prior to initiatirib a reabtor trip. Limriting further rod withdrawal may terminate the transient and eliminate the need to trip the reactor.

The LCO requires two channels of the Intermediate Range Neutron Flux trip Function to.be OPERABLE. Two OPERABLE channels are sufficient to ensure no single failure will disable this trip Function. Because this trip Function is important only during low power conditions, there is generally no need to disable channels for testing while the Function is required to be OPERABLE. Therefore, a third channel is unnecessary.

In MODE 1 below 6% RTP, and in MODE 2,The Intermediate Range Neutron Flux trip Function must be OPERABLE since there is a potential for an uncontrolled RCCA bank rod withdrawal accident. This Function may be manually blocked by the operator )

when two-out-of-four power range channels are greater tha approximately 8% RTP (P-10 setpoint). Above TP 10 setpoinr,the Power Range Neutron Flux-High trip provides core protection for a rod withdrawal accident. In MODE 3, 4, or 5, the Intermediate Range Neutron Flux trip Function is not required to be OPERABLE because the NIS intermediate range detectors cannot detect neutron levels in this range. Other RTS trip Functions and administrative controls provide protection against reactivity additions or power excursions in MODE 3, 4, 5, or 6.

R.E. Ginna Nuclear Power Plant B 3.3.1-8 Revision 18

RTS Instrumentation B 3.3.1

4. Source Range Neutron Flux The LCO requirement for the Source Range Neutron Flux trip Function ensures that protection is provided against an uncontrolled RCCA bank rod withdrawal accident from a subcritical condition and provides protection against boron dilution and rod ejection events. This trip Function provides redundant protection to the Power Range Neutron Flux-Low and Intermediate Range Neutron Flux trip Functions in MODE 2 and is not specifically credited in the accident analysis at these conditions. The NIS source range detectors (N-31 and N-32) are located external to the reactor vessel and measure neutrons leaking from the core. The NIS source range'detectors do ribt provide 'a'ny inputs to'control systems. The source range trip is the only RTS automatic protection function required in MODES 3, 4, and 5. Therefore, the functional capability at the specified Trip Setpoint is assumed to be available.

The LCO requires two channels of Source Range Neutron Flux trip Function to be OPERABLE. Two OPERABLE channels are sufficient to ensure no single failure will disable this trip Function.

The LCO also requires one channel of the Source Range Neutron Flux trip Function to be OPERABLE in MODE 3, 4, or 5 with the CRD System not capable of rod withdrawal and all rods fully inserted. In this case, the source range Function is to provide control room indication. The outputs of the Function to RTS logic are not required to be OPERABLE when the CRD system is not capable of rod withdrawal and all rods fully inserted.

The Source Range Neutron Flux Trip Function provides protection for control rod withdrawal from subcritical, boron dilution and control rod ejection events. The Function also provides visual neutron flux indication in the control room.

In MODE 2 when both intermediate range channels are < 5E-11 amps (below the P-6 setpoint\, the Source Range Neutron Flux trip Function must be OPERABLE. Above the P-6 setpoint, the Intermediate Range Neutron Flux trip and the Power Range Neutron Flux-Low trip will provide core protection for reactivity accidents. Above the P-6 setpoint, the NIS source range detectors are manually de-energized by the operator and are inoperable.

R.E. Ginna Nuclear Power Plant B 3.3.1-9 Revision 18

RTS Instrumentation B 3.3.1 In MODE 3,4, or 5 with the CRD System capable of rod withdrawal or all rods are not fully inserted, the Source Range Neutron Flux trip Function must be OPERABLE to provide core protection against a rod withdrawal accident. If the CRD System is not capable of rod withdrawal and all rods are fully inserted, the source range detectors are not required to trip the reactor. However, their monitoring Function must be OPERABLE to monitor core neutron levels and provide indication of reactivity changes that may occur as a result of events like a boron dilution. The requirements for the NIS source range detectors in MODE 6 are addressed in LCO 3.9.2, Nuclear Instrumentation."

5. AOvertembertureAT The Overtemperature AT trip Function is provided to ensure that the design limit departure from nucleate boiling ratio (DNBR) is met.

This trip Function also limits the range over which the Overpower AT trip Function must'provide protection. The, inputs to the Overtemperature AT trip include pressure, Tavg, axial power distribution, and reactor power as indicated by loop AT assuming full reactor coolant flow. Protection from violating the DNBR limit is assured for those transients that are slow with respect to delays from the core to the measurement system. The Overtemperature AT trip Function monitors both variation in power and flow since a decrease in flow has the same effect on AT as a power increase.

The Overtemperature AT trip Function uses the AT of each'loop as a measure of reactor power and is compared with a setpoint that is automatically varied with the following parameters:

reactor coolant average temperature - the Trip Setpoint is varied to correct for changes in coolant density and specific heat capacity with changes in coolant temperature;

pressurizer pressure - the Trip Setpoint is varied to correct for changes In system pressure; and

axial power distribution f(Al) - the Trip Setpoint is varied to account for imbalances in the axial power distribution as detected by the NIS upper and lower power range detectors.

If axial peaks are greater than the design limit, as indicated by the difference between the upper and lower NIS power range detectors, the Trip Setpoint is reduced in accordance with Note 1 of.Table 3.3.1-1.

Dynamic compensation is included for system piping delays from the core to the temperature measurement system.

R.E. Ginna Nuclear Power Plant B 3.3.1 -10 Revision 18

RTS Instrumentation B 3.3.1 The Overtemperature AT trip Function is calculated in two channels for each loop as described in Note 1 of Table 3.3.1-1. A reactor trip occurs if the Overtemperature AT Trip Setpoint is reached in two-out-of-four channels. Since the pressure and temperature signals are used for other control functions, the actuation logic must be able to withstand an input failure to the control system, which may then require the protection function actuation, and a single failure in the other channels providing the protection function actuation.

Section 7.2.5 of Reference 4 discusses control and protection system interactions for this function. Note that this Function also provides a signal to generate a turbine runback prior to reaching the Trip Setpoint. A turbine runback will reduce turbine power and reactor power. A reduction'in'power will normally'alleviate-the Overtemperature AT condition and may prevent an unnecessary reactor trip.

The LCO requires all four channels of the Overtemperature AT trip Function to be OPERABLE. Note that the Overtemprerature AT Function receives input from channels shared with other RTS Functions. Failures that affect multiple Functions require entry into the Conditions applicable to all affected Functions.

In MODE 1 or 2, the Overtemperature AT trip must be OPERABLE to prevent DNB. In MODE 3, 4, 5, or 6, this trip Function is not required to be OPERABLE because the reactor is not operating and there is insufficient heat production to be concerned about DNB.

6. Overpower AT The Overpower AT trip Function ensures that protection is provided to ensure the integrity of the fuel (i.e., no fuel pellet melting and less than 1% cladding failure) under all possible overpower conditions.

'This trip Function also limits the required range of the Overtemperature AT trip Function and provides a backup to the Power Range Neutron Flux-High Setpoint trip. The Overpower AT trip Function ensures that the allowable heat generation rate (kW/ft) of the fuel is not exceeded. It uses the AT of each loop as a measure of reactor power with a setpoint that is automatically varied with the following parameters:

reactor coolant average temperature - the Trip Setpoint is varied to correct for changes in coolant density and specific heat capacity with changes in coolant temperature;

rate of change of reactor coolant average temperature -

including dynamic compensation for the delays between the core and the temperature measurement system; and R.E. Ginna Nuclear Power Plant B 3.3.1 -1 1 Revision IS

RTS Instrumentation B 3.3.1 axial power distribution f(AI) - the Trip Setpoint is varied to account for imbalances in the axial power distribution as detected by the NIS upper and lower power range detectors.

If axial peaks are greater.than the design limit, as indicated by the difference between the upper and lower NIS power range detectors, the Trip Setpoint is reduced in accordance with Note 2 of Table 3.3.1-1.

The Overpower AT trip Function is calculated in two channels for each loop as described in Note 2 of Table 3.3.1-1. A reactor trip occurs if the Overpower AT trip setpoint is reached in two-out-of-four channels. Since the temperature signals are used for other c6nt'r6l function's",th6 actuation logic'must be able to'withstand an input failure to the control system, which may then require the protection function actuation and a single failure in the remaining channels providing the protection function actuation. Section 7.2.5 of Reference 4 discusses control and protection system interactions for this function. Note that this Function also provides a signal to generate a turbine runback prior to reaching the Trip Setpoint. A turbine runback will reduce turbine power and reactor power. A reduction in power will normally alleviate the Overpower AT condition and may prevent an unnecessary reactor trip.

The LCO requires four channels of the Overpower AT trip Function to be OPERABLE. Note that the Overpower AT trip Function receives input from channels shared with other RTS Functions.

Failures that affect multiple Functions require entry into the Conditions applicable to all affected Functions.

In MODE 1 or 2, the Overpower AT trip Function must be OPERABLE. These are the only MODES where enough heat is generated in the fuel to be concerned about the heat generation rates and overheating of the fuel. In MODE 3, 4, 5, or 6, this trip Function is not required to be OPERABLE because the reactor is not operating and there is insufficient heat production to be concerned about fuel overheating and fuel damage.

7. Pressurizer Pressure The same sensors (PT-429, PT-430, and PT-431) provide input to the Pressurizer Pressure-High and -Low trips and the Overtemperature AT trip with the exception that the Pressurizer Pressure-Low and Overtemperature AT trips also receive input from PT-449. Since the Pressurizer Pressure channels are also used for other control functions, the actuation logic must be able to withstand an input failure to the control system, which may then require the protection function actuation, and a single failure in the other channels providing the protection function actuation. Section 7.2.5 of Reference 4 discusses control and protection system interactions for this function.

R.E. Ginna Nuclear Power Plant B 3.3.1-12 Revision 18

RTS Instrumentation RTS Instrumentation B 3.3.1

a. Pressurizer Pressure-Low The Pressurizer Pressure-Low trip Function ensures that protection is provided against violating the DNBR limit due to low pressure. The LCO requires four channels of the Pressurizer Pressure-Low trip Function to be OPERABLE.

In MODE 1, when DNB is a major concern, the Pressurizer Pressure-Low trip function must be OPERABLE. This trip Function Is automatically enabled on increasing power by the P-7 interlock . IRTP). On decreasing power, this trip Function is automatically blocked below P-7. Below the P-7 setpoint, the Pressurizer Pressure-Low trip Function is not required to be OPERABLE because no conceivable power distributions can occur that would cause DNB concerns.

b. Pressurizer Pressure-High The Pressurizer Pressure-High trip Function ensures that protection is provided against overpressurizing the RCS.

This trip Function operates in conjunction with the pressurizer relief and safety valves to prevent RCS overpressure conditions. The LCO requires three channels of the Pressurizer Pressure-High trip Function to be OPERABLE.

In MODE 1 or 2, the Pressurizer Pressure-High trip Function must be OPERABLE to help prevent RCS overpressurization and minimize challenges to the relief and safety valves. In MODE 3, 4, 5, or 6, the Pressurizer Pressure-High trip Function is not required to be OPERABLE because transients that could cause an overpressure condition will be slow to occur. Therefore, the operator will have sufficient time to evaluate plant conditions and take corrective actions.

Additionally, low temperature overpressure protection systems provide overpressure protection when in or below MODE 4.

8. Pressurizer Water Level-High The Pressurizer Water Level-High trip Function provides a backup signal for the Pressurizer Pressure-High trip and also provides protection against water relief through the pressurizer safety valves. These valves are designed to pass steam in order to achieve their design energy removal rate. A reactor trip is actuated prior to the pressurizer becoming water solid. This trip Function is not specifically modeled in the accident analysis.

R.E. Ginna Nuclear Power Plant B 3.3.1-13 Revision 18

RTS Instrumentation B 3.3.1 The LCO requires three channels of the Pressurizer Water Level-High trip Function to be OPERABLE. The pressurizer level channels (LT-426, LT-427, and LT-428) are also used for other control functions. Section 7.2.5 of Reference 4 discusses control and protection system interactions for this function. The level channels do not actuate the safety valves, and the high pressure reactor trip is set below the safety valve setting. Therefore, with the slow rate of charging available, pressure overshoot due to level channel failure cannot cause the safety valve to lift before the reactor high pressure trip.

In MODE 1 or 2, when there is a potential for overfilling the pressurizer, the Pressurizer Water Level-High trip Function must be OPERABLE. In MODES 3, 4, 5, or 6, the Pressurizer Water Level-High trip Function is not required to be OPERABLE because transients that could raise the pressurizer water level will be slow and the operator will have sufficient time to evaluate plant conditions and take corrective actions.

9. Reactor Coolant Flow-Low The Reactor Coolant Flow-Low (Single Loop) and (Two Loops) trip Functions utilize three common flow transmitters per RCS loop to generate a reactor trip above81/o RTP (P-7 setpoint). Flow transmitters FT-411, FT-412, and FT-413 are used for RCS Loop A and FT-414, FT-415, and FT-416 are used for RCS Loop B.

a. Reactor Coolant Flow-Low (Sinale Loop)

The Reactor Coolant Flow-Low (Single Loop) trip Function ensures that protection is provided against violating the DNBR limit due to low flow in the RCS loop, while avoiding reactor trips ue o normal variations in loop flow. Above the

, P-B setpoint, % RTP), a loss of flow in either RCS loop will actuate a reactor trip. Each RCS loop has three flow detectors to monitor flow. The flow signals are not used for any control system input.

The LCO requires three Reactor Coolant Flow-Low (Single Loop) trip Function channels per RCS loop to be OPERABLE in MODE 1 2 50% RTP (above P-8 setpoint). Each loop is considered a separate Function for the purpose of this LCO.

In MODE 1 above the P-8 setpoint, a loss of flow in one RCS loop could result in DNB conditions in the core. In MODE 1 below the P-8 setpoint the Reactor Coolant Flow-Low (Single Loop) trip Function is not required to be OPERABLE because a loss of flow in one loop has been evaluated and found to be acceptable (Ref. 6).

R.E. Ginna Nuclear Power Plant B 3.3.1-14 Revision 18

RTS Instrumentation RTS Instrumentation B 3.3.1

b. Reactor Coolant Flow-Low (Two Loops)

The Reactor Coolant Flow-Low (Two Loops) trip Function ensures that protection is provided against violating the DNBR limit due to low flow in both RCS loops while avoiding reactor trips due to normal variations in loop flow.

The LCO requires three Rea or Coolant Flow-Low (Two Loops) trip Function channe s per loop'to be OPERABLE in MODE 1 above 8.5% RTP -7 setpoint) and before the Reactor Coolant Flow-Low (Single Loop) trip Function is OPERABLE (below the P-8 setpoint). Each loop is considered a'separate Function for the purpose of this LCO.

Above the P-7 setpoint and below the P-8 setpoint, a loss of flow in both loops will initiate a reactor'trip. Each loop has three flow detectors to monitor flow. The flow signals are not used for any control system input.

Below the P-7 setpoint, this trip Function is not required toube OPERABLE because all reactor trips on low flow are automatically blocked since no conceivable power distributions could occur that would cause a'DNB concefrnat this low power level. Above the P-7 setpoint, the reactor trip on low flow in both RCS loops is automatically enabled.

Above the P-8 setpoint, the Reactor Coolant Flow-Low (Two Loops) trip Function is not required to be OPERABLE because loss of flow in any one loop will actuate a reactor trip because of the higher power level and the reduced margin to the design limit DNBR.

10. RCP Breaker Position Both RCP Breaker Position trip Functions (Single Loop and Two Loops) utilize a common auxiliary contact located on each RCP.

These Functions anticipate the Reactor Coolant Flow-Low trips to avoid RCS heatup that would occur before the low flow trip actuates but are not specifically credited in the accident analysis.

a. Reactor Coolant Pump Breaker Position (Single Loop)

The RCP Breaker Position (Single Loop) trip Function ensures that protection is provided against violating the DNBR limit due to a loss of flow in one RCS loop. The position of each RCP breaker is monit6red. If one RCP t-breaker is open a ove~/ RTP, a reactor trip is initiated.

This trip Function will generate a reactor trip before the Reactor Coolant Flow-Low (Single Loop) Trip Setpoint is reached.

R.E. Ginna Nuclear Power Plant B 3.3.1-1 5 Revision 18

RTS Instrumentation B 3.3.1 The LCO requires one RCP Breaker Position trip Function channel per RCP to be OPERABLE In MODE 1 > 50% RTP (above the P-8 setpoint). Each RCP is considered a separate Function for the purpose of this LCO. One OPERABLE channel is sufficient for this trip Function because the RCS Flow-Low trip alone provides sufficient protection of plant SLs for loss of flow events. The RCP Breaker Position trip serves only to anticipate the low flow trip, minimizing the thermal transient associated with loss of a pump.

This Function measures only the discrete position (open or closed) of the RCP breaker, using a position switch.

Therefore, th6 Function has no adjustable trip setpoint with which to associate an LSSS.

In MODE 1 above the P-8 setpoint, when a loss of flow in any RCS loop could result in DNB conditions in the core, the RCP Breaker Position (Single Loop) trip Function must be OPERABLE. In MODE 1 below the P-8 setpoint, the RCP Breaker Position (Single Loop) trip Function is not required to be OPERABLE because a loss of flow in one loop has been evaluated and found to be acceptable (Ref. 6).

b. RCP Breaker Position (Two Loops)

The RCP Breaker Position (Two Loops) trip Function ensures that protection is provided against violating the DNBR limit due to a loss of flow in both RCS loop5s. The position of each RCP breaker is monitored. If both RCP breakers are open above TP (P-7 setpoint) and before the RCP Breaker Position (Single Loop) trip Function is OPERABLE (below the P-8 setpoint), a reactor trip is initiated. This trip Function will generate a reactor trip before the Reactor Coolant Flow-Low (Two Loops) Trip Setpoint is reached.

The LCO requires one RCP Breaker Position trip Function channel per RCP to be OPERABLE in MODE 1 above the P-7 and below the P-8 setpoints. Each RCP is considered a separate Function for the purpose of this LCO. One OPERABLE channel is sufficient for this Function because the RCS Flow-Low trip alone provides sufficient protection of plant SLs for loss of flow events. The RCP Breaker Position trip serves only to anticipate the low flow trip, minimizing the thermal transient associated with loss of an RCP.

This Function measures only the discrete position (open or closed) of the RCP breaker, using a position switch.

Therefore, the Function has no adjustable trip setpoint with which to associate an LSSS.

R.E. Ginna Nuclear Power Plant B 3.3.1-1 6 Revision 18

RTS Instrumentation B 3.3.1 In MODE 1 above the P-7 setpoint and below the P-8 setpoint, the RCP Breaker Position (Two Loops) trip Function must be OPERABLE. Below the P-7 setpoint, all reactor trips on loss of flow (including RCP breaker position) are automatically blocked since no conceivable power distributions could occur that would cause a DNB concern at this low power level. Above the P-7 setpoint, the reactor trip on loss of flow in both RCS loops is automatically enabled.

Above the P-8 setpoint, the RCP Breaker Position (Two Loops) trip Function is not required to be OPERABLE because a loss of flow in any one loop will actuate a reactor trip because of the higher power level and the reduced margin to the design limit DNBR.

11. Undervoltage-Bus 11A and 11B The Undervoltage-Bus 11A and 11 B reactor trip Function ensures that protection is provided against violating the DNBR limit due to loss of flow in both RCS loops from a major network voltage c $

disturbance. The voltage to each RCP is monitored. Above (

RTP (the P-7 setpoint), an undervoltage condition detected on both Buses 11 A and 11 B will initiate a reactor trip. This trip Function will generate a reactor trip before the Reactor Coolant Flow-Low-(Two Loops) Trip Setpoint is reached. Time delays are incorporated into the Undervoltage Bus 11A and 11 B channels to prevent reactor trips due to momentary electrical power transients.

The LCO requires two Undervoltage-Bus I1A and 118 trip Function channels per bus to be OPERABLE in MODE 1 above the P-7 setpoint. Each bus is considered a separate Function for the purpose of this LCO.

Below the P-7 setpoint, the Undervoltage-Bus 11A and 11 B trip Function is not required to be OPERABLE because all reactor trips on loss of flow are automatically blocked since no conceivable power distributions could occur that would cause a DNB concern at this low power level. Above the P-7 setpoint, the reactor trip on Undervoltage-Bus 11A and 11B is automatically enabled.

12. Underfreauency-Bus 11 A and 11 B The Underfrequency-Bus 11A and 11B reactor trip Function ensures that protection is provided against violating the DNBR limit due to a loss of flow in both RCP loops from a major network frequency disturbance. An underfrequency condition will slow down the pumps, thereby reducing their coastdown time following a pump trip. The proper coastdown time is required so that reactor heat can be removed immediately after reactor trip. The frequency 1 0' of each RCP bus is monitored. Above~ RTP (the P-7 setpoint),

a loss of frequency detected on both RCP buses will initiate a R.E. Ginna Nuclear Power Plant B 3.3.1-17 Revision 18

RTS Instrumentation B 3.3.1 reactor trip. This trip Function will generate a reactor trip before the Reactor Coolant Flow-Low (Two Loops) Trip Setpoint is reached.

Time delays are incorporated into the Underfrequency RCPs channels to prevent reactor trips due to momentary electrical power transients.

The LCO requires two Underfrequency-Bus 11 A and 11B channels per bus to be OPERABLE in Mode 1 above the P-7 setpoint. Each bus is considered a separate Function for the purpose of this LCO.

