ML072120096
| ML072120096 | |
| Person / Time | |
|---|---|
| Site: | Technical Specifications Task Force |
| Issue date: | 07/25/2007 |
| From: | Kobetz T NRC/NRR/ADRO/DIRS/ITSB |
| To: | Technical Specifications Task Force |
| Schulten C. S., NRR/DIRS, 415-1192 | |
| Shared Package | |
| ML072070202 | List: |
| References | |
| TAC MD5249, TSTF-493, Rev 2 | |
| Download: ML072120096 (14) | |
Text
Control Rod Block Instrumentation B 3.3.2.1 B 3.3 INSTRUMENTATION B 3.3.2.1 Control Rod Block Instrumentation BASES BACKGROUND Control rods provide the primary means for control of reactivity changes.
Control rod block instrumentation includes channel sensors, logic circuitry, switches, and relays that are designed to ensure that specified fuel design limits are not exceeded for postulated transients and accidents. During high power operation, the rod withdrawal limiter (RW L) provides protection for control rod withdrawal error events. During low power operations, control rod blocks from the rod pattern controller (RPC) enforce specific control rod sequences designed to mitigate the consequences of the control rod drop accident (CRDA). During shutdown conditions, control rod blocks from the Reactor Mode Switch - Shutdown Position ensure that all control rods remain inserted to prevent inadvertent criticalities.
The protection and monitoring functions have been designed to ensure safe operation of the reactor. This is achieved by specifying limiting safety system settings (LSSS) in terms of parameters directly monitored, as well as LCOs on other reactor system parameters and equipment performance. The subset of LSSS that directly protect against violating the Rreactor cCore Safety Limits or the and Reactor Coolant System (RCS) pPressure boundary Ssafety lLimits during anticipated operational occurrences (AOOs) are referred to as Safety Limit LSSS (SL-LSSS).
10 CFR 50.36(c)(1)(ii)(A) requires that TSs include LSSSs for variables that have significant safety functions. For variables on which a SL has been placed, the LSSS must be chosen to initiate automatic protective action to correct abnormal situations before the SL is exceeded.
Technical Specifications are required by 10 CFR 50.36 to contain LSSS defined by the regulation as "...settings for automatic protective devices...so chosen that automatic protective action will correct the abnormal situation before a Safety Limit (SL) is exceeded." The Analytical Limit is the limit of the process variable at which a safety action is initiated, as established by the safety analysis, to ensure that a SL is not exceeded. Any automatic protection action that occurs on reaching the Analytical Limit therefore ensures that the SL is not exceeded.
However, in practice, the actual settings for automatic protective devices must be chosen to be more conservative than the Analytical Limit to account for instrument loop uncertainties related to the setting at which the automatic protective action would actually occur
REVIEW ER'S NOTE ----------------------------------
The term "Limiting Trip Setpoint (LTSP)" is generic terminology for the setpoint value calculated by means of the plant-specific setpoint methodology documented in a document controlled under 10 CFR 50.59.
BW R/6 STS B 3.3.2.1-1 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 The term Limiting Trip Setpoint indicates that no additional margin has been added between the Analytical Limit and the calculated trip setting.
W here margin is added between the Analytical Limit and trip setpoint, the term Nominal Trip Setpoint (NTSP) is preferred. The trip setpoint (field setting) may be more conservative than the Limiting or Nominal Trip Setpoint. W here the [LTSP] is not documented in a column in Table 3.3.1.1-1 for the purpose of compliance with 10 CFR 50.36, the plant-specific term for the Limiting or Nominal Trip Setpoint must be cited in Note c of Table 3.3.2.1-1. The brackets indicate plant-specific terms may apply, as reviewed and approved by the NRC. The as-found and as-left tolerances will apply to the actual setpoint implemented in the Surveillance procedures to confirm channel performance.
Licensees are to insert the name of the document(s) controlled under 10 CFR 50.59 that contain the [LTSP] and the methodology for calculating the as-left and as-found tolerances, for the phrase "[a document controlled under 10 CFR 50.59]" in the specifications.
