ML063000026

Technical Specifications, Implementing Approved Changes in Probabilistic Risk Analysis of the RPS and ESFAS Test Times and Completion Times.

ML063000026
Person / Time
Site:	Summer
Issue date:	10/24/2006
From:	NRC/NRR/ADRO/DORL/LPLII-1
To:
Martin R, NRR/DORL, 415-1493
References
Download: ML063000026 (11)

Text

(3) SCE&G, pursuant to the Act and 10 CFR Part 70, to receive, possess and use at any time special nuclear material as reactor fuel, in accordance with the limitations for storage and amounts required for reactor operation, as described in the Final Safety Analysis Report, as amended through Amendment No. 33; (4) SCE&G, pursuant to the Act and 10 CFR Parts 30, 40 and 70 to receive, possess and use at any time any byproduct, source and special nuclear material as sealed neutron sources for reactor startup, sealed neutron sources for reactor instrumentation and radiation monitoring equipment calibration, and as fission detectors in amounts as required; (5) SCE&G, pursuant to the Act and 10 CFR Parts 30, 40, and 70, to receive, possess and use in amounts as required any byproduct, source or special nuclear material without restriction to chemical or physical form, for sample analysis or instrument calibration or associated with radioactive apparatus of components; and (6) SCE&G, pursuant to the Act and 10 CFR Parts 30, 40, and 70, to possess, but not separate, such byproduct and special nuclear materials as my be produced by the operation of the facility.

C. This renewed license shall be deemed to contain, and is subject to, the conditions specified in the Commission's regulations set forth in 10 CFR Chapter I and is subject to all applicable provisions of the Act and to the rules, regulations, and orders of the Commission now or hereafter in effect; and is subject to the additional conditions specified or incorporated below:

(1) Maximum Power Level SCE&G is authorized to operate the facility at reactor core power levels not in excess of 2900 megawatts thermal in accordance with the conditions specified herein and in Attachment 1 to .this renewed license.

The preoperational tests,,startup tests and other items identified in Attachment 1 to this renewed license shall be completed as specified.

Attachment 1 is hereby incorporated into this renewed license.

(2) Technical Specifications and Environmental Protection Plan The technical Specifications contained in Appendix A, as revised through Amendment No.1 7 7and the Environmental Protection Plan contained in Appendix B, are hereby incorporated in the renewed license. South Carolina Electric & Gas Company shall operate the facility in accordance with the Technical Specifications and the Environmental Protection Plan.

Renewed Facility Operating License No. NPF-1 2

. TABLE 3.3-1 (Continued)

TABLE NOTATION With the reactor trip system breakers in the closed position and the control rod drive system capable of rod withdrawal.

1. The provisions of Specification 3.0.4 are not applicable.

1. Below the P-6 (Intermediate Range Neutron Flux Interlock) setpoint.

• Below the P-10 (Low Setpoint Power Range Neutron Flux Interlock) Setpoint.

Values left blank pending NRC approval of 2 loop operation.

ACTION STATEMENTS ACTION 1 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

ACTION 2 - With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. I

b. The Minimum Channels OPERABLE requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for I surveillance testing of other channels per Specification 4.3.1.1.

c. Either, THERMAL POWER is restricted to less than or equal to 75% of RATED THERMAL POWER and the Power Range Neutron Flux trip setpoint is reduced to less than or equal to 85% of RATED THERMAL POWER-within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />; or, the QUADRANT POWER TILT RATIO is monitored at least once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> per Specification 4.2.4.2.

SUMMER - UNIT 1 3/4 3-6, Amendment No. 44- 1 77

TABLE 3.3-1 (Continued)

ACTION STATEMENTS (Continued)

ACTION 3 - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE requirement and with the THERMAL POWER level:

a. Below the P-6 (Intermediate Range Neutron Flux Interlock) setpoint, restore the inoperable channel to OPERABLE status prior to increasing THERMAL POWER above the P-6 Setpoint.

b. Above the P-6 (Intermediate Range Neutron Flux Interlock) setpoint but below 10 percent of RATED THERMAL POWER, restore the inoperable channel to OPERABLE status prior to increasing THERMAL POWER above 10 percent of RATED THERMAL POWER.

