Text

Renewed Facility Operating License
	ML092710463
Person / Time
Site:	Three Mile Island
Issue date:	10/22/2009
From:	Leeds E; License Renewal Projects Branch 1
To:	; Exelon Generation Co
	Robinson J, NRR/DLR, 415-2878
Shared Package
ML092710456	List: ML092710410; ML092710438; ML092710463; NRC-2008-0150, Notice of Issuance of Renewed Facility Operating License No. DPR-50 for an Additional 20-Year Period;
References
	Download: ML092710463 (218)
	v • d • e

LICENSE AUTHORITY FILE COPY, DO NOT REMOVE THREE fILE 1TAUCLEAR ISLAND STATION UNIIT 1 LICENSE

.1. DPW 50 AppFpNDIY' jECUTŽNICAL A TONS SPECIFICATOS

TABLE OF CONTENTS Section Paqe TECHNICAL SPECIFICATIONS 1 DEFINITIONS 1-1 1.1 RATED POWER 1-1 1.2 REACTOR OPERATING CONDITIONS 1-1 1.2.1 Cold Shutdown 1-1 1.2.2 Hot Shutdown 1-1 1.2.3 Reactor Critical 1-1 1.2.4 Hot Standby 1-1 1.2.5 Power Operation 1-1 1.2.6 Refueling Shutdown 1-1 1.2.7 Refueling Operation 1-2 1.2.8 Refueling Interval 1-2 1.2.9 Startup 1-2 1.2.10 Avg 1-2 1.2.11 Heatup-Cooldown Mode 1-2 1.2.12 Station, Unit, Plant, and Facility 1-2 1.3 OPERABLE 1-2 1.4 PROTECTIVE INSTRUMENTATION LOGIC 1-2 1.4.1 Instrument Channel 1-2 1.4.2 Reactor Protection System 1-2 1.4.3 Protection Channel 1-3 1.4.4 Reactor Protection System Logic 1-3 1.4.5 Engineered Safety Features System 1-3 1.4.6 Degree of Redundancy 1-3 1.5 INSTRUMENTATION SURVEILLANCE 1-3 1.5.1 Trip Test 1-3 1.5.2 Channel Test 1-3 1.5.3 Channel Check 1-4 1.5.4 Channel Calibration 1-4 1.5.5 Heat Balance Check 1-4 1.5.6 Heat Balance Calibration 1-4 1.6 POWER DISTRIBUTION 1-5 1.6.1 Quadrant Power Tilt 1-5 1.6.2 Axial Power Imbalance 1-5 1.7 CONTAINMENT INTEGRITY 1-5 1.8 FIRE SUPPRESSION WATER SYSTEM 1-5 1.9 DELETED 1-6 1.10 DELETED 1-6 1.11 DELETED 1-6 1.12 DOSE EQUIVALENT 1-131 1-6 1.13 SOURCE CHECK 1-6 1.14 SOLIDIFICATION - DELETED 1-6 1.15 OFFSITE DOSE CALCULATION MANUAL 1-6 1.16 PROCESS CONTROL PROGRAM 1-6 1.17 GASEOUS RADWASTE TREATMENT SYSTEM 1-6 1.18 VENTILATION EXHAUST TREATMENT SYSTEM 1-7 1.19 PURGE-PURGING 1-7 1.20 VENTING 1-7 1.21 REPORTABLE EVENT 1-7 1.22 MEMBER(S) OF THE PUBLIC 1-7 1.23 SUBSTANTIVE CHANGES 1-7 1.24 CORE OPERATING LIMITS REPORT 1-8 1.25 FREQUENCY NOTATION 1-8 i

Amendment No. 11, 72, 129, 137, 142, 150, 155,173 9205270039 920519 APR 5 1993 PDR ADOCK 05000289 P PDR

TABLE OF CONTENTS Section Page 2 SAFETY LIMITS AND LIMITING SAFETY SYSTEM SETTINGS 2-1 2.1 Safety Limits, Reactor Core 2-1 2.2 Safety Limits, Reactor System Pressure 2-4 2.3 Limiting Safety System Settings, Protection Instrumentation 2-5 3 LIMITING CONDITIONS FOR OPERATION 3-1 3.0 General Action Reguirements 3-1 3.1 Reactor Coolant System 3-1a 3.1.1 Operational Components 3-1a 3.1.2 Pressurization, Heatup and Cooldown Limitations 3-3 3.1.3 Minimum Conditions for Criticality 3-6 3.1.4 Reactor Coolant System Activity 3-8 3.1.5 Chemistry 3-10 3.1.6 Leakage 3-12 3.1.7 Moderator Temperature Coefficient of Reactivity 3-16 3.1.8 Single Loop Restrictions 3-17 3.1.9 Low Power Physics Testing Restrictions 3-18 3.1.10 Control Rod Operation (Deleted) 3-18a 3.1.11 Reactor Internal Vent Valves 3-18c 3.1.12 Pressurizer Power Operated Relief Valve (PORV),

Block Valve, and Low Temperature Overpressure Protection (LTOP) 3-18d 3.1.13 Reactor Coolant System Vents 3-18g 3.2 Deleted 3-19 3.3 Emergency Core Cooling, Reactor Building Emergency Cooling and Reactor Building Spray Systems 3*21 3.4 Decay Heat Removal (DHR) Capability 3-25 3.4.1 Reactor Coolant System (RCS) Temperature Greater than 250 Degrees F 3-25 3.4.2 RCS Temperature Less Than or Equal to 250 Degrees F 3-26a 3.5 Instrumentation Systems 3-27 3.5.1 Operational Safety Instrumentation 3-27 3.5.2 Control Rod Group and Power Distribution Limits 3-33 3.5.3 Engineered Safeguards Protection System Actuation Setpoints 3-37 3.5.4 Incore Instrumentation (Deleted) 3-38 3.5.5 Accident Monitoring Instrumentation 3-40a 3.5.6 Deleted 3-40f 3.5.7 Remote Shutdown System 3-40g 3.6 Reactor Building 3-41 3.7 Unit Electrical Power System 3-42 3.8 Fuel Loading and Refueling 3-44 3.9 Deleted 3-46 3.10 Miscellaneous Radioactive Materials Sources 3-46 3.11 Handling of Irradiated Fuel 3-55 3.12 Reactor Building Polar Crane 3-57 3.13 Secondary System ActiVity 3-58 3.14 Flood 3-59 3.14.1 Periodic Inspection of the Dikes Around TMI 3-59 3.14.2 Flood Condition for Placing the Unit in Hot Standby 3-60 3.15 Air Treatment Systems 3-61 3.15.1 Emergency Control Room Air Treatment System 3-61 3.15.2 Reactor Building Purge Air Treatment System (Deleted) 3-62c 3.15.3 Auxiliary and Fuel Handling Building Air Treatment System (Deleted) 3-62d 3.15.4 Fuel Handling Building ESF Air Treatment System 3-62e ii Amendment No. 59, 72, 78, 97, 98, 119, 122, 136, 149, 167, 182, 196,211,216,234,242,245,248,264,269

TABLE OF CONTENTS Section Paoe 3.16 SHOCK SUPPRESSORS (SNUBBERS) 3-63 3.17 REACTOR BUILDING AIR TEMPERATURE 3-80 3.18 FIRE PROTECTION (DELETED) 3-86 3.19 CONTAINMENT SYSTEMS 3-95 3.20 SPECIAL TEST EXCEPTIONS (DELETED) 3-95a 3.21 RADIOACTIVE EFFLUENT INSTRUMENTATION (DELETED) 3-96 3.21.1 RADIOACTIVE LIQUID EFFLUENT INSTRUMENTATION (DELETED) 3-96 3.21.2 RADIOACTIVE GASEOUS PROCESS AND EFFLUENT MONITORING 3-96 INSTRUMENTATION (DELETED) 3.22 RADIOACTIVE EFFLUENTS (DELETED) 3-96 3.22.1 LIQUID EFFLUENTS (DELETED) 3-96 3.22.2 GASEOUS EFFLUENTS (DELETED) 3-96 3.22.3 SOLID RADIOACTIVE WASTE (DELETED) 3-96 3.22.4 TOTAL DOSE (DELETED) 3-96 3.23 RADIOLOGICAL ENVIRONMENTAL MONITORING (DELETED) 3-96 3.23.1 MONITORING PROGRAM (DELETED) 3-96 3.23.2 LAND USE CENSUS (DELETED) 3-96 3.23.3 INTERLABORATORY COMPARISON PROGRAM (DELETED) 3-96 3.24 REACTOR VESSEL WATER LEVEL 3-128 4 SURVEILLANCE STANDARDS 4-1 4.1 OPERATIONAL SAFETY REVIEW 4-1 4.2 REACTOR COOLANT SYSTEM INSERVICE INSPECTION 4-11 4.3 TESTING FOLLOWING OPENING OF SYSTEM (DELETED) 4-13 4.4 REACTOR BUILDING 4-29 4.4.1 CONTAINMENT LEAKAGE TESTS 4-29 4.4.2 STRUCTURAL INTEGRITY 4-35 4.4.3 DELETED 4-37 4.4.4 DELETED 4-38 4.5 EMERGENCY LOADING SEQUENCE AND POWER TRANSFER. 4-39 EMERGENCY CORE COOLING SYSTEM AND REACTOR BUILDING COOLING SYSTEM PERIODIC TESTING 4.5.1 EMERGENCY LOADING SEQUENCE 4-39 4.5.2 EMERGENCY CORE COOLING SYSTEM 4-41 4.5.3 REACTOR BUILDING COOLING AND ISOLATION SYSTEM 4-43 4.5.4 ENGINEERED SAFEGUARDS FEATURE (ESF)

SYSTEMS LEAKAGE 4-45 4.6 EMERGENCY POWER SYSTEM PERIODIC TESTS 4-46 4.7 REACTOR CONTROL ROD SYSTEM TESTS 4-48 4.7.1 CONTROL ROD DRIVE SYSTEM FUNCTIONAL TESTS 4-48 4.7.2 CONTROL ROD PROGRAM VERIFICATION (DELETED) 4-50 iii Amendment 7 84, 4, 49, 437, 46, 44S, 48,-9, 494, }4-8, 44, 24-1-5, 246

TABLE OF CONTENTS Section Page 4.8 DELETED 4-51 4.9 DECAY HEAT REMOVAL (DHR)YCAPABILiTY - PERIODIC TESTING 4-52 4.9.1 REACTOR COOLANT SYSTEM (RCS) TEMPERATURE GREATER THAN 250 DEGREES F 4-52 4.9.2 RCS TEMPERATURE LESS THAN OR EQUAL TO 250 DEGREES F 4-52a 4.10 REACTIVITY ANOMALIES 4-53 4.11 REACTOR COOLANT SYSTEM VENTS 4-54 4.12 AIR TREATMENT SYSTEMS 4-55 4.12.1 EMERGENCY CONTROL ROOM AIR TREATMENT SYSTEM 4-55 4.12.2 REACTOR BUILDING PURGE AIR TREATMENT SYSTEM (DELETED) 4-55c 4.12.3 AUXILIARY AND FUEL HANDLING BUILDING AIR TREATMENT 4-55d SYSTEM (DELETED) 4.12.4 FUEL HANDLING BUILDING ESF AIR TREATMENT SYSTEM 4-55f 4.13 RADIOACTIVE MATERIALS SOURCES SURVEILLANCE 4-56 4.14 DELETED 4-56 4.15 MAIN STEAM SYSTEM INSERVICE INSPECTION 4-58 4.16 REACTOR INTERNALS VENT VALVES SURVEILLANCE 4-59 4.17 SHOCK SUPPRESSORS (SNUBBERS) 4-60 4.18 FIRE PROTECTION SYSTEMS (DELETED) 4-72 4.19 STEAM GENERATOR (SG) TUBE INTEGRITY 4-77 4.20 REACTOR BUILDING AIR TEMPERATURE 4-86 4.21 RADIOACTIVE EFFLUENT INSTRUMENTATION (DELETED) 4-87 4.21.1 RADIOACTIVE LIQUID EFFLUENT INSTRUMENTATION (DELETED) 4-87 4.21.2 RADIOACTIVE GASEOUS PROCESS AND EFFLUENT MONITORING 4-87 INSTRUMENTATION (DELETED) 4.22 RADIOACTIVE EFFLUENTS (DELETED) 4-87 4.22.1 LIQUID EFFLUENTS (DELETED) 4-87 4.22.2 GASEOUS EFFLUENTS (DELETED) 4-87 4.22.3 SOLID RADIOACTIVE WASTE (DELETED) 4-87 4.22.4 TOTAL DOSE (DELETED) 4-87 4.23.1 MONITORING PROGRAM (DELETED) 4-87 4.23.2 LAND USE CENSUS (DELETED) 4-87 4.23.3 INTERLABORATORY COMPARISON PROGRAM (DELETED) 4-87 iv AmendmentNo. 11, 22,30,1,4 7, ,7-2,78,96,97-,119,122,429, 137, 1446, 197, 242, 25, 246, 248, 261, 264

TABLE OF CONTENTS Section Page 5 DESIGN FEATURES 5-1 5.1 SITE 5-1 5.2 CONTAINMENT 5-2 5.2.1 REACTOR BUILDING 5-2 5.2.2 REACTOR BUILDING ISOLATION SYSTEM 5-3 5.3 REACTOR 5-4 5.3.1 REACTOR CORE 5-4 5.3.2 REACTOR COOLANT SYSTEM 5-4 5.4 NEW AND SPENT FUEL STORAGE FACILITIES 5-6 5.4.1 NEW FUEL STORAGE 5-6 5.4.2 SPENT FUEL STORAGE 5-6 5.5 AIR INTAKE TUNNEL FIRE PROTECTION SYSTEMS 5-8 6 ADMINISTRATIVE CONTROLS 6-1 6.1 RESPONSI BILITY 6-1 6.2 ORGANIZATION 6-1 6.2.1 CORPORATE 6-1 6.2.2 UNIT STAFF 6-1 6.3 UNIT STAFF QUALIFICATIONS 6-3 6.4 TRAINING 6-3 6.5 DELETED 6-3 6.5.1 DELETED 6-4 6.5.2 DELETED 6-5 6.5.3 DELETED 6-7 6.5.4 DELETED 6-8 6.6 REPORTABLE EVENT ACTION 6-10 6.7 SAFETY LIMIT VIOLATION 6-10 6.8 PROCEDURES AND PROGRAMS 6-11 6.9 REPORTING REQUIREMENTS 6-12 6.9.1 ROUTINE REPORTS 6-12 6.9.2 DELETED 6-14 6.9.3 ANNUAL RADIOLOGICAL ENVIRONMENTAL OPERATING REPORT 6-17 6.9.4 ANNUAL RADIOACTIVE EFFLUENT RELEASE REPORT 6-18 6.9.5 CORE OPERATING LIMITS REPORT 6-19 6.9.6 STEAM GENERATOR TUBE INSPECTION REPORT 6-19 6.10 RECORD RETENTION 6-20 6.11 RADIATION PROTECTION PROGRAM 6-22 6.12 HIGH RADIATION AREA 6-22 6.13 PROCESS CONTROL PROGRAM 6-23 6.14 OFFSITE DOSE CALCULATION MANUAL (ODCM) 6-24 6.15 DELETED 6-24 6.16 DELETED 6-24 6.17 MAJOR CHANGES TO RADIOACTIVE WASTE TREATMENT SYSTEMS 6-25 6.18 TECHNICAL SPECIFICATION (TS) BASES CONTROL PROGRAM 6-25 6.19 STEAM GENERATOR (SG) PROGRAM 6-26 6-20 CONTROL ROOM ENVELOPE HABITABILITY PROGRAM 6-29

-v-Amendment No. 11, 47,72,77,129,160,173,212,262,263,266,261,264,269

LIST OF TABLES TABLE TITLE PAGE 1.2 Frequency Notation 1-8 2.3-1 Reactor Protection System Trip Setting Limits 2-10 3.1.6.1 Pressure Isolation Check Valves Between the 3-15a Primary Coolant System and LPIS 3.5-1 Instruments Operating Conditions 3-29 3.5-1A DELETED 3.5-2 Accident Monitoring Instruments 3-40c 3.5-3 Post Accident Monitoring Instrumentation 3-40d 3.5-4 Remote Shutdown System Instrumentation and Control 3-40i 3.21-1 DELETED 3.21-2 DELETED 3.23-1 DELETED 3.23-2 DELETED 4.1-1 Instrument Surveillance Requirements 4-3 4.1-2 Minimum Equipment Test Frequency 4-8 4.1-3 Minimum Sampling Frequency 4-9 4.1-4 Post Accident Monitoring Instrumentation 4-10a 4.19-1 DELETED 4.19-2 DELETED 4.21-1 DELETED 4.21-2 DELETED 4.22-1 DELETED 4.22-2 DELETED 4.23-1 DELETED vi Amendment No. .n 2 - 00, 6nn 137,142, 447, 473, 97-, 2!T-- 262

LIST OF FIGURES FIGURE TITLE PAGE 2.1-1 Core Protection Safety Limit TMI- 1 2-4a 2.1-2 DELETED 2.1-3 Core Protection Safety Bases TMI-1 2-4c 2.3-1 TMI- 1 Protection System Maximum Allowable Setpoints 2-11 2.3-2 DELETED 3.1-1 Reactor Coolant System Heatup/Cooldown Limitations 3-5a (Applicable thru 29 EFPY) I 3.1-2 Reactor Coolant Inservice Leak and Hydrostatic Test 3-5b (Applicable thru 29 EFPY) I 3.1-2a Dose equivalent 1-131 Primary Coolant Specific Actual 3-9b Limit vs. Percent of RATED THERMAL POWER 3.1-3 DELETED 3.3-1 Makeup Tank Pressure vs Level Limits 3-24a 31.5-2A DELETED thru 3 .5-2M 3.5-1 Incore Instrumentation Specification Axial Imbalance Indication 3-39a 3.5-2 Incore Instrumentation Specification Radial Flux Tilt Indication 3-39b 3.5-3 Incore Instrumentation Specification 3-39c 3.11-1 Transfer Path to and from Cask Loading Pit 3-56b 4.17-1 Snubber Functional Test - Sample Plan 2 4-67 5-1 Extended Plot Plan TM] N/A 5-2 Site Topography 5 Mile Radius N/A 5-3 Gaseous Effluent Release Points and Liquid Effluent Outfall Locations N/A 5 -4 Minimum Bumup Requirements for Fuel in Region II of the Pool A 5-7a Storage Racks 5 -5 Minimum Burnup Requirements for Fuel in the Pool "B" Storage Racks 5-7b Vii AmendmentNos. 11. 17. 29. 39. 45. 50. 59. 72 106. 109. 20 -26 131. 142 150. 161. 167.

168. 184 211 227, 234

L. DEFINITIONS The following terms are defined for uniform interpretation of these specifications.

1.1 RATED POWER Rated power is a steady state reactor core output of 2568 MWt.

1.2 REACTOR OPERATING CONDITIONS 1.2.1 COLD SHUTDOWN The reactor is in the cold shutdown condition when it is subcritical by at least one percent delta k/k and Tavg is no more than 2000F.

Pressure is defined by Specification 3.1.2.

1.2.2 HOT SHUTDOWN The reactor is in the hot shutdown condition when it is subcritical by at least one percent delta k/k and Tavg is at or greater than 5250 F.

1.2.3 REACTOR CRITICAL The reactor is critical when the neutron chain reaction is self-sustaining and Keff = 1.0.

1.2.4 HOT STANDBY The reactor is in the hot standby condition when all of the following conditions exist:

a. Tavg is greater than 5250 F

b. The reactor is critical

c. Indicated neutron power on the power range channels is less than two percent of rated power 1.2.5 POWER OPERATION The reactor is in a power operating condition when the indicated neutron power is above two percent of rated power as indicated on the power range channels.

1.2.6 REFUELING SHUTDOWN The reactor is in the refueling shutdown condition when, even with all rods removed, the reactor would be subcritical by at least one percent delta k/k and the coolant temperature at the decay heat removal pump suction is no more than 140 0F. Pressure is defined by Specification 3.1.2. A refueling shutdown refers to a shutdown to replace or rearrange all or a portion of the fuel assemblies and/or control rods.

Amendment No. 1/41, 157 SP2 5 VI!f

1.2.7 REFUELING OPERATION An operation involving a change in core geometry by manipulation of fuel or control rods when the reactor vessel head is removed.

1.2.8 REFUELING INTERVAL Time between normal refuelings of the reactor. This is defined as once per 24 months.

1.2.9 STARTUP The reactor shall be considered in the startup mode when the shutdown margin is reduced with the intent of going critical.

1.2.10 Tave Tave is defined as the arithmetic average of the coolant temperatures in the hot and cold legs of the loop with the greater number of reactor coolant pumps operating, if such a distinction of loops can be made.

1.2.11 HEATUP - COOLDOWN MODE The heatup-cooldown mode is the range of reactor coolant temperature greater than 2000F and less than 5250F.

1.2.12 STATION, UNIT, PLANT, AND FACILITY Station, unit, plant, and facility as used in these technical specifications all refer to TMI Unit 1.

1.3 OPERABLE A system, subsystem, train, component or device shall be OPERABLE or have OPERABILITY when it is capable of performing its specified function(s) and when all necessary attendant instrumentation, controls, electrical power, cooling or seal water, lubrication or other auxiliary equipment that are required for the system, subsystem, train, component, or device to perform its function(s) are also capable of performing their related support functions.

1.4 PROTECTION INSTRUMENTATION LOGIC 1.4.1 INSTRUMENT CHANNEL An instrument channel is the combination of sensor, wires, amplifiers, and output devices which are connected for the purpose of measuring the value of a process variable for the purpose of observation, control, and/or protection. An instrument channel may be either analog or digital.

1-2 Amendment No. by, A , 175

1.4.2 REACTOR PROTECTION SYSTEM The reactor protection system is described in Section 7.1 of the Updated FSAR. It is that combination of protection channels and associated circuitry which forms the automatic system that protects the reactor by control rod trip. It includes the four protection channels, their associated instrument channel inputs, manual trip switch, all rod drive control protection trip breakers, and activating relays or coils.

1.4.3 PROTECTION CHANNEL A PROTECTION CHANNEL as described in Section 7.1 of the updated FSAR (one of three or one of four independent channels, complete with sensors, sensor power supply units, amplifiers, and bistable modules provided for every reactor protection safety parameter) is a combination of instrument channels forming a single digital output to the protection system's coincidence logic. It includes a shutdown bypass circuit, a protection channel bypass circuit and a reactor trip module.

1.4.4 REACTOR PROTECTION SYSTEM LOGIC This system utilizes reactor trip module relays (coils and contacts) in all four of the protection channels as described in Section 7.1 of the updated FSAR, to provide reactor trip signals for de-energizing the six control rod drive trip breakers. The control rod drive trip breakers are arranged to provide a one-out-of-two-times-two logic. Each element of the one-out-of-two-times-two logic is controlled by a separate set of two-out-of-four logic contacts from the four reactor protection channels.

1.4.5 ENGINEERED SAFETY FEATURES SYSTEM This system utilizes relay contact output from individual channels arranged in three analog sub-systems and two two-out-of-three logic sub-systems as shown in Figure 7.1-4 of the updated FSAR. The logic sub-system is wired to provide appropriate signals for the actuation of redundant engineered safety features equipment on a two-of-three basis for any given parameter.

1.4.6 DEGREE OF REDUNDANCY The difference between the number of operable channels and the number of channels which, when tripped, will cause an automatic system trip.

1.5 INSTRUMENTATION SURVEILLANCE 1.5.1 TRIP TEST A TRIP TEST is a test of logic elements in a protection channel to verify their associated trip action.

1-3 Amendment No. 4I, 4457 225

1.5.2 CHANNEL TEST A CHANNEL TEST shall be the injection of a simulated signal into the channel as close to the sensor as practical to verify OPERABILITY, including alarm and/or trip functions.

1.5.3 CHANNEL CHECK A CHANNEL CHECK shall be the qualitative assessment of channel behavior during operation by observation. This determination shall include, where possible, comparison of the channel indication and/or status with other indications and/or status derived from independent instrumentation channels measuring the same parameter.

1.5.4 CHANNEL CALIBRATION An instrument CHANNEL CALIBRATION is a test, and adjustment (if necessary), to establish that the channel output responds with acceptable range and accuracy to known values of the parameter which the channel measures or an accurate simulation of these values. Calibration shall encompass the entire channel, including equipment actuation, alarm, or trip and shall be deemed to include the channel test.

1.5.5 HEAT BALANCE CHECK A HEAT BALANCE CHECK is a comparison of the indicated neutron power and core thermal power.

1.5.6 HEAT BALANCE CALIBRATION A HEAT BALANCE CALIBRATION is an adjustment of the power range channel amplifiers output based on the core thermal power determination.

1-4 Amendment No. Or, 157,166

';- i ,- i --

i_

g: T- :_

NOV 2 4 1992

1.6 POWER DISTRIBUTION 1.6.1 QUADRANT POWER TILT Quadrant power tilt is defined by the following equation and is expressed in percent.

100 L Power in Any Core Quadrant Average Power of All Quadrants

- I J

The quadrant tilt limits are stated in Specification 3.5.2.4.

1.6.2 AXIAL POWER IMBALANCE Axial power imbalance is the power in the top half of the core minus the power in the bottom half of the core expressed as a percentage of rated power. Imbalance is monitored continuously by the RPS using input from the power range channels. Imbalance limits are defined in Specification 2.1 and imbalance setpoints are defined in Specification 2.3.

1.7 CONTAINMENT INTEGRITY CONTAINMENT INTEGRITY exists when the following conditions are satisfied:

a. The equipment hatch is closed and sealed and both doors of the personnel and emergency air locks are closed and sealed.

b. All passive Containment Isolation Valves (CIVs) and isolation devices, including manual valves and blind flanges, are closed as required by the 'Containment Integrity Check List" attached to the operating procedure, "Containment Integrity and Access Limits." Normally closed passive CIVs may be unisolated intermittently under administrative control.

c. All active ClVs, including power-operated valves, check valves, and relief valves, are OPERABLE or locked closed. Normally closed active CIVs (other than the purge valves) may be unisolated intermittently or manual control of power-operated valves may be substituted for automatic control under administrative control.

d. The containment leakage determined at the last testing interval satisfies Specification 4.4.1.

1.8 FIRE SUPPRESSION WATER SYSTEM A FIRE SUPPRESSION WATER SYSTEM shall consist of: a water source, gravity tank or pump and distribution piping with associated sectionalizing control or isolation valves. Such valves include yard hydrant curb valves, and the first valve upstream of the water flow alarm device on each sprinkler, hose standpipe or spray system riser.

1-5 Amendment No. 36, 11 A,4 246

1.9 DELETED 1.10 DELETED 1.11 DELETED 1.12 DOSE EQUIVALENT 1-131 The DOSE EQUIVALENT 1-131 shall be that concentration of 1-131 (microcurie/gram) which alone would produce the same thyroid dose as the quantity and isotopic mixture of I-131, 1-132, 1-133, 1-134 and 1-135 actually present. The thyroid dose conversion factors used for this calculation shall be those listed in Table III of TID 14844, "Calculation of Distance Factors for Power and Test Reactor Sites". [Or in Table E-7 of NRC Regulatory Guide 1.109, Revision 1, October 1977.]

1.13 SOURCE CHECK A SOURCE CHECK shall be the qualitative assessment of channel response when the channel sensor is exposed to a radioactive source.

1.14 DELETED 1.15 OFFSITE DOSE CALCULATION MANUAL (ODCM)

The OFFSITE DOSE CALCULATION MANUAL (O0CM) shall contain the methodology and parameters used in the calculation of offsite doses resulting from radioactive gaseous and liquid effluent, in the calculation of gaseous and liquid effluent monitoring Alarm/Trip Setpoints, and in the conduct of the Radiological Environmental Monitoring Program. The ODCM shall also contain (1) the Radioactive Effluent Controls and Radiological Environmental l Monitoring Programs required by Section 6.8.4 and (2) descriptions of the information that should be included in the Annual Radiological Environmental Operating and Annual Radioactive Effluent Release Reports required by Specifications 6.9.3 and 6.9.4.