BASES BACKGROUND (continued)
The [Limiting Trip Setpoint (LTSP)] is a predetermined setting for a protective device chosen to ensure automatic actuation prior to the process variable reaching the Analytical Limit and thus ensuring that the SL would not be exceeded. As such, the [LTSP] accounts for uncertainties in setting the device (e.g., calibration), uncertainties in how the device might actually perform (e.g., repeatability), changes in the point of action of the device over time (e.g., drift during surveillance intervals), and any other factors which may influence its actual performance (e.g., harsh accident environments). In this manner, the
[LTSP] ensures that SLs are not exceeded. As such, the [LTSP] meets the definition of an SL-LSSS (Ref. 1).
Technical Specifications contain values related to the OPERABILITY of equipment required for safe operation of the facility. OPERABLE is defined in Technical Specifications as "...being capable of performing its safety function(s)." Use of the [LTSP] to define OPERABILITY in Technical Specifications would be an overly restrictive requirement if it were applied as an OPERABILITY limit for the "as-found" value of a protective device setting during a Surveillance. This would result in Technical Specification compliance problems, as well as reports and corrective actions required by the rule which are not necessary to ensure safety. For example, an automatic protective device with a setting that has been found to be different from the [LTSP] due to some drift of the setting may still be OPERABLE since drift is to be expected. This expected drift would have been specifically accounted for in the setpoint methodology for calculating the [LTSP] and thus the automatic protective BW R/6 STS B 3.3.2.1-2 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 action would still have ensured that the SL would not be exceeded with the "as-found" setting of the protective device. Therefore, the device would still be OPERABLE since it would have performed its safety function and the only corrective action required would be to reset the device to the [LTSP] to account for further drift during the next surveillance interval.
However, there is also some point beyond which the device would have not been able to perform its function due, for example, to greater than expected drift. The Allowable Value specified in Table 3.3.1.1-1 is the least conservative value of the as-found setpoint that a channel can have during testing such that a channel is OPERABLE if the trip setpoint is found conservative with respect to the Allowable Value during the CHANNEL CALIBRATION. Note that, although a channel is OPERABLE under these circumstances, the setpoint must be left adjusted to a value within the established as-left tolerance of the [LTSP] and confirmed to be operating within the statistical allowances of the uncertainty terms assigned in the setpoint calculation. As such, the Allowable Value differs from the [LTSP] by an amount equal to [or greater than] the as-found tolerance value. In this manner, the actual setting of the device ensures that a SL is not exceeded at any given point of time as long as the device has not drifted beyond that expected during the surveillance interval.
If the actual setting of the device is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, then this condition indicates that the instrument is degraded and is not performing in accordance with the setpoint methodology assumptions.
This condition must be entered into the plant corrective action program, the trip setpoint must be left adjusted to a value within the as-left tolerance band, and an immediate determination of operability decision must be made.
If the actual setting of the device is found to be non-conservative with respect to the Allowable Value the channel device would be considered inoperable from a Technical Specification perspective. This requires corrective action including those actions required by 10 CFR 50.36 when automatic protective devices do not function as required.
The purpose of the RW L is to limit control rod withdrawal to preclude a MCPR Safety Limit (SL) violation. The RW L supplies a trip signal to the Rod Control and Information System (RCIS) to appropriately inhibit control rod withdrawal during power operation equal to or greater than the low power setpoint (LPSP). The RW L has two channels, either of which can initiate a control rod block when the channel output exceeds the control rod block setpoint. The rod block logic circuitry in the RCIS is arranged as two redundant and separate logic circuits. These circuits are energized when control rod movement is allowed. The output of each logic circuit is coupled to a comparator by the use of isolation devices in the rod drive control cabinet. The two logic circuit signals are compared and rod blocks are applied when either circuit trip signal is present.
BW R/6 STS B 3.3.2.1-3 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 Control rod withdrawal is permitted only when the two signals agree.
Each rod block logic circuit receives control rod position indication from a separate channel of the Rod Position Information System, each with a set of reed switches for control rod position indication. Control rod position is the primary data input for the RW L. First stage turbine pressure is used to determine reactor power level, with an LPSP and a high power setpoint (HPSP) used to determine allowable control rod withdrawal distances.
Below the LPSP, the RW L is automatically bypassed (Ref. 1).