ACTION 4 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement suspend all operations involving positive reactivity changes.

ACTION 5 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement, verify compliance with the SHUTDOWN MARGIN requirements of Specification 3.1.1.1 or 3.1.1.2, as applicable, within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> thereafter.

ACTION 6 - With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />; and

b. The Minimum Channels OPERABLE requirement is met; however, the inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.3.1.1.

ACTION 7 - With less than the Minimum Number of Channels OPERABLE, within one hour determine by observation of the associated permissive annunciator window(s) that the interlock is in its required state for the existing plant condition, or apply Specification 3.0.3.

SUMMER - UNIT 1 3/43-7 Amendment No. 44 1 77

TABLE 3.3-1 (Continued)

ACTION STATEMENTS (Continued)

ACTION 8 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> or be in at least HOT STANDBY within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />; however, one channel may be bypassed for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> for surveillance testing per Specification 4.3.1.1, provided the other channel is OPERABLE, one channel may be bypassed for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> for maintenance on the undervoltage or shunt trip mechanisms, provided the other channel is OPERABLE, and one channel may be bypassed for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for concurrent surveillance testing of the Reactor Trip Breaker and automatic trip logic, provided the other channel is OPERABLE.

ACTION 9 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or open the reactor trip breakers within the next hour.

ACTION 10 - With the number of OPERABLE Channels less than the Total Number of Channels, operation may continue provided the inoperable channels are I placed in the tripped condition within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

ACTION 11 - With one of the diverse trip features (undervoltage or shunt trip attachment) inoperable, restore it to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or declare the breaker inoperable and apply ACTION 8. The breaker shall not be bypassed while one of the diverse trip features is inoperable except for the time required for performing maintenance to restore the breaker to OPERABLE status.

I ACTION 12- With the number of OPERABLE Channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />; however, one channel may be bypassed for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for surveillance testing per Specification 4.3.1.1, provided the other channel is OPERABLE.

SUMMER - UNIT 1 3/43-8 Amendment No. 78, 401!, 1 77

TABLE 3.3-3 (Continued)

TABLE NOTATION

1. Trip function may be blocked in this MODE below the P-1 1 (Pressurizer Pressure Interlock) setpoint.

1. 1. Trip function may be blocked in this MODE below the P-1 2 (Low-Low Tavg Interlock) setpoint.

Except when below P-12 with all MSIVs and bypasses closed and disabled.

The provisions of Specification 3.0.4 are not applicable.

ACTION STATEMENTS ACTION 14 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />; however, one channel may be bypassed for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for surveillance testing per Specification 4.3.2.1, I

provided the other channel is OPERABLE.

ACTION 15 - DELETED ACTION 16 - With the number of OPERABLE channels one less than the Total Number of Channels, operation may continue provided the inoperable channel is placed in bypass and the Minimum Channels OPERABLE requirement is met. Restore the inoperable channel to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> otherwise; I Be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

One additional channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> I

for surveillance testing per Specification 4.3.2.1.

ACTION 17 - With less than the Minimum Channels OPERABLE requirement, operation may continue provided the containment purge supply and exhaust valves are maintained closed.

ACTION 18 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

ACTION 19 - With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.

b. The Minimum Channels OPERABLE requirement is met; however, the inoperable channel may be bypassed for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> for surveillance testing of other channels per Specification 4.3.2.1.

SUMMER - UNIT 1 3/4 3-23 Amendment No. 10,1,!5, 47-7 177

TABLE 3.3-3 (Continued)

ACTION STATEMENTS (Continued)

ACTION 20 With less than the Minimum Number of Channels OPERABLE, within one hour determine by observation of the associated permissive annunciator window(s) that the interlock is in its required state for the existing plant condition, or apply Specification 3.0.3.

ACTION 21 With the number of OPERABLE Channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable channel to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in at least HOT SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />; however, one channel may be bypassed for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for surveillance I

testing per Specification 4.3.2.1 provided the other channel is OPERABLE.

ACTION 22 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in at least HOT SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

ACTION 23 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or declare the associated valve inoperable and take the ACTION required by Specification 3.7.1.5.