Below the P-7 setpoint, all reactor trips on loss of flow are automatically blocked since no conceivable power distributions could occur that would cause a DNB concern at this low power level. Above the P-7 setpoint, the reactor trip on Underfrequency-Bus 11A and 11 B Is automatically enabled.

13. Steam Generator Water Level-Low Low The Steam Generator (SG) Water Level-Low Low trip Function ensures that protection is provided against a loss of heat sink and actuates the Auxiliary Feedwater (AFW) System prior to uncovering the SG tubes. The SGs are the heat sink for the reactor. In order to act as a heat sink, the SGs must contain a minimum amount of water. A narrow range low low level in any SG is indicative of a loss of heat sink for the reactor. Three level transmitters per SG (LT-461, LT-462, and LT-463 for SG A and, LT-471, LT-472, and LT-473 for SG B) provide input to the SG Level Control System. Therefore, the actuation logic must be able to withstand an input failure to the control system, which may then require the protection function actuation, and a single failure in the other channels providing the protection function actuation. This Function also performs the Engineered Safety Feature Actuation System (ESFAS) function of starting the AFW pumps on low low SG level. The AFW System is the safety related backup source of water to ensure that the SGs remain the heat sink for the reactor.

The LCO requires three trip Function channels of SG Water Level-Low Low per SG to be OPERABLE in MODES 1 and 2. Each SG is considered a separate Function for the purpose of this LCO.

In MODE 1 or 2, the SG Water Level-Low Low trip Function must be OPERABLE to ensure that a heat sink is available to the reactor.

In MODE 3, 4, 5, or 6, the SG Water Level-Low Low trip Function is not required to be OPERABLE because the reactor is not

. operating. Decay heat removal is accomplished by the AFW System in MODE 3 and by the Residual Heat Removal (RHR)

System in MODE 4, 5, or 6.

R.E. Ginna Nuclear Power Plant B 3.3.1-18 Revision 18

RTS Instrumentation B 3.3.1

14. Turbine TriD Credit for these trip Functions is not credited in the accident analysis.

a. Turbine Trip-Low Autostop Oil Pressure The Turbine Trip-Low Autostop Oil Pressure trip Function anticipates the loss of heat removal capabilities of the secondary system following a turbine trip from a power level above the P-9 setpoint. Below the P-9 setpoint this action will not actuate a reactor trip. The trip Function anticipates the loss of secondary'heat removal capability that occurs when the stop valves close. Tripping the reactor in anticipation of loss of secondary heat removal acts to minimize the pressure and temperature transient on the reactor. Three pressure switches monitor the control oil pressure in the Autostop Oil System. A low pressure condition sensed by two-out-of-three pressure switches'will actuate a reactor trip. Thiese pressure switches do not provide any input to the control system. The plant is designed to withstand a complete loss of load and not sustain core damage or challenge the RCS pressure limitations. Core protection is provided by the Pressurizer Pressure-High trip Function and RCS integrity is ensured by the pressurizer safety valves.

The LCO requires three trip Function channels of Turbine Trip-Low Autostop Oil Pressure to be OPERABLE in MODE 1 above P-9.

Below the P-9 setpoint, the Turbine Trip-Low Autostop Oil Pressure trip Function is not required to be OPERABLE because load rejection can be accommodated by the steam dump system. Therefore, a turbine trip does not actuate a reactor trip. In MODE 2, 3, 4, 5, or 6, the turbine is not operating, therefore, there is no potential for a turbine trip.

b. Turbine Trip-Turbine StoD Valve Closure The Turbine Trip-Turbine Stop Valve Closure trip Function anticipates the loss of heat removal capabilities of the secondary system following a turbine trip from a power level above the P-9 setpoint. Below the P-9 setpoint this action will not actuate a reactor trip. The trip Function anticipates the loss of secondary heat removal capability that occurs when the stop valves close. Tripping the reactor in anticipation of loss of secondary heat removal acts to minimize the pressure and temperature transient on the reactor. This trip Function will not and is not required to operate in the presence of a single channel failure. The plant is designed to withstand a R.E. Ginna Nuclear Power Plant B 3.3.1-19 Revision 18

RTS Instrumentation B 3.3.1 complete loss of load and not sustain core damage or challenge the RCS pressure limitations. Core protection is provided by the Pressurizer Pressure-High trip Function, and RCS integrity is ensured by the pressurizer safety valves.

This trip Function is diverse to the Turbine Trip-Low Autostop Oil Pressure trip Function. Each turbine stop valve is equipped with one limit switch that inputs to the RTS. If both limit switches indicate that the stop valves are closed, a reactor trip is initiated.

This Function only measures the discrete position (open or closed) of the turbine stop valves. Therefore, the Function has no adjustable trip setpoint with which to associate an LSSS.

The LCO requires two Turbine Trip-Turbine Stop Valve Closure trip Function channels, one per valve, to be OPERABLE in MODE 1 above P-9. Both channels must trip to cause reactor trip.

Below the P-9 setpoint, the Turbine Trip-Turbine Stop Valve Closure trip Function is not required to be OPERABLE because a load rejection can be accommodated by the steam dump system. Therefore, a turbine trip does not actuate a.

reactor trip. In MODE 2, 3, 4, 5, or 6, the turbine is not operating, therefore there is no potential for a turbine trip..

15. Safety Iniection InDut from Engineered Safety Feature Actuation System The Safety Injection (SI) Input from ESFAS ensures that if a reactor trip has not already been generated by the RTS, the ESFAS automatic actuation logic will initiate a reactor trip upon any signal that initiates SI. This trip is assumed in the safety analyses for the loss of coolant accident (LOCA). However, other transients and accidents take credit for varying levels of ESF performance and rely upon rod insertion, except for the most reactive rod that is assumed to be fully withdrawn, to ensure reactor shutdown. Therefore, a reactor trip is initiated every time an SI signal is present.

Trip Setpoints are not applicable to this Function. The SI Input is provided by relays in the ESFAS. Therefore, there is no measurement signal with which to associate an LSSS.

The LCO requires two trip Function channels of SI Input from ESFAS to be OPERABLE in MODE 1 or 2.

R.E. Ginna Nuclear Power Plant B 3.3.1-20 Revision 18

RTS Instrumentation B 3.3.1 A reactor trip is initiated every time an SI signal is present.

Therefore, this trip Function must be OPERABLE in MODE 1 or 2, when the reactor is critical, and must be shut down in the event of an accident. In MODE 3, 4, 5, or 6, the reactor is not critical, and this trip Function does not need to be OPERABLE.

16. Reactor Trig System Interlocks Reactor protection interlocks (i.e., permissives) are provided to ensure reactor trips are in the correct configuration for the current plant status. They back up operator actions to ensure protection system Functions are not bypassed during plant conditions under Which-the safety analysis assumes the Functions are not bypassed.

Therefore,';the interlock Functions do not need to be OPERABLE when the associated reactor trip functions are outside the applicable MODES.

These are:

a. Intermediate Ranae Neutron Flux. P-6 Permissive The Intermediate Range Neutron Flux, P-6 permissive is actuated when any NIS intermediate range channel goes approximately one decade (1 E-1 0 amps) above the minimum channel reading. If both channels drop below the setpoint, the permissive will automatically be defeated. The LCO requirement for the P-6 permissive ensures that the following Functions are performed:

on increasing power, the P-6 interlock allows the manual block of the NIS Source Range, Neutron Flux reactor trip by use of two defeat push buttons. This prevents a premature block of the source range trip and -

allows the operator-to ensure that the intermediate range is OPERABLE prior to'leaving the source range.

When the source range trip is blocked, the high voltage to the detectors is also removed; and

on decreasing power, the P-6 interlock automatically energizes the NIS source range detectors and enables the Source Range Neutron Flux reactor trip at 5E-11 amps.

The LCO requires two channels of Intermediate Range Neutron Flux, P-6 permissive to be OPERABLE in MODE 2 when below the P-6 permissive setpoint.

R.E. Ginna Nuclear Power Plant B 3.3.1-21 Revision 18

RTS Instrumentation B 3.3.1 Above the P-6 permissive setpoint, the Source Range Neutron Flux reactor trip will be blocked, and this Function is no longer required.

In MODE 3, 4, 5, or 6 the P-6 permissive does not have to be OPERABLE because the Source Range is providing the required core protection.

b. Low Power Reactor TriDs Block. P-7 Permissive The Low Power Reactor Trips Block, P-7 interlock is actuated by input from either the Power Range Neutron Flux, P-10, or from first stage' turbine pressure. -The LCO requirerrent for the P-7 permissive allows the bypass of the following Functions:

Pressurizer Pressure-Low;

Reactor Coolant Flow-Low (Two Loops);

RCP Breaker Position (Two Loops);

Undervoltage-Bus 11A and 11B; and

Underfrequency-Bus 11A and 1IB.

These reactor trip functions are not required below the P-7 setpoint since the RCS is capable of providing sufficient natural circulation without any RCP running.

The LCO requires four channels of Low Power Reactor Trips Block, P-7 permissive to be OPERABLE in MODE 1 > 8.5%

RTP.

In MODE 2, 3, 4, 5, or 6, this Function does not have to be OPERABLE because the permissive performs its Function when power level drops below 8.5% power, which is in MODE 1.

R.E. Ginna Nuclear Power Plant B 3.3.1-22 Revision 18

RTS Instrumentation B 3.3.1

c. Power Range Neutron Flux. P-8 Permissive The Power Range Neutron Flux, P-8, permissive is actuated at approximately 49% power as determined by two-out-of-four NIS power range detectors. The P-8 interlock allows the Reactor Coolant Flow-Low (Single Loop) and RCP Breaker Position (Single Loop) reactor trips on low flow in one or more RCS loops to be blocked so that a loss of a single loop will not cause a reactor trip. The LCO requirement for this trip Functions ensures that protection is provided against a loss of flow in any RCS loop that could result in DNB conditions in the core when 250% power.

The LCO requires four channels of Power Range Neutron Flux, P-8 interlock to be OPERABLE in MODE 1 2Ž50%-RTP.

In MODE 1, a loss of flow in one RCS loop could result in DNB conditions, so the Power Range Neutron Flux, P-8 permissive must be OPERABLE. In MODE 1 < 50% RTP, this function is not required to be OPERABLE because a loss of flow in one loop will not result in DNB. In MODE 2, 3, 4, 5, or 6, this Function does not have to be OPERABLE because the core is not producing sufficient power to be concerned about DNB conditions.

d. Power Range Neutron Flux. P-9 Permissive The Power Range Neutron Flux, P-9 permissive is actuated at approximately 50% power as determined by two-out-of-four NIS power range detectors if the Steam Dump System is ava arble and at 8% if the Steam Dump System is unavailable. The LCO requirement for this Function ensures that the Turbine Trip-Low Autostop Oil Pressure and Turbine Trip-Turbine Stop Valve Closure reactor trips are enabled above the P-9 setpoint. Above the P-9 setpoint, a turbine trip will cause a load rejection beyond the capacity of the Steam Dump System and RCS. A reactor trip is automatically initiated on a turbine trip when it is above the P-9 setpoint, to minimize the transient on the reactor.

The LCO require four channels of Power Range Neutron Flux, P-9 permissive to be OPERABLE in MODE 1 above the permissive setpoint.

R.E. Ginna Nuclear Power Plant B 3.3.1-23 Revision 18

RTS Instrumentation B 3.3.1 In MODE 1 above the permissive setpoint, a turbine trip could cause a load rejection'beyond the capacity of the Steam Dump System and RCS, so the Power Range Neutron Flux interlock must be OPERABLE. In MODE 1 below the permissive setpoint and MODE 2, 3, 4, 5, or 6, this Function does not have to be OPERABLE because the reactor is not at a power level sufficient to have a load rejection beyond the capacity of the Steam Dump System.

e. Power Ranae Neutron Flux. P-10 Permissive The Power Range Neutron Flux, P-10 permissive is actuated at approximately 8% power;'as determined by two-out-of- four NIS power range detectors. If power level falls below 8%

RTP on 3 of 4 channels, the nuclear instrument trips will be automatically unblocked. The LCO requirement for the P-10 permissive ensures that the following Functions are performed:

on increasing power, the P-1 0 permissive allows the operator to manually block the Intermediate Range Neutron Flux and Power Range Neutron Flux-low reactor trips;

on increasing power, the P-10 permissive automatically provides a backup signal to the P-6 permissive to block the Source Range Neutron Flux reactor trip, and also to de-energize the NIS source range detector;

the P-1 0 interlock provides one of the two inputs to the P-7 interlock; and

on decreasing power, the P-10 interlock automatically enables the Power Range Neutron Flux-Low reactor trip and the Intermediate Range Neutron Flux reactor trip (and rod stop).

The LCO requires four channels of Power Range Neutron Flux, P-1 0 interlock to be OPERABLE in MODE 1 < 6% RTP and MODE 2.

R.E. Ginna Nuclear Power Plant B 3.3.1-24 Revision 18

RTS Instrumentation B 3.3.1 OPERABILITY in MODE 1 < 6% RTP ensures the Function is available to perform its decreasing power Functions in the event of a reactor shutdown. This Function must also be OPERABLE in MODE 2 to ensure that core protection is providing during a startup or shutdown by the Power Range Neutron Flux-Low and Intermediate Range Neutron Flux reactor trips. In MODE 3, 4, 5, or 6, this Function does not have to be OPERABLE because the reactor is not at power and the Source Range Neutron Flux reactor trip provides core protection.

17. Reactor Trio Breakers This trip Function applies to the RTBs exclusive of individual trip mechanisms. The OPERABILITY requirement for the individual trip mechanisms is provided in Function 18 below. The LCO requires two OPERABLE trains of trip breakers. A trip breaker train consists of all trip breakers associated with a single RTS logic train that are racked in, closed, and capable of supplying power to the CRD System. Thus, the train may consist of the main breaker, bypass breaker, or main breaker and bypass breaker, depending upon the system configuration' Two OPERABLE trains ensure no single failure can disable the RTS trip capability.

These trip Functions must be OPERABLE in MODE 1 or 2 because the reactor is critical. In MODE 3, 4, or 5, these RTS trip Functions must be OPERABLE when the CRD System is capable of rod withdrawal and all rods are not fully inserted.

18. Reactor Trig Breaker Undervoltage and Shunt Trig Mechanisms The LCO requires both the Undervoltage and Shunt Trip Mechanisms to be OPERABLE for each RTB that is in service. The trip mechanisms are not required to be OPERABLE for trip breakers that are open, racked out, incapable of supplying power to the CRD System, or declared inoperable under Function 17 above.

OPERABILITY of both trip mechanisms on each breaker ensures that no single trip mechanism failure will prevent opening any breaker on a valid signal.

These trip Functions must be OPERABLE in MODE 1 or 2 because the reactor is critical. In MODE 3, 4, or 5, these RTS trip Functions must be OPERABLE when the CRD System is capable of rod withdrawal and all rods are not fully inserted.

R.E. Ginna Nuclear Power Plant B 3.3.1-25 Revision 18

RTS Instrumentation B 3.3.1

19. Automatic TriD Logic The LCO requirement for the RTBs (Functions 17 and 18) and Automatic Trip Logic (Function 19) ensures that means are provided to interrupt the power to allow the rods to fall into the reactor core. Each RTB is equipped with an undervoltage coil and a shunt trip coil to trip the breaker open when needed. Each RTB is also equipped with a redundant bypass breaker to allow testing of the trip breaker while the plant is at power. The reactor trip signals generated by the RTS Automatic Trip Logic cause the RTBs and associated bypass breakers to open and shut down the reactor.

The LCO'requires two trains of RTS Automatic Trip Logic to be OPERABLE. Having two OPERABLE trains ensures that failure of a single logic train will not prevent reactor trip.

These trip Functions must be OPERABLE in MODE 1 or 2 because the reactor is critical. In MODE 3, 4, or 5, these RTS trip Functions must be OPERABLE when the CRD System is capable of rod withdrawal and all rods are not fully inserted.

The RTS instrumentation satisfies Criterion 3 of the NRC Policy Statement.

ACTIONS A Note has been added to the ACTIONS to clarify the application of Completion Time rules. The Conditions of this Specification may be entered independently for each Function listed in Table 3.3.1-1.

In the event a channel's Trip Setpoint is found nonconservative with D respect to nalytical vuesecified in plant procedures, or the

q. (a r A~ccef J transmitter, instrument loop, signal processing electronics, or bistable is found inoperable, then all affected Functions provided by that channel must be declared inoperable and the LCO Condition(s) entered for the protection Function(s) affected.

As shown on Figure B 3.3.1-1, the RTS is comprised of multiple interconnected modules and components. For the purpose of this LCO, a channel is defined as including all related components from the field instrument to the Automatic Trip Logic (Function 19 in Table 3.3.1-1).

Therefore, a channel may be inoperable due to the failure of a field instrument or a bistable failure which affects one or both RTS trains that is comprised of the RTBs and Automatic Trip Logic Function. The only exception to this are the Manual Reactor Trip and Si Input from ESFAS trip Functions which are defined strictly on a train basis (i.e.,'failure of these Functions may only affect one RTS train).

R.E. Ginna Nuclear Power Plant B 3.3.1-26 Revision 18

RTS Instrumentation B 3.3.1 A.1 Condition A applies to all RTS protection functions. Condition A addresses the situation where one required channel for one or more Functions is inoperable or if both source range channels are inoperable.

The Required Action is to refer to Table 3.3.1-1 and to take the Required Actions for the protection functions affected. The Completion Times are those from the referenced Conditions and Required Actions.

When the number of inoperable channels in a trip Function exceed those specified in all related Conditions associated with a trip Function, then the plant is outside the safety analysis. Therefore, LCO 3.0.3 must be immbediately entered if the trip" Function is 'applicable in the current'MODE of operation. This essentially applies to the loss of more than one channel of any RTS Function except with respect to Condition H.

Condition B applies to the Manual Reactor Trip Function in MODE 1 or 2 and in MODES 3, 4, and 5 with the CRD system capable of'rod withdrawal or all rods not fully inserted. With one channel inoperable, the inoperable channel must be restored to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . In this Condition, the remaining OPERABLE channel is adequate to perform the required safety function.

The Completion Time of 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is reasonable considering that there are two automatic actuation trains and another manual initiation channel OPERABLE, and the low probability of an event occurring during this interval.

C.1. C.2. and C.3 If the Manual Reactor Trip Function cannot be restored to OPERABLE status within the allowed 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Completion Time of Condition B, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , action must be initiated within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months to ensure that all rods are fully inserted, and the Control Rod Drive System must be placed in a condition incapable of rod withdrawal within 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months . The Completion Times provide adequate time to exit the MODE of Applicability from full power operation in an orderly manner without challenging plant systems based on operating experience.

Condition D applies to the following reactor trip Functions:

Power Range Neutron Flux-High;

Power Range Neutron Flux-Low; R.E. Ginna Nuclear Power Plant B 3.3.1-27 Revision 18

RTS Instrumentation RTS Instrumentation B 3.3.1

Overtemperature AT;

Overpower AT;

Pressurizer Pressure-High;

Pressurizer Water Level-High; and

SG Water Level-Low Low.

With one channel inoperable, the channel must be restored to OPERABLE status or placed in the tripped condition within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

Placing the channrel in the tripped condition results in a partial trip condition. For the Power Range Neutron Flux-High, Power Range Neutron Flux-Low, Overtemperature AT, and Overpower AT functions, this results in a one-out-of-three logic for actuation. For the Pressurizer Pressure-High and Pressurizer Water Level-High Functions, this results in a one-out-of two logic for actuation. For the SG Water Level-Low Low Function, this results in a one-out-of-two logic per each affected SG for actuation. The 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months allowed to place the inoperable channel in the tripped condition is consistent with Reference 9.

The Required Actions have been modified by a Note that allows placing the inoperable channel in the bypass condition for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months while performing surveillance testing of other channels. This includes placing the inoperable channel in the bypass condition to allow setpoint adjustments of other channels when required to reduce the setpoint in accordance with other Technical Specifications. This 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is applied to each of the remaining OPERABLE channels. The 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months time limit is consistent with Reference 9.

E.1 and E.2 Condition E applies to the Intermediate Range Neutron Flux trip Function when THERMAL PQW~Effibove the P-6 setpoint (SE-11 m as QdqJv !rom a-bistable circuit of the intermediate range channels) and bemhe P-1 0 setpon s derie brml itbe circuit of the

( Power Range channiad oe channel is inoprbe Fbv8teP6 ethfgP-1 0 setpoint, the NIS in emdaernge detector performs a monitoring and protection function. With one NIS intermediate range channel inoperable, 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months is allowed to either reduce THERMAL POWER below theset oino i7ncrease 4 LjPOERMALbPOWER i If THERMAL POWER is greater than the P-10 setpoint, the NIS power range detectors perform the monitoring and protection functions and the intermediate range is not required. The C letion Times allow for a slow and controlled power f {-'}

b adjustment above@-10 or belwnd take into account the redundant fw7, 2 capability afforded by the redundant OPERABLE channel, and the low probability of its failure during this period. This action does not require the inoperable channel to be tripped because the Function uses one-out-R.E. Ginna Nuclear Power Plant B 3.3.1-28 Revision 18

RTS Instrumentation B 3.3.1 of-two logic. Tripping one channel would trip the reactor. Thus, the Required Actions specified in this Condition are only applicable when channel inoperability does not result in reactor trip.