The purpose of the RPC is to ensure control rod patterns during startup are such that only specified control rod sequences and relative positions are allowed over the operating range from all control rods inserted to 10% RTP. The sequences effectively limit the potential amount and rate of reactivity increase during a CRDA. The RPC, in conjunction with the BASES BACKGROUND (continued)
RCIS, will initiate control rod withdrawal and insert blocks when the actual sequence deviates beyond allowances from the specified sequence. The rod block logic circuitry is the same as that described above. The RPC also uses the turbine first stage pressure to determine when reactor power is above the power at which the RPC is automatically bypassed (Ref. 1).
W ith the reactor mode switch in the shutdown position, a control rod withdrawal block is applied to all control rods to ensure that the shutdown condition is maintained. This function prevents criticality resulting from inadvertent control rod withdrawal during MODE 3 or 4, or during MODE 5 when the reactor mode switch is required to be in the shutdown position. The reactor mode switch has two channels, with each providing inputs into a separate rod block circuit. A rod block in either circuit will provide a control rod block to all control rods.
APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY Allowable Values are specified for each Rod Block Function specified in SR 3.3.2.1.7, The Allowable Value specified in SR 3.3.2.1.7 is the least conservative value of the as-found setpoint that a channel can have during testing such that a channel is OPERABLE if the trip setpoint is found conservative with respect to the Allowable Value during the CHANNEL CALIBRATION.
Note that, although a channel is OPERABLE under these circumstances, the setpoint must be left adjusted to a value within the as-left tolerance of the [LTSP] and confirmed to be operating within the statistical allowances of the uncertainty terms assigned in the setpoint calculation. As such, the Allowable Value differs from the [LTSP] by an amount equal to [or greater than] the as-found tolerance value. In this manner, the actual setting of BW R/6 STS B 3.3.2.1-4 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 the device ensures that an SL is not exceeded at any given point of time as long as the device has not drifted beyond that expected during the surveillance interval.
If the actual setting of the device is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, then this condition indicates that the instrument is degraded and is not performing in accordance with the setpoint methodology assumptions.
This condition must be entered into the plant corrective action program, the trip setpoint must be left adjusted to a value within the as-left tolerance band, and an immediate determination of operability decision must be made.
If the actual setting of the device is found to be non-conservative with respect to the Allowable Value, the channel would be considered inoperable from a Technical Specification perspective. This requires corrective action including those actions required by 10 CFR 50.36 when automatic protective devices do not function as required.
Limiting Trip Setpoints that directly protect against violating the Rreactor cCore Safety Limits or the Reactor Coolant System (RCS) pPressure boundary Safety Limits during anticipated operational occurrences (AOOs) are Safety Limit-Limiting Safety System Settings (SL-LSSS).
Permissive and interlock setpoints allow bypass of trips when they are not required by the Safety Analysis. These permissives and interlocks ensure that the starting conditions are consistent with the safety analysis, before preventative or mitigating actions occur. Because these permissives or interlocks are only one of multiple conservative starting assumptions for the accident analysis, they are generally considered as nominal values without regard to measurement accuracy, (i.e. the value indicated is sufficiently close to the necessary value to ensure proper operation of the safety systems to turn the AOO). Therefore permissives and interlocks are not considered to be SL-LSSS.
Allowable Values are specified for each RPS Function specified in Table 3.3.2.1-1. [Limiting Trip Setpoints] are specified in [a document controlled under 10 CFR 50.59 such as the UFSAR]. The [LTSPs] are selected to ensure that the actual setpoints are conservative with respect to the Allowable Value as-found tolerance band between successive CHANNEL CALIBRATIONS. After each calibration the trip setpoint should be reset to within the as-left band around the [LTSP]. Operation with a trip setpoint less conservative than its [LTSP], but conservative with respect to its Allowable Value, is acceptable. A channel is inoperable if its actual trip setpoint is non-conservative with respect to its required Allowable Value.
Limiting Trip Setpoints that protect against violating the Reactor Core Safety Limits or the Reactor Coolant System (RCS) Pressure Safety Limit during anticipated operational occurrences (AOOs) are Safety Limit-Limiting Safety System Settings (SL-LSSS). Permissive and interlock setpoints allow bypass of trips when they are not required by the Safety BW R/6 STS B 3.3.2.1-5 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 Analysis. These permissives and interlocks ensure that the starting conditions are consistent with the safety analysis, before preventative or mitigating actions occur. Therefore permissives and interlocks are not considered to be SL-LSSS.