1.16 PROCESS CONTROL PROGRAM (PCP)

The PROCESS CONTROL PROGRAM (PCP) shall contain the current formulas, sampling, analyses, test, and determinations to be made to ensure that proq/ssing and packaging of solid radioactive wastes based on demonstrated processing of actual or simulated wet solid wastes will be accomplished in such a way as to assure compliance with 10 CFR Parts 20, 61, and 71, State regulations, burial ground requirements, and other requirements governing the disposal of solid radioactive waste.

1.17 GASEOUS RADWASTE TREATMENT The GASEOUS RADWASTE TREATMENT SYSTEM is the system designed and installed to reduce radioactive gaseous effluent by collecting primary coolant system off gases from the primary system and providing for delay or holdup for the purpose of reducing the total radioactivity prior to release to the environment.

1-6 Amendment No. 7Z, 1;7, 171, 197

1.18 VENTILATION EXHAUST TREATMENT SYSTEM A VENTILATION EXHAUST TREATMENT SYSTEM is any system designed and installed to reduce gaseous radioiodine or radioactive material in particulate form in effluent by passing ventilation or vent exhaust gases through charcoal absorbers and/or HEPA filters for the purpose of removing iodine or particulates from the gaseous exhaust system prior to the release to the environment. Engineered Safety Feature (ESF) atmospheric cleanup systems are not considered to be VENTILATION EXHAUST TREATMENT SYSTEMS.

1.19 PURGE - PURGING PURGE or PURGING is the controlled process of discharging air or gas from a confinement to maintain temperature, pressure, humidity, concentration or other operating conditions in such a manner that replacement air or gas is required to purify the confinement.

1.20 VENTING VENTING is the controlled process of discharging air as gas from a confinement to maintain temperature, pressure, humidity, concentration or other operating conditions in such a manner that replacement air or gas is not provided. Vent used in system name does not imply a VENTING process.

1.21 REPORTABLE EVENT A REPORTABLE EVENT shall be any of those conditions specified in 10 CFR 50.73.

1.22 MEMBER(S) OF THE PUBLIC MEMBER(S) OF THE PUBLIC shall include any individual except when that individual is receiving an occupational dose.

1.23 SUBSTANTIVE CHANGES SUBSTANTIVE CHANGES are those which affect the activities associated with a document or the document's meaning or intent. Examples of non-substantive changes are: (1) correcting spelling; (2) adding (but not deleting) sign-off spaces; (3) blocking in notes, cautions, etc.; (4) changes in corporate and personnel titles which do not reassign responsibilities and which are not referenced in the Appendix A Technical Specifications; and (5) chang:)s in nomenclature or editorial changes which clearly do not change function, meaning or intent.

1-7 Amendment No. 72, 137, 111, 150, 155, 1J-57T458, 173, 2 48, 251

1.24 CORE OPERATING LIMITS REPORT The CORE OPERATING LIMITS REPORT is a TMI-l specific document that provides core operating limits for the current operating reload cycle. These cycle-specific core operating limits shall be determined for each reload cycle in accordance with Specification 6.9.5. Plant operation within these operating limits is addressed in individual specifications.

1.25 FREQUENCY NOTATION The FREQUENCY NOTATION specified for the performance of Surveillance Requirements shall correspond to the intervals defined in Table 1.2. All Surveillance Requirements shall be performed within the specified time interval with a maximum allowable extension not to exceed 25 % of the surveillance interval. The 25 % extension applies to all frequency intervals with the exception of "F." No extension is allowed for intervals designated "F."

I TABLE 1.2 FREOUENCY NOTATION NOTATION FREQUENCY S Shiftly (once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months )

D Daily (once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months )

W Weekly (once per 7 days)

M Monthly (once per 31 days)

Q Quarterly (once per 92 days)

S/A Semi-Annually (once per 184 days)

R Refueling Interval (once per 24 months)

P S/U Prior to each reactor startup, if not done during the previous 7 days P S/A Within six (6) months prior to each reactor startup I P Completed prior to each release N/A (NA) Not applicable E Once per 18 months F Not to exceed 24 months 1-8 Amendment No. 72, 137, IS, 173, 15 ,199

2. SAFETY LIMITS AND LIMITING SAFETY SYSTEM SETTINGS 2.1 SAFETY LIMiTS, REACTOR CORE Applicability Applies to reactor thermal power, axial power imbalance, reactor coolant system pressure, coolant temperature, and coolant flow during power operation of the plant.

Obiective To maintain the integrity of the fuel cladding.

Specification 2.1.1 The combination of the reactor system pressure and coolant temperature shall not exceed the safety limit as defined by the locus of points established in Figure 2.1-1.

If the actual pressure/temperature point is below and to the right of the line, the safety limit is exceeded.

2.1.2 The combination of reactor thermal power and axial power imbalance (power in the top half of core minus the power in the bottom half of the core expressed as a percentage of the rated power) shall not exceed the protective limit as defined by the locus of points (solid line) for the specified flow set forth in the Axial Power Imbalance Protective Limits given in the Core Operating Limits Report (COLR). If the actual-reactor- thermal-power/axial-power-imbalance point is above the line for the specified flow, the protective limit is exceeded.

Bases To maintain the integrity of the fuel cladding and to prevent fission product release, it is necessary to prevent overheating of the cladding under normal operating conditions. This is accomplished by operating within the nucleate boiling regime of heat transfer, wherein the heat transfer coefficient is large enough so that the clad surface temperature is only slightly greater than the coolant temperature. The upper boundary of the nucleate boiling regime is termed, departure from nucleate boiling (DNB). At this point there is a sharp reduction of the heat transfer coefficient, which could result in excessive cladding temperature and the possibility of cladding failure. Although DNB is not an observable parameter during reactor operation, the observable parameters of neutron power, reactor coolant flow, temperature, and pressure can be related to DNB through the use of a critical heat flux (CHF) correlation.

The BAW-2 (Reference 1) and BWC (Reference 2) correlations have been developed to predict DNB and the location of DNB for axially uniform and non-uniform heat flux distributions. The BAW-2 correlation applies to Mark-B fuel with inconel intermediate spacer grids and the BWC correlation applies to Mark-B fuel with zircaloy or M5 intermediate spacer grids (non-mixing vane). The local DNB ratio (DNBR), defined as the ratio of the heat flux that would cause DNB at a particular core location to the actual heat flux, is indicative of the margin to DNB. The minimum value of the DNBR, accounting only for DNBR correlation uncertainty, during steady-state operation, normal 2-1 Amendment No. 17, 14 2,157, 184, 233, 247

2.2 SAFETY LIMITS - REACTOR SYSTEM PRESSURE Applicability Applies to the limit on reactor coolant system pressure Objective To maintain the integrity of the reactor coolant system and to prevent the release of significant amounts of fission product activity.

Specification 2.2.1 The reactor coolant system pressure shall not exceed 2750 psig when there are fuel assemblies in the reactor vessel.

Bases The reactor coolant system (Reference 1) serves as a barrier to prevent radionuclides in the reactor coolant from reaching the atmosphere. In the event of a fuel cladding failure, the reactor coolant system is a barrier against the release of fission products.

Establishing a system pressure limit helps to assure the integrity of the reactor coolant system. The maximum transient pressure allowable in the reactor coolant system pressure vessel under the ASME Code,Section III, is 110% of design pressure (Reference 2). The maximum transient pressure allowable in the reactor coolant system piping, valves, and fittings under ANSI Section B31.7 is 110% of design pressure. Thus, the safety limit of 2750 psig (110% of the 2500 psig design pressure) has been established (Reference 2). The maximum settings for the reactor high pressure trip (2355 psig) and the pressurizer code safety valves (2500 psig) have been established in accordance with ASME Boiler and Pressure Vessel Code,Section III, Article 9, Winter, 1968 to assure that the reactor coolant system pressure safety limit is not exceeded. The initial hydrostatic test was conducted at 3125 psig (125% of design pressure) to verify the integrity of the reactor coolant system. Additional assurance that the reactor coolant system pressure does not exceed the safety limit is provided by the presence of a pressurizer electromatic relief valve (Reference 3).

References (1) UFSAR, Section 4.0 - "Reactor Coolant System" (2) UFSAR, Section 4.3.10 - "Safety Limits and Conditions" (3) UFSAR, Table 4.2 "Reactor Coolant System Pressure Settings" 2-4 Amendment No. YZ, 29, S9, 46, It, M35, 157 P 5i990

-hP-

2500 23004 -

& 2100 - - -- - - - - - - - - - - - - - - - -

UNCCPTBL OPRAIO

- - - I--

6 U,

. 1900 I --------

1700 +--- - - - - - - - - - - - - -

7 - - - - - - - - - - -

1500 590 600 610 620 630 640 650 Reactor Outlet Temperature ( 0F)

CORE PROTECTION SAFETY LIMIT TMI-1 FIGURE 2.1-1 2-4a Amendment No. 50, 142, 167; 211, 238, 2-7, 262

T~err-a' %Ower Leve',.

120

(-43.8,112) I (37.8,112)

(-58.5,30.4) 80

(-58.5,37.8) (53.0,57.3)

(-58s.30n.4) (53.0.30.4) 20 4j0

-80 -70 50 -40 -30 -20 -10 0 10 20 30 40 50 6C 70 80 Axial Power Imbalance. :

Curve Reactor Coolant Flow (lb/hr) 1 139.8 x 106 2 104.5 x 1o6 3 68.8 x 106 CORE PROTECTION SAFETY LIMITS TMI-1 Figure 2.1-2 2-4b Amendment No. 17, 7, 79, 0P, Pp, f0, Eg0, yM, y07, 184,

2.3 LIMITING SAFETY SYSTEM SETTINGS, PROTECTION INSTRUMENTATION Applicability Applies to instruments monitoring reactor power, axial power imbalance, reactor coolant system pressure, reactor coolant outlet temperature, flow, number of pumps in operation, and high reactor building pressure.

Objective To provide automatic protection action to prevent any combination of process variables from exceeding a safety limit.

Specification 2.3.1 The reactor protection system trip setting limits and the permissible bypasses for the instrument channels shall be as stated in Table 2.3-1 and the Protection System Maximum Allowable Setpoints for Axial Power Imbalance as given in the COLR.

Bases The reactor protection system consists of four instrument channels to monitor each of several selected plant conditions which will cause a reactor trip if any one of these conditions deviates from a pre-selected operating range to the degree that a safety limit may be reached.

The trip setting limits for protection system instrumentation are listed in Table 2.3-1. These trip setpoints are setting limits on the setpoint side of the protection system bistable comparators. The safety analysis has been based upon these protection system instrumentation trip set points plus calibration and instrumentation errors.

Nuclear Overpower A reactor trip at high power level (neutron flux) is provided to prevent damage to the fuel cladding from reactivity excursions too rapid to be detected by pressure and temperature measurements.

During normal plant operations with all reactor coolant pumps operating, reactor trip is initiated when the reactor power level reaches 105.1% of rated power.

Adding to this the possible variation in trip set points due to calibration and instrument errors, the maximum actual power at which a trip would be actuated could be 112%, which is the value used in the safety analysis (Reference 1).

2-5 Amendment No. 17, f7, 7$, Jg0, 1J7, 57, 184,

TABLE 2.3-1 REACTOR PROTECTION SYSTEM TRIP SETTING LIMITS (5)

Four Reactor Coolant Three Reactor Coolant One Reactor Coolant Pumps Operating Pumps Operating Pump Operating in (Nominal Operating) (Nominal Operating) Each Loop (Nominal Shutdown Power - 100% Power - 75% OperatinQ Power - 49%) Bypass

1. Nuclear power, max. % 105.1 105.1 105.1 5.0(2) of rated power

2. Nuclear power based on Power/Flow Setpoint in Power/Flow Setpoint in Power/Flow Setpoint in Bypassed flow (1) and imbalance COLR times flow minus COLR times flow minus COLR times flow minus max. of rated power reduction due to reduction due to reduction due to imbalance imbalance imbalance

3. Nuclear power based (4) NA NA 55% Bypassed on pump monitors max.

% of rated power

4. High reactor coolant 2355 2355 2355 1720(3) system pressure, psig max.

5. Low reactor coolant 1900 1900 1900 Bypassed system pressure, psig min.

6. Reactor coolant temp. F., 618.8 618.8 618.8 618.8 max.

7. High Reactor Building 4 4 4 4 pressure, psig max.

8. Variable low reactor (16.21 Tout - 7973)(6) (16.21 Tout - 7973)(6) (16.21 To t- 7973)(6) Bypassed coolant system pressure, psig min.

(1) Reactor coolant system flow, %

(2) Administratively controlled reduction set during reactor shutdown.

(3) Automatically set when other segments of the RPS (as specified) are bypassed.

(4) The pump monitors also produce a trip on: (a) loss of two reactor coolant pumps in one reactor coolant loop, and (b) loss of one or two reactor coolant pumps during two-pump operation.

(5) Trip settings limits are limits on the setpoint side of the protection system bistable connectors.

(6) Tout is in degrees Fahrenheit (F).

2-10 Amendment No. 45, 78, 90, 126, 135, 112, 184, 247, 262

2500 2300 ....... .. ... _ _

I T=618.8 OF SACCEPTABLE

1 (OPERATION

'U I I 0.- I _ _

I-2100

a. up I

LP=2Tw - 7973 psig IIL 0

U P 1900psig o 1900 p a, 0

E1l

UNACCEPTABLE OPERATION 1700 I 1500 540 1

560 580 1

B00 620 640 Reactor Outlet Temperature, OF PROTECTION SYSTEM MAXIMUM ALLOWABLE SETPOINTS TMI-1 FIGURE 2.3-1 2-11 Amendment No 13.7. 2, 31.1 ,v7-1 78, 4 26,365142, 1 2 17,217, 262

-hevnal ;ower Levels, 120

(-50.0,70.0)

(-50.0,42.6 ) /l P & - 4a \ (45.0,42.6 )

I OPERATION

(-50.0,15.1 ) ° . - 245.0.15.1 (

_-Z I ZeI:

I I e I I I I s I I I S I I 70 -60 40 -30 10 0 10 20 30 40 50 60 70 80 Axial Powtr Ibaslance, %

PROTECTION SYSTEM MAXIMUM ALLOWABLE SETPOINTS FOR AXIAL POWER IMBALANCE TMI-1 Figure 2.3-2 2-12 Amendment No. 7, Z9, 19, f, fg, ff, fl9, 1Z. I[f, 107, 184,

3. LIMITING CONITIONS FR OPERATION 3.0 GENERAL ACTION REQUIRENMENTS 3.0.1 When a Limiting Condition for Operation is not met, except as provided in action called for in the specification, within one hour action shall oe initiated to place the unit in a condition in wnich tne specification does not apply by placing it, as applicable, in 1.. At least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

2. At least HOT SHUTDOWN within tne following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and

3. At least.COLD SHUTDOWN within the subsequent 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

Where corrective measures are completed that permit operation under tne action requirements, the action may be taken in accordance with the time limits of the specification as measured from the time of failure to meet the Limiting Condition for Operation. Applicaoility of these requirements is stated in the individual specifications.

Specification 3.0.1 is not applicaole in COLD SHUTDOWN OR REFUELING SHUTDOWN.

BASES This specification delineates tne action to be taken for circumstances not directly Provioed for in the action requirements of individual specifications and wnose occurrence would violate the intent of the specification.

3-1 Amendment No. 98

3.1 REACTOR COOLANT SYSTEM 3.1.1 OPERATIONAL COMPONENTS Applicability Applies to the operating status of reactor coolant system components.

Obiective To specify those limiting conditions for operation of reactor coolant system components which must be met to ensure safe reactor operations.

Specification 3.1.1.1 Reactor Coolant Pumps

a. Pump combinations permissible for given power levels shall be as shown in Specification Table 2.3.1.

b. Power operation with one idle reactor coolant pump in each loop shall be restricted to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . If the reactor is not returned to an acceptable RC pump operating combination at the end of the 24-hour period, the reactor shall be in a hot shutdown condition within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

c. The boron concentration in the reactor coolant system shall not be reduced unless at least one reactor coolant pump or one decay heat removal pump is circulating reactor coolant.

3.1.1.2 Steam Generator (SG) Tube Integrity

a. Whenever the reactor coolant average temperature is above 2000F, the following conditions are required:

(1.) SG tube integrity shall be maintained.

AND (2.) All SG tubes satisfying the tube repair criteria shall be plugged in accordance with the Steam Generator Program. (The Steam Generator Program is described in Section 6.19.)

ACTIONS:

NOTE --------------------------------------------------

Entry into Sections 3.1.1.2.a.(3.) and (4.), below, is allowed for each SG tube.

(3.) If the requirements of Section 3.1.1.2.a.(2.) are not met for one or more tubes then perform the following:

3-1 a Amendment No. 12, 17, 2,, 47, 98, 261

With one or more SG tubes satisfying the tube repair criteria and not plugged in accordance with the Steam Generator Program:

a. Verify within 7 days that tube integrity of the affected tube(s) is maintained until the next refueling outage or SG tube inspection, AND

b. Plug the affected tube(s) in accordance with the Steam Generator Program prior to exceeding a reactor coolant average temperature of 200°F following the next refueling outage or SG tube inspection.

(4.) If Action 3., above, is not completed within the specified completion times, or SG tube integrity is not maintained, be in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be in COLD SHUTDOWN within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .

3.1.1.3 Pressurizer Safety Valves

a. The reactor shall not remain critical unless both pressurizer code safety valves are operable with a lift setting of 2500 psig +/- 1%.

b. When the reactor is subcritical, at least one pressurizer code safety valve shall be operable if all reactor coolant system openings are closed, except for hydrostatic tests in accordance with ASME Boiler and Pressure Vessel Code,Section III.

3-1b Amendment No. 261

3.1.2 PRESSURIZATION HEATUP AND COOLDOWN LIMITATIONS Applicability Applies to pressurization. heatup and cooldown of the reactor coolant system.

Objectives To assure that temperature and pressure changes in the reactor coolant system do not cause cyclic loads in excess of design for reactor coolant system components.

To assure that reactor vessel integrity by maintaining the stress intensity as a result of operational plant heatup and cooldown conditions and inservice leak and hydro test conditions below values which may result in non-ductile failure.

Specification 3.1.2.1 For operations until 29 effective full power years, the reactor coolant pressure and the system heatup and cooldown rates (with the exception of the pressurizer) shall be limited in accordance with Figure 3.1-1 and Figure 3.1-2 and are as follows:

Heatup/Cooldown Allowable combinations of pressure and temperature shall be to the right of and below the limit line in Figure 3.1-1. Heatup and cooldown rates shall not exceed those shown on Figure 3.1-1.

Inservice Leak and Hydrostatic Testing Allowable combinations of pressure and temperature shall be to the right of and below the limit line in Figure 3.1-2. Heatup and cooldown rates shall not exceed those shown on Figure 3.1-2.

3.1.2.2 The secondary side of the steam generator shall not be pressurized above 200 psig if the temperature of the steam generator shell is below 1000 F.

3.1.2.3 The pressurizer heatup and cooldown rates shall not exceed 100l F in any one hour.

The spray shall not be used if the temperature difference between the pressurizer and the spray fluid is greater than 430'F.

3.1. .4 Prior to exceeding 29 effective full power years of operation. Figures 3.1-1 and 3. 1-2 shall be updated for the next service period in accordance with 10 CFR 50, Appendix G. The highest predicted adjusted reference temperature of all the beltline materials shall be used to determine the adjusted reference temperature at the end of the service period. The basis for this prediction shall be submitted for NRC staff review in accordance with Specification 3.1.2.5.

3.. 2.5 The updated proposed technical specifications referred to in 3.1.2.4 shall be submitted for NRC review at least 90 datys prior to the end of the service period Appropriate additional NRC review time shall be allowed for proposed technical specification submitted in accordance with 10 CFR 50. Appendix G.

Amendment No. 29. 1I I .176. 20S,234

( (C Figure 3.1-1 Reactor Coolant System Heatup/Cooldown Limitations 3000 [Applicable through 29 EFPY1 2972 rI I 2800 CbrrtrndHU

&CD Urrits Adjusted Reference Termperature (F)

I TerpPress 60 444 Beltline 1/4T 251

0) CO

}_ 2600

, 2400 -

122 444 142 467 172 520 192 520 192.1 582 Beltlne 3/4T Closure Head Nozzles 192 60 60

= 2416~

2356 122 2 J

2 1- Ternperatures:

81 Cr O Q. 212 656 All Tenperatures are the indicated values in the N_2200- I 227 717 -+ t t operating RC purnp(s) Cold Leg.

w 3 N 2000 -

252 717 252.1 869 272 1057 302 1523

/ Except:

When the DHRS Is operating w ithout any RC Purnps t1886 operating, then the Indicated DHP6 return tenperature tM 1800 - 317 1886 I I f Ito the Reactor Vessel shall be used.

332 2356

'Mc 1600 - 337 2416 352 2425 412 2481 I 2- Heatup:

50F/fH or 151F/1 8 Mn. Steps 3 - Cooldown:

512 2703 582 2972 I I I / 1 T> 255F lOOF/Ir or 15F/9 Mn. Steps 0 1200

-J I I I, ,

/ - -

T < 255F 3OFf/H or 15F1/30 Mn. Steps 4 - RC Purnp Corninations for Heatuns:

I - - ._

TS 100 No RC Punps Operating I100<TS 212 Any I or 2 Pmrnp Contination(1/0, 0/1,2/0,0/2, 1/1) m 1000- 212 < T 329 Any Punnp Conbinatbon except 2/2 0 T>329 Any Punp Corrbination 0 800 I _ II I 8 1 5- RC Purno Conbinations for Cooldow ns:

6i6 T5120 No AC Purrps Operating 582P Tt~ 717 600 --- I 120 < Tg212F Any 1 or 2 RPrrp Cornbination(1/0, 0/1, 2/0, 0/2, 1/1) 1444 1 44,4 ,0 212 <TS V329 Any Runp Conmbination except 2/2 G ~52 0 52 0 [T>329 Any RjPrp Corrbinatbon 400 AA_.7G 50 100 150 200 250 300 350 400 450 500 550 600 Indicated Reactor Coolant Inlet Temperature (F)

I/

( I (

Figure 3.1-2 Reactor Coolant Inservice Leak Hydrostatic Test 4000 -I. .

l

[Applicable through 29 EFPY] _^ _

I I I I 3800 P-T Points 11Pr. I I I I I A F psig 36 Adjusted Reference

,L 3600- 60 547 -t I + I Temperature (F) 3372 1 *&3400 - 162 547 Beitline 1/4T 3372 251 U) E.3200 162.1 705 Beltline 3/4T 192 I I

- l]

I 3271

-f 187 791 Closure Head 60 1 - Temperatures:

o 03000 227 997 Nozzles All Terrperatures are the indicated values inthe 60 96#

252 997 operating RC purrp(s) Cold Leg.

L.-2800-Except:

252.1 1200

.N 2600 When the DHRS is operating w ithout any RO Purnps 277 1531 operating, then the indicated D 6RS return tenperature w/ ar2400 - 312 2376 QV# to the Reactor Vessel shall be used.

327 2962 2- Heatup:

0. a.2200 -

342 3271 50F/Hr or 115F/18 Mn. Steps 1° 2000- 377 3305 3 - Cooldow n:

CCaz1800 - 422 3372 472 3495 2[ I~iZZI__ /

T>255F 10OF/Hr or 15F/9 Mn. Steps Th255F 30F/Hr or 15F/30 Mn. Steps 31600- I I LI 0.1<- 11 4- RC Prnp Conibnations f Heatus: :or 512 3641 p 1OOF No RC purrps im

,L..

0o

-11400-1200 01000 552 3845 582 3992 I _ _

hnn

~

I t-t4---~

1 I

__ _ _ _ I 0<TS 212 Any 1 or 2 Pup Conrbination (1/0,0/1,2/0,0/2, 1/1) l2122< T S 329 329 Any Rirnp Corrbination except 2/2 Any Punp Cornbination

.IVI iC Np ornbinations for Cooldow ns:

791 V - 997 800 t

- 547 I _ _S o-_ _

ITS 120F 12( ) <T*212F Any ND RC punps 1 or 2 Purrp Conbination(1/0, 0/1, 2/0, 0/2, 1/1) 600 -l -- 1 Tt A' I l l 12112c T < 329 Any PUrnp Corrbination except 2/2 M n-i. -

IT> 329 Any Pdrrp Conbination 400 - rT- 1 i .h I 50 100 150 200 250 300 350 400 450 500 550 600 Indicated Reactor Coolant Inlet Temperature (F)

3.1.3 MINIMUM CONDITIONS FOR CRITICALITY Applicability Applies to reactor coolant system conditions required prior to criticality.

Objective

a. To limit the magnitude of any power excursions resulting from reactivity insertion due to moderator pressure and moderator temperature coefficients.

b. To assure that the reactor coolant system will not go solid in the event of a rod withdrawal or startup accident.

c. To assure sufficient pressurizer heater capacity to maintain natural circulation conditions during a loss of offsite power.

Specification 3.1.3.1 The reactor coolant temperature shall be above 5250 F except for portions of low power physics testing when the requirements of Specification 3.1.9 shall apply.

I 3.1.3.2 Reactor coolant temperature shall be above DTT +100F.

3.1.3.3 When the reactor coolant temperature is below the minimum temperature specified in 3.1.3.1 above, except for portions of low power physics testing when the requirements of Specification 3.1.9 shall apply, the reactor shall be subcritical by an amount equal to or greater than the calculated reactivity insertion due to depressurization.

3.1.3.4 Pressurizer 3.1.3.4.1 The reactor shall be maintained subcritical by at least one percent delta k/k until a steam bubble is formed and an indicated water level between 80 and 385 inches is established in the pressurizer.

(a) With the pressurizer level outside the required band, be in at least HOT SHUTDOWN with the reactor trip breakers open within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be in COLD SHUTDOWN within an additional 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

3.1.3.4.2 A minimum of 107 kw of pressurizer heaters, from each of two pressurizer heater groups shall be OPERABLE. Each OPERABLE 107 kw of pressurizer heaters shall be capable of receiving power from a 480 volt ES bus via the established manual transfer scheme.

3-6 I Amendment No. 7f, 157 SEP 2 5 1990

(a) With the pressurizer inoperaole due to one (1) inoperable emergency power supply to the pressurizer heaters either restore the inoperable emergency power supply within 7 days or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in HOT SHUTDOWN within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

(b) With the pressurizer inoperable due to two (2) inoperable emergency power supplies to the pressurizer heaters either restore the inoperable emergency power supplies within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or De in at least HOT SAiNDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in HOT SHUTDOWN within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

3.1.3.5 Safety rod groups shall be fully witndrawn prior to any other reduction in shutdown margin by deboration or regulating rod withdrawal during the approach to criticality with the follow-in. exceptions:

a. Inoperable rod per 3.5.2.2.

b. Physics resting per 3.1.9.

c. Shutdown margin may not be reduced below lZA k/k per 3.5.2.1.

d. Exercising rods per 4.1.2.

Following safety rod withdrawal, the regulating rods shall be positioned within their position limits as defined by Specifi-cation 3.5.2.5 prior to deboration.

Amendment Jo. 78

3.1.4 REACTOR COOLANT SYSTEM ACTIVITY 3.1.4.1 LIMITING CONDITION FOR OPERATION The specific activity of the primary coolant shall be limited to:

a. Less than or equal to 0.35 microcurie/gram DOSE EQUIVALENT -131, and

b. Less than or equal to 100/E microcuries/gram*

3.1.4.2 APPLICABILITY: at all times except refueling 3.1.4.3 ACTION:

MODES: Power Operation, Start-Up, Hot Standby

a. With the specific activity of the primary coolant greater than 0.35 microcurie/gram DOSE EQUIVALENT 1-131 for more than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months " during one continuous time interval or exceeding the limit line shown on Figure 3.1-2a, be in at least HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . Power operation may continue when DOSE EQUIVALENT 1-13 1 is below 0.35 microcurie/gram.

b. With the specific activity of the primary coolant greater than I00/E microcuries/gram be in at least HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . Power operation may continue when primary coolant activity is less than 100IE microcuries/gram.