Required Action E.2 is modified by a Note which states that the option to increase THERMAL POWER is not allowed if both intermediate range channels are inoperable or if THERMAL POWER is < 5E-11 amps. This prevents the plant from increasing THERMAL POWER when the trip capability of the Intermediate Range Neutron Flux tri Function is no avil te plan ha o entered this trip Function's MODE ofg tri F.1: F.2. and F.3 Condition F a lies to the Source Range Neutron Flux trip Function when In this Condition, the NIS source range performs the monitoring and protection functions. With two channels inoperable, the RTBs and RTBBs must be opened immediately.

With the RTBs and RTBBs opened, the core is in a more stable-condition.

With one channel inoperable, operations involving positive reactivity additions shall be suspended immediately. This will preclude any power escalation since with only one source range channel OPERABLE, core protection is severely reduced. The inoperable channel must also be restored within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

GA1 If the Required Actions of Condition D, E, or F cannot be met within the specified Completion Times, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be placed in MODE 3 within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is reasonable, based on operating experience, to reach MODE 3 from full power conditions in an orderly manner and without challenging plant systems.

H.1. H.2. and H.3 Condition H applies to an inoperable source range channel in MODE 3, 4, or 5 with the CRD System capable of rod withdrawal or all rods not fully inserted. In this Condition, the NIS source range performs the monitoring and protection functions. With two channels inoperable, at least one channel must be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . The Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months is reasonable considering the low probability of an event occurring during this interval.

With one of the source range channels inoperable, operations involving positive reactivity additions must be suspended immediately and 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is allowed to restore it to OPERABLE status. The suspension of positive reactivity additions will preclude any power escalation.

R.E. Ginna Nuclear Power Plant B 3.3.1-29 Revision 18

RTS Instrumentation RTS Instrumentation B 3.3.1 1.1 and 1.2 If the Source Range trip Function cannot be restored to OPERABLE status within the required Completion Time of Condition H, the plant must be brought to a MODE in which the requirement does not apply. To achieve this status, action must be immediately initiated to fully insert all rods. Additionally, the CRD System must be placed in a condition incapable of rod withdrawal within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . The Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months is sufficient to accomplish the Required Action, and takes into account the low probability of an event occurring during this interval.

J.1 and J.2 Condition J applies when the required Source Range Neutron Flux channel is inoperable in MODE 3, 4, or 5 with the CRD System not capable of rod withdrawal and all rods are fully inserted. In this Condition, the NIS source range performs the monitoring function. With no source range channels OPERABLE, operations involving positive reactivity additions shall be suspended immediately. This will preclude any power escalation.

Also, the SDM must be verified once within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and every .12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter as per SR 3.1.1.1, SDM verification. With no source range channels OPERABLE, core protection is severely reduced. Verifying the SDM once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months allows sufficient time to perform the calculations and determine that the SDM requirements are met and to ensure that the core reactivity has not changed. Required Action J.1 precludes any positive reactivity additions; therefore, core reactivity should not be increasing, and a 12 hour1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Frequency is adequate. The Completion Time of once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months is based on operating experience in performing the Required Actions and the knowledge that plant conditions will change slowly.

K.1 Condition K applies to the following reactor trip Functions:

Pressurizer Pressure-Low; e Reactor Coolant Flow-Low (Two Loops);

RCP Breaker Position (Two Loops);

Undervoltage-Bus 11 A and 11 B; and

Underfrequency-Bus 11A and 11B.

R.E. Ginna Nuclear Power Plant B 3.3.1-30 Revision 18

RTS Instrumentation B 3.3.1 With one channel inoperable, the inoperable channel must be restored to OPERABLE status or placed in the tripped condition within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

Placing the channel in the tripped condition results in a partial trip condition requiring only one additional channel to initiate a reactor trip.

The 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months allowed to place the channel in the tripped condition is consistent with Reference 9 if the inoperable channel cannot be restored to OPERABLE status.

Allowance of this time interval takes into consideration the redundant capability provided by the remaining redundant OPERABLE channel(s),

and the low probability of occurrence of an event during this period that may require the protection afforded by the Functions associated with Condition K.

For the Reactor Coolant Flow-Low (Two Loops) Function, Condition K applies on a per loop basis. For the RCP Breaker Position (Two Loops)

Function, Condition K applies on a per RCP basis. For Undervoltage-Bus 11A and 11B and underfrequency-Bus 11A and 11B, Condition K applies on a per bus basis. This allows one inoperable channel from each loop, RCP, or bus to be considered on a separate condition entry basis.

The Required Actions have been modified by a Note that allows placing the inoperable channel in the bypassed condition for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months while performing surveillance testing of the other channels. The 4-hour time limit is consistent with Reference 9. The 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is applied to each of the remaining OPERABLE channels.

LA If the Required Action and Completion Time of Condition K is not met, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be placed in MODE 1 < 8.5% RTP4E f (22intt which point the Function is no longer required. An alternative is not provided for increasing THERMAL POWER above the P-8 setpoint for the Reactor Coolant Flow-Low (Two Loops) and RCP Breaker Position (Two Loops) trip Functions since this places the plant in Condition M. The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is reasonable, based on operating experience, to reach MODE 1 < 8.5% RTP from full power conditions in an orderly manner and without challenging plant systems.

M.1 Condition M applies to the Reactor Coolant Flow-Low (Single Loop) reactor trip Function. Condition M applies on a per loop basis. With one channel per loop inoperable, the inoperable channel must be restored to OPERABLE status or placed in the tripped condition within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . The 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months allowed to restore the channel to OPERABLE status or place in trip is consistent with Reference 9.

R.E. Ginna Nuclear Power Plant B 3.3.1-31 Revision 18

RTS Instrumentation B 3.3.1 The Required Actions have been modified by a Note that allows placing the inoperable channel in the bypassed condition for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months while performing surveillance testing of the other channels. The 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is applied to each of the two OPERABLE channels. The 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months time limit is consistent with Reference 9.

1 .

Condition N applies to the RCP Breaker Position (Single Loop) trip Function. Condition N applies on a per loop basis. There is one breaker position device per RCP breaker. With one channel per RCP inoperable, the inoperable channel must be restored to OPERABLE status within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .' "The 6'hours allowed to"restore the channel to OPERABLE status is consistent with Reference 9.

0.1 If the Required Action and associated Completion Time of Condition M or N is not met, the plant must be placed in a MODE where the Functions are not required to be OPERABLE. To achieve this status, THERMAL POWER must be reduced to < 50% RTP setpoint) ithin the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is consistent with Reference 9.

PA1 Condition P applies to Turbine Trip on Low Autostop Oil Pressure or on Turbine Stop Valve Closure in MODE 1 above the P-9 setpoint. With one channel inoperable, the inoperable channel must be restored to OPERABLE status or placed in the tripped condition within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . If placed in the tripped Condition, this results in a partial trip condition requiring only one additional channel to initiate a reactor trip. The 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months allowed to place'the inoperable channel in the tripped condition is consistent with Reference 9.

The Required Actions have been modified by a Note that allows placing the inoperable channel in the bypassed condition for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months while performing surveillance testing of the other channels. The 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is applied to each remaining OPERABLE channel. The 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months time limit is consistent with Reference 9.

Q.1. Q.2.1. and Q.2.2 If the Required Action and Associated Completion Time of Condition P are not met, the plant must be placed in a MODE where the Turbine Trip Functions are no longer required to be OPERABLE. To achieve this status THERMAL POWER must be reduced to <'50% RTPR' i~nwithin the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is consistent with Reference 9.

R.E. Ginna Nuclear Power Plant B 3.3.1-32 Revision 18

RTS Instrumentation B 3.3.1 The Steam Dump system must also be verified OPERABLE within 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months or THERMAL POWER must be reduced to < 8% RTP. This ensures that either the secondary system or RCS is capable of handling the heat rejection following a reactor trip. The Completion Times are reasonable considering the need to perform the actions in an orderly manner and the low probability of an event occurring in this time.

R.1 Condition R applies to the SI Input from ESFAS reactor trip and the RTS Automatic Trip Logic in MODES 1 and 2. With one train inoperable, 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is allowed to restore the train to OPERABLE status. The rne of 6'hbours"two~'restoe'rethe'train'to- OPERABLE 'statusis--

,Completion reasonable considering that in this Condition, the remaining OPERABLE train is adequate to perform'the safety function and given the low probability of an event during this interval.

The Required Action has been modified by a Note that allows bypassing one train up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing, provided the other train is OPERABLE.

S.1 and S.2 Condition S applies to the P-6, P-7, P-8, P-9, and P-1 0 permissives. With one channel inoperable, the associated interlock must be verified to be in its required state for the existing plant condition within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or the associated RTS channel(s) must be declared inoperable. These actions are conservative for the case where power level is being raised. Verifying the interlock status manually accomplishes the interlock's Function. The Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months is based on operating experience and the minimum amount of time allowed for manual operator actions.

T.1 Condition T applies to the RTBs in MODES 1 and 2. With one train inoperable, 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months is allowed to restore the train to OPERABLE status.

The 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Completion Time is based on operating experience and the minimum amount of time allowed for manual operator actions.

The Required Action has been modified by two Notes. Note 1 allows one train to be bypassed for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months for surveillance testing, provided the other train is OPERABLE. Note 2 allows one RTB to be bypassed for up to 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months for maintenance on undervoltage or shunt trip mechanisms if the other RTB train is OPERABLE. The 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months for maintenance is in addition to the 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months for surveillance testing (e.g., if a RTB fails 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months into its testing window, it must be restored within 6 additional hours (or 7 hours8.101852e-5 days 0.00194 hours 1.157407e-5 weeks 2.6635e-6 months from start of test)).

R.E. Ginna Nuclear Power Plant B 3.3.1-33 Revision 18

RTS Instrumentation B 3.3.1 U.1 and U.2 Condition U applies to the RTB Undervoltage and Shunt Trip Mechanisms (i.e., diverse trip features) in MODES 1 and 2. Condition U applies on a RTB basis. This allows one diverse trip feature to be inoperable on each RTB. However, with two diverse trip features inoperable (i.e., one on each of two different RTBs), at least one diverse trip feature must be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . The Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months is reasonable considering the low probability of an event occurring during this time interval.

With one trip mechanism for one RTB inoperable, it must be restored to an OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . The affected RTB shall not be bypassed while'one of the diverse trip features is inoperable except for the time required to perform maintenance to one'of the diverse trip features. The allowable time for performing maintenance of the diverse trip features is 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months for the reasons stated under Condition T. The Completion Time of 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months for Required Action U.2 is reasonable considering that In this Condition there is one remaining diverse trip feature for the affected RTBj and one OPERABLE RTB capable of performing the safety function and given the low probability of an event occurring during this interval.

VA1 If the Required Action and Associated Completion Time of Condition R, S, T, or U is not met, the plant must be placed in a MODE where the Functions are no longer required to be OPERABLE. To achieve this status, the plant must be placed in MODE 3 within'the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is reasonable, based on operating experience, to reach MODE 3 from full power conditions in an orderly manner without challenging plant systems.

It should be noted that for inoperable channels of Functions 16a, 16b, 16c, and 16d, the MODE of Applicability will be exited before Required Action V.1 is completed. Therefore, the plant shutdown may be stopped upon exiting the MODE of Applicability per LCO 3.0.2.

W.1 and W.2 Condition W applies to the following reactor trip Functions in MODE 3, 4, or 5 with the CRD System capable of rod withdrawal or all rods not fully inserted:

RTBs;

RTB Undervoltage and Shunt Trip Mechanisms; and

Automatic Trip Logic.

R.E. Ginna Nuclear Power Plant B 3.3.1-34 Revision 18

RTS Instrumentation B 3.3.1 With two trip mechanisms inoperable, at least one trip mechanism must be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . The Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months is reasonable considering the low probability of an event occurring during this time interval.

With one trip mechanism or train inoperable, the inoperable trip mechanism or train must be restored to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . For the trip mechanisms, Condition W applies on a RTB basis.

This allows one diverse trip feature to be inoperable on each RTB.

However, with two diverse trip features inoperable (i.e., one on each of two different RTBs), at least one diverse trip feature must be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

The Completion Time is reasonable considering that in this Condition, the remaining OPERABLE train is adequate to perform the safety function, and given the low probability of an event occurring during this interval.

X.1 and X.2 If the Required Action and Associated Completion Time of Condition W is not met, the plant must be placed in a MODE where the Functions are no longer required. To achieve this status, action be must initiated immediately to fully insert all rods and the CRD System must be incapable of rod withdrawal within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . These Completion Times are reasonable, based on operating experience to exit the MODE of Applicability in an orderly manner.

SURVEILLANCE The SRs for each RTS Function are identified by the SRs column of Table REQUIREMENTS 3.3.1-1 for that Function.

A Note has been added to the SR Table stating that Table 3.3.1-1 determines which SRs apply to which RTS Functions.

Note that each channel of process protection supplies both trains of the RTS. When testing Channel 1, Train A and Train B must be examined.

Similarly, Train A and Train B must be examined when testing Channel 2, Channel 3, and Channel 4 (if applicable). The CHANNEL CALIBRATION and COTs are performed in a manner that is consistent with the assumptions used in analytically calculating the required channel accuracies (Ref. 8).

SR 3.3.1.1 A CHANNEL CHECK is required for the following RTS trip functions:

Power Range Neutron Flux-High;

Power Range Neutron Flux-Low; R.E. Ginna Nuclear Power Plant B 3.3.1-35 Revision 18

RTS Instrumentation RTS Instrumentation B 3.3.1

Intermediate Range Neutron Flux;

Source Range Neutron Flux;

Overtemperature AT;

Overpower AT;.

Pressurizer Pressure-Low;

Pressurizer Pressure-High;

'Pressurizer Water Level-High;

Reactor Coolant Flow-Low (Single Loop);

Reactor Coolant Flow-Low (Two Loops); and

SG Water Level-Low Low Performance of the CHANNEL CHECK once every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ensures that gross failure of instrumentation has not occurred. A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on other channels.' It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value. Significant deviations between the instrument channels could be an indication of excessive instrument drift in one of the channels or of more' serious instrument conditions. A CHANNEL CHECK will detect gross channel failure; thus, it is a verification that the instrumentation continues to operate properly between each CHANNEL CALIBRATION.

Channel check acceptance criteria are determined by the plant staff based on a combination of the channel instrument uncertainties, including indication and readability. If a channel is outside the criteria, it may be an indication that the sensor or the signal processing equipment has drifted outside its limit.

The Frequency of 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months is based on operating experience that demonstrates channel failure is rare. The CHANNEL CHECK supplements less formal, but more frequent, checks of channels during normal operational use of the displays associated with the LCO required channels.

R.E. Ginna Nuclear Power Plant B 3.3.1-36 Revision 18

RTS Instrumentation B 3.3.1 SR 3.3.1.2 This SR compares the calorimetric heat balance calculation to the NIS Power Range Neutron Flux-High channel output every 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . If the calorimetric exceeds the NIS channel output by > 2% RTP, the NIS is still OPERABLE but must be adjusted. If the NIS channel output cannot be properly adjusted, the channel is then declared inoperable.

This SR is modified by a Note which states that this Surveillance is required to be performed within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after power is 2 50% RTP. At lower power levels, calorimetric data are inaccurate.

The Frequency of every 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is based on plant operating experience, considering instrument reliability and operating history data for instrument drift. Together these factors demonstrate the change in the absolute difference between NIS and heat balance calculated powers rarely exceeds 2% in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period.

In addition, control room operators periodically monitor redundant indications and alarms to detect deviations in channel outputs.

SR 3.3.1.3 This SR compares the incore system to the NIS channel output every 31 effective full power days (EFPD). If the absolute difference is 2 3%, the NIS channel is still OPERABLE, but must be readjusted. If the NIS channel cannot be properly readjusted, the channel is then declared inoperable. This surveillance is performed to verify the f(AI) input to the Overtemperature AT Functio This SR is modified by two Notes. Note 1 clarifies that the Surveillance is required to be performed within 7 days after THERMAL POWER is 2 50%

RTP but prior to exceeding 90% RTP following each refueling and if It has not been performed within the last 31 EFPD. Note 2 states that performance of SR 3.3.1.6 satisfies this SR since It is a more comprehensive test.

The Frequency of every 31 EFPD is based on plant operating experience, considering instrument reliability and operating history data for instrument drift. Also, the slow changes in neutron flux during the fuel cycle can be detected during this interval.

SR 3.3.1.4 This SR is the performance of a TADOT every 31 days on a STAGGERED TEST BASIS of the RTB, and the RTB Undervoltage and Shunt Trip Mechanisms. This test shall verify OPERABILITY by actuation of the end devices.

R.E. Ginna Nuclear Power Plant B 3.3.1-37 Revision 18

RTS Instrumentation B 3.3.1 The test shall include separate verification of the undervoltage and shunt trip mechanisms except for the bypass breakers which do not require separate verification since no capability is provided for performing such a test at power. The independent test for bypass breakers is included in SR 3.3.1.11. However, the'bypass breaker test shall include a local shunt trip. This test must be performed on the bypass breaker prior to placing it in service to take the' place of a RVg The Frequency of every 31 days on a STAGGERED TEST BASIS is based on industry operating experience, considering instrument reliability and operating history data.

SR 3;3.1.5 This SR is the performance of an ACTUATION LOGIC TEST on the RTS Automatic Trip Logic every 31 days on a STAGGERED TEST BASIS.

The train being tested is placed in the bypass condition, thus preventing inadvertent actuation. All possible logic combinations, with and without applicable permissives, are tested for each protection function. The Frequency of every 31 days on a STAGGERED TEST BASIS is based on industry operating experience, considering instrument reliability and operating history data.

SR 3.3.1.6 This SR is a calibration of the excore channels to the incore channels every 92 EFPD. If the measurements do not agree, the excore channels are still OPERABLE but must be calibrated to agree with the incore detector measurements. If the excore channels cannot be adjusted, the channels are then declared inoperable. This surveillance is performed to verify the f(Al) input to the Overtemperature AT Functio _ )r FO This SR has been modified by a Note stating that this Surveillance is required to be performed within 7 days after THERMAL POWER is 2 50%

RTP but prior to exceeding 90% RTP following each refueling.

The Frequency of 92 EFPD is adequate based on industry operating experience, considering instrument reliability and operating history data for instrument drift.

SR 3.3.1.7 This SR is the performance of a COT every 92 days for the following RTS functions:

Power Range Neutron Flux-High;

Source Range Neutron Flux (in MODE 3, 4, or 5 with CRD System capable of rod withdrawal or all rods not fully inserted);

Overtemperature AT; R.E. Ginna Nuclear Power Plant B 3.3.1-38 Revision 18

RTS Instrumentation B 3.3.1

Overpower AT;

Pressurizer Pressure-Low;

Pressurizer Pressurizer-High;

Pressurizer Water Level-High;

Reactor Coolant Flow-Low (Single Loop);

Reactor Coolant Flow-Low (Two Loops); and

SG Water Level-Low Low A COT is performed on each required chan Ito ensure the6 channel will perform the intended FuDction. Setpoints must be within the lrip Setpoint of Tae 3.3.1- Theqas-eff alues must be consistent w~iff fe drift Faowance used in the setpoint methodology (Ref. 8).

This SR is modified by a Note that provides a 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months delay in the requirement to perform this surveillance for source range instrumentation when entering MODE 3 from MODE 2. This Note allows a normal shutdown to proceed without a delay for testing in MODE 2 and for a short time in MODE 3 until the RTBs are open and SR 3.3.1.7 is no longer required to be performed. If the plant is in MODE 3 with the RTBs closed for greater than 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , this SR must be performed within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after entry into MODE 3.

The Frequency of 92 days is consistent with Reference 9.

SR 3.3.1.8 This SR is the performance of a COT as described in SR 3.3.1.7 for the Power Range Neutron Flux-Low, Intermediate Range Neutron Flux, and Source Range Neutron Flux (MODE 2), except that this test also includes verification that the P-6 and P-1 0 interlocks are in their required state for the existing plant condition. This SR is modified by two Notes that provide a 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months delay in the requirement to perform this surveillance.

These Notes allow a normal shutdown to be completed and the plant removed from the MODE of Applicability for this surveillance without a delay to perform the testing required by this surveillance. The Frequency of every 92 days applies if the plant remains in the MODE of Applicability after the initial performances of prior to reactor startup and 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months after reducing power below P-1 0 or P-6.

R.E. Ginna Nuclear Power Plant B 3.3.1-39 Revision 18

RTS Instrumentation B 3.3.1 The MODE of Applicability for this surveillance is <Lfi ifor the powe range low and intermediate range channels and < c for te S range channels. Once the plant is in MODE 3, this surveillance is no longer required. If power is to be maintainedor more than 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , then the testing required by this surveillance must be performed prior to the expiration of the 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months limit. Four hours is a reasonable time to complete the required testing or place the plant in a MODE where this surveillance is no longer required. This test ensures that the NIS source, intermediate, and power range low channels are OPERABLE prior to taking the reactor critical and after reducing power into the applicable MODE ('16rP fr periods > 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

SR 3.3.1,9 This SR is the performance of a TADOT for the Undervoltage-Bus 11A and 11B and Underfrequency-Bus 11A and 11B trip Functions. The Frequency of every 92 days is consistent with Reference 9.

This SR is modified by a Note that excludes verification of setpoints'from the TADOT. Since this SR applies to Bus 11 A and 11 B undervoltage and underfrequency relays, setpoint verification requires elaborate bench calibration and is accomplished during the CHANNEL CALIBRATION required by SR 3.3.1.10.