[Limiting Trip Setpoints] are those predetermined values of output at which an action should take place. The setpoints are compared to the actual process parameter (e.g., reactor vessel water level), and when the measured output value of the process parameter exceeds the setpoint, the associated device (e.g., trip unit) changes state. The analytical limits are derived from the limiting values of the process parameters obtained from the safety analysis. The Allowable Values are derived from the analytical limits, corrected for calibration, process, and some of the instrument errors. The [LTSPs] are then determined, accounting for the remaining instrument errors (e.g., drift). The trip setpoints derived in this manner provide adequate protection because instrumentation uncertainties, process effects, calibration tolerances, instrument drift and severe environment errors (for channels that must function in harsh environments as defined by 10 CFR 50.49) are accounted for.
The specific Applicable Safety Analyses, LCO, and Applicability discussions are listed below on a Function by Function basis.
BASES APPLICABLE 1.a. Rod W ithdrawal Limiter SAFETY ANALYSES, LCO, The RW L is designed to prevent violation of the MCPR SL and the and APPLICABILITY cladding 1% plastic strain fuel design limit that may result from a single control rod withdrawal error (RW E) event. The analytical methods and assumptions used in evaluating the RW E event are summarized in Reference 2. A statistical analysis of RW E events was performed to determine the MCPR response as a function of withdrawal distance and initial operating conditions. From these responses, the fuel thermal performance was determined as a function of RW L allowable control rod withdrawal distance and power level.
The RW L satisfies Criterion 3 of 10 CFR 50.36(c)(2)(ii). Two channels of the RW L are available and are required to be OPERABLE to ensure that no single instrument failure can preclude a rod block from this Function.
BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
The RW L is assumed to mitigate the consequences of an RW E event when operating > 35% RTP. Below this power level, the consequences BW R/6 STS B 3.3.2.1-6 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 of an RW E event will not exceed the MCPR, and therefore the RW L is not required to be OPERABLE (Ref. 3).
1.b. Rod Pattern Controller The RPC enforces the banked position withdrawal sequence (BPW S) to ensure that the initial conditions of the CRDA analysis are not violated.
The analytical methods and assumptions used in evaluating the CRDA are summarized in References 4, 5, and 6. The BPW S requires that control rods be moved in groups, with all control rods assigned to a specific group required to be within specified banked positions.
Requirements that the control rod sequence is in compliance with BPW S are specified in LCO 3.1.6, "Rod Pattern Control."
The Rod Pattern Controller Function satisfies Criterion 3 of 10 CFR 50.36(c)(2)(ii). Since the RPC is a backup to operator control of control rod sequences, only a single channel would be required OPERABLE to satisfy Criterion 3 (Ref. 6). However, the RPC is designed as a dual channel system and will not function without two OPERABLE channels. Required Actions of LCO 3.1.3, "Control Rod OPERABILITY,"
and LCO 3.1.6 may necessitate bypassing individual control rods in the Rod Action Control System (RACS) to allow continued operation with inoperable control rods or to allow correction of a control rod pattern not in compliance with the BPW S. The individual control rods may be bypassed as required by the conditions, and the RPC is not considered inoperable provided SR 3.3.2.1.9 is met.
BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
Compliance with the BPW S, and therefore OPERABILITY of the RPC, is required in MODES 1 and 2 with THERMAL POW ER # 10% RTP. W hen THERMAL POW ER is > 10% RTP, there is no possible control rod configuration that results in a control rod worth that could exceed the 280 cal/gm fuel damage limit during a CRDA. In MODES 3 and 4, all control rods are required to be inserted in the core. In MODE 5, since only a single control rod can be withdrawn from a core cell containing fuel assemblies, adequate SDM ensures that the consequences of a CRDA are acceptable, since the reactor will be subcritical.
- 2. Reactor Mode Switch - Shutdown Position During MODES 3 and 4, and during MODE 5 when the reactor mode switch is required to be in the shutdown position, the core is assumed to be subcritical; therefore, no positive reactivity insertion events are analyzed. The Reactor Mode Switch - Shutdown Position control rod withdrawal block ensures that the reactor remains subcritical by blocking control rod withdrawal, thereby preserving the assumptions of the safety analysis.
BW R/6 STS B 3.3.2.1-7 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 The Reactor Mode Switch - Shutdown Position Function satisfies Criterion 3 of 10 CFR 50.36(c)(2)(ii).