MODES: At all times except refueling.

c. With the specific activity of the primarycoolant greater than 0.35 microcurie/gram DOSE EQUIVALENT 1-13 1 or greater than IO/9 microcuries/gram perform the sampling and analysis requirements of Table 4.1-3 until the specific activity of the primary coolant is restored to within its limits.

Bases The limitations on the specific activity of the primary coolant ensure that the resulting 2 hour2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months doses at the site boundary will be well within the Part 100 limit following a steam generator tube rupture accident or steam line break accident with postulated accident induced steam generator tube leakage in conjunction with an assumed steady state primary-to-secondary steam generator leakage rate of 1.0 GPM. The values for the limits on specific activity represent limits based on a parametric evaluation by the NRC of typical site locations. These values are conservative, in that the specific site parameters of TMI- I, such as site boundary, location and meteorological conditions, were not considered in this evaluation.

E shall be the average (weighted in proportion to the concentration of each radionuclide in the reactor coolant at the time of sampling) of the sum of the average beta and gamma energies per disintegration (in MeV) for isotopes, other than iodines, with half lives greater than 15 minutes, making up at least 95% of the total non-iodine activity in the coolant.

The time period begins from the time the sample is taken.

3-8 Amendment No. I, U-7, 204 0 T 2 1997

i\.

'\

1\

250 i\.

E '\

~

o 2 I\.

I

E

i

> I\. UNACCEPTABLE I- 200 s '\ OPERATION

~c:e o

u::

oW -,

D.

til

!Z

5 150

\

o o

o II:

\

~

ii: -,

D.

C') \

100

!Zw -,

-I c:e ACCEPTABLE \

5 aw OPERATION 1'\

w til

\

s 50 o

20 30 40 50 60 70 80 90 100 PERCENT OF RATED THERMAL POWER L __

Figure 3.1-2a Dose equivalent 1-131 Primary Coolant Specific Activity Limit Versus Percent of RATED THERMAL POWER (with the Primary Coolant Specific Activity >0.35 IJCi/gram Dose Equivalent 1-131).

3-9b Amendment No. 108, 167, 204, 269

3.1.5 CHEMISTRY Applicability Applies to acceptable concentrations of impurities for continuous operation of the reactor.

Objective To protect the reactor coolant system from the effects of impurities.

Specification 3.1.5.1 If the concentration of oxygen in the primary coolant exceeds 0.1 ppm during power operation, corrective action shall be initiated within eight hours to return oxygen levels to < 0.1 ppm.

3.1.5.2 If the concentration of chloride in the primary coolant exceeds 0.15 ppm during power operation, corrective action shall be initiated within eight hours to return chloride levels to < 0.15 ppm.

3.1.5.3 If the concentration of fluorides in the primary coolant exceeds 0.10 ppm following modifications or repair to the primary system involving welding, corrective action shall be initiated within eight hours to return fluoride levels to < 0.10 ppm.

3.1.5.4 If the concentration limits for oxygen, chloride or fluoride given in 3.1.5.1, 3.1.5.2, and 3.1.5.3 above are not restored within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of detection, the reactor shall be placed in a hot shutdown condition within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter. If the normal operational limits are not restored within an additional 24-hour period, the reactor shall be placed in a cold shutdown condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months thereafter.

3.1.5.5 If the oxygen, chloride, or fluoride concentration of the primary coolant system exceeds 1.0 ppm the reactor shall be brought to the hot shutdown condition using normal shutdown procedure and action is to be taken to return the system to within normal operation specifications. If normal operating specifications have not been reached in 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , the reactor will then be brought to a cold shutdown condition.

Bases By maintaining the chloride, fluoride, and oxygen concentration in the reactor coolant within the specifications, the integrity of the reactor coolant system is protected against potential stress corrosion attack (References 1 and 2).

3-10 Amendment No. 157 SEP 2 5 1990

3.1.6 LEAKAGE Awplicability Applies to reactor coolant leakage from the reactor coolant system and the makeup and purification system.

Obiective To assure that any reactor coolant leakage does not compromise the safe operation of the facility.

Specification 3.1.6.1 If the total reactor coolant leakage rate exceeds 10 gpm, the reactor shall be placed in hot shutdown within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of detection.

3.1.6.2 If unidentified reactor coolant leakage (excluding normal evaporative losses) exceeds one gpm or if any reactor coolant leakage is evaluated as unsafe, the reactor shall be placed in hot shutdown within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of detection.

3.1.6.3 If the sum of the primary-to-secondary leakage from both steam generators exceeds 0.1 gpm (144 GPD), the reactor shall be placed in hot shutdown within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and in cold shutdown within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .

3.1.6.4 If any reactor coolant leakage exists through a nonisolable fault in an RCS strength boundary (such as the reactor vessel, piping, valve body, etc., except the steam generator tubes), the reactor shall be shutdown, and a cooldown to the cold shutdown condition shall be initiated within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of detection.

3.1.6.5 If reactor shutdown is required by Specification 3.1.6.1, 31.6.2, 3.1.6.3, or 3.1.6.4, the rate of shutdown and the conditions of shutdown shall be determined by the safety evaluation for each case.

3.1.6.6 Action to evaluate the safety implication of reactor coolant leakage shall be initiated within four hours of detection. The nature, as well as the magnitude, of the leak shall be considered in this evaluation. The safety evaluation shall assure that the exposure of offsite personnel to radiation is within the dose rate limits of the ODCM.

3.1.6.7 If reactor shutdown is required per Specification 3.1.6.1, 3.1.6.2, 3.1.6.3 or 3.1.6.4, the reactor shall not be restarted until the leak is repaired or until the problem is otherwise corrected.

3.1.6.8 When the reactor is critical and above 2 percent power, two reactor coolant leak detection systems of different operating principles shall be in operation for the Reactor Building with one of the two systems sensitive to radioactivity. The systems sensitive to radioactivity may be out-of-service for no more than 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months provided a sample is taken of the Reactor Building atmosphere every eight hours and analyzed for radioactivity and two other means are available to detect leakage.

3-12 Amendment No. 47, --29,0, -,, 2 46 , 261 (12-22-78)

3.1.6.9 Loss of reactor coolant through reactor coolant pump seals and system valves to Connecting systems which vent to the gas vent header and from which coolant can be returned to the reactor coolant system shall not be considered as reactor coolant leakage and shall not be subject to the consideration of Specifications 3.1.6.1, 3.1.6.2, 3.1.6.3, 3.1.6.4, 3.1..5 3.1.6.6 or 3.1.6.7, except that such losses when added to leakage shall not exceed 30 gpm. If leakage plus losses exceeds 30 gpm, the reactor shall be placed in HOT SHUTDOWN within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of detection.

3.1.6.10 Operating conditions of POWER OPERATION, STARTUP and HOT SHUTDOWN apply to the operational status of the high pressure isolation valves between the primary coolant system and the low pressure injection system.

a. During all operating conditions in this specification, all pressure Isolation valves listed in Table 3.1.6.1 that are located between the primary coolant system and the LPIS shall function as pressure isolation devices except as specified in 3.1.6.1O.b. Yalve leakage shall not exceed the amount indicated in Table 3.1.6.l.(a)

b. in the event that Integrity of any high pressure Isolation check valves specified inTable 3.1.6.1 cannot be demonstrated, reactor operation msy continue provided that at least two valves in each high pressure line having a non-functional valve are in and remin In,the mode corresponding to the isolated condition. (b)

c. If Specification 3.1.6.10.a or 3.1.6.10.b cannot be set, an orderly shutdown shall be accomplished by achieving HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within an additional 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

Bases Any leak of radioactive fluid, whether from the reactor coolant system primary boundary or not, can be a serious problem with respect to in-plant radioactive contamination and required cleanup or, in the case of reactor coolant, it could develop into a still more serious problem and, therefore, the first indications of such leakage will be followed up as soon as practical. The unit's makeup system has the capability to mkeup considerably more than 30 gpm of reactor coolant leakage plus losses. l Water inventory balances, monitoring equipment, radioactive tracing, boric acid crystalline deposits, and physical inspections can disclose reactor coolant leaks.

(a) For the purpose of this specification, integrity is considered to have been demonstrated by meting Specification 4.2.7.

(b) Motor operated valves shall be placed in the closed position and power supplies deenergized.

Amendment No. X. JZ1, 141 3-13 JUN 3 1988 I

TABLE 3.1.6.1 PRESSURE ISOLATION CHECK VALVES BETWEEN THE PRIMARY COOLANT SYSTEM & LPIS Maximum(a)

System Valve No. Allowable Leakage Low Pressure Injection ( <5.0 GPM for all valves)

Train A CF-V5A ( <5.0 GPM for all valves)

DH-V22A Train B CF-V5B ( <5.0 GPM for all valves)

DH-V22B Footnote:

(a)

1. Leakage rates less than or equal to 1.0 gpm are considered acceptable.

2. Leakage rates greater than 1.0 gpm but less than or equal to 5.0 gpm are considered acceptable if the latest measured rate has not exceeded the rate determined by the previous test by an amount that reduces the margin between measured leakage rate and the maximum permissible rate of 5.0 gpm by 50D or greater.

3. Leakage rates greater than 1.0 gpm but less than or equal to 5.0 gpm are considered unacceptable if the latest measured rate exceeded the rate determined by the previous test by an amount that reduces the margin between measured leakage rate and the maximum permissible rate of 5.0 gpm by 50% or greater.

4. Leakage rates greater than 5.0 gpm are considered unacceptable.

Order Dated 4/,201'8 3-15b Amendment No. 141 JUN 3 1988

3.1.7 MODERATOR TEMPERATURE COEFFICIENT OF REACTIVITY Applicability Applies to maximum positive moderator temperature coefficient of reactivity at full power conditions.

Objective To assure that the moderator temperature coefficient stays within the limits calculated for safe operation of the reactor.

Specification 3.1.7.1 The moderator temperature coefficient shall not be positive at power levels above 95% of rated power.

3.1.7.2 The moderator temperature coefficient shall be < +

O.9x10-' delta k/k/F at power levels < 95% of rated power.

Bases A non-positive moderator coefficient (Reference 1) at power levels above 95% of rated power is specified such that the maximum clad temperatures will not exceed the Final Acceptance Criteria based on LOCA analyses. Below 95% of rated power the Final Acceptance Criteria will not be exceeded with a positive moderator temperature coefficient of +0.9 x 10-4 delta k/k/F. All other accident analyses as reported in the UFSAR have been performed for a range of moderator temperature coefficients including +0.9 x 10-' delta k/k/F.

A non-positive moderator coefficient at power levels above 95% of rated power is also required to prevent overpressurizatlon of the reactor coolant system in the event of a feedwater line break (see Specification 2.3.1, Basis C, Reactor Coolant System Pressure).

The Final Acceptance Criteria states that post-LOCA clad temperature will not exceed 22000 F (Reference 2.)

REFERENCES (1) UFSAR, Section 3.2.2.1.5.4 - "Moderator Temperature Coefficient" (2) UFSAR, Section 14 - Tables 14.2-1, 14.2-13, 14.2-14 3-16 Amendment No.,45 YVZ, 157 SEP 2 5 1990 FEB I, 1990

3.1.8 Single Loop Restrictions Applicability Applies to single loop operation of the reactor coolant system Specification I 3.1.8.1 Single loop operation while the reactor is critical is prohibited. I Bases I

The restriction prohibiting single loop operation with TMI-1 may be lifted, provided that: (1) analyses of TMI-1 support single loop operation, (2) testing on TMI-1 supports the analysis of single loop operation, and (3) any additional equipment necessary for single loop operation is installed at TMI-1.

3-17 Amendment No. 157 SEP 2 5 1990

3.1.9 LOW POWER PHYSICS TESTING RESTRICTIONS Applicability Applies to Reactor Protection System requirements for low power physics testing.

Objective To assure an additional margin of safety during low power physics testing.

Specification The following special limitations are placed on low power physics testing.

3.1.9.1 Reactor Protection System Requirements

a. Below 1720 psig Shutdown Bypass trip setting limits shall apply in accordance with Table 2.3-1.

b. Above 1800 psig nuclear overpower trip shall be set at less than 5.0 percent. Other settings shall be in accordance with Table 2.3-1.

3.1.9.2 Startup Rate Rod Withdrawal Hold (Reference 1) Shall be I operable At All Times.

3.1.9.3 Shutdown margin may not be reduced below 1% delta k/k per 3.5.2.1.

Bases The above specification provides additional safety margins during low power physics testing, as is also provided for startup (Reference 2.) I REFERENCES (1) UFSAR, Section 7.2.2.1.b - "Reactivity Rate Limits" (2) UFSAR, Section 14.1.2.2 - "Startup Accident" 3-18 Amendment No. 157 SEP 2 5 1990

3.1.10 CONTROL ROD OPERAION This page in ka leeft blank (Page 3-18b deleed) 3-18a AmcndmctNo. 211 II'"N I r 41

3.1 .11 REACTOR INTERNALS VENT VALVES ADDpicability Applies to Reactor Internals Vent Valves Objective To verify that no reactor internals vent valve is stuck in the open position and that each valve continues to exhibit freedom of movement.

Specifications 3.1.11.1 The structural integrity and operability of the reactor internals vent valves shall be maintained at a level consistent with the acceptance criteria in Specification 4.16.

,1

.;g:k 3-18c Amendment No. 42,167 I

(8-16-78)

JAN 2 6 1993

3.1.12 Pressurizer Power Operated Relief Valve (PORV), Block Valve, and Low Temperature Overpressure Protection (LTOP)

Applicability Applies to the settings, and conditions for isolation of the PORV.

Obiective To prevent the possibility of inadvertently overpressurizing or depressurizing the Reactor Coolant System.

Specification 3.1.12.1 LTOP Protection If the reactor vessel head is installed and indicated RCS temperature is < 329 0F, High Pressure Injection Pump breakers shall not be racked in unless:

a. MU-V16A/B/C/D are closed with their breakers open, and l MU-V217 is closed, and

b. Pressurizer level is maintained < 100 inches. If pressurizer level is > 100 inches, restore level to < 100 inches within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

3.1.12.2 The PORV settings shall be as follows:

a. Low Temperature Overpressure Protection Setpoint

1. When indicated RCS temperature is < 329 0F, the LTOP system shall be operable as defined in Specification 3.1.12.1 and

2. The PORV will have a maximum lift setpoint of 552 psig.

With the PORV setpoint above the maximum value, within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months either:

I. restore the setpoint below the maximum value, or

2. verify pressurizer level is < 100 inches indicated and satisfy the requirements of Technical Specification 3.1.12.3 allowing the PORV to I be taken out of service.

b. Unless the Low Temperature Overpressure Protection Setpoint is in effect, the PORV lift setpoint will be a minimum of 2425 psig. I With the PORV setpoint below the minimum value, within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months either:

1. restore the setpoint above the minimum value, or

2. close the associated block valve, or

3. close the PORV, and remove power from PORV

4. otherwise, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

3-18d Amendment No. 56, 7. 1 19, 167. 186,234 C,' , - .

3.1.12.3 When the indicated RCS temperature is below 3290 F the PORV shall not be taken out of service, nor shall it be isolated from the system unless one of the following is in effect:

a. High Pressure Injection Pump breakers are racked out.

b. MU-V 16A/B/C/D are closed with their breakers open, and MU-V217 is closed.

c. Head of the Reactor Vessel is removed.

3.1.12.4 The PORV Block Valve shall be OPERABLE during HOT STANDBY, STARTUP, and POWER OPERATION:

a. With the PORV Block Valve inoperable, within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months either:

1. restore the PORV Block Valve to OPERABLE status or

2. close the PORV (verify closed) and remove power from the PORV

3. otherwise, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b. With the PORV block valve inoperable, restore the inoperable valve to OPERABLE status prior to startup from the next COLD SHUTDOWN unless the COLD SHUTDOWN occurs within 90 Effective Full Power Days (EFPD) of the end of the fuel cycle. If a COLD SHUTDOWN occurs within this 90 day period, restore the inoperable valve to OPERABLE status prior to startup for the next fuel cycle.

Bases If the PORV is removed from service while the RCS is below 3290 F, sufficient measures are incorporated to prevent severe overpressurization by either eliminating the high pressure sources or flowpaths or assuring that the RCS is open to atmosphere.

The PORV setpoints are specified with tolerances assumed in the bases for Technical Specification 3.1.2. Above 3290 F, the PORV setpoint has been chosen to limit the potential for inadvertent discharge or cycling of the PORV.

Other action such as removing the power to the PORV has the same effect as raising the setpoint which also satisfies this requirement. There is no upper limit on this setpoint as the Pressurizer Safety Valves (T.S. 3.1.1.3) provide the required overpressure relief.

Below 3290 F, the PORV setpoint is reduced to provide the required low temperature overpressure relief when high pressure sources and flowpaths are in service. There is no lower limit on the pressure actuation specified as lower setpoints also provide this same protection.

3-A4e Amendment No. 78, 119, 167, 186 ,234

3.1.13 Reactor Coolant System Vents ARlicabiliUtY Provides the limiting conditions for operation of the Reactor Coolant System Vents. These limiting conditions for operation (LCO) are applicable only when Reactor is critical.

Objective To ensure that sufficient vent flow paths are operable during the plant operating modes mentioned above.

Specification 3.1.13.1 At least one reactor coolant system vent path consisting of at least two power operated valves in series, powered from emergency buses shall be OPERABLE and closed at each of the following locations:

a. Reactor vessel head* (RC-V42 & RC-V43)

b. Pressurizer steam space (RC-V28 & RC-V44)

c. Reactor coolant system high point (either RC-V40A and 41A) or (RC-40B and 41B)

Action 3.1.13.2 a. With one of the above reactor coolant system vent paths inoperable, the inoperable vent path shall be maintained closed, with power removed from the valve actuators in the inoperable vent path. The inoperable vent path shall be restored to OPERABLE status within 30 days, or the plant shall be in HOT SHUTDOWN within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b. With two or more of the above reactor coolant system vent paths inoperable, maintain the inoperable vent path closed, with power removed from the valve actu-ators in the inoperable vent paths, and restore at least two of the vent paths to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

This specification becomes binding after installation and initially being declared operable.

Amendment No. gy, 186 3-18g 4,

3.2 MAKEUP AND PURIFICATION AND CHEMICAL ADDITION SYSTEMS DELETED 3-19 Amendment No. 43, 50, 98, 157,196

'SEP 1 9 -

THIS PAGE LEFT BLANK INTENTIONALLY 3-20 Amendment No. 50, 152, 157, 168,196 SEP i 9 i9bs

3.3 EMERGENCY CORE COOLING, REACTOR BUILDING EMERGENCY COOLING AND REACTOR BUILDING SPRAY SYSTEMS Applicability Applies to the operating status of the emergency core cooling, reactor building emergency cooling, and reactor building spray systems.

Obiective To define the conditions necessary to assure immediate availability of the emergency core cooling, reactor building emergency cooling and reactor building spray systems.

Specification 3.3.1 The reactor shall not be made critical unless the following conditions are met:

3.3.1.1 Iniection Systems

a. The borated water storage tank (BWST) shall contain a minimum of 350,000 gallons of water having a minimum concentration of 2,500 ppm boron at a temperature not less than 40 0F. If the boron concentration or water temperature is not within limits, restore the BWST to OPERABLE within 8 hrs. If the BWST volume is not within limits, restore the BWST to OPERABLE within one hour. Specification 3.0.1 applies.

b. Two Makeup and Purification (MU)/High Pressure Injection (HPI) pumps are OPERABLE in the engineered safeguards mode powered from independent essential buses. Specification 3.0.1 applies.

c. Two decay heat removal pumps are OPERABLE. Specification 3.0.1 applies.

d. Two decay heat removal coolers and their cooling water supplies are OPERABLE.

(See Specification 3.3.1.4) Specification 3.0.1 applies.

e. Two BWST level instrument channels are OPERABLE.

f. The two reactor building sump isolation valves (DH-V-6A/B) shall be remote-manually OPERABLE. Specification 3.0.1 applies

g. MU Tank (MUT) pressure and level shall be maintained within the Unrestricted Operating Region of Figure 3.3-1.

1) With MUT conditions outside of the Unrestricted Operating Region of Figure 3.3-1, restore MUT pressure and level to within the Unrestricted Operating Region within 72 hrs. Specification 3.0.1 applies.

2) Operation with MUT conditions within the Prohibited Region of Figure 3.3-1 is prohibited. Specification 3.0.1 applies.

3.3.1.2 Core Flooding System

a. Two core flooding tanks (CFTs) each containing 940 +30 ft3 of borated water at 600 +25 psig shall be available. Specification 3.0.1 applies.

3-21 Amendment No. 24, 08, 478, 2Q3, $-, 22I, 227 Corrected by lctter dtd July 8, 1999 DEC 2 6 20O0

3.3 EMERGENCY CORE COOLING, REACTOR BUILDING EMERGENCY COOLING AND REACTOR BUILDING SPRAY SYSTEMS (Contd.)

b. CFT boron concentration shall not be less-than 2,270 ppm boron.

Specification 3.3.2.1 applies.

c. The electrically operated discharge valves frorh the CFT will be assured open by administrative control and position indication lamps on the engineered safeguards status panel. Respective breakers for these valves shall be open and conspicuously marked. A one hour time clock is provided to open the valve and remove power to the valve. Specification 3.0.1 applies.

d. DELETED

e. CFT vent valves CF-V-3A and CF-V-3B shall be closed and the breakers to the CFT vent valve motor operators shall be tagged open, except when adjusting core flood tank level and/or pressure. Specification 3.0.1 applies.

3.3.1.3 Reactor Building Spray System and Reactor Buildinq Emergency Cooling System The following components must be OPERABLE:

a. Two reactor building spray pumps and their associated spray nozzles headers and two reactor building emergency cooling fans and associated cooling units (one in each train). Specification 3.0.1 applies.

b. The Reactor Building emergency sump pH control system shall be maintained with

> 18,815 lbs and < 28,840 lbs of trisodium phosphate dodecahydrate (TSP).

Specification 3.3.2.1 applies.

3.3.1.4 Cooling Water Systems - Specification 3.0.1 applies.

a. Two nuclear service closed cycle cooling water pumps must be OPERABLE.

b. Two nuclear service river water pumps must be OPERABLE.

c. Two decay heat closed cycle cooling water pumps must be OPERABLE.

d. Two decay heat river water pumps must be OPERABLE.

e. Two reactor building emergency cooling river water pumps must be OPERABLE.

3.3.1.5 Engineered Safeguards Valves and Interlocks Associated with the Systems in-Specifications 3.3.1.1, 3.3.1.2, 3.3.1.3, 3.3.1.4 are OPERABLE. Specification 3.0.1 applies.

3-22 Amendment No. 33, 80, 98, 137,174 190, 211,225, 227, 263

3.3 EMERGENCY CORE COOLING, REACTOR BUILDING EMERGENCY COOLING AND REACTOR BUILDING SPRAY SYSTEMS (Contd.)

3.3.2 Maintenance or testing shall be allowed during reactor operation on any component(s) in the makeup and purification, decay heat, RB emergency cooling water, RB spray, BWST level instrumentation, or cooling water systems which will not remove more than one train of each system from service. Components shall not be removed from service so that the affected system train is inoperable for more than 72 consecutive hours. If the system is not restored to meet the requirements of Specification 3.3.1 within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , the reactor shall be placed in a HOT SHUTDOWN condition within six hours.'

3.3.2.1 If the CFT boron concentration is outside of limits, or if the TSP baskets contain amounts of TSP outside the limits specified in 3.3.1.3.b, restore the system to operable status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . If the system is notrestored to meet the requirements of Specification 3.3.1 within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , the reactor shall be placed in a HOT SHUTDOWN condition within six hours.

3.3.3 Exceptions to 3.3.2 shall be as follows:

a. Both CFTs shall be OPERABLE at all times.

b. Both the motor operated valves associated with the CFTs shall be fully open at all times.

c. One reactor building cooling fan and associated cooling unit shall be permitted to be out-of-

,service for seven days.

3.3.4 Prior to initiating maintenance on any of the components, the duplicate (redundant) component shall be verified to be OPERABLE.

In accordance with AmerGen License Change Application dated February 14, 2001, and any requirements in the associated NRC Safety Evaluation, a portion of the Nuclear Service Water System piping between valves NR-V-3 and NR-V-5 may be removed from service and Nuclear Services River Water flow realigned through a portion of the Secondary Services River Water System piping for up to 14 days. This note is applicable for one time use during TMI Unit 1 Operating Cycle 13.

Bases The requirements of Specification 3.3.1 assure that, before the reactor can be made critical, adequate engineered safety features are operable. Two engineered safeguards makeup pumps, two decay heat removal pumps and two decay heat removal coolers (along with their respective cooling water systems components) are specified. However, only one of each is necessary to supply emergency coolant to the reactor in the event of a loss-of-coolant accident. Both CFTs are required because a single CFT has insufficient inventory to reflood the core for hot and cold line breaks (Reference 1).

The operability of the borated water storage tank (BWST) as part of the ECCS ensures that a sufficient supply of borated water is available for injection by the ECCS in the event of a LOCA (Reference 2).

The limits on BWST minimum volume and boron concentration ensure that 1) sufficient water is available within containment to permit recirculation cooling flow to the core, and 2) the reactor will remain at least one percent subcritical following a Loss-of-Coolant Accident (LOCA).

The contained water volume limit of 350,000 gallons includes an allowance for water not usable because of tank discharge location and sump recirculation switchover setpoint. Redundant heaters maintain the borated water supply at a temperature greater than 400 F.

The Reactor Building emergency sump pH control system ensures a sump pH between 7.3 and 8.0 during the recirculation phase of a postulated LOCA. A minimum pH level of 7.3 is required to reduce the potential for chloride induced stress corrosion cracking of austenitic stainless steel and assure the retention of elemental iodine in the recirculating fluid. A maximum pH value of 8.0 minimizes the 3-23 Amendment No. 140, 157,165, 178,-20-22-29, 263

FIGURE 3.3-1 Makeup Tank Pressure vs Level Limits (Instrument Error NOT Included) 110 105 100 95 90 c 85 80

.19 wr-D 75 70 65 60 55 50 10 15 20 25 30 35 40 45 50 55 60 65 MU Tank Pressure (psig) 3-24a Amendment No. 227, L, _,Q v- - 3

3.4 DECAY HEAT REMOVAL (DHR! CAPABILITY Applicability Applies to the operating status of systems and components that function to remove decay heat when one or more fuel bundles are located in the reactor vessel.

Obiective To define the conditions necessary to assure contin uous capability of DHR.'

Specification 3.4.1 Reactor Coolant System (RCS) temperature greater than 250 degrees F.

3.4.1.1 Three independent Emergency Feedwater (EFW) Pumps and two redundant flowpaths to each Once Through Steam Generator (OTSG) shall be OPERABLE ** with:

a. Two EFW Pumps, each capable of being powered from an OPERABLE emergency bus, and one EFW Pump capable of being powered from two OPERABLE main steam supply paths.

(1) With one main steam supply path inoperable, restore the inoperable steam supply path to OPERABLE status within 7 days or be in COLD SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

(2) With one EFW Pump or any EFW flowpath inoperable, restore the inoperable pump or flowpath to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in COLD SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

(3) With one main steam supply path to the turbine-driven EFW Pump and one motor-driven EFW Pump inoperable, restore the steam supply or the motor-driven EFW Pump to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and in COLD SHUTDOWN within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

(4) With more than one EFW Pump or both flowpaths to either OTSG inoperable, initiate action immediately to restore at least two EFW Pumps and one flowpath to each OTSG:

These requirements supplement the requirements of Specifications 3.1.1.1.c, 3.1.1.2, 3.3.1 and 3.8.3.