SR 3.3.1.10 This SR is the performance of a CHANNEL CALIBRATION for the following RTS Functions:

Power Range Neutron Flux-High;

Power Range Neutron Flux-Low;

Intermediate Range Neutron Flux;

Source Range Neutron Flux;

Overtemperature AT; Overpower AT;

Pressurizer Pressure-Low;

Pressurizer Pressure-High;

Pressurizer Water Level-High;

Reactor Coolant Flow-Low (Single Loop);

Reactor Coolant Flow-Low (Two Loops);

R.E. Ginna Nuclear Power Plant B 3.3.1-40 Revision 18

RTS Instrumentation RTS Instrumentation B 3.3.1

Undervoltage-Bus 11A and 11B;

Underfrequency-Bus 1A and lB;

SG Water Level-Low Low;

Turbine Trip-Low Autostop Oil Pressure; and

Reactor Trip System Interlocks.

A CHANNEL CALIBRATION is performed every 24 months, or approximately at every refueling. CHANNEL CALIBRATION is a complete check of the'instrument loop, including the sensor. The test verifies that the channel responds to a measured parameter within the necessary range and accuracy.

CHANNEL CALIBRATIONS must be performed consistent with the assumptions of the plant specific setpoint methodology (Ref. 8). The difference between the currents4ounofvalues and the previous test G0s6lefevalues must be consistent with the drift allowance used in the setpoint methodology.

The Frequency of 24 months is based on the assumption of 24 month calibration intervals in the determination of the magnitude of equipment drift in the setpoint methodology.

With respect to RTDs, whenever a sensing element is replaced, the next required CHANNEL CALIBRATION of the resistance temperature detectors (RTD) sensors shall include an inplace qualitative assessment of sensor behavior and normal calibration of the remaining adjustable devices in the channel. This is accomplished by an inplace cross calibration that compares the other sensing elements with the recently installed sensing element.

This SR is modified by a Note stating that neutron detectors are excluded from the CHANNEL CALIBRATION. The CHANNEL CALIBRATION for the power range neutron detectors consists of a normalization of the detectors based on a power calorimetric and flux map performed above 50% RTP. The CHANNEL CALIBRATION for the source range and intermediate range neutron detectors consists of obtaining the detector plateau or preamp discriminator curves, evaluating those curves, and comparing the curves to the manufacturers data. This Surveillance is not required for the NIS power range detectors for entry into MODE.2 or 1, and is not required for the NIS intermediate range detectors for entry into MODE 2,-because the plant must be in at least MODE 2 to perform the test for the intermediate range detectors and MODE 1 for the power range detectors. The 24 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has R.E. Ginna Nuclear Power Plant B 3.3.1-41 Revision 18

RTS Instrumentation B 3.3.1 shown these components usually pass the Surveillance when performed on the 24 month Frequency.

SR 3.3.1. 1 This SR is the performance of a TADOT of the Manual Reactor Trip, RCP Breaker Position, and the SI Input from ESFAS trip Functions. This TADOT is performed every 24 months. This test independently verifies the OPERABILITY of the undervoltage and shunt trip mechanisms for the Manual Reactor Trip Function for the Reactor Trip Breakers and Reactor Trip Bypass Breakers.

The Frequency is based on the. known reliability of the Functions and the multichannel redundancy available, and has been shown to be acceptable through operating experience.

SR 3.3.1.12 This SR is the performance of a TADOT for Turbine Trip Functions which is performed prior to reactor startup if it has not been performed within the last 31 days. This test shall verify OPERABILITY by actuation of the end devices.

The Frequency is based on the known reliability of the Functions and the multichannel redundancy available, and has been shown to be acceptable through operating experience.

This SR is modified by a Note stating that verification of the Trip Setpoint does not have to be performed for this Surveillance. Performance of this test will ensure that the turbine trip Function is OPERABLE prior to taking the reactor critical because portions of this test cannot be performed with the reactor at power.

SR 3.3.1.13 This SR is the performance of a COT of the RTS interlocks every 24 months.

The Frequency is based on the known reliability of the interlocks and the multichannel redundancy available, and has been shown to be acceptable through operating experience.

R.E. Ginna Nuclear Power Plant B 3.'3.1-42 Revision 18

RTS Instrumentation B 3.

3.1 REFERENCES

1. Atomic Industry Forum (AlF) GDC 14, Issued for comment July 10, 1967.

2. 10CFR100.

3. American National Standard, "Nuclear Safety Criteria for the Design of Stationary Pressurized Water Reactor Plants," N1 8.2-1 973.

4. UFSAR, Chapter 7.

5. UFSAR, Chapter 6.

6. UFSAR, Chapter 15.

7. IEEE-279-1 971.

8. ngineering Work Request (EWR) 5126, Guidelines r Instrument Loop Performance Evaluation and Setpoint riiato, Auut 92

9. WCAP-1 0271-P-A, Supplement 2, Rev. 1, June 1990.

CaP- 3-S- 05of, "3,)hJrutne m .Sde~p;. @/ioeo A cci.reey R.E. Ginna Nuclear Power Plant B 3.3.1-43 Revision 18

RTS Instrumentation B 3.3.1 Instrument Signal Process Channel Control & III Control &

Protection Protection Equipment Equipment I

I I I I I I I I I I I I I I I Signal Process Signal Process I

Contrcl & I Control &

Protection I Protection I Equipment Equipment Reactor Trip Reactor Trip Switchgear Switchgear RTB B UV Bypass RTB B and Shunt and Shunt Shunt Trip Mechanism Trip Trip Mechanism Mechanism Bypass RTBA RTB B RTB A CRDMs For illustration only

- Train A 7 Bistable (i) 120V AC Power Source

.Train B 'jl Automatic Trip Logic (D) 125V DC Power Source Figure B 3.3.1-1 R.E. Ginna Nuclear Power Plant B 3.3.1-44 Revision 18

ESFAS Instrumentation B 3.3.2 B 3.3 INSTRUMENTATION B 3.3.2 Engineered Safety Feature Actuation System (ESFAS) Instrumentation BASES BACKGROUND Atomic Industrial Forum (AIF) GDC 15 (Ref. 1) requires that protection systems be provided for sensing accident situations and initiating the operation of necessary engineered safety features.

The ESFAS initiates necessary safety systems, based on the values of selected plant parameters, to protect against violating core design limits and the Reactor Coolant System (RCS) pressure boundary, and to The ESFAS instrumentation is segmented into two distinct but interconnected modules as described in UFSAR, Chapter 7 (Ref. 2):

Field transmitters or process sensors; and

Signal processing equipment.

These modules are discussed in more detail below.

Field Transmitters and Process Sensors Field transmitters and process sensors provide a measurable electronic signal based on the physical characteristics of the parameter being measured. To meet the design demands for redundancy and reliability, two, three, and up to four field transmitters or sensors are used to measure required plant parameters. In many cases, field transmitters or sensors that input to the ESFAS are shared with the Reactor Trip System (RTS). To account for calibration tolerances and instrument drift, which is assumed to occur between calibrations, statistical allowances are provided. These statistical allowances provide the basis for determining acceptableaslefiandra~s-founcgcalibration values for each transmitter or sensor.

R.E. Ginna Nuclear Power Plant B 3.3.2-1 Revision 25

ESFAS Instrumentation B 3.3.2 Signal Processing Eguipment The process control equipment provides signal conditioning, comparable output signals for instruments located on the main control board, and comparison of measured input signals with setpoints established by safety analyses. These setpoints are defined in UFSAR, Chapter 6 (Ref. 3), Chapter 7 (Ref. 2), and Chapter 15 (Ref. 4). If the measured value of a plant parameter exceeds the predetermined setpoint, an output from a bistable is forwarded to the logic relays.

Generally, three or four channels of process control equipment are used for the signal processing of plant parameters measured by the field transmitters and sensors. If a parameter is used only for input to the protection circuits, three channels with a two-out-of-three logic are typically sufficient to provide the required reliability and redundancy. If one channel fails in a direction that would not result in a partial Function trip, the Function can still be accomplished with a two-out-of-two logic. If one channel fails in a direction that a partial Function trip occurs, a trip will not occur unless a second channel fails or trips in the remaining one-out-of-two logic.

If a parameter is used for input to the protection system and a control function, four channels with a two-out-of-four logic are typically sufficient to provide the required reliability and redundancy.

This ensures that the circuit is able to withstand both an input failure to the control system, which may then require the protection function actuation, and a single failure in the other channels providing the protection function actuation. Therefore, a single failure will neither cause nor prevent the protection function actuation. These requirements are described in IEEE-279-1971 (Ref. 5).

The actuation of ESF components is accomplished through master and slave relays. The protection system energizes the master relays appropriate for the condition of the plant. Each master relay then energizes one or more slave relays, which then cause actuation of the end devices.

R.E. Ginna Nuclear Power Plant B 3.3.2-2 Revision 25

ESFAS Instrumentation B 3.3.2 APPLICABLE Each of the analyzed accidents can be detected by one or more ESFAS SAFETY Functions. One of the ESFAS Funtions is the primary actuation signal for.

ANALYSES, that accident. An ESFASFunction may be the primary actuation signal for LCO, AND more than one type of accident. An ESFAS Function may also be a APPLICABILITY secondary, or backup, actuation signal for one or more other accidents.

For example, SI-Pressurizer Pressure-Low Is a primary actuation signal for small break loss of coolant accidents (LOCAs) and a backup actuation signal for steam line breaks (SLBs) outside containment. Functions such as manual initiation, not specifically credited In the accident safety analysis, are qualitatively credited in the safety analysis and the NRC staff approved licensing basis for the plant. These Functions may provide protection for conditions that do not require dynamic transient analysis to demonstrate Function performance. These Functions may also serve as anticipatory actions to Functions that were credited in the accident analysis (Ref. 4).

This LQ reguires all instrumentation performing an ESFAS Function to JMAKER Failure of any instrument renders the affected channel(s) inoperable and reduces the reliability of the affected Functions.

The LCO generally requires OPERABILITY of three or four channels in each instrumentation function and two channels in each logic and manual initiation function. The two-out-of-three and the two-out-of-four configurations allow one channel to be tripped during maintenance or testing without causing an ESFAS initiation. Two logic or manual initiation channels are required to ensure no single failure disables the ESFAS.

The LCO and Applicability of each ESFAS Function are provided in Table 3.3.2-1. Included on Table 3.3.2-1 arewa e values and :

-. ,cE~~for all apIcable ESFAS Functions. Setpoints in accordance with tQ aluwensure that the consequences of Design Basis Accidents (DBAs) will be acceptable, providing the plant Is operated within the LCOs, including any Required Actions that are in effect at the onset of the DBA and the equipment functions as designed.

/_The Trip Setpoints are the limiting values at which the bistables are set.

( Any bistable is considered to be properly adjusted when the "as left" value is within the allowable tolerance band for CHANNEL R.E. Ginna Nuclear Power Plant B 3.3.2-3 Revision 25

ESFAS Instrumentation B 3.3.2

/ stated in References 2, 3, and 4. The selection of these trip Setpoints is such that adequate protection is provided when all sensor and processing time delays, calibration tolerances, instrumentationA uncertainties, and instrument drift are taken into account. The Trip Setpoints specified InTable 3.3.2-1 are therefore conservatively adjusted with respect to The analytical limits (i.e., Allowable Values) used in the accident analysis. A detailed description of the methodology used to verify the adequacy of the existing Trip Setpoints, including their explicit uncertainties, is provided in Reference 6. If the measured setpoint exceeds the Trip Setpoint Value, the bistable is considered OPERABLE unless the Allowable Value as specified in plant procedures is exceeded.

The Allowable Value specified Inthe plant procedures bounds that provided in Table 3.3.2-1 since the values in the table are typically those used in the accident analysis.

The Trip Setpoints and Allowable Values listed in Table 3.3.2-1 have been confirmed based on the methodology described in Reference 6, which incorporates all of the known uncertainties applicable for each channel.

The magnitudes of these uncertainties are factored into the determination of each Trip Setpoint. All field sensors and signal processing equipment for these channels are assumed to operate within the allowances of these uncrtantymagitdes.

The required channels of ESFAS instrumentation provide plant protection in the event of any of the analyzed accidents. ESFAS protection functions provided in Table 3.3.2-1 are as follows:

1. Safety Iniection Safety Injection (SI) provides two primary functions:

1. Primary side water addition to ensure maintenance or recovery of reactor vessel water level (coverage of the active fuel for heat removal, clad Integrity, and for limiting peak clad temperature to < 22000F); and

2. Boration to ensure recovery and maintenance of SDM (keff

<. 1.0).

These functions are necessary to mitigate the effects of high energy line breaks (HELBs) both inside and outside of containment.

The Si signal is also used to Initiate other Functions such as:

Containment Isolation;

Containment Ventilation Isolation;

Reactor Trip; R.E. Ginna Nuclear Power Plant B 3.3.2-4 Revision 25

ESFAS Instrumentation B 3.3.2

Feedwater Isolation; and

Start of motor driven auxiliary feedwater (AFW) pumps.

These other functions ensure:

Isolation of nonessential systems through containment penetrations;

Trip of the reactor to limit power generation;

Isolation of main feedwater (MFW)to limit secondary side mass losses; and

Start of AFW to ensure secondary side cooling capability.

a. Safety Iniection-Manual Initiation This LCO requires ne channel per train to be OPERABLE in MODES 1, 2, @3Y In these MODES, there is sufficient energy in the primary and secondary systems to warrant automatic initiation of ESF systems. The operator can initiate Si at any time by using either of two pushbutton's on the main control board. This action will cause actuation of all cthe e t of Containment Isolation 7'2 QntainmenVentilation Isolation The LCO for the Manual Initiation Function ensures the proper amount of redundancy is maintained in the manual ESFAS actuation circuitry to ensure the operator has manual ESFAS initiation capability.

Each channel consists of one pushbutton and the interconnecting wiring to the actuation logic cabinet. Each pushbutton actuates both trains. This configuration does not allow testing at power.

This function is not required to be OPERABLE in MODES9' wand 6 because there is adequate time for the operator to evaluate plant conditions and respond by manually starting individual systems, pumps, and other equipment to mitigate the consequences of an abnormal condition or accident.

Plant pressure and temperature are very low and many ESF components are administratively locked out or otherwise prevented from actuating to prevent inadv overpressurization steAlso, this Function is not eqired in 0 4 since it does not actuate Containment Isolation or Containment Ventilation Isolation.

R.E. Ginna Nuclear Power Plant B 3.3.2-5 Revision 25

ESFAS Instrumentation B 3.3.2

b. Safety Iniection-Automatic Actuation Logic and Actuation Relays This LCO requires two trains to be OPERABLE in MODES 1, 2, 3, and 4. Inthese MODES, there is sufficient energy in the primary and secondary systems to warrant automatic initiation of ESF systems. Actuation logic consists of all circuitry housed within the actuation subsystems, including the initiating relay contacts responsible for actuating the ESF equipment.

This Function Is not required to be OPERABLE in MODES 5 and 6 because there is adequate time for the operator to evaluate plant conditions and respond by manually starting individual systems, pumps, and other equipment to mitigate the consequences of an abnormal condition or accident.

Plant pressure and temperature are very low and many ESF components are administratively locked out or otherwise prevented from actuating to prevent Inadvertent overpressurization of plant systems.

c. Safety Iniection-Containment Pressure-High This signal provides protection against the following accidents:

SLB inside containment;

LOCA; and

Feed line break inside containment.

Containment Pressure-High provides no input to any control functions. Thus, three OPERABLE channels are sufficient to satisfy protective requirements with a two-out-of-three logic.

PT-945, PT-947, and PT-949 are the three channels required for this function. The transmitters and electronics are located outside of containment with the sensing lines passing through containment penetrations to sense the containment atmosphere in three different locations.

Thus, the high pressure Function will not experience an adverse environmental conditions and/he riSet oin reflects only steady state instrument uncertainties. i /

R.E. Ginna Nuclear Power Plant B 3.3.2-6 Revision 25

ESFAS Instrumentation B 3.3.2 Containment Pressure-High must be OPERABLE in MODES 1, 2, 3, and 4 because there is sufficient energy in the primary and secondary systems to pressurize the containment following a pipe break. In MODES 5 and 6, Containment Pressure-High is not required to be OPERABLE because there is insufficient energy in the primary or secondary systems to pressurize the containment.

d. Safety Injection-Pressurizer Pressure-Low This signal provides protection against the following accidents:

Inadvertent opening of a steam generator (SG) atmospheric relief or safety valve;

SLB;

Rod cluster control assembly ejection accidents (rod ejection);

Inadvertent opening of a pressurizer relief or safety valve;

LOCAs; and

SG Tube Rupture.

Since there are dedicated protection and control channels, only three protection channels are necessary to satisfy the protective requirements. PT-429, PT-430, and PT-431 are the three channels required for this function.

The transmitters are located Inside containment, with the taps in the vapor space region of the pressurizer, and thus possibly experiencing adverse environmental conditions (LA SL side containment, rod ejection). Therefore, the Aiitponeflects the inclusion of both steady state and adverse environmental instrument uncertainties.

This Function must be OPERABLE in MODES 1, 2, and 3 (above the Pressurizer Pressure interlock)to mitigate the consequences of an HELB inside containment. This signal may be manually blocked by the operator below the interlock setpoint. Automatic SI actuation below this interlock setpoint is performed by the Containment Pressure-High signal.

R.E. Ginna Nuclear Power Plant B 3.3.2-7 Revision 25

ESFAS Instrumentation B 3.3.2 This function is not required to be OPERABLE in MODE 3 below the Pressurizer Pressure interlock setpoint. Other ESF functions are used to detect accident conditions and actuate the ESF systems in this MODE. In MODES 4, 5, and 6, this Function is not needed for accident detection and mitigation.

e. Safety Injection-Steam Line Pressure-Low Steam Line Pressure-Low provides protection against the following accidents:

.SLB;

Feed line break; and

Inadvertent opening of an SG atmospheric relief or an SG safety valve.

Steam line pressure transmitters provide control input, but the control function cannot initiate events that the Function acts to mitigate. Thus, three OPERABLE channels on each steam line are sufficient to satisfy the protective requirements with a two-out-of-three logic on each steam line. PT-468, PT-469, and PT-482 are the three channels required for steam line A.

PT-478, PT-479, and PT-483 are the three channels required for steam line B. Each steam line is considered a separate function for the purpose of this LCO. The loss of inverter MQ-483 requires declaring PT-479 inoperable.

With the transmitters located in the Intermediate Building, it is possible for them to experience adverse environmental conditions during a secondary side break. Therefore, the

<~~~ reflects both steady state and adverse environmental instrument uncertainties.

Steam Line Pressure-Low must be OPERABLE in MODES 1, 2, and 3 (above The Pressurizer Pressure interlock) when a secondary side break or stuck open SG atmospheric relief or safety valve could result in the rapid depressurization of the steam lines. This signal may be manually blocked by the operator below the Interlock setpoint. Below the interlock setpoint, a feed line break is not a concern. This Function is not required to be OPERABLE in MODE 4, 5, or 6 because there is insufficient energy in the secondary side of the plant to cause an accident.

R.E. Ginna Nuclear Power Plant B 3.3.2-8 Revision 25

ESFAS Instrumentation B 3.3.2

2. Containment SDrav (CS)

CS provides three primary functions:

1. Lowers containment pressure and temperature after an HELB in containment;

2. Reduces the amount of radioactive iodine in the containment atmosphere; and

3. Adjusts the pH of the water in containment sump B after a large break LOCA.

These functions are necessary to:

Ensure the pressure boundary integrity of the containment structure;

Limit the release of radioactive iodine to the environment in the event of a failure of the containment structure; and

Minimize corrosion of the components and systems inside containment following a LOCA.

CS is actuated manually or by Containment Pressure-High High.

The CS actuation signal starts the CS pumps and aligns the discharge of the pumps to the CS nozzle headers in the upper levels of containment. Water is initially drawn from the RWST by the CS pumps and mixed with a sodium hydroxide solution from the spray additive tank. During the recirculation phase of accident recovery, the spray pump suctions are manually shifted to containment sump B if continued CS is required.

a. CS-Manual Initiation The operator can initiate CS at any time from the control room by simultaneously depressing two CS actuation pushbuttons.

Because an inadvertent actuation of CS could have serious consequences, two pushbuttons must be simultaneously depressed to initiate both trains of CS. Therefore, the inoperability of either pushbutton fails both trains of manual initiation.

Manual initiation of CS must be OPERABLE in MODES 1, 2, 3, and 4 because a DBA could cause a release of radioactive material to containment and an increase in containment temperature and pressure requiring the operation of the CS System.

R.E. Ginna Nuclear Power Plant B 3.3.2-9 Revision 25

ESFAS Instrumentation B 3.3.2 In MODES 5 and 6, this function is not required to be OPERABLE because the probability and consequences of these events are reduced due to the pressure and temperature limitations of these MODES. In MODES 5 and 6, there is also adequate time for the operators to evaluate plant conditions and respond to mitigate the consequences of abnormal conditions by manually starting individual components.

b. CS-Automatic Actuation Logic and Actuation Relays Actuation logic consists of all circuitry housed within the actuation subsystems, including the initiating relay contacts responsible for actuating the ESF equipment.

Automatic initiation of CS must be OPERABLE in MODES 1, 2, 3, and 4 because a DBA could cause a release of radioactive material to containment and an increase in containment temperature and pressure requiring the operation of the CS System.

In MODES 5 and 6, this Function is not required to be OPERABLE because the probability and consequences of these events are reduced due to the pressure and temperature limitations of these MODES. In MODES 5 and 6, there is also adequate time for the operators to evaluate plant conditions and respond to mitigate the consequences of abnormal conditions by manually starting individual components.

c. CS-Containment Pressure-High High This signal provides protection against a LOCA or an SLB inside containment. The transmitters are located outside of containment with the sensing lines passing through containment penetrations to sense the containment atmosphere in three different locations. The transmitters and electronics are located outside of containment. Thus, they will not experience any adverse environmental conditions and the 6riet eflects only steady state instrument uncertainties.