Two channels are required to be OPERABLE to ensure that no single channel failure will preclude a rod block when required. No Allowable Value is applicable for this Function since the channels are mechanically actuated based solely on reactor mode switch position.
During shutdown conditions (MODE 3, 4, or 5) no positive reactivity insertion events are analyzed because assumptions are that control rod withdrawal blocks are provided to prevent criticality. Therefore, when the reactor mode switch is in the shutdown position, the control rod withdrawal block is required to be OPERABLE. During MODE 5, with the reactor mode switch in the refueling position, the required position one-rod-out interlock (LCO 3.9.2) provides the required control rod withdrawal blocks.
ACTIONS -----------------------------------REVIEW ERS NOTE-----------------------------------
Certain LCO Completion Times are based on approved topical reports. In order for a licensee to use the times, the licensee must justify the Completion Times as required by the staff Safety Evaluation Report (SER) for the topical report.
BASES ACTIONS (continued)
A.1 If either RW L channel is inoperable, the RW L may not be capable of performing its intended function. In most cases, with an inoperable channel, the RW L will initiate a control rod withdrawal block because the two channels will not agree. To ensure erroneous control rod withdrawal does not occur, however, Required Action A.1 requires that further control rod withdrawal be suspended immediately.
B.1 If the RPC is inoperable, it may not be capable of performing its intended function even though, in most cases, all control rod movement will be blocked. All control rod movement should be suspended under these conditions until the RPC is restored to OPERABLE status. This action does not preclude a reactor scram. The RPC is not considered inoperable if individual control rods are bypassed in the RACS as required by LCO 3.1.3 or LCO 3.1.6. Under these conditions, continued operation is allowed if the bypassing of control rods and movement of control rods is verified by a second licensed operator or other qualified member of the technical staff per SR 3.3.2.1.9.
BW R/6 STS B 3.3.2.1-8 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 C.1 and C.2 If one Reactor Mode Switch - Shutdown Position control rod withdrawal block channel is inoperable, the remaining OPERABLE channel is adequate to perform the control rod withdrawal block function. Required Action C.1 and Required Action C.2 are consistent with the normal action of an OPERABLE Reactor Mode Switch - Shutdown Position Function to maintain all control rods inserted. Therefore, there is no distinction between Required Actions for the Conditions of one or two channels inoperable. In both cases (one or both channels inoperable), suspending all control rod withdrawal immediately, and immediately fully inserting all insertable control rods in core cells containing one or more fuel assemblies will ensure that the core is subcritical, with adequate SDM ensured by LCO 3.1.1, "SHUTDOW N MARGIN (SDM)." Control rods in core cells containing no fuel assemblies do not affect the reactivity of the core and are therefore not required to be inserted. Action must continue until all insertable control rods in core cells containing one or more fuel assemblies are fully inserted.
BASES SURVEILLANCE -----------------------------------REVIEW ERS NOTE-----------------------------------
REQUIREMENTS Certain Frequencies are based on approved topical reports. In order for a licensee to use these Frequencies, the licensee must justify the Frequencies as required by the staff SER for the topical report.
REVIEW ERS NOTE ------------------------------------
The Notes in Table 3.3.2.1-1 requiring reset of the channel to a predefined as-left tolerance and the verification of the as-found tolerance are only associated with SL-LSSS values. Therefore, the Notes are applied to specific SRs for the associated functions in the SR column only. The Notes may be placed at the top of the Allowable Value column in the Table and applied to all Functions with allowable values in the table.
REVIEW ERS NOTE ------------------------------------
Notes 1 and 2 are applied to the setpoint verification Surveillances for all SL-LSSS Functions unless one or more of the following exclusions apply:
- 1. Notes 1 and 2 are not applied to SL-LSSS Functions which utilize mechanical components to sense the trip setpoint or to manual initiation circuits (the latter are not explicitly modeled in the accident analysis). Examples of mechanical components are limit switches, float switches, proximity detectors, manual actuation switches, and other such devices that are normally only checked on a "go/no go" basis. Note 1 requires a comparison of the periodic surveillance requirement results to provide an indication of channel (or individual device) performance. This comparison is not valid for most mechanical components. W hile it is possible to verify that a limit BW R/6 STS B 3.3.2.1-9 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 switch functions at a point of travel, a change in the surveillance result probably indicates that the switch has moved, not that the input/output relationship has changed. Therefore, a comparison of surveillance requirement results would not provide an indication of the channel or component performance.