- HSPS operability is specified in Specification 3.5.1. When HSPS is not required to be OPERABLE, EFW is OPERABLE by manual control of pumps and valves from the Control Room.

3-25 Amendment No. 4,78,98,119,121,162,190,211, 242

3.4 DECAY HEAT REMOVAL (DHR, CAPABILFTYCi B¢,e Notes:

1. Specification 3.0.1 and all other actions requiring shutdown or changes in REACTOR OPERATING CONDITIONS are suspended until at least two EFW Pumps and one EFW flowpath to each OTSG are restored to OPERABLE status.

2. While performing surveillance resting. more than one EFW Pump or both flowpaths to a single OTSG may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided that:

(a) At least one motor-driven EFW Pump shall remain OPERABLE, and (b) With the reactor in STARTUP, HOT STANDBY, or POWER OPERATION, a designated qualified individual who is in communication with the control room shall be continuously stationed in the immediate vicinity of the affected EFW local manual valves. On instructic., from the Control Room, the individual shall realign the valves from the test mode to their operational alignment.

b. Four of six Turbine Bypass Valves (TBVs) OPERABLE. With more than two TBVsl inoperable, restore operability of at least four TBVs within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

c. The Condensate Storage Tanks (CSTs) OPERABLE with a minimum of 150,000 gallons of condensate available in each CST.

(1) With a CST inoperable, restore the CST to operability within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and COLD SHUTDOWN within the next 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

(2) With more than one CST inoperable, restore at least one CST to OPERABLE status or be subcritical within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and in COLD SHUTDOWN within the following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

3.4.1.2.1 With the Reactor between 250 degrees F and HOT SHUTDOWN, and having been subcritical for at least one (1) hour, two (2) Main Steam Safety Valves (MSSVs) per OTSG shall be OPERABLE. With less than two (2) MSSVs per OTSG OPERABLE, restore at least two (2) MSSVs to OPERABLE status for each OTSG within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months or be in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

3.4.1.2.2 With the Reactor between HOT SHUTDOWN and 5% power, and having been subcritical for at least one (1) hour, two (2) MSSVs per OTSG shall be OPERABLE provided the overpower trip setpoint in the RPS is set to less than 5% full power. With less than two (2) MSSVs per OTSG OPERABLE, restore at least two (2) MSSVs to OPERABLE status for each OTSG within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months or be in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

3-26 Amendment No. 4, 78, 11, 125, 133,242

3.4 DECAY HEAT REMOVAL (DHR) CAPABILITY (Continuea) 3.4.1.2.3 Except as provided in Specification 3.4.1.2.2 above, when the Reactor is above HOT SHUTDOWN, all eighteen (18) MSS\Is shall be OPERABLE or, if any are not OPERABLE, the maximum overpower trip Fetpoint (see Table 2.3-1) shall be reset as follows:

Maximum Number of Maximum Overpower MSSVs Disabled on Trip Setpoint Any OTSG of Rated Power) a^t 1 92.4 2 79.4 3 66.3 With more than three (3) MSSVs inoperable, restore at least fifteen (15) MSSVs to OPERABLE status within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

3.4.9 RCS temperature less than or equal to 250 degrees F.

3.4.2.1 At least two of the following means for maintaining DHR capability shall be OPERABLE and at least one shall be in operation except as allowed by Specifications 3.4.2.2, 3.4.2.3 and 3.4.2.4.

a. DHR String (Loop "A").

b. DHR String (Loop "B").

c. RCS Loop "A" and its associated OTSG with an EFW Pump and a flowpath.

d. RCS Loop "B" and its associated OTSG with an EFW Pump and a flowpath.

With les~s than the above required means for maintaining DHR capability OPERABLE, immediately initiate corrective action to return the required loops to OPERABLE status as soon as possible.

3.4.2.2 Operation of the means for DHR may be suspended provided the core outlet temperature is maintained below saturation temperature.

3.4.2.3 The number of means for DHR required to be OPERABLE per Specification 3.4.2.1 may be reduced to one provided that the Reactor is in a REFUELING SHUTDOWN condition with the Fuel Transfer Canal water level greater than or equal to 23 feet above the Reactor Vessel flange.

3.4.2.4 Specification 3.4.2.1 does not apply when either of the following conditions exist:

a. Decay heat generation is less than 188 KW with the RCS full.

b. Decay heat generation is less than 100 KW with the RCS drained down for maintenance.

3-26a Amendment No. 119, 125, 133, 220, 242

3.5 INSTRUMENTATION SYSTEMS 3.5.1 OPERATIONAL SAFETY INSTRUMENTATION ADDl icabilitv Applies to unit instrumentation and control systems.

Objective To delineate the conditions of the unit instrumentation and safety circuits necessary to assure reactor safety.

Specifications 3.5.1.1 The reactor shall not be in a startup mode or in a critical state unless the requirements of Table 3.5-1, Column "A" and "B" are met, except as provided in Table 3.5-1, Column *C". Specification 3.0.1 applies.

3.5.1.2 The key operated channel bypass switch associated with each reactor l protection channel may be used to lock the reactor trip module in the untripped state as indicated by a light. Only one channel shall be locked in this untripped state at any one time. Unit operation at rated power shall be permitted to continue with Table 3.5-1, Column 'A". Only one channel bypass key shall be kept in the control room.

3.5.1.3 In the event the number of protection channels operable falls below the limit given under Table 3.5-1, Column "A", operation shall be limited as specified in Column "C'. Specification 3.0.1 applies.

3.5.1.4 The key operated shutdown bypass switch associated with each reactor protection channel shall not be used during reactor power operation (except for required maintenance or testing).

3.5.1.5 During START-UP when the intermediate range instruments come on scale, the overlap between the intermediate range and the source range instrumentation shall not be less than one decade.

3.5.1.6 During START-UP, HOT STANDBY or POWER OPERATION, in the event that a control rod drive trip breaker is inoperable; within one hour place the breaker in trip. Specification 3.0.1 applies.

3.5.1.7 During START-UP, HOT STANDBY or POWER OPERATION, in the event that one of the control rod drive trip breaker diverse trip features (shunt trip or undervoltage trip attachment) is inoperable:

a. Restore to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or

b. Within one additional hour place the breaker in trip.

Specification 3.0.1 applies.

27 Amendment No. PI, 9p, II;, 189 JUL 2 5 1994

3.5.1.7.1 Power may be restored through the breaker with the failed trip feature for up to two hours for surveillance testing per T.S.

4.1.1.

3.5.1.8 During STARTUP, HOT STANDBY or POWER OPERATION, in the event that one of the two regulating control rod power SCR electronic trips is inoperable, within one hour:

a. Place the inoperable SCR electronic trip in the tripped condition or

b. Remove the power supplied to the associated SCRs.

Specification 3.0.1 applies.

3.5.1.8.1 Power may be restored through the SCRs with the failed electronic trip for up to two hours for surveillance testing per T.S. 4.1.1.

3.5.1.9 The reactor shall not be in the Startup mode or in a critical state unless both HSPS actuation logic trains associated with the Functional units listed in Table 3.5-1 are operable except as provided in Table 3.5-1,D.

3.5.1.9.1 With one HSPS actuation logic train inoperable, restore the train to OPERABLE or place the inoperable device in an actuated state within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

With both HSPS actuation logic trains inoperable, restore one train to OPERABLE within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

Bases Every reasonable effort will be made to maintain all safety instrumentation in operation. The reactor trip, on loss of feedwater may be bypassed below 7%

reactor power. The bypass is automatically removed when reactor power is raised above 7%. The reactor trip, on turbine trip, may be bypassed below 45%

reactor power (Reference 1). The safety feature actuation system must have two analog channels functioning correctly prior to startup.

The anticipatory reactor trips on loss of feedwater pumps and turbine trip have been added to reduce the number of challenges to the safety valves and power operated relief valve but have not been credited in the safety analyses.

Operation at rated power is permitted as long as the systems have at least the redundancy requirements of Column "B" (Table 3.5-1). This is in agreement with redundancy and single failure criteria of IEEE 279 as described in FSAR Section 7.

There are four reactor protection channels. Normal trip logic is two out of four. Minimum required trip logic is one out of two.

3-27a Amendment No. 1W, gfl, I3, WF, 189 D LL 25

( ( (

TABLE 3.5-1 INSTRUMENTS OPERATING CONDITIONS Functional Unit (A) (8) (C)

Minimum Operable Minimum Degree Operator Action If Conditions Channels of Redundancy of Column A and B Cannot be Met A. Reactor Protection System

1. Manual pushbutton 2 0 (a)

2. Power range Instrument channel 2 (a)

3. intermediate range instrument 1 0 (a) (b) channels

4. Source range instrument I 0 (a) (c)

Co channels ED3

5. Reactor coolant temperature 2 I (a) instrument channels

6. Reactor Coolant 2 I (a)

Pressure-Temperature Instrument channels I

7. Flux / imbalance / flow 2 1 (a)

8. Reactor coolant pressure

a. High reactor coolant pressure 2 1 (a) instrument channels

b. Low reactor coolant pressure 2 1 (a) instrument channels

TABLE f. .7 (Cont'd)

INSTRUMENTS OPERATING CONDITIONS 0 Functional Unit (A) (B) (C)

Minimum Operable Minimum Degree Operator Action if Conditions Channels of Redundancy of Column A and B Cannot Be Met r

-4 A. Reactor Protection System (cont'd)

9. Power/number of pumps 2 I (a) instrument channels

10. High reactor building 2 I (a) ie~ -)

pressure channels 0,

to (a) Restore the conditions of Column (A) and Column (B) within one hour or place the unit in HOT SHUTDOWN withir an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

(b) When 2 of 4 power range instrument channels are greater than 10 percent full power, intermediate range instrumentation is not required.

(c) When I of 2 Intermediate range instrument channels is greater than 10'° amps, or 2 of 4 power range instrument channels are greater than 10 percent full power, source range instrumentation is not required.

a iU TABLE (. i (Cont'd)

.-. 3 I - fD INSTRUMENTS OPERATING CONDITIONS Functional Unit (A) (B) (C)

I Minimum Operable Minimum Degree Operator Action if Conditions to (0 Channels of Redundancy of Column A and B Cannot Be Met B. Other Reactor Trips

1. Loss of Feedwater (c) 2 1 (a) I

2. Turbine Trip (c) 2 I (b)

I (a) Restore the conditions of Column (A)and Column (B)within one hour or reduce indicated reactor power to less than 7% within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . I (b)Restore the conditions of Column (A) and Column (B)within one hour or reduce indicated reactor power to less than 45% within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

C) of (c) Trip may be defeated during low power physics tests.

( TABLE 3 --Al(Cont'd) (

INSTRUMENTS OPERATING CONDITIONS Functional Unit (A) (B) (C)

I Minimum Operable Minimum Degree Operator Action if Conditions Channels of Redundancy of Column A and B Cannot Be Met I C. Engineered Safety Features

1. Makeup and Purification System (high pressure injection mode)

a. Reactor Coolant Pressure 2 1(b) (a)

Instrument Channels

b. Reactor Building 4 psig 2 l(b) (a)

Instrument Channels

c. Manual Pushbutton 2 N/A (g)

(also actuates Low Pressure W~ Injection)

2. Decay Heat System (low pressure injection mode)

a. Reactor Coolant Pressure 2 I(b) (a)

Instrument Channels

b. Reactor Building 4 psig 2 I(b) (a)

Instrument Channels

c. Reactor Coolant Pressure 1 0 Open circuit breaker at MCC D.H. Valve Interlock for DH-VI or DH-V2 with the Bistable affected valve in the closed position within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months or I maintain R.C. pressure less than 350 psig.

C( ((

TABLE 3.5-1 (Cont'd)

INSTRUMENTS OPERATING CONDITIONS Functional Unit (A) (B) (C)

Minimum Operable Minimum Degree Operator Action if Conditions Channels of Redundancy of Column A and B Cannot Be Met C. Engineered Safety Features (cont'd) 0 3. Reactor Building Isolation and Cooling System

a. Reactor Bldg. 4 psig Instrument Channel 2 l(b) (a)

b. Manual Pushbuttons 4t

,,i. 4 psig feature 2 N/A (g) ii. 30 psig feature 2 N/A (g)

c. Deleted

d. Reactor Building 30 psig pressure switches 2 1 (c)

e. RCS Pressure less than 1600 psig 2 l(b) (a)

f. Reactor Building Purge Line Isolation 1 0 (f)

(AH-V1A and AH-V1D) High Radiation

4. Reactor Building Spray System

a. Reactor Building 30 psig pressure switches 2 1 (d)

b. Spray Pump Manual Switches 2 N/A (g)

5. 4.16KV ES Bus Undervoltage Relays

a. Degraded Grid Voltage Relays 2 1 (e)

b. Loss of Voltage Relay 2 1 (e)

TABLE 3.5-1 (Cont'd)

INSTRUMENTS OPERATING CONDITIONS CF t C. Engineered SafetY Features (cont'd) ma4 (a)Restore the conditions of Column (A)and Column (B)within one hour or place the reactor in HOT SHUTDOWN within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

(b)The minimum degree of redundancy may be reduced to 0 up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months for surveillance testing.

(c)The Operability requirement is two out of three pressure switches in each train, with a minimum degree of redundancy of one,-in each train.

1. If the minimum conditions are not met on one train, restore the function to OPERABLE within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , or place the reactor in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

2. If the minimum conditions are not met on either train, then place the reactor in HOT SHUTDOWN in 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

(d)The Operability requirement is two out of three pressure switches in each train, with a minimum degree of redundancy of one, in each train.

1. If the minimum conditions are not met on one train, restore the function to OPERABLE within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , or place the reactor in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

2. If the minimum conditions are not met on either train, then place the reactor in HOT SHUTDOWN in 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

(e)The operability requirement for the undervoltage relay, its associated auxiliary relays, and the timer

1. If one 4.16 kv ES Bus does not meet the minimum conditions, restore the function to operable status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in hot shutdown within.an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

2. If both 4.16 kv Buses do not meet the minimum conditions, then restore at least one 4.16 kv ES Bus to meet the minimum conditions within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or be in hot shutdown within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

(f)Discontinue Reactor Building purging and close AHV-1A, 1B, IC,and ID within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

TABLE 3. 5 font'd)

( (

INSTRUMENTS OPERATING CONDITIONS C. Engineered Safety Features (cont'd)

(g)The Operability requirement is for the manual actuation switch for the specified feature on each train to be OPERABLE.

1. If the manual actuation switch on one train is inoperable, restore the switch to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

2. If both manual actuation switches for that feature are inoperable, then place the reactor in HOT SHUTDOWN in 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

( TABLE 3 (. . (Cont'd)

(

INSTRUMENTS OPERATING CONDITIONS Functional Unit (A) (B) (C)

Minimum Operable Minimum Degree Operator Action if Conditions Channels of Redundancy of Column A and B Cannot Be Met I D. Heat Sink Protection System

1. EFW Auto Initiation

a. Loss of both Feedwater pumps N/A(b) N/A(b) (a)

b. Loss of all RC Pumps N/A(b) N/A(b) (a)

C. OTSG A Low Level 2 I (a)

d. OTSG B Low Level 2 I (a)

e. High Reactor Building Pressure 2 1 (a)

2. MFW Isolation

a. OTSG A Low Pressure 2 (a)

b. OTSG B Low Pressure 2 (a)

3. EFW Level Control

a. OTSG A Level Control N/A(b) N/A(b) (a)

b. OTSG B Level Control N/A(b) N/A(b) (a)

(a) Restore the conditions of Column (A) and Column (B) within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , or place the unit in HOT SHUTDOWN withinI the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

(b) Operability requirements are specified in Section 3.5.1.9.

3.5.2 CONTROL ROD GROUP AND POWER DISTRIBUTION LIMITS Aoplicabilitv This specification applies to power distribution and operation of-control rods during power operation.

Obiective To assure an acceptable core power distribution during power operation, to set a limit on potential reactivity insertion from a hypothetical control rod ejection, and to assure core subcriticality after a reactor trip.

Specification 3.5.2.1 The available shutdown margin shall not be less than one percent AK/K with the highest worth control rod fully withdrawn.

3.5.2.2 Operation with inoperable rods:

a. Operation with more than one inoperable rod as defined in Specification 4.7.1 in the safety or regulating rod banks shall not be permitted. Verify SDM > 1% Ak/k or initiate boration to restore within limits within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . The reactor shall be brought to HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

b. If a control rod in the regulating and/or safety rod banks is declared inoperable in the withdrawn position as defined in Specification Paragraph 4.7.1.1 and 4.7.1.3, an evaluation shall be initiated immediately to verify the existence of one percent Ak/k hot shutdown margin. Boration may be initiated to increase the available rod worth either to compensate for the worth of the inoperable rod or until the regulating banks are fully withdrawn, whichever occurs first. Simultaneously a program of exercising the remaining regulating and safety rods shall be initiated to verify operability.

c. If within one hour of determination of an inoperable rod as defined in Specification 4.7.1, and once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter, it is not determined that a one percent Ak/k hot shutdown margin exists combining the worth of the inoperable rod with each of the other rods, the reactor shall be brought to the HOT SHUTDOWN condition within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months until this margin is established.

d. Following the determination of an inoperable rod as defined in Specification 4.7.1, all rods shall be exercised within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and exercised weekly until the rod problem is solved.

e. If a control rod in the regulating or safety rod groups is declared inoperable per 4.7.1.2, and cannot be aligned per 3.5.2.2.f, power shall be reduced to < 60% of the thermal power allowable for the reactor coolant pump combination within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months , and the overpower trip setpoint shall be reduced to < 70% of the thermal power allowable within 10 hours1.157407e-4 days 0.00278 hours 1.653439e-5 weeks 3.805e-6 months . Verify the potential ejected rod worth (ERW) is within the assumptions of the ERW analysis and verify peaking factor (Fa(Z) and N ) limits per the COLR have not been exceeded within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

3-33 Amendment No. 4X, 410, 24I, 246 (5-18-76)

f. If a control rod in the regulating or axial power shaping groups is declared inoperable per Specification 4.7.1.2, operation may continue provided that within I hour the rods in the group are positioned such that the rod that was declared inoperable is maintained within allowable group average position limits of Specification 4.7.1.2.

g. If the inoperable rod in Paragraph 'e' above is in groups 5, 6, 7, or 8, the other rods in the group may be trimmed to the same position. Normal operation of 100 percent of the thermal power allowable for the reactor coolant pump combination may then continue provided that within I hour the rod that was declared inoperable is maintained within allowable group average position limits in 3.5.2.5.

3.5.2.3 The worth of single inserted control rods during criticality is limited by the restriction of Specification 3.1.3.5 and the Control Rod Position Limits defined in Specification 3.5.2.5.

3.5.2.4 Quadrant Tilt:

a. Except for physics tests, the quadrant tilt, as determined using the full incore system (FIS), shall not exceed the values in the CORE OPERATING LIMITS REPORT.

The FIS is OPERABLE for monitoring quadrant tilt provided the number of valid symmetric string individual SPND signals in any one quadrant is not less than the limit in the CORE OPERATING LMITS REPORT.

b. When the full incore system is not OPERABLE and except for physics tests quadrant tilt as determined using the power range channels for each quadrant (out of core detector system)(OCD), shall not exceed the values in CORE OPERATING LIMITS REPORT.

c. When neither detector system above is OPERABLE and, except for physics tests, quadrant tilt as determined using the minimum incore system (MIS), shall not exceed the values in the CORE OPERATING LIMITS REPORT.

d. Except for physics tests if quadrant tilt exceeds the tilt limit, allowable power shall be reduced 2 percent for each I percent tilt in excess of the tilt limit. For less than four pump operation, thermal power shall be reduced 2 percent below the thermal power allowable for the reactor coolant pump combination for each I percent tilt in excess of the tilt limit.

e. If quadrant power tilt exceeds the tilt limit then within a period of 10 hours1.157407e-4 days 0.00278 hours 1.653439e-5 weeks 3.805e-6 months , the quadrant power tilt shall be reduced to less than the tilt limit except for physics tests, or the following verifications and/or adjustments in setpoints and limits shall be made:

1. Verify Fq() and F' are within limits of the COLR once per 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months and restore QPT to :steady state limit within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , or perform steps 2,3, &4 below.

3-34 Amendment No. 4f, 29, 39, 40, 50, 90, 426, 44 , 4W, 211 JUN 1 5 1999

2. The procton system mWac porwau lance envelope trip tomns shall be ruced 2 percert inpower for each I percntt in excess of the ktlimit, or when dlermal power isequal to or less dtan 50° fill power with four reactor coolant pumps running set the nuclear overpower trip setpoint equal to or less an 60r/. fiHI power.

3. The control rod group wizhdawual limits in the CORE OPERATING LfMf I REPORT shal be rucd 2 perc npower foreach I perce ttikn excess of the tilt limit.

4. The operaonal imbalanc: limits in the CORE OPERATING LIM1IS REPORT shall be reduced 2 percent in power for each I perceilt i excess ofthe tlt limit

f. Except for physics or diagosic testing, if quadrant tilt is in excess of the maximum tilt limit defined in the CORE OPERATING LIMITS REPORT and using the applicable de or system defined in 3.S.2.4.a, b, and c above, reduce thmal power to 515% FP within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

Diagrc tig during power operation with a quadrant tilt is permitted provided that the dxminal power allowable is restricted as stated in 3.5.2.4.d above.

g. Quadrant ti shall be monied on a minimum freqxuecy of one every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months when the QPT alarm is inoperable and every 7 days wea the alarm as operable during power operanon above ISpercent of rated power. WVi QPT has been restored to zteady state limit vef hourly for 12 consece ours, or until vetified acceptable at e95% FP.

3-34a Amendment No. 39,38,9 40,464.5, 420,436,442 4 54§

3.5.2.5 Control Rod Positions

a. Operating rod group overlap shall not exceed 25 percent +/-5 percent, between two sequential groups except for physics tests.

b. Position limits are specified for regulating control rods. Except for physics tests or exercising control rods, the, regulating control rod insertion/withdrawal limits are specified in the CORE OPERATING LIMITS REPORT.

1. If regulating rods are inserted in the restricted operating region, corrective measures shall be taken immediately to achieve an acceptable control rod position. Acceptable control rod positions shall be attained within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , and FQ(Z) and FN shall be verified within limits once every 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months , or power shall be reduced to < power allowed by insertion limits.

2. If regulating rods are .inserted in the unacceptable operating region, initiate boration within 15 minutes to restore SDM to >-I% eK/K, and restore regulating rods to within restricted region within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or reduce power to i power allowed by rod insertion limits.

c. Safety rod limits are given in 3.1.3.5.

3.5.2.6 The control rod drive patch panels shall be locked at all times with limited access to be authorized by the Plant Manager.

3.5.2.7 Axial Power Imbalance:

a. Except for physics tests the axial power imbalance, as determined using the full incore system (FIS), shall not exceed the envelope defined in the CORE OPERATING LIMITS REPORT.

The FIS is operable for monitoring axial power imbalance provided the number of valid self powered neutron detector (SPND) signals in any one quadrant is not less than the limit in the CORE OPERATING LIMITS REPORT.

b. When the full incore detector system is not OPERABLE and except for physics tests axial power imbalance, as determined using the power range channels (out of core detector system)(OCD), shall not exceed the envelope defined in the CORE OPERATING LIMITS REPORT.

c. When neither detector system above is OPERABLE and, except for physics tests axial power imbalance, as determined using the minimum incore system (MIS),

shall not exceed the envelope defined in the CORE OPERATING LIMITS REPORT.

d. Except for physics tests if axial power imbalance exceeds the envelope, corrective measures (reduction of imbalance by APSR movements and/or reduction in reactor power) shall be taken to maintain operation within the envelope. Verify FQ(Z) and FN are within limits of the COLR once per 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months when not within imbalance limits.

3-35 Amendment No. 10, 17,29,38, 39, 50, 120, 12-1424 }S- 219 J, 1",? 2neo

e. if an acceptable axial power imb.llance is not achieved within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , reactor power shall be reduced to *40% FP within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

f. Axial power imbalance shall be monitored on a minimum frequency of once every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months when axial power imbalance alarm is OPERABLE, and every 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months when imbalance alarm is inoperable during power operation above 40 percent of rated power.

3.5.2.8 A power map shall be taken at intervals not to exceed 31 effective full power days using the l incore instrumentation detection system to verify the power distribution is within the limits shown in the CORE OPERATING LIMITS REPORT.

The axial power imbalance, quadrant power tilt, and control rod position limits are based on LOCA analyses which have defined the maximum linear heat rate. These limits are developed in a manner that ensures the initial condition LOCA maximum linear heat rate will not cause the maximum clad temperature to exceed 10 CFR 50 Appendix K. Operation outside of any one limit alone does not necessarily constitute a situation that would cause the Appendix K Criteria to be exceeded should a LOCA occur. Each limit represents the boundary of operation that will preserve the Acceptance Criteria even if all three limits are at their maximum allowable values simultaneously. The effects of the APSRs are included in the limit development. Additional conservatism included in the limit development is introduced by application of:

a. Nuclear uncertainty factors

b. Thermal calibration uncertainty

c. Fuel densification effects

d. Hot rod manufacturing tolerance factors

e. Postulated fuel rod bow effects

f. Peaking limits based on initial condition for Loss of Coolant Flow transients.

The incore instrumentation system uncertainties used to develop the axial power imbalance and quadrant tilt limits accounted for various combinations of invalid Self Powered Neutron Detector (SPND) signals. If the number of valid SPND signals falls below that used in the uncertainty analysis, then another system shall be used for monitoring axial power imbalance and/or quadrant tilt.

For axial power imbalance and quadrant power tilt measurements using the incore detector system, the minimum incore detector system consists of OPERABLE detectors configured as follows:

Axial Power Imbalance

a. Three detectors in each of three strings shall lie in the same axial plane with one plane in each axial core half.

b. The axial planes in each core half shall be symmetrical about the core mid-planes.

c. The detectors shall not have radial symmetry.

Quadrant Power Tilt

a. Two sets of four detectors shall lie in each core half. Each set of four shall lie in the same axial plane. The two sets in the same core half may lie in the same axial plane.

b. Detectors in the same plane shall have quarter core radial symmetry.

3-35a Amendment No. A4 29, 3, 39, 59, 420, 426, +4, 4I0, 4I, 468T 211 JUN 15 1999

4w Z

18 a

16 wi 2zf 0- 1000 tAd/mtU After 1000 MWd/mtU m_ mr fv-wmm~

S0 I I I 0 2 4 6 8 10 Axial Location From Bottom of Core. ft.

FIGURE DELETED AND INCORPORATED INTO THE CORE OPERATING LIMITS REPORT.

LOCA LIMITED MAXIJMW ALLOWABLE LINEAR HEAT RATE TWIol Figure 3.5-2!1 Amendment No. 1, 152 ,168 FEB 1 1 1993 3-36b

3.5.3 ENGINEERED SAFEGUARDS PROTECTION SYSTEM ACTUATION SETPOINTS Applicability:

This specification applies to the engineered safeguards protection system actuation setpoints.

Objective:

To provide for automatic initiation of the engineered safeguards protection system in the event of a breach of Reactor Coolant System integrity.

Specification:

3.5.3.1 The engineered safeguards protection system actuation setpoints and permissible bypasses shall be as follows:

Initiating Signal Function Setpoint High Reactor Building Reactor Building Spray 30 psi g Pressure (1) Reactor Building Isolation S30 psi g High-Pressure Injection 4 psig Low-Pressure Injection < 4 psig Start Reactor Building Cooling & Reactor Building Isolation < 4 psig Low Reactor Coolant High Pressure Injection 1600(2) and System Pressure 500(3) psig Low Pressure Injection 1600(2) and 500(3) psig Reactor Building Isolation > 1600 psig(Z) 4.16 kv E.S. Buses Undervoltage Relays Degraded Voltage Switch to Onsite Power Source and load shedding 3760 volts (4) I Degraded voltage timer 10 sec (5) I Loss of voltage Switch to Onsite Power Source and load shedding 2400 Volts (6)

Loss of voltage timer 1.5 sec (7)

(1)May be bypassed for reactor building leak rate test.