ACTION 24 - With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may proceed provided the following conditions are satisfied:

a. The inoperable channel is placed in the tripped condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b. The Minimum Channels OPERABLE requirement is met; however, the I

inoperable channel may be bypassed for up to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for surveillance testing of other channels per Specification 4.3.2.1.

ACTION 25 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement, restore the inoperable Channel to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />; however, one channel may be bypassed for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for surveillance I

testing per Specification 4.3.2.1, provided the other channel is OPERABLE.

SUMMER - UNIT 1 3/4 3-24 Amendment No. 101, 167, 1 77

3/4.3 INSTRUMENTATION BASES 3/4.3.1 and 3/4.3.2 REACTOR TRIP AND ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION The OPERABILITY of the Reactor Protection System and Engineered Safety Feature Actuation System Instrumentation and interlocks ensure that 1) the associated action and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoints, 2) the specified coincidence logic and sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance consistent with maintaining an appropriate level of reliability of the Reactor Protection and Engineered Safety Features instrumentation and, 3) sufficient system functions capability is available from diverse parameters.

The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and mitigation of accident and transient conditions. The integrated operation of each of these systems is consistent with the assumptions used in the accident analyses. The surveillance requirements specified for these systems ensure that the overall system functional capability is maintained comparable to the original design standards. The periodic surveillance tests performed at the minimum frequencies are sufficient to demonstrate this capability. Specified surveillance intervals have been determined in accordance with WCAP-10271, "Evaluation of Surveillance Frequencies and Out of Service Times for Reactor Protection Instrumentation System," and supplements to that report. Specified surveillance and maintenance outage times have been determined in accordance with WCAP-14333-P-A, Rev. 1, "Probabilistic Risk Analysis of the RPS and ESFAS Test Times and Completion Times," and Westinghouse letter CGE-05-46. Surveillance intervals and out of service times were determined based on maintaining an appropriate level of reliability of the Reactor Protection System and Engineered Safety Features instrumentation.

Consistent with the requirement in Regulatory Guide 1.177 to include Tier 2 insights into the decision-making process before taking equipment out of service, restrictions on concurrent removal of certain equipment when a logic train is inoperable for maintenance are included (note that these restrictions do not apply when a logic train is being tested under the 4-hour bypass Note). Entry into Actions 12, 14, 21, or 25 is not a typical, pre-planned evolution during power operation, other than for surveillance testing. Since Actions 12, 14, 21, or 25 are typically entered due to equipment failure, it follows that some of the following restrictions may not be met at the time of entry into Actions 12, 14, 21, or 25. If this situation were to occur during the 24-hour AOT of Actions 12, 14, 21, or 25, the configuration risk assessment procedure will assess the emergent condition and direct activities to restore the inoperable logic train and exit Actions 12, 14, 21, or 25, or fully implement these restrictions, or perform a unit shutdown, as appropriate from a risk management perspective. The following restrictions will be observed:

To preserve ATWS mitigation capability, activities that degrade the availability of the emergency feedwater system, RCS pressure relief system (pressurizer PORVs and safety valves), AMSAC, or turbine trip should not be scheduled when a logic train is inoperable for maintenance.

To preserve LOCA mitigation capability, one complete ECCS train that can be actuated automatically must be maintained when a logic train is inoperable for maintenance.

SUMMER - UNIT I B 3/4 3-1 Amendment No. 44-, 17 7

INSTRUMENTATION BASES REACTOR TRIP AND ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION (continued)

" To preserve reactor trip and safeguards actuation capability, activities that cause master relays or slave relays in the available train to be unavailable and activities that cause analog channels to be unavailable should not be scheduled when a logic train is inoperable for maintenance.

• Activities on electrical systems (e.g., AC and DC power) and cooling systems (e.g., service water and component cooling water) that support the systems or functions listed in the first three bullets should not be scheduled when a logic train is inoperable for maintenance. That is, one complete train of a function that supports a complete train of a function noted above must be available.

The Engineered Safety Feature Actuation System Instrumentation Trip Setpoints specified in Table 3.3-4 are the nominal values at which the bistables are set for each functional unit. A setpoint is considered to be adjusted cons*istent with the nominal value when the "as measured" setpoint is within the band allowed for calibration accuracy.

