05000353/LER-2007-003

From kanterella
(Redirected from ML071730270)
Jump to navigation Jump to search
LER-2007-003, Automatic Actuation of the Reactor Protection System at Power
Limerick Generating Station
Event date: 04-24-2007
Report date: 06-22-2007
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications

10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident

10 CFR 50.73(a)(2)(iv)(A), System Actuation
3532007003R00 - NRC Website

Unit Conditions Prior to the Event Unit 2 was in Operational Condition (OPCON)� 1 (Power Operation) at approximately 100% power. There were no structures, systems or components out of service that contributed to this event.

Description of the Event

On Tuesday, April 24, 2007, Unit 2 was operating at 100% power with surveillance testing in progress on the reactor pressure high channel of redundant reactivity control system (RRCS) division 1A. At approximately 02:10 hours RRCS initiated a demand for a feedwater runback. Feedwater level control (EIIS:SJ) reduced the three operating reactor feedwater pumps to minimum speed, which terminated feedwater flow to the reactor. The reactor protection system (RPS) (EIIS:JC) automatically actuated when reactor level decreased to the low level setpoint of +12.5 inches. All control rods fully inserted. When reactor level decreased to the low-low level setpoint of –38 inches, the high pressure coolant injection (HPCI) (EIIS:BJ) and reactor core isolation cooling (RCIC) (EIIS:BN) systems initiated and injected to the reactor. Reactor wide range level indication decreased to –88 inches and then increased. HPCI was secured during the level increase. Level continued to increase to +54 inches, which tripped RCIC and the reactor feedwater pumps as designed.

Reactor pressure was approximately 1042 psig prior to the automatic scram, decreased after the scram, and stabilized at approximately 960 psig one minute after scram. No main steam relief valve setpoints were exceeded.

Primary containment isolation signals were automatically initiated at +12.5 inches and –38 inches reactor level. A Group 2 isolation occurred at +12.5 inches but the isolation valves were in the closed position prior to the event.

Group 1B, 3, 6A, 6B, 6C, 7B, and 8B isolations were initiated at –38 inches and all affected open isolation valves closed as designed.

The reactor recirculation pump trip (RPT) breakers tripped at -38 inches due to the ATWS-RPT system instrumentation.

The RRCS alternate rod insertion (ARI) actuated as expected at -38 inches.

HPCI and RCIC were placed in manual mode while injecting to the reactor due to speed and flow oscillations observed by the Reactor Operator. In addition, the HPCI and RCIC suctions automatically transferred from the condensate storage tank (CST) to the suppression pool due to the flow oscillations.

HPCI and RCIC were later determined to be inoperable based on the observed oscillations.

The investigation determined that a circuit card in RRCS division 1 channel B spuriously actuated while channel A was in a tripped condition due to the surveillance testing in progress. It was further determined that HPCI and RCIC flow oscillations were due to flow control loop tuning settings that were different than the Unit 1 and initial startup testing control loop settings established in 1989.

Prior to plant restart the affected RRCS circuit card was replaced and tested successfully. In addition the HPCI and RCIC flow controller gain and reset settings were set to be consistent with the Unit 1 settings and testing was successfully performed during plant restart. These settings are also similar to settings that existed on the Unit 2 HPCI and RCIC flow controllers when stable flow was demonstrated during initial startup testing of both systems conducted in 1989, and during Unit 2 plant transients in 1990 and 1994 (RCIC only).

This event resulted in an ECCS discharge into the reactor coolant system as a result of a valid signal, an actuation of RPS when the reactor was critical, and a valid actuation of RPS, ECCS, RCIC and containment isolation valves. The 4-hour ENS notifications required by 10CFR50.72(b)(2)(iv)(A) and 10CFR50.72(b)(2)(iv)(B) and the 8-hour notification required by 10CFR50.72(b)(3)(iv)(A) were performed on Tuesday, April 24, 2007 at 04:04 hours (#43315).

This event resulted in automatic actuations of RPS, ECCS, RCIC, and containment isolation valves. This event also identified a condition that could have prevented the fulfillment of the safety function of HPCI. This event resulted in a condition that was prohibited by the plant's Technical Specifications since HPCI and RCIC were inoperable for periods that exceeded the allowable outage times. Therefore, this LER is being submitted pursuant to the requirements of 10CFR50.73(a)(2)(iv)(A), 10CFR50.73(a)(2)(v)(D) and 10CFR50.73(a)(2)(i)(B).

Analysis of the Event

There were no actual safety consequences associated with this event. The potential safety consequences of this event were minimal. HPCI and RCIC initially injected at reduced capacity while operating in the automatic flow control mode then operated normally for a period in manual mode and successfully restored reactor level to normal. Both HPCI and RCIC remained capable of attaining rated flow when operated in the manual flow control mode. In addition the feedwater pumps and control rod drive pumps were available for injection in the event HPCI and RCIC failed.

The RRCS feedwater runback feature is designed to lower reactor level during an ATLAS event to suppress reactor power.

It performs this function by transferring feedwater control to manual and decreasing the three feedpump controller demands to minimum speed. The division 1B high power output optical isolator card failed concurrently with testing on division 1A initiating this event. This failure caused the transmission of an invalid demand for a feedwater runback to the feedwater control system.

HPCI and RCIC utilize Bailey Type 701 analog flow controllers that are tuned during full flow testing with the suction and discharge flow paths aligned to the CST. The controllers were last tested in the injection to the reactor mode during initial startup testing conducted in 1989. Differences in system response during routine testing and injection modes resulted in a failure to identify the pre-existing system HPCI and RCIC flow control gain and reset settings were changed during system tuning in May 1999. Therefore, this was not affected. The as-left flow control settings are approximately the settings used on Unit 1, which were verified to be stable during HPCI and RCIC injections on April 20, 1999 and April 23, 2003.

Cause of the Event

The scram was caused by an intermittent failure of a circuit card in RRCS division 1B concurrent with ongoing testing on division 1A that caused a reactor feedwater runback.

The flow oscillations on HPCI and RCIC were caused by improper flow control loop setting adjustments of gain and reset.

Corrective Action Completed The degraded circuit card in RRCS division 1B was replaced.

The Unit 2 flow control loop gain and reset settings for HPCI and RCIC were set to be consistent with the Unit 1 settings.

The procedure for tuning of HPCI and RCIC flow controls was revised to specify the required gain and reset settings.

Previous Similar Occurrences There were no previous similar occurrences of scrams caused by feedwater runback. There were previous similar occurrences of scrams caused by a loss of feedwater. These events were reported in LERs 1-03-003, 1-99-003, and 2-90- 015. There were no previous similar occurrences of flow oscillations during HPCI or RCIC injection.

Component data:

HPCI and RCIC Analog Flow Controllers Manufacturer: B045 ABB Automation Inc.

Model number: 701003AAAE1 RRCS High Power Output Isolator Circuit Card Manufacturer: G080 General Electric Part number:2219B5369G005