(2)May be bypassed below 1775 psig on decreasing pressure and is automatically reinstated before 1800 psig on increasing pressure.

\-

(3)May be bypassed below 925 psig on decreasing pressure and is automatically reinstated before exceeding 950 psig on increasing pressure.

3-37 Amendment No. 70, 73, 78, 89, 149 ' 159 FE 2 X 'Q9I

(4) Minimum allowed setting is 3740 v. Maximum allowed setting is 3773 v.

(5) Minimum allowed time is 8 sec. maximum allowed time is 12 sec.

(6) Minimum allowed setting is 2200 volts, maximum allowed setting is 2860 volts (7) Minimum allowed time is 1.0 second, maximum allowed time is 2.0 seconds.

Bases High Reactor Building Pressure The basis for the 30 psig and 4 psig setpoints for the high pressure signal is to establish a setting which would be reached in adequate time in the event of a LOCA, cover a spectrum of break sizes and yet be far enough above normal operation maximum internal pressures to prevent spurious initiation (Reference 1).

Low Reactor Coolant System Pressure The basis for the 1600 and 500 psig low reactor coolant pressure setpoint for high and low pressure injection initiation is to establish a value which is high enough such that protection is provided for the entire spectrum of break sizes and is far enough below normal operating pressure to prevent spurious initiation. Bypass of HPI below 1775 psig and LPI below 925 psig, prevents ECCS actuation during normal system cooldown (References I and 2).

4.16 KV ES Bus Undervoltage Relays The basis for the degraded grid voltage relay setpoint is to protect the safety related electrical equipment from loss of function in the event of a sustained degraded voltage condition on the offsite power system. The timer setting prevents spurious transfer to the onsite source for transient conditions.

The loss of voltage relay and timers detect loss of offsite power condition and initiate transfer to the onsite source with minimal time delay.

The minimum and maximum degraded voltage setpoint are "as found" readings.

References (1) UFSAR, Table 7.1-3 (2) UFSAR, Section 14.1.2.10 - "Steam Generator Tube Failure' 3-37a Amendment No. 70, 73, 78, 89, 119, 157, 159, 224 AUG 0 3 2000

3.5.4 ENCORE INSTRUMENTATION This page itfily left blank (Page 3-39 ddeted) 3-38 Amenzt= No. 4AH 211 JUN . 5 1939

CJ) w Z

<C

..J D.

Z o

~

!zw

E

J a:

t; z

w a:

oo z

BOTTOM AXIAL CORE HALF

t"'"'--- .......

/ / " ,

INCORE INSTRUMENTATION SPECIFICATION AXIAL IMBALANCE INDICATION THREE MILE ISLAND NUCLEAR STATION UNIT 1 FIGURE 3.5-1 3-39a Amendment No. 61, 269

I I FW)I#4.

_I 11400RE en w

z iz -

o

~

<C ffi

E

l a:

~w a:

8z RADIAL SYMMETR IN THIS PLANE Y

- '/

~ -----.-. .-.....-.=-:_~--..:;..-----""..

'\

MIL~~~~~~~L~XUCLEAR INDIC~~~g:ICATION INCORE INS"rRUMENTATION THREE STA"rlO N UNIT 1 FIGURE 3.5-2 3-39b Amendment No. 67, 269

tJ) w z

c(

..J

£L Z

o

~

I Z

w

E

)

II:

t; Z

W II:

o o

z INCORE INSTRUMENTATION SPECIFICATION THREE MILE ISLAND NUCLEAR STATION UNIT 1 FIGURE 3.5-3 3-39c Amendment No. i+, 269

This page tinti blank 3.40 AsMeCz~n No. 4-;; 211 JUN 1 5 1339

3.5.5 ACCIDENT MONITORING INSTRU1 ENTATION Applicability Applies to the operability requirements for the instruments identified in Table 3.5-2 and Taole 3.5-3 during STARTUP, POWER OPERATION and HOT STANDBY.

-Objectives To assure operability of key instrumentation useful in diagnosing situations which could represent or lead to inadequate core cooling or evaluate and predict the course of accidents beyond the design basis.

Specification 3.5.5.1 The minimum number of channels identified for the instruments in Table 3.5-2, shall be OPERABLE. With the number of instrumentation channels less than the minimum required, restore the inoperable channel(s) to OPERABLE status within seven (7)days (48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months for pressurizer level) or be in at least HOT SHUTDOWN within the next six (6)hours and in COLD SHUTDOWN within an additional 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Prior to startup following a COLD SHUTDOWN, the minimum number of channels shown in Table 3.5-2 shall be operable.

3.5.5.2 The channels identified for the instruments specified in Table 3.5-3 shall be OPERABLE. With the number of instrumentation channels less than required, restore the inoperable Channel(s) to OPERABLE in accordance with the action specified in Taole 3.5-3.

Bases The saturation Margin Monitor provides a quidc and reliable means for determination of saturation temperature margins. Hand calculation of saturation pressure and saturation temperature margins can be easily and quickly performed as an alternate indication for the Saturation Margin Monitors.

Discharge flow from the two (2) pressurizer code safety valves and the PORV is measured by differential pressure transmitters connected across elbow taps downstream of each valve. A delta-pressure indication from each pressure transmitter is availaole in the control room to indicate code safety or relief valve line flow. An alarm is also provided in the control room to indicate that discharge from a pressurizer code safety or relief valve is occurring. In addition, an acoustic monitor is provided to detect flow in the PORV discharge line. An alarm is provided in the control room for the acoustic monitor.

3-40a Amendment No. 7$, 100

( (

TABLE 3.5-2 2

CD ACCIDENT MONITORING INSTRUMENTS 0.

a z

FUNCTION INSTRUMENTS NUMBER OF CHANNELS MINIMUM NUMBER OF CHANNELS p

1 Saturation Margin Monitor 2 1 2 Safety Valve Differential 1 per discharge line 1 per dischargu hiii Pressure Monitor 2 1' 3 PORV Position Monitor Emergency Feedwater Flow 2 per OTSG 1 per OTSG 4

2 1 CA) 5 Pressurizer Level 0

C) 4 thermocouples/core 2 thermiocot plc's ,'(ri , iar 6 Backup Incore Thermocouple Display Channel quadrant

With tha PORV Block Valve closed in accordance with Specification 3.1.12.4.a, the minimum number of channels is Zero)

i..BLE 3.5-3 POST ACCIDENT MONITORING INSTRUMENTATION REQUIRED NUMBER MINIMUM NUMBER FUNCTION INSTRUMENTS OF CHANNELS OF CHANNELS ACTION 3CD High Range Noble Gas Effluent 1.

0. a. Condenser Vacuum Pump Exhaust (RM-A5-Hi) 1 1 A 3

CD b. Condenser Vacuum Pump Exhaust (RM-G25) 1 1 A

c. Auxiliary and Fuel Handling 1 1 A z

0 Building Exhaust (RM-A8-Hi)

d. Reactor Building Purge Exhaust (RM-A9-Hi) 1 1 A

e. Reactor Building Purge Exhaust (RM-G24) 1 1 A

f. Main Steam Lines Radiation 1 A (RM-G26/RM-G27) each OTSG each OTSG

2. Containment High Range Radiation 2 2 A (RM-G22/G-23)

3. Containment Pressure 2 1 B ran Ab,,

4. Containment Water Level 0 ..

a. Containment Flood (LT-806/807) 2 1 B 0 b. Containment Sump (LT-804/805) 1 0 C

5. DELETED I

6. Wide Range Neutron Flux 2 1 A

7. Reactor Coolant System Cold Leg Water 2 1 A Temperature (TE-959, 961; TI-959A, 961A)

8. Reactor Coolant System Hot Leg Water 2 1 A Temperature (TE-958, 960; TI-958A, 960A)

9. Reactor Coolant System Pressure 2 1 A (PT-949, 963; PI-949A, 963)

10. Steam Generator Pressure (PT-950, 951, 1180, 2/OTSG 1/OTSG A 1184; PI-950A, 951A, 1180, 1184)

11. Condensate Storage Tank Water Level (LT-1 060, 2/Tank 1/Tank A 1061, 1062, 1063; LI-1 060, 1061, 1062, 1063)

TABLE 3.5-3 (Continued)

ACTIONS A. With the number of OPERABLE channels less than required by the Minimum Channels OPERABLE requirements:

1. either restore the inoperable channel(s) to OPERABLE status within 7 days of the event, or

2. prepare and submit a Special Report within 30 days following the event outlining the action taken, the cause of the inoperability and the plans and schedule for restoring the system to OPERABLE status.

B. 1. With the number of OPERABLE accident monitoring instrumen-tation channels less than the Required Channels OPERABLE requirements, restore the inoperable channel(s) to OPERABLE status within 30 days or be in at least HOT SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

2. With the number of OPERABLE accident monitoring instrumen-tation channels less than the Minimum Channels OPERABLE requirements, restore the inoperable channel(s) to OPERABLE status within 7 days or be in at least HOT SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

C. Restore the inoperable sump level instrument to OPERABLE status prior to startup following the COLD SHUTDOWN subsequent to its inoperability declaration.

3-40e Amendment No. 100 ,166 Nlov 2 4 1992

3 .5.6 Del eted Aret.,uOent No. 182 3-40f FB 10 1994

3.5.7 REMOTE SHUTDOWN SYSTEM Applicability Applies to the operability requirements for the Remote Shutdown System Panel "B" Functions in Table 3.5-4 during STARTUP, POWER OPERATION AND HOT STANDBY.

Objectives To assure operability of the instrumentation and controls necessary to place and maintain the unit in HOT SHUTDOWN from a location other than the control room.

Specification The minimum number of functions identified in Table 3.54 shall be OPERABLE. With the number of functions less than the minimum required, restore the required function to OPERABLE status within 30 days or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in HOT SHUTDOWN within an additional 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

Bases The Remote Shutdown System provides the control room operator with sufficient instrumentation and controls to place and maintain the unit in a safe shutdown condition from locations other than the control room. This capability is necessary to protect against the possibility that the control room becomes inaccessible. A safe shutdown condition is defined as HOT SHUTDOWN.

In the event that the control room becomes inaccessible, the operators can establish control at the remote shutdown panel and place and maintain the unit in HOT SHUTDOWN. Not all controls and necessary transfer switches are locatwd at the remote shutdown panel. Some controls and transfer switches will have to be operated locally at the switchgear, motor control panels, or other local stations. The unit automatically reaches HOT SHUTDOWN following a unit shutdown and can be maintained safely in HOT SHUTDOWN for an extended period of time.

3-40g Amendment No. 216 SEP 2 2 1999

TABLE 3.54 (Sheet 1 of 2)

REMOTE SHUTDOWN SYSTEM INSTRUMENTATION AND CONTROLS FunctionInstrument Required Number or Control Parameter of Functions

1. Reactor Coolant Coolant Temperature I Inlet Temperature 1 Coolant Pressure 1 Pressurizer Level I RC-V-2 1 RC-V-3 I

2. Emergency Feedwater Controls EFW A Flow Indicator 1 EFW B Flow Indicator 1 OTSG A Level I OTSG B Level I EF-V-30B I EF-V-30D I

3. OTSG 'S" Pressure Control Outlet Pressure I MS-V-4B I MS-V-8B I MS-V-8A 1 3-40i Amendment No. 216 SEP 2 2 1999

TABLE 3.5-4 (Sheet 2 of 2)

Function/nstrument Required Number or Control Parameter of Functions

4. Decay Heat Removal Cooler Outlet Temperature 1 Pump Inlet Temperature 1 Flow 1

5. Reactor Neutron Power Source Range FluK 1

6. Makeup Control and Status MU-P-IB I MU-P-IC 1 MU-P-3B 1 MU-P-3C I MU-V-2A 1 MU-V-2B I MU-V-8 1 MU-V-14B I MU-V-16C 1 MU-V-16D 1 MU-V-18 I MU-V-20 MU-V-32 Indicator 1 MU-V-37 1 DH-T-I BWST Level 1 Makeup Tank Level 1

7. Decay Heat Closed Cycle Cooling Water DC-P-1B (Auxiliary "B" Panel) I

8. Diesel Generator EG-Y-IB 1 3-j Amendment No. 216 SEP 2 2 1399

3.6 REACTOR BUILDING Apolicabilitv Applies to the CONTAINMENT INTEGRITY of the reactor building as specified below.

Obiective To assure CONTAINMENT INTEGRITY.

Specification 3.6.1 Except as provided in Specifications 3.6.6, 3.6.8, and 3.6.12, CONTAINMENT INTEGRITY (Section 1.7) shall be maintained whenever all three of the following conditions exist:

a. Reactor coolant pressure is 300 psig or greater.

b. Reactor coolant temperature is 200 degrees F or greater.

c. Nuclear fuel is in the core.

3.6.2 Except as provided in Specifications 3.6.6, 3.6.8, and 3.6.12, CONTAINMENT INTEGRITY shall be maintained when both the reactor coolant system is open to the containment atmosphere and a shutdown margin exists that is less than that for a refueling shutdown.

3.6.3 Positive reactivity insertions which would result in a reduction in shutdown margin to less than 1% Ak/k shall not be made by control rod motion or boron dilution unless CONTAINMENT INTEGRITY is being maintained.

3.6.4 The reactor shall not be critical when the reactor building internal pressure exceeds 2.0 psig or 1.0 psi vacuum.

3.6.5 Prior to criticality following refueling shutdown, a check shall be made to confirm that all manual Containment Isolation Valves (ClVs) which should be closed are closed and are conspicuously marked.

3.6.6 When CONTAINMENT INTEGRITY is required, if a CIV (other than a purge valve) is determined to be inoperable:

a. For lines isolable by two or more CIVs, the CIV(s)* required to isolate the penetration shall be verified to be OPERABLE. If the inoperable valve is not restored within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , at least one CIV* in the line will be closed or the reactor shall be brought to HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to the COLD SHUTDOWN condition within an additional 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b. For lines isolable by one CIV, where the other barrier is a closed system, the line shall be isolated by at least one closed and de-activated automatic valve, closed manual valve, or blind flange within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or the reactor shall be brought to HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to the COLD SHUTDOWN condition within an additional 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

All ClVs required to isolate the penetration.

3-41 Amendment No. 87, 4, 4-08, 190, 498, 24G, 246

3.6 REACTOR BUILDING (Continued) 3.6.7 DELETED 3.6.8 While CONTAINMENT INTEGRITY is required (see Specification 3.6.1), if a 48" reactor building purge valve is found to be inoperable perform either 3.6.8.1 or 3.6.8.2 below.

3.6.8.1 If inoperability is due to reasons other than excessive combined leakage, close the associated valve and within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months verify that the associated valve is OPERABLE.

Maintain the associated valve closed until the faulty valve can be declared OPERABLE. If neither purge valve in the penetration can be declared OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

3.6.8.2 If inoperability is due to excessive combined leakage (see Specification 6.8.5), within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months restore the leaking valve to OPERABILITY or perform either a or b below.

a. Manually close both associated reactor building isolation valves and meet the leakage criteria of Specification 6.8.5 and perform either (1) or (2) below:

(1) Restore the leaking valve to OPERABILITY within the following 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

(2) Maintain both valves closed by administrative controls, verify both valves are closed at least once per 31 days and perform the interspace pressurization test in accordance with the Reactor Building Leakage Rate Testing Program. In order to accomplish repairs, one containment purge valve may be opened for up to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months following successful completion of an interspace pressurization test.

b. Be in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

3.6.9 Except as specified in 3.6.11 below, the Reactor Building purge isolation valves (AH-V-1A&D) shall be limited to less than 31 degrees and (AH-V-1B&C) shall be limited to less than 33 degrees open, by positive means, while purging is conducted.

3.6.10 During STARTUP, HOT STANDBY and POWER OPERATION:

a. Containment purging shall not be performed for temperature or humidity control.

b. Containment purging is permitted to reduce airborne activity in order to facilitate containment entry for the following reasons.

(1) Non-routine safety-related corrective maintenance.

(2) Non-routine safety-related surveillance.

3-41 a Amendment No. 87, A, 467, 4Q8, 2A, 246

3.6 REACTOR BUILDING (Continued)

(3) Performance of Technical Specification required surveillances.

(4) Radiation Surveys.

(5) Engineering support of safety-related modifications for pre-outage planning.

(6) Purging prior to shutdown to prevent delaying of outage commencement (24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months prior to shutdown).

c. Containment purging is permitted for Reactor Building pressure control.

d. To the extent practicable the above containment entries shall be scheduled to coincide, in order to minimize instances of purging.

3.6.11 When the reactor is in COLD SHUTDOWN or REFUELING SHUTDOWN, continuous purging is permitted with the Reactor Building purge isolation valves opened fully.

3.6.12 Personnel or emergency air locks:

a. At least one door in each of the personnel or emergency air locks shall be closed and sealed during personnel passage through these air locks.

b. One door of the personnel or emergency air lock may be open for maintenance, repair or modification provided the other door of the air lock is verified closed within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , locked within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , and verified to be locked closed monthly.

Air lock doors in high radiation areas may be verified locked closed by administrative means.

c. Entry and exit is permissible to perform repairs on the affected personnel or emergency air lock components. With both air locks inoperable due to inoperability of only one door in each airlock, entry and exit is permissible for 7 days under administrative controls. With the personnel or emergency air lock door interlock mechanism inoperable, entry and exit is permissible under the control of a dedicated individual.

d. With one or more air locks inoperable for reasons other than "b" or "c" above, initiate action immediately to evaluate the overall containment leakage rate with respect to the requirements of Specification 6.8.5, verify a door is closed in the affected air lock within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , and restore the affected air lock(s) to operable status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or the reactor shall be brought to HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

3-41b Amendment 87, 108, 167, 198 201 MAY 2 7 1997

3.7 UNIT ELECTRIC POWER SYSTEM Applicability Applies to the availability of electrical power for operation of the unit auxiliaries.

Obiective To define those conditions of electrical power availability necessary to ensure:

a. Safe unit operation

b. Continuous availability of engineered safeguards Specification 3.7.1 The reactor shall not be made critical unless all of the following requirements are satisfied:

a. All engineered safeguards buses, engineered safeguards switchgear, and engineered safeguards load shedding systems are operable.

b. One 7200 volt bus is energized.

c. Two 230 kV lines are in service.

d. One 230 kV bus is in service.

e. Engineered safeguards diesel generators are operable and at least 25,000 gallons of fuel oil are available in the storage tank.

f. Station batteries are charged and in service. Two battery chargers per battery are in service.

3.7.2 The reactor shall not remain critical unless all of the following requirements are satisfied:

a. Offsite Sources:

(i.) Two 230 kV lines are in service to provide auxiliary power to Unit 1, except as specified in Specification 3.7.2e below.

(ii.) The voltage on the 230 kV grid is sufficient to power the safety related ES loads, except as specified in Specification 3.7.2.h below.

b. Both 230/4.16 kV unit auxiliary transformers shall be in operation except that within a period not to exceed eight hours in duration from and after the time one Unit I auxiliary transformer is made or found inoperable, two diesel generators shall be operable, and one of the operable diesel generator will be started and run continuously until both unit auxiliary transformers are in operation. This mode of operation may continue for a period not exceeding 30 days.

3-42 Amendment No. 188, 242, 224 AUG 0 3 24LI

c. Both diesel generators shall be operable except that from the date that one of the diesel generators is made or found to be inoperable for any reason, reactor operation is permissible for the succeeding seven days* provided that the redundant diesel generator is:

1. verified to be operable immediately;

2. within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , either:

a. determine the redundant diesel generator is not inoperable due to a common mode failure; or,

b. test redundant diesel generator in accordance with surveillance requirement 4.6.1.a.

In the event two diesel generators are inoperable, the unit shall be placed in HOT SHUTDOWN in 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . If one diesel is not operable within an additional 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period the plant shall be placed in COLD SHUTDOWN within an additional 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months thereafter.

With one diesel generator inoperable, in addition to the above, verify that:

All required systems, subsystems, trains, components and devices that depend on the remaining OPERABLE diesel generator as a source of emergency power are also OPERABLE or follow specifications 3.0.1.

,i. If one Unit Auxiliary Transformer is inoperable and a diesel generator becomes inoperable, the unit will be placed in HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . If one of the above sources of power is not made operable within an additional 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months the unit shall be placed in COLD SHUTDOWN within an additional 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months thereafter.

e. If Unit 1 is separated from the system while carrying its own auxiliaries, or if only one 230 kV line is in service, continued reactor operation is permissible provided one emergency diesel generator shall be started and run continuously until two transmission lines are restored.

f. The engineered safeguards electrical bus, switchgear, load shedding, and automatic diesel start systems shall be operable except as provided in Specification 3.7.2c above and as required for testing.

9. One station battery may be removed from service for not more than eight hours.

h. If it is determined that a trip of the Unit 1 generator, in conjunction with LOCA loading, will result in a loss of offsite power to Engineered Safeguards buses, the plant shall begin a power reduction within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and be in HOT SHUTDOWN in an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , except as provided in Specification 3.7.2.e above.

The 7-day allowed outage time of Technical Specification 3.7.2.c, which was entered on April 2, 2006 at 2100 hours0.0243 days 0.583 hours 0.00347 weeks 7.9905e-4 months , may be extended one time by an additional 3 days to complete repair and testing of EG-Y-1 A.

3-43 Amendment'No. 98,188,21 , 258

3.8 FUEL LOADING AND REFUELING Applicability: Applies to fuel loading and refueling operations.

Objective: To assure that fuel loading and refueling operations are performed in a responsible manner.

Specification 3.8.1 DELETED 3.8.2 Core subcritical neutron flux shall be continuously monitored by at least two neutron flux monitors, each with continuous indication available, whenever core geometry is being changed. When core geometry. is not being changed, at least one neutron flux monitor shall be in service.

3.8.3 At least one decay heat removal pump and cooler shall be operable.

3.8.4 During reactor vessel head removal and while loading and unloading fuel from the reactor, the boron concentration shall be maintained at not less than that required for refueling shutdown.

3.8.5 Direct communications between the control room and the refueling personnel in the Reactor Building shall exist whenever changes in core geometry are taking place.

3.8.6 During the handling of irradiated fuel in the Reactor Building at least one door in each of the personnel and emergency air locks shall be capable of being closed.* The equipment hatch cover shall be in place with a minimum of four bolts securing the cover to the sealing surfaces.

NOTE The equipment hatch may be open if all of the following conditions are met:

1) The Reactor Building Equipment Hatch Missile Shield Barrier is capable of being closed within 45 minutes,

2) A designated crew is available to close the Reactor Building Equipment Hatch Missile Shield Barrier, and

3) Reactor Building Purge Exhaust System is in service.

3.8.7 During the handling of irradiated fuel in the Reactor Building, each penetration providing direct access from the containment atmosphere to the outside atmosphere shall be either:

1. Closed by an isolation valve, blind flange, manual valve, or equivalent, or capable of being closed,* or

2. Be capable of being closed by an operable automatic containment purge and exhaust isolation valve.

Administrative controls shall ensure that the Reactor Building Purge Exhaust System is in service, appropriate personnel are aware that air lock doors and/or other penetrations are open, a specific individual(s) is designated and available to close the air lock doors and other penetrations as part of a required evacuation of containment. Any obstruction(s) (e.g., cable and hoses) that could prevent closure of an air lock door or other penetration will be capable of being quickly removed.

3-44 Amendment No. 27, 98, 236, 2-57 260

3.8.8 If any of the above specified limiting conditions for fuel loading and refueling are not met, movement of fuel into the reactor core shall cease; action shall be initiated to correct the conditions so that the specified limits are met, and no operations which may increase the reactivity of the core shall be made.

3.8.9 The reactor building purge isolation valves, and associated radiation monitors which initiate purge isolation, shall be tested and verified to be operable no more than 7 days prior to initial fuel movement in the reactor building.

3.8.10 Irradiated fuel shall not be removed from the reactor until the unit has been subcritical for at least 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

3.8.11 During the handling of irradiated fuel in the Reactor Building at least 23 feet of water shall be maintained above the level of the reactor pressure vessel flange, as determined by a shiftly check and a daily verification. If the water level is less than 23 feet above the reactor pressure vessel flange, place the fuel assembly(s) being handled into a safe position, then cease fuel handling until the water level has been restored to 23 feet or greater above the reactor pressure vessel flange.

Bases Detailed written procedures will be available for use by refueling personnel. These procedures, the above specifications, and the design of the fuel handling equipment as described in Section 9.7 of the UFSAR incorporating built-in interlocks and safety features, provide assurance that no incident could occur during the refueling operations that would result in a hazard to public health and safety. If no change is being made in core geometry, one flux monitor is sufficient. This permits maintenance on the instrumentation. Continuous monitoring of radiation levels and neutron flux provides immediate Indication of an unsafe condition. The decay heat removal pump is used.to maintain a uniform boron concentration. The shutdown margin indicated in Specification 3.8.4 will keep the core subcritical, even with all control rods withdrawn from the core (Reference 1). The boron concentration will be sufficient to maintain the core ke 5 0.99 if all the control rods were removed from the core, however only a few control rods will be removed at any one time during fuel shuffling and replacement. The kff with all rods in the core and with refueling boron concentration is approximately 0.9. Specification 3.8.5 allows the control room operator to inform the reactor building personnel of any impending unsafe condition detected from the main control board indicators during fuel movement.

Per Specification 3.8.6 and 3.8.7, the personnel and emergency air lock doors, and penetrations may be open during movement of irradiated fuel in the containment provided a minimum of one door in each of the air locks, and penetrations are capable of being closed in the event of a fuel handling accident, and the plant is In REFUELING SHUTDOWN or REFUELING OPERATION with at least 23 feet of water above the fue; seated within the reactor pressure vessel. The minimum water level specified is the basis for the accident analysis assumption of a decontamination factor of 200 for the release to the containment atmosphere from the postulated damaged fuel rods located on top of the fuel core seated In the reactor vessel. Should a fuel handling accident occur inside containment, a minimum of one door in each personnel and emergency air lock, and the open penetrations will be closed following an evacuation of containment. Administrative controls will be in place to assure closure of at least one door in each air lock, as well as other open containment penetrations, following a containment evacuation.

Specification 3.8.6 is modified by a NOTE:

NOTE -----------------------------

The equipment hatch may be open if all of the following conditions are met:

1) The Reactor Building Equipment Hatch Missile Shield Barrier is capable of being closed within 45 minutes,

2) A designated crew is available to close the Reactor Building Equipment Hatch Missile Shield Barrier, and

3) Reactor Building Purge Exhaust System is in service.

3-45 Amendment No. 167,178, 236, 215, 250,257

3.9 DELETED 3.10 MISCELLANEOUS RADIOACTIVE MATERIALS SOURCES Applicability Applies to byproduct, source, and special nuclear radioactive material sources.

Objective To assure that leakage from byproduct, source, and special nuclear radioactive material sources does not exceed allowable limits.

Specification 3.10.1 The source leakage test performed pursuant to Specification 4.13 shall be capable of detecting the presence of 0.005 pCi of radioactive material on the test sample. If the test reveals the presence of 0.005 uCi or more of removable contamination, it shall immediately be withdrawn from use, decontaminated, and repaired, or be disposed of in accordance with Commission regulations; and a Special Report of the test results that show the presence of

> .005 VCi of removable contamination shall be prepared and submitted to the NRC Region I Administrator within 90 days after completion of the test. Sealed sources are exempt from such leak tests when the source contains 100 PCi or less of beta and/or gamma emitting material or 5 iCi or less of alpha emitting material.

3.10.2 A complete inventory of licensed radioactive materials in possession shall be maintained current at all times.

Bases the limitations on removable contamination for sources requiring leak testing, including alpha emitters, are based on 10 CFR 70.39(c) limits for plutonium.

This limitation will ensure that leakage from byproduct, source, and special nuclear material sources will not exceed allowable intake values.

3-46 (Pages 3-47 to 3-54 deleted)

Amendment No. AA. 129 (3-31 -81 ) rs e sv

3.11 Handling of Irradiated Fuel Applicability Applies to the operation of the fuel handling building crane when within the confines of Unit 1 and there is any spent fuel in storage in the Unit 1 fuel handling building.