To accommodate the instrument drift assumed to occur between operational tests and the accuracy to which setpoints can be measured and calibrated, Allowable Values for the setpoints have been specified in Table 3.3-4. Operation with setpoints less conservative than the Trip Setpoint but within the Allowable Value is acceptable since an allowance has been made in the safety analysis to accommodate this error.

The methodology to derive the trip setpoints is based upon combining all of the uncertainties in the channels. Inherent to the determination of the trip setpoints are the magnitudes of these channel uncertainties. Sensor and rack instrumentation utilized in these channels are expected to be capable of operating within the allowances of these uncertainty magnitudes. Rack drift in excess of the Allowable Value exhibits the behavior that the rack has not met its allowance. Being that there is a small statistical chance that this will happen, an infrequent excessive drift is expected. Rack or sensor drift, in excess of the allowance that is more than occasional, may be indicative of more serious problems and should warrant further investigation.

The measurement of response time at the specified frequencies provides assurance that the reactor trip and the engineered safety feature actuation associated with each channel is completed within the time limit assumed in the accident analyses. No credit was taken in the analyses for those channels with response times indicated as not applicable.

Response time may be demonstrated by any series of sequential, overlapping or total channel test measurements provided that such tests demonstrate the total channel response.

time as defined. Response time may be verified by actual response time tests in any series of sequential, overlapping, or total channel measurements, or by the summation of allocated sensor, signal processing, and actuation logic response times with actual response time tests on the remainder of the channel. Allocations for sensor response times may be obtained SUMMER - UNIT 1 B 3/4 3-1a Amendment No. a3542, 446- 177

INSTRUMENTATION BASES REACTOR TRIP AND ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION (continued) from: (1) historical records based on acceptable response time tests (hydraulic, noise or power interrupt tests), (2) in place, onsite, or offsite (e.g., vendor) test measurements, or (3) utilizing vendor engineering specifications. WCAP-1 3632-P-A, Revision 2, "Elimination of Pressure Sensor Response Time Testing Requirements," provides the basis and methodology for using allocated sensor response times in the overall verification of the channel response time for specific sensors identified in the WCAP. Response time verification for other sensor types must be demonstrated by test.

WCAP-14036-P-A, Revision 1, "Elimination of Periodic Response Time Tests,"

provides the basis and methodology for using allocated signal processing and actuation logic response times in the overall verification of the protection system channel response time.

The allocations for sensor, signal conditioning, and actuation logic response times must be verified prior to placing the component into operational service and re-verified following maintenance or modification that may adversely affect response time. In general, electrical repair work does not impact response time provided the parts used for the repair are of the same type and value. Specific components identified in the WCAP may be replaced without verification testing. One example where response time could be affected is replacing the sensing element of a transmitter.

Westinghouse letter CGE-00-018, dated March 28, 2000, provided an evaluation of the Group 05 (11 NLP and 6NSA) 7300 process cards. These cards were revised after the submittal of WCAP-14036, Revision 1. This letter concluded that the failure modes and effects analysis (FMEA) performed for the older versions of these cards and documented in WCAP-14036-P-A, Revision 1, is applicable for these Group 05 cards. The bounding time response values determined by test and evaluation and reported in the WCAP are valid for these redesigned cards.

The Engineered Safety Features response times specified in Table 3.3-5 which include sequential operation of the RWST and VCT valves (Notes 2 and 3) are based on values assumed in the non-LOCA safety analyses. These analyses are for injection of borated water from the RWST. Injection of borated water is assumed not to occur until the VCT charging pump suction isolation valves are closed following opening of the RWST charging pumps suction valves. When the sequential operation of the RWST and VCT valves is not included in the response times (Note 1) the values specified are based on the LOCA analyses. The LOCA analyses take credit for injection flow regardless of the source.

Verification of the response times specified in Table 3.3-5 will assure that the assumptions used for the LOCA and non-LOCA analyses with respect to the operation of the VCT and RWST valves are valid.