- 2. Notes 1 and 2 are not applied to Technical Specifications associated with mechanically operated safety relief valves. The performance of these components is already controlled (i.e., trended with as-left and as-found limits) under the ASME Section XI testing program.
- 3. Notes 1 and 2 are may not applyied to SL-LSSS Functions and Surveillances which test only digital components. For purely digital components, such as actuation logic circuits and associated relays, there is no expected change in result between surveillance performances other than measurement and test errors (M&TE) and, therefore, justification is needed to confirm that comparison of Surveillance results does not provide an indication of channel or component performance.
An evaluation of the potential SL-LSSS Functions resulted in Notes 1 and 2 being applied to the Functions shown in the TS markups. Each licensee proposing to fully adopt this TSTF must review the the potential SL-LSSS Functions to identify which of the identified functions are SL-LSSS according to the definition of SL-LSSS and their plant specific safety analysis. The two TSTF Notes are not required to be applied to any of the listed Functions which meet any of the exclusion criteria or are not SL-LSSS based on the plant specific design and analysis.
As noted at the beginning of the SR, the SRs for each Control Rod Block instrumentation Function are found in the SRs column of Table 3.3.2.1-1.
The Surveillances are also modified by a Note to indicate that when an RW L channel is placed in an inoperable status solely for performance of required Surveillances, entry into associated Conditions and Required Actions may be delayed for up to 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />, provided the associated Function maintains control rod block capability. Upon completion of the Surveillance, or expiration of the 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> allowance, the channel must be returned to OPERABLE status or the applicable Condition entered and Required Actions taken. This Note is based on the reliability analysis (Ref. 8) assumption of the average time required to perform channel Surveillance. That analysis demonstrated that the 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> testing allowance does not significantly reduce the probability that a control rod block will be initiated when necessary.
SR 3.3.2.1.1, SR 3.3.2.1.2, SR 3.3.2.1.3, and SR 3.3.2.1.4 BW R/6 STS B 3.3.2.1-10 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 The CHANNEL FUNCTIONAL TESTS for the RPC and RW L are performed by attempting to withdraw a control rod not in compliance with the prescribed sequence and verifying that a control rod block occurs. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. Any setpoint adjustment shall be consistent with the assumptions of the current plant specific setpoint methodology. As noted, the SRs are not required to be performed until 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> after specified conditions are met (e.g., after any control rod is withdrawn in MODE 2). This allows entry into the appropriate conditions needed to perform the required SRs. The Frequencies are based on reliability analysis (Ref. 7).
BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.2.1.5 The LPSP is the point at which the RPCS makes the transition between the function of the RPC and the RW L. This transition point is automatically varied as a function of power. This power level is inferred from the first stage turbine pressure (one channel to each trip system).
These power setpoints must be verified periodically to be within the Allowable Values. If any LPSP is nonconservative, then the affected Functions are considered inoperable. Since this channel has both upper and lower required limits, it is not allowed to be placed in a condition to enable either the RPC or RW L Function. Because main turbine bypass steam flow can affect the LPSP nonconservatively for the RW L, the RW L is considered inoperable with any main turbine bypass valves open. The Frequency of 92 days is based on the setpoint methodology utilized for these channels.
SR 3.3.2.1.6 This SR ensures the high power function of the RW L is not bypassed when power is above the HPSP. The power level is inferred from turbine first stage pressure signals. Periodic testing of the HPSP channels is required to verify the setpoint to be less than or equal to the limit.
Adequate margins in accordance with setpoint methodologies are included. If the HPSP is nonconservative, then the RW L is considered inoperable. Alternatively, the HPSP can be placed in the conservative condition (nonbypass). If placed in the nonbypassed condition, the SR is met and the RW L would not be considered inoperable. Because main turbine bypass steam flow can affect the HPSP nonconservatively for the BW R/6 STS B 3.3.2.1-11 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 RW L, the RW L is considered inoperable with any main turbine bypass valve open. The Frequency of 92 days is based on the setpoint methodology utilized for these channels.
SR 3.3.2.1.7 A CHANNEL CALIBRATION is a complete check of the instrument loop and the sensor. This test verifies that the channel responds to the measured parameter within the necessary range and accuracy.