Objective To define the lift conditions and allowable areas of travel when loads to be lifted and transported with the fuel handling building crane are in excess of 15 tons or between 1.5 tons and 15 tons or consist of irradiated fuel elements.

I Specification 3.11.1 Spent fuel elements having less than 120 days for decay of their irradiated fuel shall not be loaded into a spent fuel transfer cask in the shipping cask area.

3.11.2 The key operated travel interlock system for automatically limiting the travel area of the fuel handling building crane shall be imposed whenever loads in excess of 15 tons are to be lifted and transported with the exception of fuel handling bridge maintenance.

3.11.3 The lowest surface of all loads in excess of 15 tons shall be administratively limited to an elevation one foot or less above the concrete surface at the nominal 348 ft-O in. elevation in the fuel handling building.

3.11.4 Loads in excess of hook capacity shall not be lifted, except for load testing.

3.11.5 Following modifications or repairs to any of the load bearing members, the crane shall be subjected to a test lift of 125 percent of its rated load.

3.11.6 Administrative controls shall require the use of an approved procedure with an identified safe load path for loads in excess of 3,000 lbs. handled above the Spent Fuel Pool Operating Floor (348' elevation).

3.11.7 During transfer of the cask to and from the cask loading pit, the cask will be restricted to the transfer path shown in Figure 3.11-1.

Administrative controls will be usea to ensure that all lateral movements of the cask are performed at slow bridge and trolley speeds. During this transfer the cask lifting yoke shall be oriented in the East-West direction.

Amendments No. ;#, 40,lO9 - 3-55

w l S.

LEGEND:

TRANSFER PATH ItMA~ra t PTM TO AND FROM CASK LOADING PIT (EL, 348'.O")

rTcvUJ 3.n-1 Anendment No. 109 3-56b

3.12 REACTOR BUILDING POLAR CRANE Applicability Applies to the use of the reactor building polar crane hoists over the steam generator compartments and the fuel transfer canal.

Objective To identify those conditions for which the operation of -the reactor building polar crane hoists are restricted.

Soecification 3.12.1 The reactor building polar crane hoists shall not be operated over the fuel transfer cansl when any fuel assembly is being moved.

3.12.2 During the period when the reactor vessel head is removed and irradiated fuel is in the reactor building and fuel is not being moved, the reactor building polar crane hoist shall be operated over the fuel transfer conal only where necessary and in accordance with approved operating procedures stating the purpose of such use.

3.12.3 During the period when the reactor coolant system is pressurized above 300 psig, and is above 200 F, and fuel is in the core, the reactor building polar crane hoists shall not be operated over the steam generator compartments.

Bases Restriction of use of the reactor building polar crane hoists over the fuel transfer canal when the reactor vessel head is removed to permit those operations necessary for the fuel handling and core internals operations is to preclude the dropping of materials or equipment into the reactor vessel and possibly damaging the fuel to the extent that any escape of fission products would result.

Restriction of use of the reactor building polar crane hoists over the steam generator compartments during the time when steam could be formed from dropping a load on the steam generator or reactor coolant piping resulting in rupture of the system is required to protect against a loss-of-coolant accident.

Amendment No. 115 3-57

3.13 SECONDA1Y COOLANT SYSTEM ACTIVITY Applfcability Applies to the lf~t1ng condfttons for operation when reactor coolant system pnessure is greater'than 300 ps1g or Tavg is greater than 200°F. '

Objective To limit ~he inventory of activity in the secondary system.

Specification 3.13.1 The specific'activity of the secondary coolant system shall be

.,.! 0.10 pef/gram DOSE EQUIVALENT 1-131.

3.13.2** With the specific activity of the secondary coolant system> O.lOJ,J Ci/gram DOSt EQUIVALENT 1-131, be in at least HOT STANDBY Within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

~

lhe 11!rltat10ns on secondary system specific activity ensure that the resultant off-site'radiation dose will be limited to a small -fraction of 10 CFR Part 100 linrlts in the event of a steam line rupture. This dose includes the effects of a coincident 1.0 GPM primary-to-secondary tube leak in the steam generator of the affected steam line.

Amendment No. 115 3-58

3.14 -FLOOD 3.14.1 PERIODIC INSPECTION OF THE DIKES AROUND THI ADpli cabi =t Applies to inspection of the dikes surrounding the site.

Objecliye To specify the minimum frequency for inspection of the dikes and to define the flood stage after which the dikes will be inspected.

SDecificatn 3.14.1.1 The dikes shall be inspected at least once every six months and after the river has returned to normal, following the condition defined below:

a. The level of the Susquehanna River exceeds flood stage; flood stage is defined as elevation 307 feet at the Susquehanna River Gage at Harrisburg. I Bases The earth dikes are compacted to provide a stable impervious embankment that protects the site from inundation during the design flood of 1,100,000 cfs.

The rip-rap, provided to protect the dikes from wave action and the flow of the river, continues downward into natural ground for a minimum depth of two feet to prevent undermining of the dike (References 1 and 2).

Periodic inspection, and inspection of the dikes and rip-rap after the river has returned to normal from flood stage, will assure proper maintenance of the dikes, thus assuring protection of the site during the design flood.

References (1) UFSAR, Section 2.6.5 - "Design of Hydraulic Facilitiesm (2)UFSAR, Figure 2.6 *Typical Dike Section 3-59 Amendment No. 157,182 fB 1 0 1994

3.14.2 FLOOD CONDITION FOR PLACING THE UNIT IN HOT STANDBY Applicability Applies to the river stage for placing the unit in hot standby.

Objective To define the action taken in the event river elevation reaches 302 feet at the intake structure.

Specification 3.14.2.1 If the river stage reaches elevation 302 feet at the River Water Intake Structure, corresponding to 1,000,000 cfs river flow, the unit will be brought to the hot standby condition.

Bases The dikes provided protect the plant site during the design flood of 1,100,000 cfs. The design flood corresponds to an elevation of approximately 303 feet at the River Water Intake Structure (Reference 1). The dike elevation at the intake structure is 305 I feet. The minimum freeboard is at the downstream end of the plant site where the dike elevation is 304 feet providing a freeboard of approximately one foot. Adequate freeboard is provided to protect the plant site from flooding due to wave action during the design flood (Reference 2). I Placing the unit in hot standby when the river stage reaches 302 feet elevation provides an additional margin of conservatism by assuring that adequate freeboard exists during operation of the unit.

References (1) UFSAR, Figure 2.6 "Dike Freeboard - Design Flood" (2) UFSAR, Section 2.6.4 - "Flood Studies" 3-60 Amendment No. 157 SEP 2 5 1990

3.15 AIR TREATMENT SYSTEMS 3.15.1 EMERGENCY CONTROL ROOM AIR TREATMENT SYSTEM Applicability Applies to the emergency control room air treatment system and its associated filters and to the Conntrol Rnnm B*nImnop indanry Note The Control Room Envelope (CRE) boundary may be opened intermittently under administrative control.

Objective To specify minimum availability and efficiency for the emergency control room air treatment system and its associated filters.

Specifications 3.15.1.1 Except as specified in'Specification 3.15.1.3 below, both emergency treatment systems, AH-E1 8A fan and associated filter AH-F3A and AH-E1t8B fan and associated filter AH-F3B shall be operable at all times, per the requirements of Specification 3.15.1.2 below; when containment integrity is required and when irradiated fuel handling operations are in progress.

3.15.1.2 a. The results of the in-place DOP and halogenated hydrocarbon tests at design flows on HEPA filters and charcoal absorber banks shall show < 0.05% DOP penetration and < 0.05% halogenated hydrocarbon penetration, except that the DOP test will be conducted with prefilters installed.

b. The results of laboratory carbon sample analysis shall show > 95% radioactive methyl iodide decontamination efficiency when tested in accordance with ASTM D3803-1989 at 300C, 95% R.H.

c. The fans AH-E18A and B shall each be shown to operate within +/- 4000 CFM of design flow (40,000 CFM).

d. The Control Room Envelope boundary shall be maintained such that the CRE occupant dose from a large radioactive release does not exceed the calculated dose in the licensing basis consequences analyses for DBA's and that CRE occupants are protected from hazardous chemicals and smoke.

3.15.1.3 From and after the date that one control room air treatment system is made or found to be inoperable for reason other than 3.15.1.2d, reactor operation or irradiated fuel handling operations are permissible only during the succeeding 7 days provided the redundant system is verified to-be OPERABLE.

3.15.1.4 From the date that both control room air treatment systems are made or found to be inoperable for a reason other than 3.15.1.2d, or ifthe inoperable system of 3.15.1.3 cannot be made operable in 7days, irradiated fuel handling operations shall be terminated in 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months and reactor shutdown shall be initiated and the reactor shall be in COLD SHUTDOWN within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3-61 Amendment No. 55, 67, 76, 149,19, 226, 264

3.15.1.5 From the date that one or both control room air treatment systems are made or found to be inoperable due to an inoperable Control Room Envelope boundary, actions to implement mitigating actions shall be initiated immediately, verification that the mitigating actions ensure ORE occupant exposures to radiological, chemical, and smoke hazards will not exceed limits shall be performed within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , and the CRE boundary sh...all -be -restored to OP EERABLE status. within

I 90 days. Irradiattedu fuel handling operations shall be terminated immediately. If the CRE boundary cannot be made OPERABLE in 90 days, reactor shutdown shall be initiated and the reactor shall be in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .

Bases The emergency control room air treatment systems AH-E1 8A and 18B and their associated filters are two independent systems designed to filter the control room atmosphere for intake air and/or for recirculation during control room isolation conditions. Air is recirculated and filtered in the Control Room Envelope (CRE) and within a CRE boundary that limits the inleakage of unfiltered air. Ductwork, valves or dampers, doors, barriers, and instrumentation also form part of the systems. The control building is designed to be automatically placed in the recirculation mode upon an RM-A1 high radiation alarm, air tunnel device actuation, ESAS actuation or station blackout condition. The emergency control room air treatment fan and filter AH-E1 8A or B and AH-F3A or B is designed to be manually started by the operator if a high radiation alarm from RM-A1 is indicated.

Prefilters and high efficiency particulate absolute (HEPA) filters are installed before the charcoal absorbers to prevent clogging of the iodine adsorbers and remove particulate activity. The charcoal adsorbers are installed to reduce the potential intake of radioiodine to the control room.

If the efficiencies of the HEPA filters and charcoal adsorbers are as specified, the resulting doses will be less than the allowable levels stated in Criterion 19 of the General Design Criteria for Nuclear Power Plants, Appendix A to 10 CFR Part 50. Operation of the fans significantly different from the design flow will change the removal efficiency of the HEPA filters and charcoal adsorbers.

If one system is found to be inoperable, for reasons other than an inoperable control room envelope boundary, there is no immediate threat to the control room and reactor operation or refueling may continue for a limited period of time while repairs are being made. If the system cannot be repaired within 7 days, the reactor is shut down and brought to cold shutdown within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months and irradiated fuel handling operations are terminated within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

If both systems are found to be inoperable, for reasons other than an inoperable control room envelope boundary, reactor shutdown shall be initiated and the reactor will be brought to cold shutdown in 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months and irradiated fuel handling operations will be stopped within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

In-place testing for penetration and system bypass shall be performed in accordance with ANSI N510-1980. Charcoal samples shall be obtained in accordance with ANSI N509-1980. Any HEPA filters found defective shall be replaced with filters qualified according to Regulatory Guide 1.52, Revision 2. Any lot of charcoal adsorber which fails the laboratory test criteria shall be replaced with new adsorbent qualified according to ASTM D3803-1989.

3-62 Amendment No,. 55 Ju.c 3, 1980, 226, 264

3.15.2 REACTOR BUILDING PURGE AIR TREATMENT SYSTEM Deleted 3-62c Amendment No. 55, 67, 76,108, 149,.167, 2266, 245, 264

3.15.3 AUXILIARY AND FUEL HANDLING BUILDING AIR TREATMENT SYSTEM Deleted 3-62d Amendment No. 56, 76, 122, 157, 177, 215, 248, 264

3.15.4 Fuel Handling Building ESF Air Treatment System Applicability Applies to the Fuel Handling Building (FHB) ESF Air Treatment System and its associated filters.

Obiective To specify minimum availability and efficiency for the FHB ESF Air Treatment System and its associated filters for irradiated fuel handling operations.

Specifications 3.15.4.1 Prior to fuel movement each refueling outage, two trains shall be operable. One train shall be operating continuously whenever TMI-1 irradiated fuel handling operations in the FHB are in progress.

a. With one train inoperable, irradiated fuel handling operations in the Fuel Handling Building may continue provided the redundant train is operating.

b. With both trains inoperable, handling of irradiated fuel in the Fuel Handling Building shall be suspended until such time that at least one train is operable and operating.

Any fuel assembly movement in progress may be completed.

3.15.4.2 A FHB ESF Air Treatment System train is operable when its surveillance requirements are met and:

a. The results of the in-place DOP and halogenated hydrocarbon tests at design flows on HEPA filters and carbon adsorber banks shall show < 0.05% DOP penetration and < 0.05% halogenated hydrocarbon penetration.

b. The results of laboratory carbon sample analysis shall show > 95% radioactive methyl iodide decontamination efficiency when tested in accordance with ASTM D3803-1989 at 30WC, 95% R.H.

c. The fans AH-E-1 37A and B shall each be shown to operate within + 10% of design flow (6,000 SCFM).

Bases Compliance with these specifications satisfies the condition of operation imposed by the Licensing Board as described in NRC's letter dated October 2, 1985, item 1.c.

The FHB ESF Air Treatment System contains, controls, mitigates, monitors and records radiation release resulting from a TMI-1 postulated spent fuel accident in the Fuel Handling Building as described in the FSAR. Offsite doses will be less than the 10 CFR 100 guidelines for accidents analyzed in Chapter 14 (Reference 1).

3-62e Amendment No. 122, 457, 226 22

'.L'J

3.16 SHOCK SUPPRESSORS (SNUBBERS)

LIMITING CONDITION FOR OPERATION 3.16.1 Each safety related snubber shall be OPERABLE.

APPLICABILITY:

Whenever the system protectedtby the snubber is required to be OPERABLE.

ACTION:

With one or more snubbers inoperable, within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months replace or restore the inoperable snubber(s) to OPERABLE status and perform an engineering evaluation per Specification 4.17.1.g.2 on the attached component or declare the attached system inoperable and follow the appropriate action statement for that system.

BASES Snubbers are designed to prevent unrestrained pipe motion under dynamic loads as might occur during an earthquake or severe transient, while allowing normal thermal motion during startup and shutdown. The consequence of an inoperable snubber due to failure to activate (lockup) is an increase in the probability of structural damage to piping as a result of a seismic or other event initiating dynamic loads. The consequence of snubber inoperability due to failure to extend or retract is an increase in the probability of structural damage to piping as a result of thermal motion. It is therefore required that all snubbers required to protect the primary coolant system or any other safety system or component which is required to be operable must also be operable. During plant conditions other than operating, snubbers on those systems that are required to be operable during that plant condition are also required to be operable.

3-63 Amendment No. SO, I0

INTENTIONALLY BLANK PAGES 3-64 through 3-79 I

'IV Amendment No. 10, 6t, Pa, 3-64 106

3 .17 REACTOR BUILDING AIR TEMPERATURE Applicability This specification applies to the average air temperature of the primary containment during power operations.

Objective To assure that the temperatures assumed in the structural analysis of the Reactor Building are not exceeded.

Specification 3.17.1 Primary containment average air temperature above Elev. 320 shall not exceed 130 0 F and average air temperature below Elev. 320 shall not exceed 1200 F.

3.17.2 If, while the reactor is critical, the above stated temperature limits are exceeded, the average temperature shall be reduced to the above limits within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , or be in at least HOT STANDBY within the next six (6) hours and in COLD SHUTDOWN within the following thirty (30) hours.

3.17.3 The primary containment average air temperature shall be calculated as follows:

a) The average temperature above elevation 320 will be calculated by taking the arithmetic average of the temperatures from at least 13 locations above elevation 320. A list of locations is given below.

b) The average temperatures below elevation 320 will be calculated by taking the arithmetic average of the temperatures from at least 4 locations below Elev. 320 A list of locations is given below.

Location Location SE Wall Elev. 352' NE Wall Elev 314'*

NW Sec Shield Flev 352' S Wall Elev 314T*

NE Sec Shield Elev 352' NW Wall Elev 314'*

E Wall Elev 382' E Sec Shield Elev 352' NE Sec Shielr-lev 352' S Rx Wall Elev 321' NW Sec Shield Elev 352' NE Wall Elev 287'*

NE Sec Shield Elev 352' S Wall Elev 287'*

NW Sec Shield Elev 352' NW Wall Elev 287'*

NW Wall Elev 352' E Sec Shield Elev 352' E Wall Elev 45TO NW Sec Shield Elev 287'*

S Sec Shield-TTev 352' NE Sec Shield Elev 364' NW Sec Shield Elev 352' N Sec Shield Elev 3Wt NOTE: (1)

Detectors located below elev 320'.

3-80 Amendment No. {1, 15, 157 SEP 2 5 1990

THIS PAGE LEFT BLANK INTENTIONALLY A

3-86 (Pages 3-87 through 3-94 deleted)

Anendnent No. 32, 101 0 146 NOv 3 O 1988

3.19 CONTAINMENT SYSTEMS 3.19.1 CONTAINMENT STRUCTURAL INTEGRITY Appl icability:

Applies to the structural integrity of the reactor building.

OBJECTIVE:

To verify containment structural integrity in accordance with the inservice I tendon surveillance program for the reactor building prestressing system.

Specification 3.19.1.1 With the structural integrity of the containment not conforming to the inservice tendon surveillance program requirements of 4.4.2.1 for the tendon lift off forces, perform an engineering evaluation of the structural integrity of the containment to determine if COLD SHUTDOWN is required. The margins available in the containment design may be considered during the investigation. If the acceptability of the containment tendons cannot be established within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , restore the structural integrity to within the limits within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

I 3.19.1.2 DELETED 3-95 Amendment No. Ps, fgP, 187

,;i; 1994

3.20 (DELETED)

I Arendnint No. X,C13 9 3-9Sa MAY 13 1988

3.21 RADIOACTIVE EFFLUENT INSTRUMENTATION Deleted 3.21.1 Radioactive Liquid Effluent Instrumentation Deleted 3.21.2 Radioactive Gaseous Process and Effluent Monitoring Instrumentation Deleted 3.22 RADIOACTIVE EFFLUENTS Deleted 3.22.1 Liquid Effluents Deleted 3.22.2 Gaseous Effluents Deleted 3.22.3 Solid Radioactive Waste Deleted 3.22.4 Total Dose Deleted 3.23 RADIOLOGICAL ENVIRONMENTAL MONITORING Deleted 3.23.1 Monitoring Program Deleted 3.23.20 Land Use Census Deleted 3.23.3 Interlaboratory Comparison Program Deleted 3-96 (3-97 thru 3-127 deleted)

Amendment No. 77, 7P, V, PO, M, IPA, I, 1?9, 17, 1#9, 107, [7, I,

177, }0P, Ig, 197 OCT 2 1995

3.24 Reactor Vessel Water Level Indication Atnlicabilitv Applies to the operability requirements for the Reactor Vessel Water Level Indication when the reactor is critical.

Objectives To assure operability of the Reactor Vessel Water Level instrumentation which may be useful in diagnosing situations which could represent or lead to inadequate core cooling.

Spec ifi cat ion Two channels of the Reactor Vessel Water Level Instrumentation System shall be OPERABLE.

If one channel becomes INOPERABLE that channel shall be returned to OPERABLE within 30 days. If the channel is not restored within 30 days, within 14 days, submit a special report to the NRC providing the details of the inoperability, to include cause, action being taken and projected date for return to OPERABLE status.

With no channels OPERABLE, one channel shall be restored to OPERABLE status within 7 days. If at least one channel is not restored within 7 days, within 14 days, submit a special report to the NRC providing the details of the inoperability, to include cause, action being taken and projected date for return to OPERABLE status.

Bases The Reactor Vessel Water Level Indication (Reference 1) provides indication of the trend in water inventory in the hot legs and reactor vessel during the approach to inadequate core cooling (ICC). In this manner additional information may be available to the operator to diagnose the approach of ICC and to assess the adequacy of responses taken to restore core cooling.

Each Reactor Vessel Water Level channel is comprised of a hot leg level indication and a reactor vessel level indication.

The system is required to be operable (as defined previously) when the plant is critical.

The system is an information system to aid the operator during the approach to inadequate core cooling. There is not regulatory limit for this system.

Inoperability of the system removes the availability of an information system. Other useful instrumentation for inadequate core cooling will be available. The Subcooling Margin Indication System is relied upon to determine subcooling margin when the reactor coolant pumps are operating or when natural circulation can be verified. When natural or forced circulation cannot be verified, the margin to saturation is determined by manual calculation, based on reactor coolant temperature (incore thermocouples) and pressure indications available in the control room and steam tables. See Tech. Spec. 3.5.5.

3-128 Amendment No. 147, 157, 191, 254

4. SURVEILLANCE STANDARDS 4.0.1 During Reactor Operational Conditions for which a Limiting Condition for Operation (LCO) does not require a system/component to be operable, the associated surveillance requirements do not have to be performed. Prior to declaring a system/

component operable, the associated surveillance requirement must be current.

Failure to perform a surveillance within the specified Frequency shall be failure to meet the LCO except as provided in 4.0.2.

4.0.2 If it is discovered that a surveillance was not performed within its specified frequency, then compliance with the requirement to declare the LCO not met may be delayed, from the time of discovery, up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or up to the limit of the specified frequency, whichever is greater. This delay period is permitted to allow performance of the Surveillance. A risk evaluation shall be performed for any surveillance delayed greater than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and the risk impact shall be managed.

If the surveillance is not performed within the delay period, the LCO must immediately be declared not met, and the applicable condition(s) must be entered.

When the surveillance is performed within the delay period and the surveillance is not met, the LCO must immediately be declared not met, and the applicable condition(s) must be entered.

Bases SR 4.0.1 establishes the requirement that SRs must be met during the REACTOR OPERATING CONDITIONS or other specified conditions in the SRs for which the requirements of the LCO apply, unless otherwise specified in the individual SRs. This specification is to ensure that surveillances are performed to verify the OPERABILITY of systems and components, and that variables are within specified limits. Failure to meet a surveillance within the specified frequency, in accordance with definition 1.25, constitutes a failure to meet an LCO.

Surveillances may be performed by means of any series of sequential, overlapping, or total steps provided the entire Surveillance is performed within the specified frequency.

Systems and components are assumed to be OPERABLE when the associated SRs have been met. Nothing in this Specification, however, is to be construed as implying that systems or components are OPERABLE when:

a. The system or components are known to be inoperable, although still meeting the SRs or

b. The requirements of the Surveillance(s) are known to be not met between required Surveillance performances.

Surveillances do not have to be performed when the unit is in a REACTOR OPERATING CONDITION or other specified condition for which the requirements of the associated LCO are not applicable, unless otherwise specified. Unplanned events may satisfy the requirements (including applicable acceptance criteria) for a given SR. In this case, the unplanned event may be credited as fulfilling the performance of the SR. This allowance includes those SRs whose performance is normally precluded in a given REACTOR OPERATING CONDITION or other specified condition.

4-1 Amendment No. 16, 99,100,121, 138, 181, 256

4.1 OPERATIONAL SAFETY REVIEW Applicability Applies to items directly related to safety limits and limiting conditions for operation.

Obiective To specify the minimum frequency and type of surveillance to be applied to unit equipment and conditions.

Specification 4.1.1 The minimum frequency and type of surveillance required for reactor protection system, engineered safety feature protection system, and heat sink protection system instrumentation when the reactor is critical shall be as stated in Table 4.1-1.

4.1.2 Equipment and sampling test shall be performed as detailed in Tables 4.1-2, 4.1-3, and 4.1-5.

4.1.3 Each post-accident monitoring instrumentation channel shall be demonstrated OPERABLE by the performance of the check, test and calibration at the frequencies shown in Table 4.1-4.

4.1.4 Each remote shutdown system function shown in Table 3.5-4 shall be demonstrated OPERABLE by the performance of the following check, test, and calibration:

a) Perform CHANNEL CHECK for each required instrumentation channel that is normally energized every 31 days.

b) Verify each required control circuit and transfer switch is capable of performing the intended function every refueling interval.

c) Perform CHANNEL CALIBRATION for each required instrumentation channel every refueling interval (excludes source range flux).

Bases Check Failures such as blown instrument fuses, defective indicators, or faulted amplifiers which result in "upscale" or "downscale" indication can be easily recognized by simple observation of the functioning of an instrument or system. Furthermore, such failures are, in many cases, revealed by alarm or annunciator action. Comparison of output and/or state of independent channels measuring the same variable supplements this type of built-in surveillance. The acceptance criteria for the daily check of the Makeup Tank pressure instrument will be maintained within the error used to develop the plant operating limit. Based on experience in operation of both conventional and nuclear systems, when the unit is in operation, the minimum checking frequency stated is deemed adequate for reactor system instrumentation.

4-2 Amendment No. 78, 423, 438, 456,46Z, 458,484,248, 221,, 227

TABLE 4.1-1 INSTRUMENT SURVEILLANCE REQUIREMENTS CHANNEL DESCRIPTION CHECK TEST CALIBRATE REMARKS

1. Protection Channel NA Q NA I Coincidence Logic

2. Control Rod Drive Trip NA a NA (1) Includes independent testing of shunt Breaker and Regulating trip and undervoltage trip features. I Rod Power SCRs

3. Power Range Amplifier D(1) NA (2) (1) When reactor power is greater than 15%.

(2) When above 15% reactor power run a heat balance check once per shift. Heat balance calibration shall be performed whenever heat balance exceeds indicated neutron power by more than two percent.

4. Power Range Channel S S/A M(1)(2) (1) When reactor power is greater than 60% verify imbalance I using incore instrumentation.

(2) When above 15% reactor power calculate axial offset upper and lower chambers after each startup if not done within the previous seven days.

5. Intermediate Range Channel S(1) P S/U NA (1) When in service.

6. Source Range Channel S(1) P S/A NA (1) When in service.

7. Reactor Coolant Temperature S S/A F Channel I

TABLE 4.1-1 (Continued) 3 CD CHANNEL DESCRIPTION CHECK TEST CALIBRATE REMARKS CD z3 8. High Reactor Coolant S S/A R 0 Pressure Channel

9. Low Reactor Coolant S S/A R Pressure Channel

10. Flux-Reactor Coolant Flow S S/A F Comparator

11. Reactor Coolant Pressure-Temperature S S/A R See Notes (a) and (b).

Comparator

12. Pump Flux Comparator S S/A R ro

13. High Reactor Building S S/A F Pressure Channel

14. High Pressure Injection NA Q NA Logic Channels

15. High Pressure Injection Analog Channels R (1) When reactor coolant system is pressurized

a. Reactor Coolant S(1) M Pressure Channel above 300 psig or Tare is greater than 200°F

16. Low Pressure Injection NA 0 NA Logic Channel

17. Low Pressure Injection 0 Analog Channels

a. Reactor Coolant S(1) M R (1) When reactor coolant system is pressurized Pressure Channel above 300 psig or T.ve is greater than 200OF

15. Reactor Building Emergency NA Q NA Cooling and Isolation System Logic Channel

(C TABLE 4.1-1 (Continued)

C CHANNEL DESCRIPTION CHECK TEST CALIBRATE REMARKS

19. Reactor Building Emergency Cooling and Isolation System Analog Channels

a. Reactor Building 5(1) M(l) F (1) When CONTAINMENT INTEGRITY is 4 psig Channels required.

b. RCS Pressure 1600 psig S( 1) M(1) NA (I) When RCS Pressure > 1800 psig.

I4

c. Deleted F (1) When CONTAINMENT INTEGRITY is

d. Reactor Bldg. 30 psi M(1 pressure switches required.

e. Reactor Bldg. Purge W(l) M(1)(2) F (I) When CONTAINMENT INTEGRITY is atI required.