This is the only ESFAS Function that requires the bistable output to energize to perform its required action. It is not desirable to have a loss of power actuate CS, since the consequences of an inadvertent actuation of CS could be serious.

R.E. Ginna Nuclear Power Plant B 3.3.2-1 0 Revision 25

ESFAS Instrumentation B 3.3.2 The Containment Pressure-High High instrument function consists of two sets with three channels in each set. One set is comprised of PT-945, PT-947, and PT-949' The second set is comprised of PT-946, PT-948, and PT-950. Each set is a two-out-of-three logic where the outputs are combined so that both sets tripped initiates CS. Each set is considered a separate function for the purposes of this LCO. Since containment pressure is not used for control, this arrangement exceeds the minimum redundancy requirements. Additional redundancy is warranted because this Function is energize to trip. Containment Pressure-High High must be OPERABLE in MODES 1,'2, 3 and 4 because a DBA could cause a release of radioactive material to containment and an increase Incontainment temperature and pressure requiring the operation of the CS System. The loss of inverter MQ-483 requires declaring PT-950 inoperable.

In MODES 5 and 6, this Function is not required to be OPERABLE because the probability and consequences of these events are reduced due to the pressure and temperature limitations of these MODES. In MODES 5 and 6, there is also adequate time for the operators to evaluate plant conditions and respond to mitigate the consequences of abnormal conditions by manually starting individual components.

3. Containment Isolation Containment Isolation provides isolation of the containment atmosphere, and selected process systems that penetrate containment, from the environment. This Function is necessary to prevent or limit the release of radioactivity to the environment in the event of a LOCA.

Containment Isolation signals isolate all automatically isolatable process lines, except feedwater lines, main steam lines, and component cooling water (CCW). The main feedwater and steam lines are isolated by other functions since forced circulation cooling using the reactor coolant pumps (RCPs) and SGs Is the preferred (but not required) method of decay heat removal. Since CCW is required to support RCP operation, not isolating CCW enhances plant safety by allowing operators to use forced RCS circulation to cool the plant. Isolating CCW may require the use of feed and bleed cooling, which could prove more difficult to control.

R.E. Ginna Nuclear Power Plant B 3.3.2-11 Revision 25

ESFAS Instrumentation B 3.3.2

a. Containment Isolation-Manual Initiation Manual Containment Isolation is actuated by either of two pushbuttons on the main control board. Either pushbutton actuates both trains. Manual initiation of Containment Isolation also actuates Containment Ventilation Isolation.

Manual initiation of Containment Isolation must be OPERABLE in MODES 1, 2, 3 and 4, because there is a potential for an accident to occur.

In MODES 5 and 6, there is insufficient energy in the primary or secondary systems to pressurize the containment to require Containment Isolation. There also is adequate time for the operator to evaluate plant conditions and manually A x_ actuate individual isolation valves in response to abnormal or

,~f Vl72f5e ~accident conditions.

b. Containment Isolation-Automatic Actuation Logic and Actuation Relays Actuation logic consists of all circuitry housed within the actuation subsystems, including the initiating relay contacts responsible for actuating the ESF equipment.

Automatic initiation of Containment Isolation must be OPERABLE in MODES 1, 2, 3 and 4, because there is a potential for an accident to occur.

In MODES 5 and 6, there is insufficient energy in the primary or secondary systems to pressurize the containment to require Containment Isolation. There also is adequate time for the operator to evaluate plant conditions and manually actuate individual isolation valves in response to abnormal or accident conditions.

c. Containment Isolation-Safety Injection Containment Isolation is also initiated by all Functions that automatically initiate Si. The Containment Isolation requirements for these Functions are the same as the requirements for their SI function. Therefore, the requirements are not repeated in Table 3.3.2-1. Instead, Function 1, Si, is referenced for all applicable initiating Functions and requirements.

R.E. Ginna Nuclear Power Plant B 3.3.2-12 Revision 25

ESFAS Instrumentation B 3.3.2

4. Steam Line Isolation Isolation of the main steam lines provides protection in the event of an SLB inside or outside containment. Closure of the main steam isolation valves (MSIVs) and their associated non-return check valves limits the accident to the blowdown from only the affected SG. For a SLB downstream of the MSIVs, closure of the MSIVs terminates the accident as soon as the steam lines depressurize.

Steam Line Isolation also mitigates the effects of a feed line break and ensures a source of steam for the turbine driven AFW pump during a feed line break.

a. Steam Line Isolation-Manual Initiation Manual initiation of Steam Line Isolation can be accomplished from the control room. There are two actuation devices (one pushbutton and one switch) on the main control board for each MSIV. Each device can initiate action to immediately close its respective MSIV. The LCO requires one channel (device) per loop to be OPERABLE. Each loop is not considered a separate function since there is only one required per loop.

Manual initiation of steam line Isolation must be OPERABLE in MODES 1, 2, and 3 because a secondary side break or stuck open valve could result in rapid depressurization of the steam lines. This could result In the release of significant quantities of energy'and cause a cooldown of the primary system. The Steam Line Isolation Function is required to be OPERABLE In MODES 2 and 3 unless both MSIVs are closed and de-activated. In MODES 4, 5, and 6, the steam line isolation function Is not required to be OPERABLE because there is insufficient energy in the RCS and SGs to experience an SLB or other accident releasing significant quantities of energy.

b. Steam Line Isolation-Automatic Actuation Locic and Actuation Relays Actuation logic consists of all circuitry housed within the actuation subsystems, including the initiating relay contacts responsible for actuating the ESF equipment.

R.E. Ginna Nuclear Power Plant B 3.3.2-13 Revision 25

ESFAS Instrumentation B 3.3.2 Automatic initiation of steam line isolation must be OPERABLE in MODES 1,2, and 3 because a secondary side break or stuck open valve could result In rapid depressurization of the steam lines. This could result in the release of significant quantities of energy and cause a cooldown of the primary system. The Steam Line Isolation Function is required to be OPERABLE in MODES 2 and 3 unless both MSIVs are closed and de-activated. In MODES 4, 5, and 6,the steam line isolation function is not required to be OPERABLE because there is insufficient energy in the RCS and SGs to experience an SLB or other accident releasing significant quantities of energy.

c. Steam Line Isolation-Containment Pressure-High High This Function actuates closure of both MSIVs in the event of a LOCA or an SLB inside containment to maintain at least one unfaulted SG as a heat sink for the reactor, and to limit the mass and energy release to containment. The transmitters are located outside containment with the sensing lines passing through containment penetrations to sense the containment atmosphere in three different locations. Thus, they will not exp ence any adverse environmental o osnthieieflects only steady state instrument uncertainties. Containment Pressure-High High provides no Input to any control functions. Thus, three OPERABLE channels are sufficient to satisfy protective requirements with two-out-of-three logic. PT-946, PT-948, and PT-950 are the three channels required for this function.

The loss of inverter MQ-483 requires declaring PT-950 inoperable.

Containment Pressure-High High must be OPERABLE In MODES 1, 2, and 3, because there Is sufficient energy in the primary and secondary side to pressurize the containment following a pipe break. This would cause a significant increase in the containment pressure, thus allowing detection and closure of the MSIVs. The steam line isolation Function must be OPERABLE in MODES 2 and 3 unless both MSIVs are closed and de-activated. In MODES 4, 5, and 6 the steam line isolation Function is not required to be OPERABLE because there is not enough energy in the primary and secondary sides to pressurize the containment to the Containment Pressure-High High setpoint.

R.E. Ginna Nuclear Power Plant B 3.3.2-14 Revision 25

ESFAS Instrumentation B 3.3.2

d. Steam Line Isolation-High Steam Flow Coincident With Safety Iniection and Coincident With MOW This Function provides closure of the MSIVs during an SLB or inadvertent opening of multiple SG atmospheric relief or safety valves to maintain at least one unfaulted SG as a heat sink for the reactor, and to limit the mass and energy release to containment.

The specified Allowable Value is based on steam line breaks O

occurring from no load conditions (1005 psig). Specifically, steam linebreaks which result in a > 10% RTP step change

~(0.66E6Upm/hr) are considered. The steam flow signal to this function's bistables are not pressure compensated (i.e.,

only the main control board indicators are compensated).

However, the high steam flow bistable setpoint is determined AD from the expected flow transmitter differential pressure under steam conditions of 0.66E6abm/hr at 1005 psig. Steam breaks which result in higher flowrates or lower pressure generate larger differential pressures such that the high steam flow bistables would be tripped. Steam line breaks which result in a < 10% RTP step change can be manually isolated by operators. The high steam flow bistables are OPERABLE if they are placed in the trippcg..ondition since the specifieda are met.

However, all appicablesurveillances related to the tripped channel must continue to be performed and met.

Two steam line flow channels per steam line are required to be OPERABLE for this Function. These are combined in a one-out-of-two logic to indicate high steam flow in one steam line. FT-464 and FT-465 are the two channels required for steam line A. FT-474 and FT-475 are the two channels required for steam line B. Each steam line Is considered a separate function for the purpose of this LCO. The steam flow transmitters provide control inputs, but the control function cannot Initiate events that the function acts to mitigate. Therefore, additional channels are not required to address control protection interaction issues. The one-out-of-two configuration allows online testing because trip of one high steam flow channel is not sufficient to cause initiation.

With the transmitters (d/p cells) located inside containment, it is possible for them to experience adverse environmental conditions during an SLB event. Therefore, therip Set oints 7eflict'both steady state and adverse environmeii~hV instrument uncertainties.

R.E. Ginna Nuclear Power Plant B 3.3.2-15 Revision 25

ESFAS Instrumentation B 3.3.2 The main steam line isolates only if the high steam flow signal occurs coincident with an SI and low RCS average temperature. The Main Steam Line Isolation Function requirements for the SI Functions are the same as the requirements for their SI function. Therefore, the requirements are not repeated in Table 3.3.2-1. Instead, Function 1, SI, is referenced for all applicable initiating functions and requirements.

Two channels of Tavg per loop are required to be OPERABLE for this Function. TC-401 and TC-402 are the two channels required for RCS loop A. TC-403 and TC-404 are the two channels required for RCS loop B. Each loop is considered a separate Function for the purpose of this LCO. The Tavg channels are combined in a logic such that any two of the four Tavg channels tripped in conjunction with SI and one of the two high steam line flow channels tripped causes isolation of the steam line associated with the tripped steam line flow channels. The accidents that this Function protects against cause reduction of Tavg in the entire primary system.

Therefore, the provision of two OPERABLE channels per loop in a two-out-of-four configuration ensures no single failure disables the Tavg-Low Function. The Tavg channels provide control inputs, but the control function cannot initiate events that the Function acts to mitigate. Therefore, additional channels are not required to address control protection interaction issues.

This Function must be OPERABLE in MODES 1, 2, and 3 when a secondary side break or stuck open valve could result in rapid depressurization of the steam lines. The Steam Line Isolation Function is required to be OPERABLE in MODES 2 and 3 unless both MSIVs are closed and de-activated. This Function is not required to be OPERABLE in MODES 4, 5, and 6 because there is insufficient energy in the secondary side of the plant to have an accident.

e. Steam Line Isolation-High High Steam Flow Coincident With Safety Injection This Function provides closure of the MSIVs during a large steam line break to maintain at least one unfaulted SG as a heat sink for the reactor, and to limit the mass and energy release to containment.

R.E. Ginna Nuclear Power Plant B 3.3.2-16 Revision 25

ESFAS Instrumentation B 3.3.2 The specified allowable Value is based on steamline breaks occurring from full power steam conditions which result In 2 109% RTP steam flow. The steam flow signal to this function's bistables are not pressure compensated (i.e., only the main control board indicators are compensated).

However, the high-high steam flow bistable setpoint is determined from the expected flow transmitted i ttffernL pressure under steam conditions of 3.7E603m/hr at 755 psig.

Steam breaks which result in higher flowrates or lower pressure generate larger differential pressures such that the high-high steam flow bistables would be tripped.

Two steam line flow channels per steam line are required to be OPERABLE for this Function. These are combined in a one-out-of-two logic to indicate high-high steam flow in one steam line. FT-464 and FT-465 are the two channels required for steam line A. FT-474 and FT-475 are the two channels required for steam line B. Each steam line is.

considered a separate function for the purpose-of this LCO.

The steam flow transmitters provide control .inputs, but the control function cannot initiate events that the Function acts to mitigate. Therefore, additional channels are not required to address control protection interaction Issues.

The main steam lines isolate only if the high-high steam flow signal occurs coincident with an SI signal. Steamline isolation occurs only for the steam line associated with the tripped steam flow channels. The Main Steam Line Isolation Function requirements for the SI Functions are the same as the requirements for their SI function. Therefore, the requirements are not repeated in Table 3.3.2-1. Instead, Function 1, SI, is referenced for all applicable initiating functions and requirements.

This Function must be OPERABLE in MODES 1, 2, and 3 because a secondary side break or stuck open valve could result in rapid depressurization of the steam lines. The Steam Line Isolation Function is required to be OPERABLE in MODES 2 and 3 unless both MSIVs are closed and de-activated. This Function is not required to be OPERABLE in MODES 4, 5, and 6 because there is insufficient energy in the secondary side of the plant to have an accident.

5. Feedwater Isolation The primary function of the Feedwater Isolation signals Is to prevent and mitigate the effects of highwater level in the SGs which could cause carryover of water into the steam lines and result in excessive cooldown of the primary system. The SG high water level is due to excessive feedwater flows.

R.E. Ginna Nuclear Power Plant B 3.3.2-17 Revision 25

ESFAS Instrumentation B 3.3.2 This Function is actuated by either a SG Water Level-High or an Si signal. The Function provides feedwater Isolation by closing the Main Feedwater Regulating Valves (MFRVs) and the associated bypass valves. In addition, on an Si signal, the AFW System is automatically started, and the MFW pump breakers are opened which closes the MFW pump discharge valves. The Si signal was discussed previously.

a. Feedwater Isolation-Automatic Actuation Logic and Actuation Relays Actuation logic consists of all circuitry housed within the actuation subsystems, Including the initiating relay contacts responsible for actuating the ESF equipment.

Automatic initiation must be OPERABLE in MODES 1, 2, and

3. The Feedwater Isolation Function is required to be OPERABLE in MODES 2 and 3 unless all MFRVs and associated bypass valves are closed and de-activated or isolated by a closed manual valve. In MODES 4, 5, and 6, the MFW System and the turbine generator are not in service and this Function is not required to be OPERABLE.

b. Feedwater Isolation-Steam Generator Water Level-High The Steam Generator Water Level-High' Function must be OPERABLE in MODES 1, 2, and 3. The Feedwater Isolation Function is required to be OPERABLE in MODES 2 and 3 unless all MFRVs and associated bypass valves are closed and de-activated or isolated by a closed manual valve. In MODES 4, 5, and 6, the MFW System and the turbine generator are not in service and this Function is not required to be OPERABLE.

This signal provides protection against excessive feedwater flow. The ESFAS SG water level instruments have dedicated protection and control channels, only three protection channels are necessary to satisfy the protective requirements. LT-461, LT-462, and LT-463 are the three channels required for SG A. LT-471, LT-472, and LT-473 are the three channels required for SG B. Each SG is considered a separate Function for the purpose of this LCO. The (LE5; b or SG Water Level-High is a Percent of o Dff narrow range instrument span. T trip etpoint issimila R.E. Ginna Nuclear Power Plant B 3.3.2-18 Revision 25

ESFAS Instrumentation B 3.3.2

c. Feedwater Isolation-Safety Iniection The Safety Injection Function must be OPERABLE in MODES 1, 2, and 3. The Feedwater Isolation Function is required to be OPERABLE in MODES 2 and 3 unless all MFRVs and associated bypass valves are closed and de-

activated or isolated by a closed manual valve. In MODES 4, 5, and 6, the MFW System and the turbine generator are not in service and this Function is not required to be OPERABLE.

Feedwater Isolation is also initiated by all Functions that initiate SI. The Feedwater Isolation Function requirements for these Functions are the same as the requirements for their SI function. Therefore, the requirements are not repeated in Table 3.3.2-1. Instead Function 1, SI, is referenced for all initiating functions and requirements.

6. Auxiliary Feedwater The AFW System is designed to provide a secondary side heat sink for the reactor in the event that the MFW System Is not available.

The preferred system has two motor driven pumps and a turbine driven pump, making it available during normal plant operation, during a loss of AC power, a loss of MFW, and during a Feedwater System pipe break (depending on break location). A Standby AFW (SAFW) System is also available Inthe event the preferred system is unavailable. The normal source of water for the AFW System is the condensate storage tank (CST) which is not safety related.

Upon a low level in the CST the operators can manually realign the pump suctions to the Service Water (SW) System which is the safety related water source. The SW.System also is the safety related water source for the SAFW System. The AFW System is aligned so that upon a pump start, flow is initiated to the respective SGs immediately while the SAFW System is only manually initiated and aligned.

a. Auxiliary Feedwater-Manual Initiation The operator can initiate AFW or SAFW at any time by using control switches on the Main Control board (one switch for each pump in each system). This action will cause actuation of their respective pump.

The LCO for the Manual Initiation Function ensures the proper amount of redundancy is maintained to ensure the operator has manual AFW and SAFW initiation capability.

R.E. Ginna Nuclear Power Plant B 3.3.2-1 9 Revision 25

ESFAS Instrumentation B 3.3.2 The LCO requires one channel per pump in each system to be OPERABLE in MODES 1, 2, and 3 to ensure that the SGs remain the heat sink for the reactor. In MODE 4, AFW actuation is not required to be OPERABLE because either AFW or residual heat removal (RHR) will already be in operation to remove decay heat or sufficient time is available to manually place either system in operation. This Function is not required to be OPERABLE in MODES 5 and 6 because there is not enough heat being generated in the reactor to require the SGs as a heat sink.

b. Auxiliary Feedwater-Autornatic Actuation Logic and Actuation Relays Actuation logic consists of all circuitry housed within the actuation subsystems, including the initiating relay contacts responsible for actuating the ESF equipment.

Automatic initiation of Auxiliary Feedwater must be OPERABLE in MODES 1,2, and 3 to ensure that the SGs remain the heat sink for the reactor. In MODE 4, AFW actuation is not required to be OPERABLE because either AFW or residual heat removal (RHR) will already be in operation to remove decay heat or sufficient time is available to manually place either system in operation. This Function is not required to be OPERABLE in MODES 5 and 6 because there Is not enough heat being generated in the reactor to require the SGs as a heat sink.

c. Auxiliary Feedwater-Steam Generator Water Level-Low Low SG Water Level-Low Low must be OPERABLE in MODES 1, 2, and 3 to provide protection against a loss of heat sink. A feed line break, inside or outside of containment, or a loss of MFW, would result in a loss of SG water-level. SG Water Level-Low Low in either SG will cause both motor driven AFW pumps to start. The system is aligned so that upon a start of the pump, water immediately begins to flow to the SGs. SG Water Level-Low Low in both SGs will cause the turbine driven pump to start. In MODE 4, AFW actuation is not required to be OPERABLE because either AFW or RHR will already be in operation to remove decay heat or sufficient time is available to manually place either system in operation.

This Function is not required to be OPERABLE in MODES 5 and 6 because there is not enough heat being generated in the reactor to require the SGs as a heat sink.

- R.E. Ginna Nuclear Power Plant B 3.3.2-20 Revision 25

ESFAS Instrumentation B 3.3.2 LT-461, LT-462, and LT-463 are the three channels required.

for SG A. LT-471, LT-472, and LT-473 are the three channels required for SG B. Each SG is consideredtheptrate Function for the purpose of this LCO. Thee aalue for SG Water Level - Low Low is a percent of narrow range instrument span.

With the transmitters (d/p cells) located inside containment and thus possibly experiencing adve envirrnmental conditions (feed line break), them Set ointe the inclusion of both steady state and adverse environmental instrument uncertainties.

d. Auxiliary Feedwater-Safety Iniection The SI function must be OPERABLE in MODES 1, 2, and 3 to ensure that the SGs remain the heat sink for the reactor. In MODE 4, AFW actuation is not required to be OPERABLE because either AFW or residual heat removal (RHR) will already be in operation to remove decay heat or sufficient time is available to manually place either system in operation.

This Function is not required to be OPERABLE in MODES 5 and 6 because there is not enough heat being generated in the reactor to require the SGs as a heat sink.

An SI signal starts the motor driven and turbine driven AFW pumps. The AFW initiation functions are the same as the requirements for their SI function. Therefore, the requirements are not repeated in Table 3.3.2-1. Instead, Function 1, SI, is referenced for all applicable initiating functions and requirements.

e. Auxiliary Feedwater-Undervoltage-Bus 11A and 11B The Undervoltage-Bus 11A and 11B Function must be OPERABLE in MODES 1, 2, and 3 to ensure that the SGs remain the heat sink for the reactor. In MODE 4, AFW actuation is not required to be OPERABLE because either AFW or RHR will already be in operation to remove decay heat or sufficient time is available to manually place either system In operation. This Function is not required to be OPERABLE in MODES 5 and 6 because there is not enough heat being generated in the reactor to require the SGs as a heat sink.

R.E. Ginna Nuclear Power Plant B 3.3.2-21 Revision 25

i ESFAS Instrumentation B 3.3.2 A loss of power to 4160 V Bus 11A and 11 B will be accompanied by a loss of power to both MFW pumps and the subsequent need for some method of decay heat removal.