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drifts between successive calibrations consistent with the plant specific setpoint methodology. Any setpoint adjustment shall be consistent with the assumptions of the current plant specific setpoint methodology.
BASES SURVEILLANCE REQUIREMENTS (continued)
The Frequency is based upon the assumption of the magnitude of equipment drift in the setpoint analysis.
SR 3.3.2.1.7 for SL-LSSS functions is modified by two Notes as identified in Table 3.3.2.1-1. The first Note requires evaluation of channel performance for the condition where the as-found setting for the channel setpoint is outside its as-found tolerance but conservative with respect to the Allowable Value. Evaluation of instrument performance will verify that the instrument will continue to behave in accordance with safety analysis setpoint methodology assumptions. The purpose of the assessment is to ensure confidence in the instrument performance prior to returning the instrument to service. These channels will also be identified in the Corrective Action Program. Entry into the Corrective Action Program will ensure required review and documentation of the condition for continued OPERABILITY. The second Note requires that the as-left setting for the instrument be returned to within the as-left tolerance of the [LTSP].
W here a setpoint more conservative than the [LTSP] is used in the plant surveillance procedures, the as-left and as-found tolerances, as applicable, will be applied to the surveillance procedure setpoint. This will ensure that sufficient margin to the Safety Limit and/or Analytical Limit is maintained. If the as-left instrument setting cannot be returned to a setting within the as-left tolerance of the [LTSP], then the instrument channel shall be declared inoperable.
The second Note also requires that [LTSP] and the methodologies for calculating the as-left and the as-found tolerances be in [a document controlled under 10 CFR 50.59].
SR 3.3.2.1.8 BW R/6 STS B 3.3.2.1-12 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 The CHANNEL FUNCTIONAL TEST for the Reactor Mode Switch -
Shutdown Position Function is performed by attempting to withdraw any control rod with the reactor mode switch in the shutdown position and verifying a control rod block occurs. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
As noted in the SR, the Surveillance is not required to be performed until 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> after the reactor mode switch is in the shutdown position, since testing of this interlock with the reactor mode switch in any other position cannot be performed without using jumpers, lifted leads, or movable limits. This allows entry into MODES 3 and 4 if the 18 month Frequency is not met per SR 3.0.2. The 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> allowance is based on operating experience and in consideration of providing a reasonable time in which to complete the SRs.
The 18 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown these components usually pass the Surveillance when performed at the 18 month Frequency.
SR 3.3.2.1.9 LCO 3.1.3 and LCO 3.1.6 may require individual control rods to be bypassed in RACS to allow insertion of an inoperable control rod or correction of a control rod pattern not in compliance with BPW S. W ith the control rods bypassed in the RACS, the RPC will not control the movement of these bypassed control rods. To ensure the proper bypassing and movement of those affected control rods, a second licensed operator or other qualified member of the technical staff must verify the bypassing and movement of these control rods. Compliance with this SR allows the RPC to be OPERABLE with these control rods bypassed.
BW R/6 STS B 3.3.2.1-13 Rev. 3.0, 03/31/04
Control Rod Block Instrumentation B 3.3.2.1 BASES REFERENCES 1. FSAR, Section [7.6.1.7.3].
- 2. FSAR, Section [15.4.2].
- 3. NEDE-24011-P-A-9-US, "General Electrical Standard Application for Reload Fuel," Supplement for United States, Section S 2.2.3.1, September 1988.
- 4. "Modifications to the Requirements for Control Rod Drop Accident Mitigating Systems," BW R Owners Group, July 1986.
- 5. NEDO-21231, "Banked Position W ithdrawal Sequence,"
January 1977.
- 6. NRC SER, Acceptance of Referencing of Licensing Topical Report NEDE-24011-P-A, "General Electric Standard Application for Reactor Fuel, Revision 8, Amendment 17," December 27, 1987.
- 7. NEDC-30851-P-A, "Technical Specification Improvement Analysis for BW R Control Rod Block Instrumentation," October 1988.
- 8. GENE-770-06-1, "Addendum to Bases for Changes to Surveillance Test Intervals and Allowed Out-of-Service Times for Selected Instrumentation Technical Specifications," February 1991.
BW R/6 STS B 3.3.2.1-14 Rev. 3.0, 03/31/04