Line High Radiation (AH-V-1A/D) M(l) (1) When CONTAINMENT INTEGRITY is

.4

f. Line Break Isolation W(I) R Signal (ICCW & NSCCW) required.

I-

20. Reactor Building Spray NA Q NA System Logic Channel CP3

21. Reactor Building Spray NA M F N., N) 30 psig pressure switches C?) N CLf

< Vn S NA R

22. Pressurizer Temperature Channels S(1) NA R (1) Check with Relative Position Indicator

23. Control Rod Absolute Position S(l) NA (1) Check with Absolute Position Indicator.

24. Control Rod Relative Position

25. Core Flooding Tanks

a. Pressure Channels Coolant NA NA F

b. Level Channels NA NA F S NA R

26. Pressurizer Level Channels

TABLE 4.1-1 (Continued) 3 CHANNEL DESCRIPTION CHECK TEST CALIBRATE REMARKS CD

27. Makeup Tank Instrument Channels:

z0 C,,

a. Level D(1) NA R (1) When Makeup and Purification System is in operation.

b. Pressure D(1) NA R

28. Radiation Monitoring Systems*

a. DELETED (1) Using the installed check source when background is less than twice the expected

b. DELETED increase in cpm which would result from the check source alone. Background readings

c. DELETED greater than this value are sufficient in

-0 themselves to show that the monitor is

d. RM-A2P (RB Atmosphere particulate) n W(1)(4) M(4) E(4) functioning.

e. RM-A21 (RB Atmosphere iodine)

W(1)(4) M(4) Q(4) (2) DELETED r 3CD

f. RM-A2G (RB Atmosphere gas)

W(1)(4) M(4) E(4) (3) DELETED (4) RM-A2 operability requirements are given in T.S. 3.1.6.8 3-

29. High and Low Pressure N/A N/A R Injection Systems:

Flow Channels I

0.

Includes only monitors indicated under this item. Other T.S. required radiation monitors are included in specifications 3.5.5.2, 4.1.3, Table 3.5-1 item C.3.f, and Table 4.1-1 item 19e.

( (

TABLE 4.1-1 (Continued)

CHANNEL DESCRIPTION CHECK TEST CALIBRATE REMARKS 3

(D

0. 30. Borated Water Storage W NA R Tank Level Indicator CD

31. DELETED z

0 in

32. DELETED

33. Containment Temperature NA NA F I

34. Incore Neutron Detectors M(1) NA NA (1) Check functioning; including functioning of computer readout or recorder readout when reactor power is greater than

-V 15%.

ID cor 35. Emergency Plant Radiation M(1) NA F (1) Battery Check.

Instruments

36. (DELETED)

37. Reactor Building Sump NA NA R Level

TABLE 4.1-1 (Continued)

CD CHANNEL DESCRIPTION CHECK TEST CALIBRATE REMARKS (D

38. OTSG Full Range Level W NA R a

39. Turbine Overspeed Trip NA R NA

40. Deleted

41. Deleted

42. Diesel Generator NA NA R Protective Relaying

43. 4 KV ES Bus Undervoltage TA)

Relays (Diesel Start)

a. Degraded Grid NA M(1) A (1) *Relay operation will be checked by local test pushbuttons.

b. Loss of Voltage NA M(1) R (1) .Relay operation will be checked by local test pushbuttons.

44. Reactor Coolant Pressure s(1) M R (1) When reactor coolant system is DH Valve Interlock Bistable pressurized above 300 psig or Ta.e is greater than 200 0 F.

.45. Loss of Feedwater Reactor Trip s(1) S/A(1) R (1) When reactor power exceeds 7%

power.

46. Turbine Trip/Reactor Trip s(1) S/A(1) F (1) When reactor power exceeds 45%

power.

47. a. Pressurizer Code Safety Valve s(1) NA F (1)When Tae is greater than 525°F.

and PORV Tailpipe Flow Monitors (1)

b. PORV - Acoustic/Flow NA M(1) R When Tave is greater than 5250 F.

48. PORV Setpoints NA M(1) R (1) Per Specification 3.1.12 excluding valve operation.

TABLE 4.1-1 (Continued)

CHANNEL DESCRIPTION CHECK TEST CALIBRATE REMARKS CD

49. Saturation Margin Monitor S(1) M(1) R (1) When T,,, is greater than 525 0 F.

3 CD

50. Emergency Feedwater Flow NA M(1) F (1) When Tave is greater than 250 0 F.

z Instrumentation 0

51. Heat Sink Protection System

a. EFW Auto Initiation (1) Includes logic test only.

A Instrument Channels rD 1. Loss of Both Feedwater NA Q(1) F Pumps A 2. Loss of All RC Pumps NA Q(1) R

3. Reactor Building NA Q F Pressure

4. OTSG Low Level W Q R 4 b. MFW Isolation OTSG Low NA Q R I, Pressure 13 c. EFW Control Valve Control System R

1. OTSG Level Loops W Q

2. Controllers W NA R

d. HSPS Train Actuation Logic NA Q(1) R

52. Backup Incore Thermocouple M(1) NA R (1) When Tave is greater than 250 0 F.

Display

53. Deleted

54. Reactor Vessel Water Level NA NA R Notes (a) If the as-found channel setpoint is conservative with respect to the Allowable Value but outside its predefined as-found tolerance then the channel shall be evaluated to verify that it is functioning as required before returning the channel to service. Enter condition into Corrective Action Program.

(b) The instrument channel setpoint shall be reset to a value that is within the as-left tolerance around the Nominal Trip Setpoint (NSP) at the completion of the surveillance; otherwise, the channel shall be declared inoperable. Setpoints more conversative than the NSP are acceptable provided that the as-found and as-left tolerances apply to the actual setpoint implemented in the surveillance procedures to confirm channel performance. The NSP and the methodologies used to determine the as-found and the as-left tolerances are specified in a document incorporated by reference into the UFSAR.

TABLE 4.1-2 MINIMUM EQUIPMENT TEST FREQUENCY Item Test Frequency

1. Control Rods Rod drop times of all Each Refueling shutdown full length rods

2. Control Rod Movement of each rod Every 92 days, when Movement reactor is critical

3. Pressurizer Setpoint In accordance with the Safety Valves Inservice Testing Program

4. Main Steam Setpoint In accordance with the Safety Valves Inservice Testing Program

5. Refueling System Functional Start of each Interlocks refueling period

6. (Deleted)

7. Reactor Coolant Evaluate Daily, when reactor System Leakage coolant system temperature is greater than 525 degrees F (Not applicable to primary-to-secondary leakage.)

8. (Deleted)

9. Spent Fuel Functional Each refueling period Cooling System prior to fuel handling

10. Intake Pump (a) Silt Accumulation - Not to exceed 24 months House Floor Visual inspection (Elevation of Intake Pump 262 ft. 6 in.) House Floor (b) Silt Accumulation Quarterly Measurement of Pump House Flow

11. Pressurizer Block Functional* Quarterly Valve (RC-V2)

12. Primary to Secondary Evaluate Every 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months (Note: Not required Leakage to be performed until 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after establishment of steady state operation.)

Function shall be demonstrated by operating the valve through one complete cycle of full travel.

4-8 Amendment No. &&,68. 7-8, 449, 1-7-5, 1-98, 2-14-, 246, 261

( ( C TABLE 4.1-3 MINIMUM SAMPLING FREQUENCY Item Check Freguencv

1. Reactor Coolant a. Specific Activity Determination to compare to the At least once each 7 days during POWER l00/! PCi/gm limit OPERATION, HOT STANDBY, START-UP, I and HOT SHUTDOWN.

b. Isotopic Analysis for DOSE EQUIVALENT i) I per 14 days during power operations.

1-131 Concentration ii) One Sample between 2 and 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months following a THERMAL POWER change exceeding 15% of the RATED THERMAL POWER within a one hour period during power operation, start-up and hot standby.

iii) # Once per 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , whenever the specific activity exceeds 0.35 I pCitgram DOSE EQUIVALENT 1-:131 or 100/E pCi'gram during all modes but refueling.

c. Radiochemical for E Determination I per 6 months* during power operation.

d. Chemistry (Cl, F and 02) 5 times/week when T,, IS GREATER THAN 200 0F.

e. Boron concentration 2 times/week

f. Tritium Radioactivity Monthly

2. Borated Water Storage Boron concentration Weekly and after each makeup when reactor coolant Tank Water Sample system pressure is greater than 300 psig or T.o is greater than 200 0F.

3. Core Flooding Tank Boron concentration Monthly and after each makeup when RCS pressure is Water Sample greater than 700 psig.

TABLE 4.1-3 Cont'd Item Check Frequency (D 4. Spent Fuel Pool Boron Concentration greater than Weekly CL Water Sample or equal to 600 ppmb z 5. Secondary Coolant Isotopic analysis for DOSE At least once per 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months when.

EQUIVALENT 1-131 concentration reactor coolant system pressure is greater than 300 psig or Tav is greater than 200°F.

6. Deleted 0A

7. Deleted

8. Deleted

9. Deleted

10. Deleted CY0 11. Deleted

12. Deleted

Until the specific activity of the-primary coolant system is restored within its limits.

Sample to be taken after a minimum of 2 EFPD and 20 days of POWER OPERATION have elapsed since the reactor was last subcritical for 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or longer.

Deleted Deleted

( (

TABLE 4.1-4 0

CD POST ACCIDENT MONITORING INSTRUMENTATION

3 FUNCTION INSTRUMENTS CHECK TEST CALIBRATE REMARKS z 1. Noble Gas Effluent 0

a. Condenser Vacuum Pump Exhaust (RM-A5-Hi) W M F (1) Using the installed check source when background is less than twice the expected increase in cpm which would result from the check source alone.

Background readings greater than this value are sufficient in themselves to show 0 that this monitor is functioning.

b. Condenser Vacuum Pump W(1) M F Exhaust (RM-G25)

c. Auxiliary and Fuel Handling W M F Building Exhaust (RM-A8-Hi) 0 w

d. Reactor Building Purge W M F Exhaust (RM-A9-Hi)

e. Reactor Building Purge W(1) M F Exhaust (RM-G24)

f. Main Steam Lines W(1) M F Radiation (RM-G26/RM-G27)

2. Containment High Range W M R Radiation (RM-G22/G23)

3. Containment Pressure W N/A F

4. Containment Water Level W N/A R

5. DELETED I

6. Wide Range Neutron Flux W N/A F

( !

TABLE 4.1-4 (Continued)

POST ACCIDI ENT MONITORING INSTRUMENTATION FUINCTION INSTRUMENTS CHECK TEST CALIBRATE REMARKS 3

CD 03 7. Reactor Coolant System Cold Leg W N/A, R Water Temperature R

CD (TE-959, 961; TI-959A, 961A) z 8. Reactor Coolant System Hot Leg W N/A R I (TE-958, 960; TI-958A, 960A)

9. Reactor Coolant System Pressure W N/A R (PT-949, 963; PI-949A, 963) 0

10. Steam Generator Pressure W N/A R (PT-950, 951, 1180, 1184; PI-950A, 951A, 1180, 1184)

11. Condensate Storage Tank Water W N/A F 0

0* Level (LT-1060, 1061, 1062, 1063; LI-1 060, 1061, 1062, 1063)

TABLE 4.1-5 SYSTEM SURVEILLANCE REQUIREMENTS Item Test Frequency

1. Core Flood Tank a. Verify two core flood tanks S each contain 940 +/- 30 Wft borated water.

b. Verify that two core flood S tanks each contain 600 +/- 25 psig.

c. Verify CF-V-1 A&B are fully open. S

d. Verify power is removed from M CF-V-1 A&B and CF-V-3A&B valve operators

2. Reactor Building a. Verify the TSP baskets R Emergency Sump contain > 18,815 lbs and pH Control < 28,840 lbs of TSP.

System

b. Verify that a sample from R the TSP baskets provides adequate pH adjustment of borated water.

4-1Oc Amendment No. 225, 263

4.2 REACTOR COOLANT SYSTEM INSERVICE AND TESTING Apolicability This technical specification applies to the inservice inspection (ISI) and inservice testing (IST) of the reactor coolant system pressure boundary and portions of other safety oriented system pressure boundaries.

Obiective The objective of the ISI and IST programs is to provide assurance of the continuing integrity of the reactor coolant system while at the same time minimizing radiation exposure to personnel in the performance of inservice inspections and tests.

Specification 4.2.1 ISI of ASME Code Class 1, Class 2, and Class 3 components shall be performed in accordance with Section XI of the ASME Boiler and Pressure Vessel Code andapplicable Addenda as required by 10 CFR 50, Section 50.55a; except where specific written relief has been granted by the NRC.

4.2.2 IST of ASME Code Class 1, Class 2 and Class 3 pumps and valves shall be performed in accordance with the ASME Code for Operation and Maintenance of Nuclear Power Plants (ASME OM Code) and applicable Addenda as required by 10 CFR 50, Section 50.55a, except where specific written relief has been granted by the NRC.

4.2.3 (Deleted) 4.2.4 The accessible portions of one reactor coolant pump motor flywheel assembly will be ultrasonically inspected within the first ISI period, two reactor coolant pump motor flywheel assemblies within the first two ISI periods and all four by the end of the 10 year inspection interval. However, the U.T. procedure is developmental and will be used only to the extend that it is shown to be meaningful. The extent of coverage will be limited to those areas of the flywheel which are accessible without motor disassembly, i.e., can be reached through the access ports. Also, if radiation levels at the lower access ports are prohibitive, only the upper access ports will be used.

4-11 Amendment No. 1-, 29,64, 650, 7., :18, 72, 266

4.2.5 (Deleted) 4.2.6 (Deleted) 4.2.7 A surveillance program for the pressure isolation valves between the primary coolant system and the low pressure injection system shall be as follows:

1. Periodic leakage testing(a) at test differential pressure greater than 150 psid shall be accomplished for the valves listed in Table 3.1.6.1 for the following conditions:

(a) prior to achieving hot shutdown after returning the valve to service following maintenance repair or replacement work, and (b) prior to achieving hot shutdown following a cold shutdown of greater than 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months duration unless testing has been performed within the previous 9 months.

2. Whenever integrity of a pressure isolation valve listed in Table 3.1.6.1 cannot be demonstrated, the integrity of the other remaining valve in each high pressure line having a leaking valve shall be determined and recorded daily. In addition, the position of one other valve located in the high pressure piping shall be recorded daily.

(a)

To satisfy ALARA requirements, leakage may be measured indirectly (as from the performance of pressure indicators) if accomplished in accordance with approved procedures and supported by computations showing that the method is capable of demonstrating valve compliance with the leakage criteria.

Amendment No. *0,JA, 00, Orde1 -dtd.- 4ji*M, f, Cor.r-Lt-r.--dd.--T1iZ .,118 4-12

Bases Specifications 4.2.1 and 2 ensure that inservice inspection of ASME Code Class 1, 2 and 3 components and inservice testing of ASME Code Class 1, 2 and 3 pumps and valves will be performed in accordance with a periodically updated version of Section XI of the ASME Boiler and Pressure Vessel Code and Addenda as required by 10 CFR 50, paragraphs 55a(f) and 55a(g). Relief from any of the above requirements has been provided in writing by the NRC and is not a part of these technical specifications.

4.3 DELETED I 4-13 (Pages 4-14 through 4-28 deleted) 4 W**

dtd4 I

Amendment No. 79, If, §9, Order dtd. 4/20/81, 71, erf. ULt- I-Rcirsued 3j20/86, X10, 197, If7,198 OCT 1 0 1995

Figure 4..2-1 Deleted

.: .ert No. 54 MAY 7 lM8

4.4 REACTOR BUILDING 4.4.1 CONTAINMENT LEAKAGE TESTS Applicability Applies to containment leakage.

Objective To verify that leakage from the Reactor Building is maintained within allowable limits.

Specification 4.4.1.1 Integrated Leakage Rate Testing (ILRT) shall be conducted in accordance with the Reactor Building Leakage Rate Testing Program at test frequencies established in accordance with the Reactor Building Leakage Rate Testing Program.

4.4.1.2 Local Leakage Rate Testing (LLRT) shall be conducted in accordance with the Reactor Building Leakage Rate Testing Program. LLRT shall be performed at a pressure not less than peak accident pressure Pac with the exception that the airlock door seal tests shall normally be performed at 10 psig and the periodic containment airlock tests shall be performed at a pressure not less than Pac. LLRT frequencies shall be in accordance with the Reactor Building Leakage Rate Testing Program.

4.4.1.3 Operability of the personnel and emergency air lock door interlocks and the associated control room annunciator circuits shall be determined at least once per six months. If the interlock permits both doors to be open at the same time or does not provide accurate status indication in the control room, the interlock shall be declared inoperable, except as provided in Technical Specification Section 3.8.6.

\.y/ Bases (I)

The Reactor Building is designed to limit the leakage rate to 0.1 percent by weight of contained atmosphere in 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months at the design internal pressure of 55 psig with a coincident temperature of 281 F at accident conditions. The peak calculated Reactor Building pressure for the design basis loss of coolant accident, Pac, is 50.6 psig. The maximum allowable Reactor Building leakage rate, La, shall be 0.1 weight percent of containment atmosphere per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months at Pac. Containment Isolation Valves are addressed in the UFSAR (Reference 2).

4-29 Amendment No. 63, 16:7,201. 236

4.4.2 Structural Integrity Specification 4.4.2.1 Inservice Tendon Surveillance Requirements The surveillance program for structural integrity and corrosion protection conforms to the requirements of Subsection IWL of Section Xl of the ASME Boiler and Pressure Vessel Code, as incorporated by reference into 10 CFR 50.55a. The detailed surveillance program for the prestressing system tendons shall be based on periodic inspection and mechanical tests to be performed on selected tendons.

4.4.2.1.1 DELETED 4-35 Amendment No. 560,5,412,157,187, 251

4.4.2.1.2 DELETED 4.4.2.1.3 DELETED 4.4.2.1.4 Tendon Surveillance Previous Inspections The tendon surveillance shall include the reexamination of all abnormalities (i.e., concrete scaling, cracking, grease leakage, etc.) discovered in the previous inspection to determine whether conditions have stabilized. The inspection program shall be modified accordingly if obvious deteriorating conditions are observed.

4.4.2.1.5 Inspection for Crack Growth at Dome Tendons in the Ring Girder Anchorage Areas Concrete around the dome tendon anchorage areas shall be inspected for crack growth during ten and 15 year inspections by monitoring cracks greater than 0.005 inch in width. Select as a minimum nine dome tendon anchoring areas having concrete cracks with crack widths 0.005 inch. In the selection of dome tendon anchoring areas to be monitored, preference shall be given to those areas having cracks greater than 0.005 inch in width. The width, depth (if depths can be measured with simple existing plant instruments, (i.e., feeler gauges, wires) and length of the selected cracks shall be measured and mapped by charting. This inspection may be discontinued, if the concrete cracks show no sign of growth. If, however, these inspections indicate crack growth, an investigation of the causes and safety impact should be performed.

4-36 Amendment No. $9, J79, 187

I w I,-

4.4.2.1.6 Reports

a. Within 3 months after the completion of each tendon surveillance a special report shall be submitted to the NRC Region I Administrator. This Report will include a section dealing with trends for the rate of prestress loss as compared to the predicted rate for the duration of the plant life (after an adequate number of surveillances have been completed).

b. Reports submitted in accordance with 10 CFR 50.73 shall include a description of the tendon condition, the condition of the concrete (especially at tendon anchorages), the inspection procedures, the tolerances on cracking, and any corrective actions taken.

4.4.3 DELETED BASES For ungrouted, post-tensioned tendons, this surveillance requirement ensures that the structural integrity of the containment will be maintained in accordance with the provisions of the TMI-1 Reactor Building Structural Integrity Tendon Surveillance Program. Testing and frequency are consistent with the requirements of Subsection IWL of Section Xl of the ASME Boiler and Pressure Vessel Code, as incorporated by reference into 10 CFR 50.55a, and as described in the FSAR.

The modified visual inspection requirements pertaining to the dome tendons in the ring girder were implemented as a result of: 1) discovery of ring girder voids in 1977 and the potential that more undetected voids in the ring girder could exist, and 2) the number of dome tendon bearing areas having cracks appeared to be growing with time (Reference Amendment No. 59).

REFERENCES (1)UFSAR, Section 5.7.5 - Tendon Stress Surveillances 4-37 Amendment No. 108, 120, 158, 187, 251

4.4.4 DELETED I 4-38 (Page 4-38a deleted)

Amendment No. 7, I, 476, 4 -98, 22, 240, 246

4.5 EMERGENCY LOADING SEQUENCE AND POWER TRANSFER. EMERGENCY CORE COOLING SYSTEM & REACTOR BUILDING COOLING SYSTEM PERIODIC TESTrNG 4.5.1 Emergency Loading Sequence Applicability: Applies to periodic testing requirements for safety actuation systems, Objective: To verify that the emergency loading sequence and automatic power transfer is operable.

Specifications:

4.5.1.1 Sequence and Power Transfer Test

a. During each refueling intenal, a test shall be conducted to demonstrate that the emergency loading sequence and power transfer is operable.

b. The test will be considered satisfactory i the following pumps and fans have been successfully started and the following valves have completed their travel on preferred power and transferred to the emergency power.

-M. U. Pump

-D. H. Pump and D. H. Injection Valves and D. H. Supply Valves

-R. B. Cooling Pump

-R B. Ventilators

-D. H. Closed Cycle Cooling Pump

-N. S. Closed Cycle Cooling Pump

-D.*H. River Cooling Pump

-N. S. River Cooling Pump

-D. H. and N. S. Pump Area Cooling Fan

-Screen House Area Cooling Fan

-Spray Pump. (Initiated in coincidence with a 2 out of 3 R. B.

30 psig Pressure Test Signal.)

-Motor Driven Emergency Feedwater Pump

c. Following successful transfer to the emergency diesel, the diesel generator breaker will be opened to simulate trip of the generator then re-closed to verify block load on the reclosure.

4.5.1.2 Sequence Test

a. At intervals not to exceed 3 months, a test shall be conducted to demonstrate that the emergency loading sequence is operable, this test shall be perforned on either preferred power or emergency power.

b. The test sill be considered satisfactory if the pumps and fans listed in 4.5.1. lb have been successfully started and the valves listed in 4.5. 1. Ib have completed their travel.

4-39 Amendment No. X0, 78 449,467 ., 212 JUN 21 1999

4.5.2 EMERGENCY CORE COOLING SYSTEM Applicability: Applies to periodic testing requirement for emergency core cooling systems.

Objective: To verify that the emergency core cooling systems are operable.

Specification 4.5.2.1 High Pressure Injection

a. During each refueling interval and following maintenance or modification that affects system flow characteristics, system pumps and system high point vents shall be vented, and a system test shall be conducted to demonstrate that the system is operable..

b. The test will be considered satisfactory if the valves (MU-V-14A/B

& 16A/B/C/D) have completed their travel and the make-up pumps are running as evidenced by system flow. Minimum acceptable injection flow must be greater than or equal to 431 gpm per HPI pump when pump discharge pressure is 600 psig or greater (the pressure between the pump and flow limiting device) and when the RCS pressure is equal to or less than 600 psig.

c. Testing which requires HPI flow thru MU-VI6A/B/C/D shall be conducted only under either of the following conditions:

1) Indicated RCS temperature shall be greater than 3290 F.

2) Head of the Reactor Vessel shall be removed.

4.5.2.2 Low Pressure Injection

a. During each refueling period and following maintenance or modification that affects system flow characteristics, system pumps and high point vents shall be vented, and a system test shall be conducted to demonstrate that the system is operable. The auxiliaries required for low pressure injection are all included in the emergency loading sequence specified in 4.5.1.

b. The test will be considered satisfactory if the decay heat pumps listed in 4.5.1. lb have been successfully started and the decay heat injection valves and the decay heat supply valves have completed their travel as evidenced by the control board component operating lights. Flow shall be verified to be equal to or greater than the flow assumed in the Safety Analysis for the single corresponding RCS pressure used in the test.

4-41 Amendment No. 19, 57, 6S, 119, 203, 225, 234

_ i 0 , i ,2

c. When the Decay Heat System is required to be operable, the correct position of DH-V-19A/B shall be verified by observation within four hours of each valve stroking operation or valve maintenance, which affects the position indicator.

4.5.2.3 Core Flooding

a. During each refueling period, a system test shall be conducted to demonstrate proper operation of the system.

Verification shall be made that the check and isolation valves in the core cooling flooding tank discharge lines operate properly.

b. The test will be considered satisfactory if control board indication of core flooding tank level verifies that all valves have opened.

4.5.2.4 Component Tests

a. At intervals not to exceed 3 months, the components required for emergency core cooling will be tested.

b. The test will be considered satisfactory if the pumps and fans-have been successfully started and the valves have completed their travel as evidenced by the control board component operating lights, and a second means of verification, such as: the station computer, verification of pressure/flow, or control board indicating lights initiated by separate limit switch contacts.

Bases The emergency core cooling systems (Reference I) are the principal reactor safety features in the event of a loss of coolant accident. The removal of heat from the core provided by these systems is designed to limit core damage.

The low pressure injection pumps are tested singularly for operability by opening the borated water storage tank outlet valves and the bypass valves in the borated water storage tank fill line. This allows water to be pumped from the borated water storage tank through each of the injection lines and back to the tank.

The minimum acceptable HPI/LPI flow assures proper flow and flow split between injection legs.

With the reactor shutdown, the valves in each core flooding line are checked for operability by reducing the reactor coolant system pressure until the indicated level in the core flood tanks verify that the check and isolation valves have opened.

Reference (1) UFSAR, Section 6.1 - "Emergency Core Cooling System" 4-42 Amendment No.S7, 68, 119,1 57,1 67, 225 F 2P mc E3

4.5.3 REACTOR BUILDING COOLING AND ISOLATION SYSTEM Applicability Applies to testing of the reactor building cooling and isolation systems.

Objective To verify that the reactor building cooling systems are operable Specification 4.5.3.1 System Tests

a. Reactor Building Spray System

1. At each refueling interval and simultaneously with the test of the emergency loading sequence, a Reactor Building 30 psi high pressure test signal will start the spray pump. Except for the spray pump suction valves, all engineered safeguards spray valves will be closed.

Water will be circulated from the borated water storage tank through the reactor building spray pumps and returned through the test line to the borated water storage tank.

The operation of the spray valves will be verified during the component test of the R. B. Cooling and Isolation System.

The test will be considered satisfactory if the spray pumps have been successfully started.

2. Compressed air will be introduced into the spray headers to verify each spray nozzle is unobstructed at least every ten years.

b. Reactor Building Cooling and Isolation Systems

1. During each refueling period, a system test shall be conducted to demonstrate proper operation of the system.

2. The test will be considered satisfactory if measured system flow is greater than accident design flow rate.

4-43 Amendment No. 67, 198,21>2, 225 SEP 2 5 2000

4.5.3.2 ComDonent Tests

a. At intervals not to exceed three months, the components required for Reactor Building Cooling and Isolation will be tested;

b. The test will be considered satisfactory if the valves have completed their expected travel as evidenced by the control board component operating lights and a second means of verification, such as: the station computer, local verification, verification of pressure/flow, or control board component operating lights initiated by separate limit switch contacts.

Bases The Reactor Building Cooling and Isolation Systems and Reactor Building Spray System are designed to remove the heat in the containment atmosphere to prevent the building pressure from exceeding the design pressure (References 1 and 2).

The delivery capability of one Reactor Building Spray Pump at a time can be tested by opening the valve in the line from the borated water storage tank, opening the corresponding valve in the test line, and starting the corresponding pump.

With the pumps shut down and the Borated Water Storage Tank outlet valve closed, the Reactor Building spray injection valves can each be opened and closed by operator action. With the Reactor Building spray inlet valves closed, low pressure air can be blown through the test connections of the Reactor Building spray nozzles to demonstrate that the flow paths are open.