The loss of offsite power is detected by a voltage drop on each bus. Loss of power to both buses will start the turbine driven AFW pump to ensure that at least one SG contains enough water to serve as the heat sink for reactor decay heat and sensible heat removal following the reactor trip. Each bus is considered a separate Function for the purpose of this LCO.

f. Auxiliary Feedwater-Trip Of Both Main Feedwater Pumps A trip of both MFW pumps is an indication of a loss of MFW and the subsequent need for some method of decay heat and sensible heat removal. The MFW pumps are equipped with a breaker position sensing device. An open supply breaker indicates that the pump is not running. Two OPERABLE channels per MFW pump satisfy redundancy requirements with two-out-of-two logic. Each MFW pump Is considered a Separate Function for the purpose of this LCO. A trip of both MFW pumps starts both motor driven AFW (MDAFW) pumps to ensure that at least one SG is available with water to act as the heat sink for the reactor. However, this actuation of the MDAFW pumps is not credited in the mitigation of any accident.

This Function must be OPERABLE in MODE 1. This ensures that at least one SG is provided with water to serve as the heat sink to remove reactor decay heat and sensible heat in the event of an accident. In MODES 2, 3, 4, 5, and 6 the MFW pumps may not be in operation, and thus pump trip is not indicative of a condition requiring automatic AFW initiation.

R.E. Ginna Nuclear Power Plant B 3.3.2-22 Revision 25

ESFAS Instrumentation B 3.3.2 ACTIONS A Note has been added in the ACTIONS to clarify the application of Completion lime rules. The Conditions of this Specification may be entered independently for each Function listed on Table 3.3.2-1.

In the event a channel's 2 $et oint is found nonconservative with ree t lowable Valu or the transmitter, instrument loop, signal processing electronics, or istable is found inoperable, then all affected lo;( Functions provided by that channel must be declared inoperable and the fc e LCO Condition(s) entered for the protection Function(s) affected. As shown on Figure B 3.3.2-1, the ESFAS Is comprised of multiple interconnected modules and components. For the purpose of this LCO, a channel is defined as including all related components from the field instrument to the Automatic Actuation Logic. Therefore, a channel may be inoperable due to the failure of a field instrument, loss of 120 VAC instrument bus power or a bistable failure which affects one or both ESFAS trains. The only exception to this are the Manual ESFAS and Automatic Actuation Logic Functions which are defined strictly on a train basis. The Automatic Actuation Logic consists of all circuitry housed within the actuation subsystem, including the master relays, slave relays, and initiating relay contacts responsible for activating the ESF equipment.

A_

Condition A applies to all ESFAS protection functions.

Condition A addresses the situation where one channel or train for one or more Functions are inoperable. The Required Action is to refer to Table 3.3.2-1 and to take the Required Actions for the protection functions affected. The Completion Times are those from the referenced Conditions and Required Actions.

When the number of Inoperable channels in an ESFAS Function exceed those specified in all related Conditions associated with an ESFAS Function, then the plant is outside the safety analysis. Therefore, LCO 3.0.3 should be immediately entered if the ESFAS function is applicable in the current MODE of operation.

B-1 Condition B applies to the AFW-Trip of Both MFW Pumps ESFAS Function. If a channel is inoperable, 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is allowed to return it to OPERABLE status. The specified Completion lime of 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months Is reasonable considering the nature of this Function, the available redundancy, and the low probability of an event occurring during this interval.

R.E. Ginna Nuclear Power Plant B 3.3.2-23 Revision 25

ESFAS Instrumentation B 3.3.2 C.1 If the Required Action and Completion Time of Condition B Is not met, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 2 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . The allowed Completion time Is reasonable, based on operating experience, to reach MODE 2 from full power conditions in an orderly manner and without challenging plant systems.

D.1 Condition Dapplies to thWe following ESFAS Functions:

Manual Initiation of SI;

Manual Initiation of Steam Line Isolation; and

AFW-Undervoltage-Bus 11A and 11 B.

If a channel is inoperable, 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is allowed to restore it to OPERABLE status. The specified Completion Time of 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is reasonable considering that there are two automatic actuation trains and another manual initiation channel OPERABLE for each manual initiation Function, additional AFW actuation channels available besides the Undervoltage-Bus 11A and 11B AFW Initiation Function, and the low probability of an event occurring during this interval.

E.1 Condition E applies to the automatic actuation logic and actuation relays for the following ESFAS Functions:

Steam Line Isolation;

Feedwater Isolation; and

AFW.

Condition E addresses the train orientation of the protection system and the master and slave relays. If one train Is Inoperable, a Completion' Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is allowed to restore the train to OPERABLE status. This Completion Time is reasonable considering that there is another train OPERABLE, and the low probability of an event occurring during this time interval. The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is consistent with Reference 7.

F.1 Condition F applies to the following Functions:

Steam Line Isolation-Containment Pressure-High High; R.E. Ginna Nuclear Power Plant B 3.3.2-24 Revision 25.

ESFAS Instrumentation B 3.3.2

Steam Line Isolation-High Steam Flow Coincident With Safety Injection and Coincident With Tavg -Low;

-Steam Line Isolation-High-High Steam Flow Coincident With Safety Injection;

Feedwater Isolation-SG Water Level-High; and

AFW-SG Water Level-Low Low.

Condition F applies to Functions that typically operate on two-out-of-three logic. Therefore, failure of one channel places the Function In a two-out-of-two configuration. One channel must be tripped to place the Function in a one-out-of-two configuration that satisfies redundancy requirements.

If one channel is inoperable, a Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is allowed to restore the channel to OPERABLE status or to place It in the tripped condition. Placing the channel in the Tripped condition conservatively compensates for the inoperability, restores capability to accommodate a single failure, and allows operation to continue.

The Required Actions are modified by a Note that allows the inoperable channel to be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels. This 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months applies to each of the remaining OPERABLE channels.

The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months allowed to restore the channel to OPERABLE status or to place the inoperable channel in the tripped condition, and the 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months allowed for testing, are justified in Reference 7.

G.1 If the Required Actions and Completion Times of Conditions D, E, or F are not met, the plant must be brought to a MODE Inwhich the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 4 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

H.1 Condition H applies to the following ESFAS functions:

Manual Initiation of CS; and

Manual Initiation of Containment Isolation.

R.E. Ginna Nuclear Power Plant B 3.3.2-25 Revision 25

ESFAS Instrumentation B 3.3.2 If a channel is inoperable, 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is allowed to restore it to OPERABLE status. The specified Completion Time of 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is reasonable considering that there are two automatic actuation trains and another manual initiation channel OPERABLE for each Function (except for CS) and the low probability of an event occurring during this interval.

Condition I applies to the automatic actuation logic and actuation relays for the following Functions:

.e SI;

CS; and

Containment Isolation.

Condition I addresses the train orientation of the protection system and the master and slave relays. If one train is inoperable, a Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is allowed to restore the train to OPERABLE status. This Completion Time is reasonable considering that there is another train OPERABLE, and the low probability of an event occurring during this interval. The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is consistent with Reference 7.

J.1 Condition J applies to the following Functions:

SI-Containment Pressure-High; and

CS-Containment Pressure-High High.

Condition J applies to Functions that operate on a two-out-of-three logic (for CS-Containment Pressure-High High there are two sets of this logic).

Therefore, failure of one channel places the Function in a two-out-of-two configuration. One channel must be tripped to place the Function in a one-out-of-two configuration that satisfies redundancy requirements.

If one channel Is inoperable, a Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is allowed to restore the channel to OPERABLE status or place it in the tripped condition. Placing the channel In the tripped condition conservatively compensates for the inoperability, restores capability to accommodate a single failure, and allows operation to continue.

The Required Action is modified by a Note that allows the inoperable channel to be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels. The 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months applies to each of the remaining OPERABLE channels.

R.E. Ginna Nuclear Power Plant B 3.3.2-26 Revision 25

ESFAS Instrumentation B 3.3.2 The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months to restore the inoperable channel or place it in trip, and the 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months allowed for surveillance testing is justified in Reference 7.

K.1 If the Required Actions and Completion Times of Conditions H, I, or J are not met, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 5 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditi6ns from full power conditions in ani orderly manner and without challenging plant systems.

LA.1 Condition L applies to the following Functions:

SI-Pressurizer Pressure-Low; and

SI-Steam Line Pressure-Low.

Condition L applies to Functions that operate on a two-out-of-three logic.

Therefore, failure of one channel places the Function in a two-out-of-two configuration. One channel must be tripped to place the Function in a one-out-of-two configuration that satisfies redundancy requirements.

If one channel is inoperable, a Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months is allowed to restore the channel to OPERABLE status or place it in the tripped condition. Placing the channel in the tripped condition conservatively compensates for the inoperability, restores capability to accommodate a single failure, and allows operation to continue.

The Required Action is modified by a Note that allows the inoperable channel to be bypassed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for surveillance testing of other channels. The 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months applies to each of the remaining OPERABLE channels.

The Completion Time of 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months to restore the Inoperable channel or place it in trip, and the 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months allowed for surveillance testing is justified in Reference 7.

R.E. Ginna Nuclear Power Plant B 3.3.2-27 Revision 25

ESFAS Instrumentation B 3.3.2 MA If the Required Actions and Completion Times of Condition L are not met, the plant must be brought to a MODE in which the LCO does not apply.

To achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and pressurizer pressure reduced to < 2000 psig within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

N.1 Condition N applies if an AFW Manual Initiation channel is inoperable. If a manual initiation switch Is inoperable, the associated AFW or SAFW pump must be declared inoperable and the applicable Conditions of LCO 3.7.5, Auxiliary Feedwater (AFW) System" must be entered immediately.

Each AFW manual Initiation switch controls one AFW or SAFW pump.

Declaring the associated pump Inoperable ensures that appropriate action is taken in LCO 3.7.5 based on the number and type of pumps involved.

SURVEILLANCE The SRs for each ESFAS Function are identified by the SRs column of REQUIREMENTS Table 3.3.2-1. Each channel of process protection supplies both trains of the ESFAS. When testing Channel 1,Train A and Train B must be examined. Similarly, Train A and Train B must be examined when testing Channel 2, Channel 3, and Channel 4 (if applicable). The CHANNEL CALIBRATION and COTs are performed in a manner that is consistent with the assumptions used in analytically calculating the required channel accuracies.

A Note has been added to the SR Table to clarify that Table 3.3.2-1 determines which SRs apply to which ESFAS Functions.

SR 3.3.2.1 This SR is the performance of a CHANNEL CHECK for the following ESFAS Functions:

SI-Containment Pressure-High;

SI-Pressurizer Pressure-Low;

SI-Steam Line Pressure-Low;

CS-Containment Pressure-High High;

Steam Line Isolation-Containment Pressure-High High; R.E. Ginna Nuclear Power Plant B 3.3.2-28 Revision 25

ESFAS Instrumentation B 3.3.2

Steam Line Isolation-High Steam Flow Coincident with SI and Tavg-Low;

Steam Line Isolation-High-High Steam Flow Coincident with SI;

Feedwater Isolation-SG Water Level-High; and

AFW-SG Water Level-Low Low.

Performance of the CHANNEL CHECK once every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ensures that a gross failure of instrumentation has not occurred. A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on other channels. It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value. Significant deviations between instrument channels could be an indication of excessive instrument drift in one of the channels or of more serious instrument conditions. A CHANNEL CHECK will detect gross channel failure; thus, it is a verification the Instrumentation continues to operate properly between each CHANNEL CALIBRATION.

CHANNEL CHECK acceptance criteria are determined by the plant staff, based on a combination of the channel instrument uncertainties, including indication and readability. If a channel is outside the criteria, it may be an indication that the sensor or the signal processing equipment has drifted outside its limit.

The Frequency of 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months is based on operating experience that demonstrates channel failure is rare. The CHANNEL CHECK supplements less formal, but more frequent, checks of channels during normal operational use of the displays associated with the LCO required channels.

SR 3.3.2.2 This SR is the performance of a COT every 92 days for the following ESFAS functions:

SI-Containment Pressure-High;

SI-Pressurizer Pressure-Low;

SI-Steam Line Pressure-Low;

CS-Containment Pressure-High High;

Steam Line Isolation-Containment Pressure-High High;

Steam Line Isolation-High Steam Flow Coincident with SI and Tavg-Low; R.E. Ginna Nuclear Power Plant B 3.3.2-29 Revision 25

ESFAS Instrumentation B 3.3.2

Steam Line Isolation-High-High Steam Flow Coincident with SI;

Feedwater Isolation-SG Water Level-High; and

AFW-SG Water Level-Low Low.

A COT Is performed on each required channel to ensure the(5jjrf channel will perform the intended Function. Setpointsmnust be found to be within the Ilowaeues specified n Table 3.3.2-1 ad established-plant procedures. he s-Ie values must be consistent with the drift allowance used in the setpoint methodology.

The Frequency of 92 days is consistent with in Reference 7. The Frequency is adequate based on industry operating experience, considering instrument reliability and operating history data.

SR 3.3.2.3 This SR is the performance of a TADOT every 92 days. This test is a check of the AFW-Undervoltage-Bus 11A and 11 B Function.

The test includes trip devices that provide actuation signals directly to the protection system. The SR is modified by a Note that excludes verification of setpoints for relays. Relay setpoints require elaborate bench calibration and are verified during CHANNEL CALIBRATION. The' Frequency of 92 days is adequate based on industry operating experience, considering instrument reliability and operating history data.

SR 3.3.2.4 This SR is the performance of a TADOT every 24 months. This test is a check of the Si, CS, Containment Isolation, Steam Line Isolation, and AFW Manual Initiations, and the AFW-Trip of Both MFW Pumps Functions. Each Function is tested up to, and including, the master transfer relay coils. The Frequency of 24 months Is based on industry operating experience and is consistent with the typical refueling cycle.

The SR is modified by a Note that excludes verification of setpoints during the TADOT. The Manual Initiations, and AFW-Trip of Both MFW Pumps Functions have no associated setpoints.

SR 3.3.2.5 This SR is the performance of a CHANNEL CALIBRATION every 24 months of the following ESFAS Functions:

SI-Containment Pressure-High;

SI-Pressurizer Pressure-Low;

SI-Steam Line Pressure-Low; R.E. Ginna Nuclear Power Plant B 3.3.2-30 Revision 25

ESFAS Instrumentation B 3.3.2

CS-Containment Pressure-High High;

Steam Line Isolation-Containment Pressure-High High;

Steam Line Isolation-High Steam Flow Coincident with Si and Tavg.

Low;

Steam Line Isolation-High-High Steam Flow Coincident with SI;

Feedwater Isolation-SG Water Level-High;

AFW-SG Water Level-Low Low; and

AFW-Undervoltage-Bus I1A and 11B.

CHANNEL CALIBRATION is a complete check of the instrument loop, including the sensor. The test verifies that the channel responds to a measured parameter within the necessary range and accuracy.

CHANNEL CALIBRATIONS must be performed consistent with the assumptions of the plant specific setpoint methodology. The "as left" values must be consistent with the drift allowance used in the setpoint methodology.

The Frequency of 24 months Is based on the assumption of a 24 month calibration interval in the determination of the magnitude of equipment drift in the setpoint methodology.

SR 3.3.2.6 This SR ensures the SI-Pressurizer Pressure-Low and SI-Steam Line Pressure-Low Functions are not bypassed when pressurizer pressure

> 2000 psig while in MODES 1, 2, and 3. Periodic testing of the*

pressurizer pressure channels is required to verify the setpoint to be less than or equal to the limit.

The difference between the current s-foundcvalues and the previous testcasolefP~values must be consistent with the drift allowance used in the setpoint methodology (Ref. 6). The setpolnt shall be left set consistent with the assumptions of the current plant specific setpoint methodology.

If the pressurizer pressure interlock setpoint is nonconservative, then the Pressurizer Pressure-Low and Steam Line Pressure-Low Functions are considered inoperable. Alternatively, the pressurizer pressure interlock can be placed in the conservative condition (nonbypassed). If placed in the nonbypassed condition, the SR is met and the Pressurizer Pressure-Low and Steam Line Pressure-Low Functions would not be considered inoperable.

R.E. Ginna Nuclear Power Plant B 3.3.2-31 Revision 25

ESFAS Instrumentation B 3.3.2 SR 3.3.2.7 This SR is the performance of an ACTUATION LOGIC TEST on all ESFAS Automatic Actuation Logic and Actuation Relays Functions every 24 months. This test Includes the application of various simulated or actual input combinations Inconjunction with each possible interlock state and verification of the required logic output. Relay and contact operation is verified by a continuance check or actuation of the end device.

The Frequency of 24 months Is based on operating experience and the need to perform this testing during a plant shutdown to prevent a reactor trip from occurring.

REFERENCES 1. Atomic Industrial Forum (AlF) GDC 15, Issued for Comment July 10,1967.

2. UFSAR, Chapter 7.

3. UFSAR, Chapter 6.

4. UFSAR, Chapter 15.

5. IEEE-279-1971.

6. EWR-5126, "Guidelines For Instrument Loop Performance

7. WCAP-10271-P-A, Supplement 2, Rev. 1, June 1990.

C4I 3- C 5- v °ir4 i;"JeAoJy R.E. Ginna Nuclear Power Plant B 3.3.2-32 Revision 25

ESFAS Instrumentation B 3.3.2 Field Instrument Signal Process Equipment I I II I II I I I a - -a I

I I I I I I I I I I I -1 I I I I

-. j Master Master Relays Relays Shw

- --- r- r r-RedIys Relays C po n Indivdual Comnponents IndMdual Conponents

- TrainA K Bistable 3 12DVACPowbrSource

- - -- Train B 1 Automatic Actuation Logic (D 125V DC Power Source IFor iluttion cnly Figure B 3.3.2-1 R.E. Ginna Nuclear Power Plant B 3.3.2-33 Revision 25

LOP DG Start Instrumentation B 3.3.4 B 3.3 INSTRUMENTATION B 3.3.4 Loss of Power (LOP) Diesel Generator (DG) Start Instrumentation BASES BACKGROUND The DGs provide a source of emergency power when offsite power is either unavailable or is Insufficiently stable to allow safe plant operation.

The LOP DG start instrumentation consists of two channels on each of safeguards Buses 14,16,17, and 18 (Ref. 1). Each channel contains one loss of voltage relay and one degraded voltage relay (see Figure B 3.3.4-1). A one-out-of-two logic Inboth channels will cause the following actions on the associated safeguards bus:

a. trip of the normal feed breaker from offsite power;

b. trip of the bus-tie breaker to the opposite electrical train (if closed);

c. shed of all bus loads except the CS pump, component cooling water pump (if no safety Injection signal is present), and safety related motor control centers; and

d. start of the associated DG.

The degraded voltage logic is provided on each 480 V safeguards bus to protect Engineered Safety Features (ESF) components from exposure to long periods of reduced voltage conditions which can result in degraded performance and to ensure that required motors can start. The loss of voltage logic is provided on each 480 V safeguards bus to ensure the DG is started within the time limits assumed in the accident analysis to provide the required electrical power if offsite power is lost.

The degraded voltage relays have time delays which have Inverse operating characteristics such that the lower the bus voltage, the faster the operating time. The loss of voltage relays have definite time delays which are not related to the rate of the loss of bus voltage. These time 1 ,delays are set to permit voltage transients during worst case motor

_ ] a starting conditions.

APPLICABLE The LOP DG start instrumentation is required for the ESF Systems to SAFETY function In any accident with a loss of offsite power. Its design basis Is ANALYSES that of the ESF Actuation System (ESFAS). Undervoltage conditions which occur independent of any accident conditions result in the start and bus connection of the associated DG, but no automatic loading occurs.

R.E. Ginna Nuclear Power Plant B 3.3.4-1 Revision 28

LOP DG Start Instrumentation B 3.3.4 Accident analyses credit the loading of the DG based on the loss of offsite power during a Design Basis Accident (DBA). The most limiting DBA of concern is the large break loss of coolant accident (LOCA) which requires ESF Systems in order to maintain containment integrity and protect fuel contained within the reactor vessel (Ref. 2). The detection and processing of an undervoltage condition, and subsequent DG loading, has been included in the delay time assumed for each ESF component requiring DG supplied power following a DBA and loss of offsite power.

The loss of offsite power has been assumed to occur coincident with the DBA. The accident analyses assumes the Si signal will actuate the DG within 2 seconds and that the DG will connect to the affected safeguards bus within an additional 10 seconds (12 seconds total time). If the loss of offsite power occurs before the SI signal parameters are reached, the accident analyses assumes the LOP DG start instrumentation will actuate the DG within 2.75 seconds and that the DG will connect to the affected safeguards bus within an additional 10 seconds (12.75 seconds total time).

The degraded voltage and undervoltageeiaikare based on the minimum voltage required for continued operation of ESF Systems-smse loading conditions (i.e., maximum loading upon DG sequencing). Thef oinor the loss of voltage relays, and associated time delays, have been chosen based on the following considerations:

a. Actuate the associated DG within 2.75 seconds as assumed in the accident analysis;

b. Prevent DG actuation on momentary voltage drops associated with

. starting of ESF components during an accident with offsite power and during normal operation due to minor system disturbance!Therefore, the time delay setting must be greater than the ime between the largest assumed voltage drop below the C4 A d ~ volt e setting and the reset value of the trip function.