The Engineered Safety Features Actuation System senses selected plant parameters and determines whether or not predetermined limits are being exceeded. Ifthey are, the signals are combined into logic matrices sensitive to combinations indicative of various accidents, events, and transients. Once the required logic combination is completed, the system sends actuation signals to those engineered safety features components whose SUMMER - UNIT 1 B 3/4 3-1b Amendment No. 420, 446, 459, 177

INSTRUMENTATION BASES REACTOR TRIP AND ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION (continued) aggregate function best serves the requirements of the condition. As an example, the following actions may be initiated by the Engineered Safety Features Actuation System to mitigate the consequences of a steam line break or loss of coolant accident 1) safety injection pumps start and automatic valves position, 2) reactor trip, 3) feedwater isolation,

4) startup of the emergency diesel generators, 5) containment spray pumps start and automatic valves position, 6) containment isolation, 7) steam line isolation, 8) turbine trip,

9) auxiliary feedwater pumps start and automatic valves position, 10) containment cooling fans start and automatic valves position, 11) essential service water pumps start and automatic valves position, and 12) control room isolation and ventilation systems start.

Several automatic logic functions included in this specification are not necessary for Engineered Safety Feature System actuation but their functional capability at the specified setpoints enhances the overall reliability of the Engineered Safety Features functions. These automatic actuation systems are purge and exhaust isolation from high containment radioactivity, turbine trip and feedwater isolation from steam generator high-high water level, initiation of emergency feedwater on a trip of the main feedwater pumps, automatic transfer of the suctions of the emergency feedwater pumps to service water on low suction pressure, and automatic opening of the containment recirculation sump suction valves for the RHR and spray pumps on low-low refueling water storage tank level.

The service water response time includes: 1) the start of the service water pumps and, 2) the service water pumps discharge yalves (3116A,B,C-SW) stroking to the fully opened position. This condition of the valves assures that flow will become established through the component cooling water heat exchanger, diesel generator coolers, HVAC chiller, and to the suction of the service water booster pumps when these components are placed in-service. Prior to this time, the flow is rapidly approaching required flow and sufficient pressure is developed as valves finish their stroke. Each of the above-listed components will be starting to perform their accident mitigation function, either directly or indirectly depending upon the use of the component, and will be operational within the service water response time of 71.5/81.5 secondsM. Only the service water booster pumps have a direct impact on the accident analysis via the RBCUs' heat removal capability as discussed below.

-i Total time is 1.5 second instrument response after setpoint is reached, plus 10 seconds diesel generator start, plus 10 seconds to reach service water pump start and begin 3116-SW opening via Engineered Safety Features Loading Sequencer, plus 60 seconds stroke time for 3116-SW. During this total time, the service water pumps start-and the service water pump discharge valve begins to open at 11.5 seconds and the pump discharge valve is fully open at 71.5 seconds without a diesel generator start required and 21.5 seconds and 81.5 seconds including a diesel generator start.

SUMMER - UNIT 1 B 3/4 3-1c Amendment No. 6:7,-146.,

4-1-&, 177 I

. i

INSTRUMENTATION BASES REACTOR TRIP AND ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATION (continued)

The RBCU response time includes: 1) the start of the RBCU fan and the service water booster pumps and, 2) all the service water valves which must be driven to the fully opened or fully closed position. This condition of the valves allows the flow to become fully established through the RBCU. Prior to this time, the flow is rapidly approaching required flow as the valves finish their stroke. Although the RBCU would be removing heat through-out the Engineered Safety Features response time, the accident analysis does not assume heat removal capability from 0 to 71.5 seconds 2 because the industrial cooling water system is not completely isolated until 71.5 seconds. A linear ramp increase from 95% full heat removal capability to 100% full heat removal capability is assumed by the accident analysis to start at 71.5 seconds and end at 86.5 seconds!. Full heat removal capability is assumed at 86.5 seconds based on the position of the valve 3107-SW.

Total time is 1.5 second instrument response after setpoint Is reached, plus 10 second diesel start plus 60 seconds* for valves to isolate industrial cooling water system.

3 Total time is 1.5 second instrument response after setpoint is reached, plus 10 second diesel generator start plus 75 seconds to stroke valves 3107A, B-SW.

During this time period, the Engineered Safety Features Loading Sequencer starts the RBCU fans at 25 seconds and service water booster pumps at 30 seconds after the valves begin to stroke.

SUMMER - UNIT 1 B 3/4 3-1d Amendment No. 67-, 1 77 I