{ i~ofJr/ vOI ' SThe Setonorthe degraded voltage channels, and associated time 4

J ry'r eiroCir 4 t delays, have been chosen based on'the following considerations;

¢5v~poA o4 Fut{r il- X, a. Prevent motors supplied by the 480 V bus from operating at

\ c. { / reduced voltage conditions for long periods of time;

b. Prevent DG actuation on momentary voltage drops associated with

'starting of ESF components during an accident with offsite power

\,5, available, and during normal operation due to minor system

\isUrbance-sTherefore, the time delay setting must be greater than the time between the largest voltage drop below the maximum voltage setting and the reset value of the trip function.

R.E. Ginna Nuclear Power Plant .B 3.3.4-2 Revision 28

LOP DG Start Instrumentation B 3.3.4 The LOP DG start Instrumentation channels satisfy Criterion 3 of the NRC Policy Statement.

LCO This LCO requires that each 480 V safeguards bus have two OPERABLE channels of the LOP DG start instrumentation In MODES 1, 2, 3, and 4 when the associated DG supports safety systems associated with the ESFAS. In MODES 5 and 6, the LOP DG start instrumentation channels for each 480 V safeguards bus must be OPERABLE whenever the associated DG is required to be OPERABLE to ensure that the automatic start of the DG is available when needed. Loss of the LOP DG Start Instrumentation Function could result in the delay of safety systems initiation when required. This could lead to unacceptable consequences during accidents.

The LOP start instrumentation is considered OPERABLE when two channels, each comprised of one degraded voltage and one loss of voltage relays are available for each 480 V safeguards bus (i.e., Bus 14, 16, 17, and 18). Each of the LOP channels must be capable of detecting undervoltage conditions within the voltage limits and time delays assumed in the accident analysis.,

The wable Values and Trip r the degraded voltage and loss of voltage Functions are specified in SR 3.3.4.2. T Wjwab?

. S~ pecified in SR 3.3.4.2 are those setpoints which ensure that the

-4 A- Sassociated DG will actuate within 2.75 seconds on undervoltage 0(F -condtions, and that the G-woil not actuate~on momentary voltage drops which could affect ES actatn t d I the accident a~naly~s Fhe TrippSetpolnts specifed in SR 3.3.4.2 are th nominal etpints selected to ensure that the setpoint measured by the -9 ISurveillance does not exceed the Allowable Value accounting for maximum instrument uncertainties between scheduled surveillances.

Therefore, LOP start instrumentation channels are OPERABLE when the CHANNEL CALIBRATION 'as left" value is within the Trip Setpoint limits and the CHANNEL CALIBRATION and TADOT Was found" value swti the Allowed Value setpoints. The basis for all setpoints is contiein APPLICABILITY The LOP DG Start Instrumentation Functions are required in MODES 1, 2, 3, and 4 because ESF Functions are designed to provide protection in these MODES. Actuation in MODE 5 or 6 is required whenever the required DG must be OPERABLE so that it can perform its function on an LOP or degraded power to the 480 V safeguards buses.

R.E. Ginna Nuclear Power Plant B 3.3.4-3 Revision 28

LOP DG Start Instrumentation B 3.3.4 ACTIONS In the event a rela 's~ip ,'etp int is found to be nonconservative with respect to the or the channel is found to be inoperable, then the channel must be declared inoperable and the LCO Condition entered as applicable.

/ C4 LT#eAwOM 4~c a , A Note has been added in the ACTIONS to clarify the application of Completion Time rules. This Note states that separate Condition entry is allowed for each 480 V safeguards bus.

With one or more 480 V bus(es) with one channel inoperable, Required Action A.1 requires the inoperable channel(s) to be placed Intrip within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . With an undervoltage channel in the tripped condition, the LOP DG start instrumentation channels are configured to provide a one-out-of-one logic to initiate a trip of the incoming offsite power for the respective bus. The remaining OPERABLE channel is comprised of one-out-of-two logic from the degraded and loss of voltage relays. Any additional failure of either of these two OPERABLE relays requires entry into Condition B.

B.1 Condition B applies to the LOP DG start Function when the Required Action and associated Completion Time for Condition A are not met or with one or more 480 V bus(es) with two channels of LOP start instrumentation inoperable.

Condition B requires immediate entry into the Applicable Conditions specified in LCO 3.8.1, "AC Sources - MODES 1, 2, 3, and 4," or LCO 3.8.2, "AC Sources - MODES 5 and 6," for the DG made inoperable by failure of the LOP DG start instrumentation. The actions of those LCOs provide for adequate compensatory actions to assure plant safety.

SURVEILLANCE The Surveillances are modified by a Note to indicate that, when a REQUIREMENTS channel is placed In an inoperable status solely for performance of required Surveillances, entry into associated Conditions and Required Actions may be delayed for up to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , provided the second channel maintains trip capability. Upon completion of the Surveillance, or expiration of the 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months allowance, the channel must be returned to OPERABLE status or the applicable Condition entered and Required Actions taken. This Note is based on the assumption that 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is the average time required to perform channel surveillance. Based on engineering judgement, the 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months testing allowance does not R.E. Ginna Nuclear Power Plant B 3.3.4-4 Revision 28

LOP DG Start Instrumentation B 3.3.4 significantly reduce the probability that the LOP DG start instrumentation will trip when necessary.

SR 3.3.4.1 This SR isthe performance of a TADOT every 31 days. This test checks trip devices that provide actuation signals directly. For these tests, the rejay~iipaetpolnts are verified and adjusted as necessary to ensure

{ l still be met. The 31 day Frequency is based on the liailiy of the relays and controls and has been shown to be acceptable through operating experience.

SR 3.3.4.2 This SR is the performance of a CHANNEL CALIBRATION every 24 months, or approximately at every refueling of the LOP DG start instrumentation for each 480 V bus. my The voltage setpoint verification, as well as the time response to a loss of voltage and a degraded voltage test, shall include a single point verification that the trip occurs within the required time delay.

CHANNEL CALIBRATION Is a complete check of the instrument loop, including the sensor. The test verifies that the channel responds to a measured parameter within the necessary range and accuracy.

The Frequency of 24 months is based on operating experience consistent with the typical industry refueling cycle and is justified by the assumption of a 24 month calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis.

REFERENCES 1. UFSAR, Section 8.3.

2. UFSAR, Chapter 15.

3. RG&E Design Analysis DA-EE-93-006-08, "480 Volt Undervoltage Relay Settings and Test Acceptance Criteria."

R.E. Ginna Nuclear Power Plant B 3.3.4-5 Revision 28

LOP DG Start Instrumentation B 3.3.4 w2 _ _

r-_ A _ _

UVhMw 4MVEa En Figure B 3.3.4-1 DG LOP Instrumentation R.E. Ginna Nuclear Power Plant B 3.3.4-6 Revision 28

Containment Ventilation Isolation Instrumentation B 3.3.5 B 3.3 INSTRUMENTATION B 3.3.5 Containment Ventilation Isolation Instrumentation BASES BACKGROUND Containment ventilation isolation instrumentation closes the containment isolation valves in the Mini-Purge System and the Shutdown Purge System. This action isolates the containment atmosphere from the environment to minimize releases of radioactivity in the event of an accident. The Mini-Purge System may be used inWall MODES while the Shutdown Purge' System may only be used withthe 'reactor shutdown:

4

/^h44(4l cVC AJO, tS

( 4'" t4I ,j~I4; Containment ventilation isolationinitiatesiontisoatio (sjcnarcontainment radiation signa, m anual actuation of containment spray (CS}. The Bases for LCO 3.3.2, Engineered Safety r Aem ESFAS) Instrumentation,' discuss the t t as -k confainment isolation 4 mandal containment spray, modes ofinitiation.

Two containment radiation monitoring channels are provided as input to the containment ventilation isolation. The two radiation detectors are of different types: gaseous (R-12), and particulate (R-11). Both detectors will respond to most events that release radiation to containment.

However, analyses have not been conducted to demonstrate that all credible events will be detected by more than one monitor. Therefore, for the purposes of this LCO the two channels are not considered redundant.

Instead, they are treated as two one-out-of-one Functions. Since the radiation monitors constitute a sampling'system, various components such as sample line valves, sample line heaters, sample pumps, and filter motors are required to support monitor OPERABILITY.

The Mini-Purge System has inner and outer containment isolation valves in its supply and exhaust ducts while the Shutdown Purge System only has one valve located outside containment since the inside valve was replaced by a blind flange that is used during MODES 1, 2, 3, and 4. A high radiation signal from any one of the two channels initiates containment ventilation isolation, which closes all isolation valves in the Mini-Purge System and the Shutdown Purge System. These systems are described in the Bases for LCO 3.6.3, "Containment Isolation Boundaries."

1A;er 11 R.E. Ginna Nuclear Power Plant B 3.3.5-1 Revision 18

Containment Ventilation Isolation Instrumentation B 3.3.5 APPLICABLE The safety analyses assume that the containment remains intact with SAFETY penetrations unnecessary for accident mitigation functions isolated early ANALYSES in the event, within approximately 60 seconds. The isolation of the purge valves has not been analyzed mechanistically in the dose calculations, although its rapid Isolation is assumed. The containment ventilation isolation radiation monitors act as backup to the containment isolation signal to ensure closing of the ventilation valves. They are also the primary means for automatically isolating containment in the event of a fuel handling accident during shutdown even though containment isolation is not specifically credited for this event. Containment isolation in turn ensures meeting the containmient leakage rate assumptions of the safety arinlyses, and ensures that the calculated accident offsite radiological doses are below 10 CFR 100 (Ref. 1) limnits.

The containment ventilation isolation instrumentation satisfies Criterion 3 of the NRC Policy Statement.

LCO The LCO requirements ensure that the instrumentation necessary to initiate Containment Ventilation Isolation, listed in Table 3.3.5-1, Is 2 OPERABLE.

1. Automatic Actuation Logic and Actuation Relays The LCO requires two trains of Automatic Actuation Logic and Actuation Relays OPERABLE to ensure that no single random

SgdtI failure can prevent automatic actuation.

Automatic Actuation Logic and Actuation Relays consist of the H i same features and erate in the same manner as described for ESFAS Function 2. ontainment Spray-Manual Initiation, and /

Functio Containment Isolationr The applicable MODES and specified conditions for the containment ventilation isolation portion of these Functions are different and less restrictive th 1 for ir res ectiVeSan ESFAS roles. If one or more of -

the Sor containment isolatio Functions becomes inoperable in such a manner that only the Containment Ventilation Isolation Function is affected, the Conditions applicable to their respective isolation Functions in LCO 3.3.2 need not be entered. The less restrictive Actions specified for inoperability of the Containment Ventilation Isolation Functions specify sufficient compensatory measures for this case.

R.E. Ginna Nuclear Power Plant B 3.3.5-2 Revision 18

Containment Ventilation Isolation Instrumentation B 3.3.5

2. Containment Radiation The LCO specifies two required channels of radiation monitors (R-11 and R-12) to ensure that the radiation monitoring instrumentation necessary to initiate Containment Ventilation Isolation remains OPERABLE.

For sampling systems, channel OPERABILITY involves more than OPERABILITY of the channel electronics. OPERABILITY may also require correct valve lineups, sample pump operation, and filter motor operation, as well as detector OPERABILITY, if these supporting features are necessary for trip to occur.

3. Containment Isolation MAO_____1________

Refer to LCO 3.3.2, Function 3, for all initiating Functions and requirements. TAJvr 1 .i, %0,c;J 1 4 M - 1)4JI.

& 4"I totsqi }/{

(4at C Jie^J^ veSns%4tl4a.,i ;oIlJII,.

4. Containment Spray-Manual Initiatio Refer to LCO 3.3.2, Function 2.a, for all initiating Functions and requirements. This Function provides the manual initiation fv.fer IZ capability for containment ventilation isolation.

APPLICABILITY The Automatic Actuation Logic and Actuation Relays, Containment lsolationg iimentSra,-Manuai Initiation, and Containment Radiation Functions are required to be OPERABLE in MODES 1, 2, 3, and 4, and during CORE ALTERATIONS or movement of irradiated fuel assemblies within containment. Under these conditions, the potential exists for an accident that could release fission product radioactivity into containment. Therefore, the containment ventilation isolation instrumentation must be OPERABLE in these MODES.

While in MODES 5 and 6 without fuel handling in progress, the containment ventilation isolation instrumentation need not be OPERABLE since the potential for radioactive releases is minimized and operator action is sufficient to ensure post accident offsite doses are maintained within the limits of Reference 1.

R.E. Ginna Nuclear Power Plant B 3.3.5-3 Revision 18

Containment Ventilation Isolation Instrumentation B 3.3.5 ACTIONS The most common cause of channel inoperability is outright failure or drift of the bistable or process module sufficient to exceed the tolerance allowed by plant specific calibration procedures. Typically, the drift is found to be small and results in a delay of actuation rather than a total loss of function. This determination is generally made during the performance of a COT, when the process instrumentation is set up for conservative than the-tolerance speiidb h calibration procedure, the channel must be declared inoperable immediately and the A Note has been added to the ACTIONS to clarify the application of Completion Time rules. The Conditions of this Specification may be entered independently for each Function listed in Table 3.3.5-1. The Completion Time(s) of the inoperable channel(s)/train(s) of a Function will be tracked separately for each Function starting from the time the Condition was entered for that Function.

Condition A applies to the failure of one containment ventilation isolation radiation monitor channel. Since the two containment radiation monitors measure different parameters, failure of a single channel may result in loss of the radiation monitoring Function for certain events.

Consequently, the failed channel must be restored to OPERABLE status.

The 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months allowed to restore the affected channel is justified by the low likelihood of events occurring during this interval, and recognition that one or more of the remaining channels will respond to most events.

Condition B applies to all Containment Ventilation Isolation Functions and addresses the train orientation of the system and the master and slave relays for these Functions. It also addresses the failure of multiple radiation monitoring channels, or the inability to restore a single failed channel to OPERABLE status in the time allowed for Required Action A.1.

If a train is inoperable, multiple channels are inoperable, or the Required Action'and associated Completion Time of Condition A are not met, operation may continue as long as the Required Action for the applicable Conditions of LCO 3.6.3 is met for each mini-purge isolation valve made inoperable by failure of isolation instrumentation. For example, if R-11 and R-12 were both inoperable, then all four mini-purge isolation valves must be declared inoperable. If CVI Train A were inoperable, then the two mini-purge valves which receive a Train A isolation signal must be declared inoperable.

R.E. Ginna Nuclear Power Plant B 3.3.5-4 Revision 18

Containment Ventilation Isolation Instrumentation B 3.3.5 A Note is added stating that Condition B is only applicable in MODE 1, 2, 3, or 4.

C.1 and C.2 Condition C applies to all Containment Ventilation Isolation Functions and addresses the train orientation of the system and the master and slave relays for these Functions. It also addresses the failure of multiple radiation monitoring channels, or the inability to restore a single failed channel to OPERABLE status in the time allowed for Required Action A.1.

-If a train is inoperable; multiple channels are inoperable, or the Required Action and associated Completion Time of Condition A are not met, oapezfn may continue as long as the Required Action to place each Zmn urge isolation valve in its closed position or the applicable Conditions of LCO 3.9.3, 'Containment Penetrations," are met for each 4inurge isolati6n valve made inoperable by failure of Isolation instrumentation. The Completion Time for these Required Actions is Immediately.

A Note states that Condition C is applicable during CORE ALTERATIONS and during movement of irradiated fuel assemblies within containment.

SURVEILLANCE A Note has been added to the SR Table to clarify that Table 3.3.5-1 REQUIREMENTS determines which SRs apply to which Containment Ventilation Isolation Functions.

SR 3.3.5.1 Performance of the CHANNEL CHECK once every 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months ensures that a gross failure of instrumentation has not occurred and the instrumentation continues to operate properly between each CHANNEL CALIBRATION. The CHANNEL CHECK agreement criteria are determined by the plant staff, based on a combination of the channel instrument uncertainties, including indication and readability. If a channel is outside the criteria, it may be an indication that the sensor or the signal processing equipment has drifted outside its limit.

The Frequency is based on operating experience that demonstrates channel failure is rare. The CHANNEL CHECK supplements less formal, but more frequent, checks of channels during normal operational use of the displays associated with the LCO required channels.

R.E. Ginna Nuclear Power Plant B 3.3.5-5 Revision 18

Containment Ventilation Isolation Instrumentation B 3.3.5 SR 3.3.5.2 A COT is performed every 92 days on each required channel to ensure the d tchannel will perform the intended Function. The Frequency is based on the staff recommendation for increasing the availability of radiation monitors according to NUREG-1366 (Ref. 2). This test verifies the capability of the instrumentation to provide the containment ventilation system isolation. The setpoint shall be left consistent with the current plant specific calibration procedure tolerance.

SR 3.3.5.3 This SR is the performance of an ACTUATION LOGIC TEST. All possible logic combinations, with and without applicable permissives, are tested for each protection function. In addition, the master relay is tested for continuity. This verifies that the logic modules are OPERABLE and there is an intact voltage signal path to the master relay coils. This test is performed every 24 months. The Surveillance interval is acceptable based on instrument reliability and industry operating experience.

SR 3.3.5.4 A CHANNEL CALIBRATION is performed every 24 months, or approximately at every refueling. CHANNEL CALIBRATION is a complete check of the instrument loop, including the sensor. The test verifies that the channel responds to a measured parameter within the necessary range and accuracy.

The Frequency is based on operating experience and is consistent with the typical industry refueling cycle.

REFERENCES 1. 10 CFR 100.11.

2. NUREG-1 366.

R.E. Ginna Nuclear Power Plant B 3.3.5-6 Revision 18

IMPROVED TECHNICAL SPECIFICATION BASES INSERTS Insert I The reactor core SLs are established to preclude violation of the following fuel design criteria:

a. There must be at least a 95% probability at a 95% confidence level (the 95/95 DNB criterion) that the hot fuel rod in the core does not experience DNB and

b. There must be at least a 95% probability at a 95% confidence level that the hot fuel pellet in the core does not experience centerline fuel melting.

The reactor core SLs are used to define the various RPS functions such that the above criteria are satisfied during steady state operation, normal operational transients, and anticipated operational occurrences (AOOs). To ensure that the RPS precludes the violation of the above criteria, additional criteria are applied to the Overtemperature and Overpower AT reactor trip functions.

That is, it must be demonstrated that the average enthalpy in the hot leg is less than or equal to the saturation enthalpy and that the core exit quality is within the limits defined by the DNBR correlation. Appropriate functioning of the RPS ensures that for variations in the THERMAL POWER, RCS Pressure, RCS average temperature, RCS flow rate, and Al that the reactor core SLs will be satisfied during steady state operation, normal operational transients, and AOOs.

Insert 2 Technical specifications are required by 10 CFR 50.36 to contain LSSS defined by the regulation as "...settings for automatic protective devices...so chosen that automatic protective action will correct the abnormal situation before a Safety Limit (SL) is exceeded." The Analytic Limit is the limit of the process variable at which a safety action is initiated, as established by the safety analysis, to ensure that a SL is not exceeded. Any automatic protection action that occurs on reaching the Analytic Limit therefore ensures that the SL is not exceeded. However, in practice, the actual settings for automatic protective devices must be chosen to be more conservative than the Analytic Limit to account for instrument loop uncertainties related to the setting at which the automatic protective action would actually occur.

The Calculated Trip Setpoint is a predetermined setting for a protective device chosen to ensure automatic actuation prior to the process variable reaching the Analytic Limit and thus ensuring that the SL would not be exceeded. As such, the Calculated Trip Setpoint accounts for uncertainties in setting the device (e.g. calibration), uncertainties in how the device might actually perform (e.g., repeatability), changes in the point of action of the device over time (e.g.,

drift during surveillance intervals), and any other factors which may influence its actual performance (e.g., harsh accident environments). In this manner, the Calculated Trip Setpoint plays an important role in ensuring that SLs are not exceeded. As such, the Calculated Trip Setpoint meets the definition of an LSSS and they are contained in the technical specifications.

Technical specifications contain requirements related to the OPERABILITY of equipment required for safe operation of the facility. OPERABLE is defined in technical specifications as

"...being capable of performing its safety functions(s)." For automatic protective devices, the required safety function is to ensure that a SL is not exceeded and therefore the LSSS as defined by 10 CFR 50.36 serves as the OPERABILITY limit for the nominal trip setpoint. However, use of the LSSS (Calculated Trip Setpoint) to define OPERABILITY in technical specifications would be an overly restrictive requirement if it were applied as an OPERABILITY limit for the as-found value of a protective device setting during a surveillance. This would result in technical specification compliance problems, as well as reports and corrective actions required by the rule which are not necessary to ensure safety. For example, an automatic protective device with a setting that has been found to be different from the Calculated Trip Setpoint due to some drift of the setting may still be OPERABLE since drift is to be expected. This expected drift would have been specifically accounted for in the setpoint methodology for determining the Calculated Trip Setpoint and thus the automatic protective action would still have ensured that the SL would not be exceeded with the as-found setting of the protective device. Therefore, the device would still be OPERABLE since it would have performed its safety function and the only corrective action required would be to reset the device to within the tolerance band assumed in the determination of the Calculated Trip Setpoint to account for further drift during the next surveillance interval.

The Nominal Trip Setpoint is the desired setting specified within established plant procedures, and may be more conservative than the Calculated Trip Setpoint. The Nominal Trip Setpoint therefore may include additional margin to ensure that the SL would not be exceeded. Use of the Calculated Trip Setpoint or Nominal Trip Setpoint to define as-found OPERABILITY, under the expected circumstances described above, would result in actions required by both the rule and technical specifications that are clearly not warranted. However, there is also some point beyond which the OPERABILITY of the device would be called into question, for example, greater than expected drift. This requirement needs to .be specified in the technical specifications in order to define the OPERABILITY limit for the as-found trip setpoint and is designated as the Channel Operational Test (COT) Acceptance Criteria.

The COT Acceptance Criteria described in Table 3.3.1-1 serves as a confirmation of OPERABILITY, such that a channel is OPERABLE if the absolute difference between the as-found trip setpoint and the previously as-left trip setpoint does not exceed the assumed COT uncertainty during the performance of the COT. The COT uncertainty is primarily equal to the expected instrument loop uncertainties, such as drift, during the surveillance interval. In this manner, the actual setting of the device will still meet the LSSS definition and ensure that a Safety Limit is not exceeded at any given point of time as long as the device has not drifted beyond that expected during the surveillance interval. Note that, although the channel is "OPERABLE" under these circumstances, the trip setpoint should be left adjusted to a value within the established Nominal Trip Setpoint calibration tolerance band, in accordance with the uncertainty assumptions stated in the referenced setpoint methodology (as-left criteria), and confirmed to be operating within the statistical allowances of the uncertainty terms assigned. If the actual setting of the device is found to have exceeded the COT Acceptance Criteria the device would be considered inoperable from a technical specification perspective. This requires corrective action including those actions required by 10 CFR 50.36 when automatic protective devices do not function as required.

During Design Basis Accidents (DBAs), the acceptable limits are:

Insert 3 A channel is considered OPERABLE when:

a. The nominal trip setpoint is equal to or conservative with respect to the LSSS;

b. The absolute difference between the as-found trip setpoint and the previous as-left trip setpoint does not exceed the COT Acceptance Criteria; and

c. The as-left trip setpoint is within the established calibration tolerance band about the nominal trip setpoint.

The channel is still operable even if the as-left trip setpoint is non-conservative with respect to the LSSS provided that the as-left trip setpoint is within the established calibration tolerance band as specified in the Ginna Instrument Setpoint Methodology.

Insert 4 The Calculated Trip Setpoints (which are equal to the LSSS) are based on the Analytical Limits stated in References 4, 5, and 6. The selection of these trip setpoints is such that adequate protection is provided when all sensor and processing time delays are taken into account. To allow for calibration tolerances, instrumentation uncertainties, instrument drift, and severe environment errors for those RTS channels that must function in harsh environments as defined by 10 CFR 50.49, the LSSS specified in Table 3.3.1-1 in the accompanying LCO are conservative with respect to the Analytical Limits. A detailed description of the methodology used to calculate the LSSS is provided in the "Instrument Setpoint/Loop Accuracy Calculation Methodology" (Ref. 8). The magnitudes of these uncertainties are factored into the determination of each trip setpoint and corresponding COT Acceptance Criteria. However, it should be noted that the COT Acceptance Criteria does not include the instrument setting tolerance. The COT Acceptance Criteria serves as the technical specification OPERABILITY limit for the purpose of the COT. If the absolute difference between the as-found trip setpoint and the previous as-left trip setpoint does not exceed the COT Acceptance Criteria, the bistable is considered OPERABLE.

The Nominal Trip Setpoint is the value at which the bistable is set and is the expected value to be achieved during calibration. The Nominal Trip Setpoint value ensures the LSSS and the safety analysis limits are met for surveillance interval selected when a channel is adjusted based on stated channel uncertainties. Any bistable is considered to be properly adjusted when the as-left trip setpoint is within the tolerance band assumed in the uncertainty analysis. The bistable is still operable even if the as-left trip setpoint is non-conservative with respect to the LSSS provided that the as-left trip setpoint is within the established calibration tolerance band as specified in the Ginna Instrument Setpoint Methodology.

Trip setpoints consistent with the requirements of the LSSS ensure that SLs are not violated during DBAs (and that the consequences of DBAs will be acceptable, providing the unit is operated from within the LCOs at the onset of the DBA and the equipment functions as designed).

Insert 5 The installed protection and monitoring systems have been designed to protect against violating core design limits and the Reactor Coolant System (RCS) pressure boundary, and to mitigate accidents. This is achieved by specifying limiting safety system settings (LSSS) in terms of parameters directly monitored by the ESFAS, as well as specifying LCOs with respect to these parameters and other reactor system parameters and equipment.

Technical specifications are required by 10 CFR 50.36 to contain LSSS defined by the regulation as "...settings for automatic protective devices...so chosen that automatic protective action will correct the abnormal situation before a Safety Limit (SL) is exceeded." The Analytic Limit is the limit of the process variable at which a safety action is initiated, as established by the safety analysis, to ensure that a SL is not exceeded. Any automatic protection action that occurs on reaching the Analytic Limit therefore ensures that the SL is not exceeded. However, in practice, the actual settings for automatic protective devices must be chosen to be more conservative than the Analytic Limit to account for instrument loop uncertainties related to the setting at which the automatic protective action would actually occur.

The Calculated Trip Setpoint is a predetermined setting for a protective device chosen to ensure automatic actuation prior to the process variable reaching the Analytic Limit and thus ensuring that the SL would not be exceeded. As such, the Calculated Trip Setpoint accounts for uncertainties in setting the device (e.g. calibration), uncertainties in how the device might actually perform (e.g., repeatability), changes in the point of action of the device over time (e.g.,

drift during surveillance intervals), and any other factors which may influence its actual performance (e.g., harsh accident environments). In this manner, the Calculated Trip Setpoint plays an important role in ensuring that SLs are not exceeded. As such, the Calculated Trip Setpoint meets the definition of an LSSS and they are contained in the technical specifications.

Technical specifications contain requirements related to the OPERABILITY of equipment required for safe operation of the facility. OPERABLE is defined in technical specifications as

"...being capable of performing its safety functions(s)." For automatic protective devices, the required safety function is to ensure that a SL is not exceeded and therefore the LSSS as defined by 10 CFR 50.36 serves as the OPERABILITY limit for the nominal trip setpoint. However, use of the LSSS (Calculated Trip Setpoint) to define OPERABILITY in technical specifications would be an overly restrictive requirement if it were applied as an OPERABILITY limit for the as-found value of a protective device setting during a surveillance. This would result in technical specification compliance problems, as well as reports and corrective actions required by the rule which are not necessary to ensure safety. For example, an automatic protective device with a setting that has been found to be different from the Calculated Trip Setpoint due to some drift of the setting may still be OPERABLE since drift is to be expected. This expected drift would have been specifically accounted for in the setpoint methodology for determining the Calculated Trip Setpoint and thus the automatic protective action would still have ensured that the SL would not be exceeded with the as-found setting of the protective device. Therefore, the device would still be OPERABLE since it would have performed its safety function and the only corrective action required would be to reset the device to within the tolerance band assumed in the determination of the Calculated Trip Setpoint to account for further drift during the next surveillance interval.

The Nominal Trip Setpoint is the desired setting specified within established plant procedures, and may be more conservative than the Calculated Trip Setpoint. The Nominal Trip Setpoint therefore may include additional margin to ensure that the SL would not be exceeded. Use of the Calculated Trip Setpoint or Nominal Trip Setpoint to define as-found OPERABILITY, under the expected circumstances described above, would result in actions required by both the rule and technical specifications that are clearly not warranted. However, there is also some point beyond which the OPERABILITY of the device would be called into question, for example, greater than expected drift. This requirement needs to be specified in the technical specifications in order to define the OPERABILITY limit for the as-found trip setpoint and is designated as the Channel Operational Test (COT) Acceptance Criteria..

The COT Acceptance Criteria described in Table 3.3.2-1 serves as a confirmation of OPERABILITY, such that a channel is OPERABLE if the absolute difference between the as-found trip setpoint and the previously as-left trip setpoint does not exceed the assumed COT uncertainty during the performance of the COT. The COT uncertainty is primarily equal to the expected instrument loop uncertainties, such as drift, during the surveillance interval. In this manner, the actual setting of the device will still meet the LSSS definition and ensure that a Safety Limit is not exceeded at any given point of time as long as the device has not drifted beyond that expected during the surveillance interval. Note that, although the channel is "OPERABLE" under these circumstances, the trip setpoint should be left adjusted to a value within the established Nominal Trip Setpoint calibration tolerance band, in accordance with the uncertainty assumptions stated in the referenced setpoint methodology (as-left criteria), and confirmed to be operating within the statistical allowances of the uncertainty terms assigned. If the actual setting of the device is found to have exceeded the COT Acceptance Criteria the device would be considered inoperable from a technical specification perspective. This requires corrective action including those actions required by 10 CFR 50.36 when automatic protective devices do not function as required.

Insert 6 A channel is considered OPERABLE when:

a. The nominal trip setpoint is equal to or conservative with respect to the LSSS;

b. The absolute difference between the as-found trip setpoint and the previous as-left trip setpoint does not exceed the COT Acceptance Criteria; and

c. The as-left trip setpoint is within the established calibration tolerance band about the nominal trip setpoint.

The channel is still operable even if the as-left trip setpoint is non-conservative with respect to the LSSS provided that the as-left trip setpoint is within the established calibration tolerance band as specified in the Ginna Instrument Setpoint Methodology.

Insert 7 The Calculated Trip Setpoints (which are equal to the LSSS) are based on the Analytical Limits stated in References 2, 3, and 4. The selection of these trip setpoints is such that adequate protection is provided when all sensor and processing time delays are taken into account. To allow for calibration tolerances, instrumentation uncertainties, instrument drift, and severe environment errors for those ESFAS channels that must function in harsh environments as defined by 10 CFR 50.49, the LSSS specified in Table 3.3.2-1 in the accompanying LCO are conservative with respect to the Analytical Limits. A detailed description of the methodology used to calculate the LSSS is provided in the "Instrument Setpoint/Loop Accuracy Calculation Methodology" (Ref. 6). The magnitudes of these uncertainties are factored into the determination of each trip setpoint and corresponding COT Acceptance Criteria. However, it should be noted that the COT Acceptance Criteria does not include the instrument setting tolerance. The COT Acceptance Criteria serves as the technical specification OPERABILITY limit for the purpose of the COT. If the absolute difference between the as-found trip setpoint and the previous as-left trip setpoint does not exceed the COT Acceptance Criteria, the bistable is considered OPERABLE.

The Nominal Trip Setpoint is the value at which the bistable is set and is the expected value to be achieved during calibration. The Nominal Trip Setpoint value ensures the LSSS and the safety analysis limits are met for surveillance interval selected when a channel is adjusted based on

-stated channel uncertainties. Any bistable is considered to be properly adjusted when the as-left trip setpoint is within the tolerance band assumed in the uncertainty analysis. The bistable is still operable even if the as-left trip setpoint is non-conservative with respect to the LSSS provided that the as-left trip setpoint is within the established calibration tolerance band as specified in the Ginna Instrument Setpoint Methodology.

Trip setpoints consistent with the requirements of the LSSS ensure that SLs are not violated during DBAs (and that the consequences of DBAs will be acceptable, providing the unit is operated from within the LCOs at the onset of the DBA and the equipment functions as designed).

Insert 8 Containment Isolation-Manual Initiation is required to be OPERABLE during CORE ALTERATIONS or movement of irradiated fuel assemblies within containment, since it provides actuation of Containment Ventilation Isolation (LCO 3.3.5). Under these conditions, the potential exists for an accident that could release fission product radioactivity into containment.

Insert 9 Technical specifications are required by 10 CFR 50.36 to contain limiting safety system settings (LSSS) defined by the regulation as "...settings for automatic protective devices...so chosen that automatic protective action will correct the abnormal situation before a Safety Limit (SL) is exceeded." The Analytic Limit is the limit of the process variable at which a safety action is initiated, as established by the safety analysis, to ensure that a SL -is not exceeded. Any automatic protection action that occurs on reaching the Analytic Limit therefore ensures that the SL is not exceeded. However, in practice, the actual settings for automatic protective devices must be chosen to be more conservative than the Analytic Limit to account for instrument loop uncertainties related to the setting at which the automatic protective action would actually occur.

The Calculated Trip Setpoint is a predetermined setting for a protective device chosen to ensure automatic actuation prior to the process variable reaching the Analytic Limit and thus ensuring that the SL would not be exceeded. As such, the Calculated Trip Setpoint-accounts for uncertainties in setting the device (e.g. calibration), uncertainties in how the device might actually perform (e.g., repeatability), changes in the point of action of the device over time (e.g.,

drift during surveillance intervals), and any other factors which may influence its actual performance (e.g., harsh accident environments). In this manner, the Calculated Trip Setpoint plays an important role in ensuring that SLs are not exceeded. As such, the Calculated Trip Setpoint meets the definition of an LSSS and they are contained in the technical specifications.

Technical specifications contain requirements related to the OPERABILITY of equipment required for safe operation of the facility. OPERABLE is defined in technical specifications as

"...being capable of performing its safety functions(s)." For automatic protective devices, the required safety function is to ensure that a SL is'not exceeded and therefore the LSSS as defined by 10 CFR 50.36 serves as the OPERABILITY limit for the nominal trip setpoint. However, use of the LSSS (Calculated Trip Setpoint) to define OPERABILITY in technical specifications would be an overly restrictive requirement if it were applied as an OPERABILITY limit for the as-found value of a protective device setting during a surveillance. This would result in technical specification compliance problems, as well as reports and corrective actions required by the rule which are not necessary to ensure safety. For example, an automatic protective device with a setting that has been found to be different from the Calculated Trip Setpoint due to some drift of the setting may still be OPERABLE since drift is to be expected. This expected drift would have been specifically accounted for in the setpoint methodology for determining the Calculated Trip Setpoint and thus the automatic protective action would still have ensured that the SL would not be exceeded with the as-found setting of the protective device. Therefore, the device would still be OPERABLE since it would have performed its safety function and the only corrective action required would be to reset the device to within the tolerance band assumed in the determination of the Calculated Trip Setpoint to account for further drift during the next surveillance interval.

The Nominal Trip Setpoint is the desired setting specified within established plant procedures, and may be more conservative than the Calculated Trip Setpoint. The Nominal Trip Setpoint therefore may include additional margin to ensure that the SL would not be exceeded. Use of the Calculated Trip Setpoint or Nominal Trip Setpoint to define as-found OPERABILITY, under the expected circumstances described above, would result in actions required by both the rule and technical specifications that are clearly not warranted. However, there is also some point beyond which the OPERABILITY of the device would be called into question, for example, greater than expected drift. This requirement needs to be specified in the technical specifications in order to define the OPERABILITY limit for the as-found trip setpoint and is designated as the CHANNEL CALIBRATION Acceptance Criteria.

The CHANNEL CALIBRATION Acceptance Criteria described in SR 3.3.4.2 serves as a confirmation of OPERABILITY, such that a channel is OPERABLE if the absolute difference between the as-found trip setpoint and the previously as-left trip setpoint does not exceed the assumed uncertainty during the performance of the CHANNEL CALIBRATION. The assumed uncertainty is primarily equal to the expected instrument loop uncertainties, such as drift, during the surveillance interval. In this manner, the actual setting of the device will still meet the LSSS definition and ensure that a Safety Limit is not exceeded at any given point of time as long as the device has not drifted beyond that expected during the surveillance interval. Note that, although the channel is "OPERABLE" under these circumstances, the trip setpoint should be left adjusted to a value within the established Nominal Trip Setpoint calibration tolerance band, in accordance with the uncertainty assumptions stated in the referenced setpoint methodology (as-left criteria),

and confirmed to be operating within the statistical allowances of the uncertainty terms assigned.

If the actual setting of the device is found to have exceeded the CHANNEL CALIBRATION Acceptance Criteria the device would be considered inoperable from a technical specification perspective. This requires corrective action including those actions required by 10 CFR 50.36 when automatic protective devices do not function as required.

Insert 10 A channel is considered OPERABLE when:

a. The nominal trip setpoint is equal to or conservative with respect to the LSSS;

b. The absolute difference between the as-found trip setpoint and the previous as-left trip setpoint does not exceed the CHANNEL CALIBRATION Acceptance Criteria; and

c. The as-left trip setpoint is within the established calibration tolerance band about the nominal trip setpoint.

The channel is still operable even if the as-left trip setpoint is non-conservative with respect to the LSSS provided that the as-left trip setpoint is within the established calibration tolerance band as specified in the Ginna Instrument Setpoint Methodology.

Insert 11 Technical specifications are required by 10 CFR 50.36 to contain limiting safety system settings (LSSS). The Analytic Limit is the limit of the process variable at which a safety action is initiated, as established by the safety analysis. However, in practice, the actual settings for automatic protective devices must be chosen to be more conservative than the Analytic Limit to account for instrument loop uncertainties related to the setting at which the automatic protective action would actually occur.

The Calculated Trip Setpoint is a predetermined setting for a protective device chosen to ensure automatic actuation prior to the process variable reaching the Analytic Limit. As such, the Calculated Trip Setpoint accounts for uncertainties in setting the device (e.g. calibration),

uncertainties in how the device might actually perform (e.g., repeatability), changes in the point of action of the device over time (e.g., drift during surveillance intervals), and any other factors which may influence its actual performance (e.g., harsh accident environments). As such, the Calculated Trip Setpoint meets the definition of an LSSS and they are contained in the technical specifications.

Technical specifications contain requirements related to the OPERABILITY of equipment required for safe operation of the facility. OPERABLE is defined in technical specifications as

"...being capable of performing its safety functions(s)." For automatic protective devices, the required safety function is to ensure that a SL is not exceeded and therefore the LSSS as defined by 10 CFR 50.36 serves as the OPERABILITY limit for the nominal trip setpoint. However, use of the LSSS (Calculated Trip Setpoint) to define OPERABILITY in technical specifications would be an overly restrictive requirement if it were applied as an OPERABILITY limit for the as-found value of a protective device setting during a surveillance. This would result in technical specification compliance problems, as well as reports and corrective actions required by the rule which are not necessary to ensure safety. For example, an automatic protective device with a setting that has been found to be different from the Calculated Trip Setpoint due to some drift of the setting may still be OPERABLE since drift is to be expected. This expected drift would have been specifically accounted for iii the ietp6int methodology for determiuiing the Calculated Trip Setpoint and thus the automatic protective action would still have been ensured with the as-found setting of the protective device. Therefore, the device would still be OPERABLE since it would have performed its safety function and the only corrective action required would be to reset the device to within the tolerance band assumed in the determination of the Calculated Trip Setpoint to account for fiurther drift during the next surveillance interval.

The Nominal Trip Setpoint is the desired setting specified within established plant procedures, and may be more conservative than the Calculated Trip Setpoint. The Nominal Trip Setpoint therefore may include additional margin to ensure that the SL would not be exceeded. Use of the Calculated Trip Setpoint or Nominal Trip Setpoint to define as-found OPERABILITY, under the expected circumstances described above, would result in actions required by both the rule and technical specifications that are clearly not warranted. However, there is also some point beyond which the OPERABILITY of the device would be called into question, for example, greater than expected drift. This requirement needs to be specified in the technical specifications in order to define the OPERABILITY limit for the as-found trip setpoint and is designated as the Channel Operational Test (COT) Acceptance Criteria.

The COT Acceptance Criteria described in SR Table 3.3.5-1 serves as a confirmation of OPERABILITY, such that a channel is OPERABLE if the absolute difference between the as-found trip setpoint and the previously as-left trip setpoint does not exceed the assumed uncertainty during the performance of the COT. The assumed uncertainty is primarily equal to the expected instrument loop uncertainties, such as drift, during the surveillance interval. In this manner, the actual setting of the device will still meet the LSSS definition, as long as the device has not drifted beyond that expected during the surveillance interval. Note that, although the channel is "OPERABLE" under these circumstances, the trip setpoint should be left adjusted to a value within the established Nominal Trip Setpoint calibration tolerance band, in accordance with the uncertainty assumptions stated in the referenced setpoint methodology (as-left criteria),

and confirmed to be operating within the statistical allowances of the uncertainty terms assigned.

If the actual setting of the device is found to have exceeded the COT Acceptance Criteria the device would be considered inoperable from a technical specification perspective. This requires corrective action including those actions required by 10 CFR 50.36 when automatic protective devices do not function as required.

Insert 12

5. Safety Iniection Refer to LCO 3.3.2, Function 1, for all initiating Functions and requirements. This

-Function provides both manual and automatic initiation capability for containment ventilation isolation.

Insert 13 The Containment Spray-Manual Initiation .and Safety Injection Functions are required to be OPERABLE in MODES 1, 2, 3, and 4. Due to the potential negative affects of system actuations, and the redundancy provided by the alternate Functions, these Functions are not required during CORE ALTERATIONS or movement of irradiated fuel assemblies within containment.

Insert 14 A channel is considered OPERABLE when:

a. The nominal trip setpoint is equal to or conservative with respect to the LSSS;

b. The absolute difference between the as-found trip setpoint and the previous as-left trip setpoint does not exceed the COT Acceptance Criteria; and

c. The as-left trip setpoint is within the established calibration tolerance band about the nominal trip setpoint.

The channel is still operable even if the as-left trip setpoint is non-conservative with respect to the LSSS provided that the as-left trip setpoint is within the established calibration tolerance band as specified in the Ginna Instrument Setpoint Methodology.

v t e Letter Sequence Request
TAC:MB4789, Relocate TS Parameters to Colr (Approved, Closed)
Initiation Request, Request, Request Acceptance... Administration Meeting Questions 27 September 2002 Answers Results Approval Other:
MONTHYEAR2004-02-24 [Table View]

ML042470114

Text

Subject:

Reference:

Dear Mr. Clark:

Enclosures:

3.1 REFERENCES

Navigation menu

Search