The equipment, piping, valves and instrumentation of the Reactor Building Cooling System are arranged so that they can be visually inspected. The cooling units and associated piping are located outside the secondary concrete shield.

Personnel can enter the Reactor Building during power operations to inspect and maintain this equipment.

The Reactor Building fans are normally operating periodically, constituting the test that these fans are operable.

Reference (1) UFSAR, Section 6.2 - 'Reactor Building Spray System" (2) UFSAR, Section 6.3 - Reactor Building Emergency Cooling System" 4-44 Amendment No. §P, 1#9, 157 ,167

4.5.4 ENGINEERED SAFEGUARDS FEATURE (ESF) SYSTEM.IS LEAKAGE Applicability Applies to those portions of the Decay Heat, Building Spray, and Make-Up Systems, which are required to contain post accident sump recirculation fluid, when these systems are required to be operable in accordance with Technical Specification 3.3.

Obiective To maintain a low leakage rate from the ESF systems in order to prevent significant off-site exposures and dose consequences.

Specification 4.5.4.1 The total maximum allowable leakage into the Auxiliary Building from the applicable portions of the Decay Heat, Building Spray and Make-Up System components as measured during refueling interval tests in Specification 4.5.4.2 shall not exceed 15 gallons per hour.

4.5.4.2 Once each refueling interval the following tests of the applicable portions of the Decay Heat Removal, Building Spray and Make-Up Systems shall be conducted to determine leakage:

a. The applicable portion of the Decay Heat Removal System that is outside containment shall be leak tested with the Decay Heat pump operating, except as specified in "b".

b. Piping from the Reactor Building Sump to the Building Spray pump and Decay Heat Removal System pump suction isolation valves shall be pressure tested at no less than 55 psig.

c. The applicable portion of the Building Spray system that is outside containment shall be leak tested with the Building Spray pumps operating and BS-V-IA/B closed, except as specified in "b above.

d. The applicable portion of the Make-Up system on the suction side of the Make-Up purps shall be leak tested with a Decay Heat pump operating and DH-V-7A/B open.

e. The applicable portion of the Make-Up system from the Make-Up pumps to the containment boundary valves (MU-V-16AID, 18, and 20) shall be leak tested with a Make-Up pump operating.

f. Visual inspection shall be made for leakage from components of these systems. Leakage shall be measured by collection and weighing or by another equivalent method.

Bases The leakage rate limit of 15 gph (measured in standard room temperature gallons) for the accident recirculation portions of the Decay Heat Removal (DHR), Building Spray (BS), and Make-Up (MU) systems is based on ensuring that potential leakage after a loss-of-coolant accident will not result in off-site dose consequences in excess of those calculated to comply with the 10 CFR 50.67 limits (Reference 1 and 2). The test methods prescribed in 4.5.4.2 above for the applicable portions of the DH, BS and MU systems ensure that the testing results account for the highest pressure within that system during the sump recirculation phase of a design basis accident.

References (1) UFSAR, Section 6.4.4 - "Design Basis Leakage" (2) UFSAR, Section 14.2.2.5(d) - "Effects of Engineered Safeguards Leakage During Maximum Hypothetical Accident" 4-45 Amendment No. 157, 205, 215, Corrected by letter dated: 9/24199. 235

4.6 EMERGENCY POWER SYSTEM PERIODIC TESTS Anplicability: Applies to periodic testing and surveillance requirement of the emergency power system.

Obeective: To verify that the emergency power system will respond promptly and properly when required.

Specification:

The following tests and surveillance shall be performed as stated:

4.6.1 Diesel Generators

a. Manually-initiate start of the diesel generator, followed by manual synchronization with other power sources and assumption of load by the diesel generator up to the name-plate rating (3000 kw). This test will be conducted every month on each diesel generator. Normal plant operation will not be effected.

b. Automatically start and loading the emergency diesel generator in accordance with Specification 4.5.1.1.b/c including the following. This test will be conducted every refueling interval on each diesel generator.

(1) Verify that the diesel generator starts from ambient condition upon receipt of the ES signal and is ready to load in s 10 seconds.

(2) Verify that the diesel block loads upon simulated loss of offsite power in 5 30 seconds.

(3) The diesel operates with the permanently connected and auto connected load for 2 5 minutes.

(4) The diesel engine does not trip when the generator breaker is opened while carrying emergency loads.

(5) The diesel generator block loads and operates for 2 5 minutes upon reclosure of the diesel generator breaker.

c. Deleted.

4.6.2 Station Batteries

a. The voltage, specific gravity, and liquid level of each cell will be measured and recorded:

(1) every 92 days (2) once within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after a battery discharge <105 V (3) once within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after a battery overcharge >150 V (4) If any cell parameters are not met, measure and record the parameters on each connected cell every 7 days thereafter until all battery parameters are met.

b. The voltage and specific gravity of a pilot cell will be measured and recorded weekly. If any pilot cell parameters are not met, perform surveillance 4.6.2.a on each connected cell within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and every 7 days thereafter until all battery parameters are met.

c. Each time data is recorded, new data shall be compared with old to detect signs of abuse or deterioration.

4-46 Amendment No. 70, 149, 157, 200, 232, 243 APR 0 s 201

d. The battery will be subjected to a load test on a refueling interval basis.

(1)Verify battery capacity exceeds that required to meet design loads.

(2)Any battery which is demonstrated to have less than 85% of manufacturers ratings during a capacity discharge test shall be replaced during the subsequent refueling outage.

4.6.3 Pressurizer Heaters

a. The following tests shall be conducted at least once each refueling:

(I) Pressurizer heater groups 8 and 9 shall be transferred from the normal power bus to the emergency power bus and energized. Upon completion of this test, the heaters shall be returned to their normal power bus.

(2) Demonstrate that the pressurizer heaters breaker on the emergency bus cannot be closed until the safeguards signal is bypassed and can be closed following bypass.

(3) Verify that following input of the Engineered Safeguards Signal, the circuit breakers, supplying power to the manually transferred loads for pressurizer heater groups 8 and 9, have been tripped.

Bases The tests specified are designed to demonstrate that one diesel generator will provide power for operation of safeguards equipment. They also assure that the emergency generator control system and the control systems for the safeguards equipment will function automatically in the event of a loss of normal a-c station service power or upon the receipt of an engineered safeguards Actuation Signal. The automatic tripping of manually transferred loads, on an Engineered Safeguards Actuation Signal, protects the diesel generators from a potential overload condition. The testing frequency specified is intended to identify and permit correction of any mechanical or electrical deficiency before it can result in a system failure. The fuel oil supply, starting circuits, and controls are continuously monitored and any faults are alarmed and indicated.

An abnormal condition in these systems would be signaled without having to place the diesel generators on test:

Precipitous failure of the station battery is extremely unlikely. The surveillance specified is that which has been demonstrated over the years to provide an indication of a cell becoming unserviceable long before it fails.

The PORY has a remotely operated block valve to provide a positive shutoff capability should the relief valve become inoperable. The electrical power for both the relief valve and the block valve is supplied from an ESF power source to ensure the ability to seal this possible RCS leakage path.

The requirement that a minimum of 107 kw of pressurizer heaters and their associated controls be capable of being supplied electrical power from an emergency bus provides assurance that these heaters can be energized during a loss of offsite power condition to maintain natural circulation.

4-47 Amendment No. 70, 117, ii7, 175

4.7 REACTOR CONTROL ROD SYSTEM TESTS 4.7.1 CONTROL ROD DRIVE SYSTEM FUNCTIONAL TESTS Applicability Applies to the surveillance of the control rod system.

Obiective To assure operability of the control rod system.

Speification 4.7.1.1 The control rod trip insertion time shall be measured for eac control rod at either full flow or no flow conditions following each refueling outage prior to return to power. The maximum control rod trip insertion time for an operable control rod drive mechanism, except for the axial power shaping rods (APSRs),

from the fully withdrawn position to 3/4 insertion (104 inches travel) shall not exceed 1.66 seconds at hot reactor coolant full flow conditions or 1.40 seconds for the hot no flow conditions (Reference 1). For the APSRs it shall be demonstrated that loss of power will not cause rod movement. If the trip insertion time above is not met, the rod shall be declared inoperable.

4.7.1.2 If a control rod is misaligned with its group average by more than an indicated nine inches, the rod shall be declared inoperable and the limits of Specification 3.5.2.2 shall apply. The rod with the greatest misalignment shall be evaluated first. The position of a rod declared inoperable due to misalignment shall not be included in computing the average position of the group for determining the operability of rods with lesser misalignments.

4.7.1.3 If a control rod cannot be exercised, or if it cannot be located with absolute or relative position indications or in or out limit lights, the rod shall be declared to be inoperable.

Base The control rod trip insertion time is the total elapsed time from power interruption at the control rod drive breakers until the control rod has actuated the 25% withdrawn reference switch during insertion from the fully withdrawn position. The specified trip time is based upon the safety analysis in UFSAR, Chapter 14 and the Accident Parameters as specified therein.

Each control rod drive mechanism shall be exercised by a movement of a minimum of 3 %

of travel at a minimum of every 92 days. This requirement shall apply to either a partial or fully withdrawn control rod at reactor operating conditions. Exercising the drive mechanisms in this manner provides assurance of reliability of the mechanisms.

4-48 Amendment No. 4* 211

.!S5i3J

A iod is considered inoperable if it cannot be exercised, if the trip insertion time is greater than the specified allowable time, or if the rod deviates from its group average position by more than nine inches. Conditions for operation with an inoperable rod are specified in Technical Specification 3.5.2.

REFERENCE (1) UFSAR, Section 3.1.2.4.3 - "Control Rod Drive Mechanism" I

4-49 Amendment No. 157 SEP 2 5 1990

4.7.2 CONTROL ROD PROGRAM VERIFICATION (Group vs. Core Positions)

This page inentionally left blank 4-50 Amendment No. 45V 211 JUN 1 5 1999

4.8 DELETED I 4-51 Amendment No. Q5, 467, 246

4.9 DECAY HEAT REMOVAL (DHR) CAPABILITY - PERIODIC TESTING Applicability Applies to the periodic testing of systems or components which function to remove decay heat.

Obiective To verify that systems/components required for DHR are capable of performing their design function.

Specification 4.9.1 Reactor Coolant System (RCS) Temperature greater than 250 degrees F.

4.9.1.1 Verify each Emergency Feedwater (EFW) Pump is tested in accordance with the requirements and acceptance criteria of the Inservice Test Program.

Note: This surveillance is not required to be performed for the turbine-driven EFW Pump (EF-P-1) until 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after exceeding 750 psig.

4.9.1.2 DELETED 4.9.1.3 At least once per 31 days, each EFW System flowpath valve from both Condensate Storage Tanks (CSTs) to the OTSGs via the motor-driven pumps and the turbine-driven pump shall be verified to be in the required status.

4.9.1.4 On a refueling interval basis:

a) Verify that each EFW Pump starts automatically upon receipt of an EFW test signal.

b) Verify that each EFW control valve responds upon receipt of an EFW test signal.

c) Verify that each EFW control valve responds in manual control from the control room and remote shutdown panel.

4.9.1.5 Prior to STARTUP, following a REFUELING SHUTDOWN or a COLD SHUTDOWN greater than 30 days, conduct a test to demonstrate that the motor driven EFW Pumps can pump water from the CSTs to the Steam Generators.

4-52 Amendment No. -7. 119. 124, 172,-242.2Fr,

4.9 DECAY HEAT REMOVAL (DHR) CAPABILITY-PERIODIC TESTING (Continued) I 4.9.1.6 Acceptance Criteria These tests shall be considered satisfactory if control board indication and visual observation of the equipment demonstrates that all components have operated properly except for the tests required by Specification 4.9.1 .1.

4.9.2 RCS Temperature less than or equal to 250 degrees F.'

4.9.2.1 On a daily basis, verify operability of the means for DHR required by Specification 3.4.2 by observation of console status indication.

These requirements supplement the requirements of Specifications 4.5.2.2 and 4.5.4.

Bases ASME Section Xl specifies requirements and acceptance standards for the testing of nuclear safety related pumps. The quarterly EFW Pump test frequency specified by the ASME Section Xi Code will be sufficient to verify that the turbine-driven and both motor-driveh EFW Pumps are operable. Compliance with the normal acceptance criteria assures that the EFW Pumps are operating as expected. The surveillance requirements ensure that the overall EFW System functional capability is maintained.

Deferral of the requirement to perform IST on the turbine-driven EFW Pump is necessary to assure sufficient OTSG pressure to perform the test using Main Steam.

Daily verification of the operability of the required means for DHR ensures that sufficient DHR capability will be maintained.

4-52a Amendment No. 78, 119,121,172, 242

4.10 REACTIVITY ANOMALIES Applicability Applies to potential reactivity anomalies.

Objective To require the evaluation of reactivity anomalies of a specified magnitude occurring during the operation of the unit.

Specification 4.10.1 Following a normalization of the computed boron concentration as a function of burnup, the actual boron concentration of the coolant shall be periodically compared with the predicted value. If the difference between the observed and predicted steady-state concentrations reaches the equivalent of one percent in reactivity, an evaluation will be made to determine the cause of the discrepancy.

Bases To eliminate possible errors in the calculations of the initial reactivity of the core and the reactivity depletion rate, the predicted relation between fuel burnup and the boron concentration, necessary to maintain adequate con-trol characteristics, must be adjusted (normalized) to accurately reflect actual core conditions. When full power is reached initially, and with the control rod groups in the desired positions, the boron concentration is measured and the predicted curve is adjusted to this point. As power opera-tion proceeds, the measured boron concentration is compared with the predicted concentration and the slope of the curve relating burnup and reactivity is compared with that predicted. This process of normalization should be com-pleted after about 10 percent of the total core burnup. Thereafter, actual boron concentration can be compared with prediction, and the reactivity status of the core can be continuously evaluated. Any reactivity anomaly greater than one percent would be unexpected, and its occurrence would be thoroughly investigated and evaluated.

The value of one percent is considered a safe limit since a shutdown margin of at least one percent with the most reactive rod in the fully withdrawn position is always maintained.

4.11 REACTOR COOLANT SYSTEM VENTS Applicability Applies to Reactor Coolant System Vents.

Objective To ensure that Reactor Coolant System vents are able to perform their design function.

Specification 4.11.1 Each reactor coolant system vent path shall be demonstrated OPERABLE once per refueling interval by cycling each power operated valve in the vent path through at least one complete cycle of full travel from the control room during COLD SHUTDOWN or REFUELING.

BASES Frequency of tests specified above are necessary to ensure that the individual Reactor Coolant System Vents will perform their functions. It is not advisable to perform these tests during Plant Power Operation, or when there is significant pressure in the Reactor Coolant System. Tests are, therefore, to be performed during either Cold Shutdown or Refueling.

Amendment No. ?X, 27 4-54

4.12 AIR TREATMENT SYSTEM 4.12.1 EMERGENCY CONTROL ROOM AIR TREATMENT SYSTEM Applicability Applies to the emergency control room air treatment system and associated components.

Obiective To verify that this system and associated components will be able to perform its design functions.

Specification 4.12.1.1 At least every refueling interval, the pressure drop across the combined HEPA filters and charcoal adsorber banks of AH-F3A and 3B shall be demonstrated to be less than 6 inches of water at system design flow rate (+/-10%).

4.12.1.2 a. The tests and sample analysis required by Specification 3.15.1.2 shall be performed initially and at least once per year for standby service or after every 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of system operation and following significant painting, steam, fire or chemical release in any ventilation zone communicating with the system that could contaminate the HEPA filters or charcoal adsorbers.

b. DOP testing shall be performed after each complete or partial replacement of the HEPA filter bank or after any structural maintenance on the system housing which could affect the HEPA filter bank bypass leakage.

c. Halogenated hydrocarbon testing shall be performed after each complete or partial replacement of the charcoal adsorber bank or after any structural maintenance on the system housing which could effect the charcoal adsorber bank bypass leakage.

d. Each AH-E1 8A and B (AH-F3A and B) fan/filter circuit shall be operating at least 10 hours1.157407e-4 days 0.00278 hours 1.653439e-5 weeks 3.805e-6 months every month.

4.12.1.3 At least once per refueling interval, automatic initiation of the required Control Building dampers for isolation and recirculation shall be demonstrated as operable.

4.12.1.4 An air distribution test shall be performed on the HEPA filter bank initially, and after any maintenance or testing that could affect the air distribution within the system . The air distribution across the HEPA filter bank shall be uniform within

+20%. The test shall be performed at 40,000 cfm (+/-10%) flow rate.

4.12.1.5 Control Room Envelope unfiltered air inleakage testing shall be performed in accordance with the Control Room Envelope Habitability Program.

4-55 Amendment No.55,S--8,1-49, 17-6, 223, 264

4.12.2 REACTOR BUILDING PURGE AIR TREATMENT SYSTEM Deleted 4-55c Amendment No. 55, 68, !08,* 9, 157, 170, 175, 2.8, 226, 240, 241,264

4.12.3 AUXILIARY AND FUEL HANDLING BUILDING AIR TREATMENT SYSTEM DELETED 4-55d Amendment Nos. 65,76,122, 177, 248

THIS PAGE LEFT BLANK INTENTIONALLY R

4-55e Amendment No. 65, 170,218.

.22,157, 248

4.12.4 FUEL HANDLING BUILDING ESF AIR TREATMENT SYSTEM Applicability Applies to Fuel Handling Building (FHB) ESF Air Treatment System and associated components.

Objective To verify that this sytem and associated components will be able to perform its design functions.

Specification 4.12.4.1 Each refueling interval prior to movement of irradiated fuel:

a. The pressure drop across the entire filtration unit shall be demonstrated to be less than 7.0 inches of water at 6,000 cfm flow rate (+/-10%).

b. The tests and sample analysis required by Specification 3.15.4.2 shall be performed.

4.12.4.2 Testing necessary to demonstrate operability shall be performed as follows:

a. The tests and sample analysis required by Specification 3.15.4.2 shall be performed following significant painting, steam, fire, or chemical release in any ventilation zone communicating with the system that could contaminate the HEPA_

filters or charcoal adsorbers.

b. DOP testing shall be performed after each complete or partial replacement of a HEPA filter bank, and after any structural maintenance on the system housing that could affect the HEPA filter bank bypass leakage.

c. Halogenated hydrocarbon testing shall be performed after each complete or partial replacement of a charcoal adsorber bank, and after any structural maintenance on the system housing that could affect charcoal adsorber bank bypass leakage.

4.12.4.3 Each filter train shall be operated at least 10 hours1.157407e-4 days 0.00278 hours 1.653439e-5 weeks 3.805e-6 months every month.

4.12.4.4 An air flow distribution test shall be performed on the HEPA filter bank initially and after any maintenance or testing that could affect the air flow distribution within the system. The distribution across the HEPA filter bank shall be uniform within

+/-20%. The test shall be performed at 6,000 cfm +/- 10% flow rate.

\---Amendment No. 122 DEC 12 1986 4-55f

4.13 RADIOACTIVE MATERIALS SOURCES SURVEILLANCE Applicability Applies to leakage testing of byproduct, source, and special nuclear radioactive material sources.

Objective To assure that leakage from byproduct, source, and special nuclear radioactive material sources does not exceed allowable limits.

Specification Tests for leakage and/or contamination shall be performed by the licensee or by other persons specifically authorized by the Commission or an agreement State, as follows:

1. Each sealed source, except startup sources previously subject to core flux, containing radioactive material, other than Hydrogen 3, with a half-life greater than 30 days and in any form other than gas shall be tested for leakage and/or contamination at intervals not to exceed six months.

2.

- The periodic leak test required does not apply to sealed sources that are stored and not being used. The sourcec.excepted from this test shall be tested for leakage prior to any use or transfer to another user unless they have been leak tested within six months prior to the date of use or transfer. In the absence of a certificate from a transferor indicating that a test has been made within six months prior to the transfer, sealed sources shall not be put into use until tested.

3. Each sealed source shall be tested within 31 days prior to being subjected to core flux and following repair or maintenance to the source.

4.14 DELETED I

4-56 (page 4-57 deleted) I

- Amendment No. Of, 129 3-31 -81 MAY

4.15 MAIN STEAM SYSTEM INSERVICE INSPECTION Apop icability This technical specification applies to the inservice inspection of four welds in the Main Steam System identified as MS-0001, MS-0002, MS-0003, and MS-0004L of the TMI-1 Inservice Inspection Program.

ObJective The objective of the Inservice Inspection Program is to provide assurance of the continuing integrity of that portion of the Main Steam System in which a postulated failure would produce pressures in excess of the compartment wall and/or slab capacities.

Specification 4.15.1. The four weld Joints identified above shall be 100 percent inspected in accordance with the ASME Code,Section XI, Rules for Inservice Inspection of Nuclear Power Plant components, defined in the TMI-1 Inservice Inspection Program. Inspections are to be performed at a frequency of once every 3-1/2 years (or during the nearest refueling outage).

Prior to initial plant operation, a preoperational inspection of the identified weld Joints will be performed and any data acquired will be recorded to form a baseline on which to compare results of subsequent inspections.

Bases Calculations (Reference 1) postulated that breaks in the main steam lines at the containment penetrations in small compartments No. 2 and No. 5 could produce pressures in excess of wall and/or slab capacities.

Inspections are conducted at an inspection frequency of 3 1/2 year intervals following initial plant startup. These inspections have revealed that no degradation of the welds has occurred during the inspection cycles up to and including the 9R outage inspection. Consequently, as further degradation is not expected to occur, justification to extend the inspection frequency to once every ten (10) years is being developed. The conclusions of the technical benefit review will be submitted to the NRC for evaluation in a Technical Specification change request.

Reference (1) UFSAR, Appendix 14A, Section 7.2.1 4-58 Amendment No. 149,167 JAN 2 61993

4.16 REACTOR INTERNALS VENT VALVES SURVEILLANCE Applicability Applies to Reactor Internals Vent Valves.

Objective To verify that no reactor internals vent valve is stuck in the open position and that each valve continues to exhibit freedom of movement.

Specification Item Test Frequency 4.16.1 Reactor Internals Demonstrate Operability Each Refueling Vent Valves By: Shutdown I

a. Conducting a remote visual inspection of visually accessible sur-faces of the valve body and disc sealing faces and evaluating any observed surface irregu-larities.

b. Verifying that the valve is not stuck in an open position, and

c. Verifying through manual actuation that the valve is fully open with a force of < 400 lbs. (applied vertically upward).

Bases Verifying vent valve freedom of movement insures that coolant flow does not bypass the core through reactor internals vent valves during operation and therefore insures the conservatism of Core Protection-Safety limits as delineated in Figures 2.1-1 and 2.1-3, and the flux/flow trip setpoint.

I 4-59 Amendment No. j'e, 149 APR 2 7 1989

4.17 SHOCK SUPPRESSORS (SNUBBERS' SURVEILLANCE REQUIREMENTS 4.17.1 Each snubber shall be demonstrated OPERABLE by performance of the following inspection program.

a. Snubber Tvpes As used in this specification, type of snubber shall mean snubbers of the same design and manufacturer, irrespective of capacity.

b. Visual Inspections Snubbers are categorized as inaccessible or accessible during reactor operation and may be treated independently. The Director-Radiological Health and Safety, will ensure that a review is performed for ALARA considerations on all snubbers which are located in radiation areas for the determination of their accessibility. This review shall be in accordance with the recommendations of Regulatory Guides 8.8 and 8.10. The determination shall be based upon the known or projected radiation levels at each snubber location which would render the area inaccessible during reactor operation and based upon the expected time to perform the visual inspection. Snubbers may also be determined to be inaccessible because of their physical location due to an existing industrial safety hazard at the specific snubber location. This determination shall be reviewed and approved by the management position responsible for occupational safety.

Snubbers accessible during reactor operation shall be inspected in accordance with the schedule stated below. Snubbers scheduled for inspection that are inaccessible during reactor operation because of physical location or radiation levels shall be inspected during the next reactor shutdown greater than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months where access is restored* unless previously inspected in accordance with the schedule stated below.

Visual inspections shall include all safety related snubbers and shall be performed in accordance with the following schedule:

No. Inoperable Snubbers of Each Subsequent Visual Type per Inspection Period Inspection Period**#

0 24 months +/- 25%

1 16 months +/- 25%

2 6 months +/- 25%

3, 4 124 days +/-25%

5, 6, 7 62 days +/-25%

8 or more 31 days +/-25%

Snubbers may continue to be inaccessible during reactor shutdown greater than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months (e.g. if purging of the reactor building is not permitted).

- The inspection interval for each type of snubber shall not be lengthened more than one step at a time unless a generic problem has been identified and corrected; in that event the inspection interval may be lengthened one step the first time and two steps thereafter if no inoperable snubbers of that type are found.

The provisions of Table 1.2 are not applicable.

4-60 Amendment No. 30,106,110,175, 179 219

. 2;; vWa. 229

SHOCK SUPPRESSORS (SNUBBERS)

SURVEILLANCE REQUIREMENTS (Continued)

c. Refueling Outage Inspections At least once each refueling cycle during shutdown, a visual inspection shall be performed of all safety related snubbers attached to sections of safety systems piping that have experienced unexpected, potentially damaging transients as determined from a review of operational data and a visual inspection of the systems.

d. Visual Inspection Acceptance Criteria Visual inspections shall verify: (1) that there are no visible indications of damage or impaired operability and (2) attachments to the foundation or supporting structure are secure. Snubbers which appear inoperable as a result of visual inspections may be determined OPERABLE for the purpose of establishing the next visual inspection in-terval, provided that: (1) the cause of the rejection is clearly established and remedied for that particular snubber and for other snubbers that may be generically susceptible, and (2) the affected snubber is functionally tested in the as found condition and determined OPERABLE per Specification 4.17-lf. When the reservoir outlet port of a snubber is found to be uncovered by fluid, the snubber shall only be declared operable if functional testing in both extension and retraction directions is satisfactory and an engineering evaluation concludes that this snubber is operable.

e. Functional Tests*

At least once each refueling interval during shutdown, a representative sample of snubbers shall be tested using one of the following sample plans. The sample plan shall be selected prior to the test period and cannot be changed during the test period. The NRC Regional Administrator shall be notified in writing of the sample plan selected prior to the test period, or the sample plan used in the prior test period shall be used:

1) At least 10. of the total each type of snubber in use in the plant shall be functionally tested either in-place or in a bench test. For each snubber of a type that does not meet the functional test acceptance criteria of Specification 4.17.1f, an additional 10%

of that type of snubber shall be functionally tested until no more failures are found or until all snubbers of that type have been functionally tested; or

The four 550,000 lb reactor coolant pump snubbers are not included. The functional test program for reactor coolant pump snubbers is implemented in accordance with the schedule and other requirements of the snubber testing program.

~ 4-61 Amendment No. 3 ) ,X, 149 APR 2 7 1989

SHOCK SUPPRESSORS (SNUBBERS)

SURVEILLANCE REQUIREMENTS (Continued)

2) A representative sample of each type of snubber shall be functionally tested in accordance with Figure 4.17-1. "C" is the total number of snubbers of a type found not meeting the acceptance requirements of Specification 4.17.1f. The cumulative number of snubbers of a type tested is denoted by "N". At the end of each day's testing, the new values of "N" and "C" (previous day's total plus current day's increments) shall be plotted on Figure 4.17-1. If at any time the point plotted falls in the "Reject" region all snubbers of that type shall be functionally tested. If at any time the point plotted falls in the "Accept" region testing of that type of snubber may be terminated. When the point plotted lies in the "Continue Testing" region, additional snubbers of that type shall be tested until the point falls in the "Accept" region or the "Reject" region, or all the snubbers of that type have been tested. Testing equipment failure during functional testing may invalidate that day's testing and allow that day's testing to resume anew at a later time, provided all snubbers tested with the failed equipment during the day of equipment failure are retested.

The representative sample selected for functional test sample plans shall be randomly selected from the snubbers of each type and reviewed before beginning the testing. The review shall ensure as far as practicable that they are representative of the various configurations, operating environments, and the range of size and capacity of snubbers of each type. Snubbers placed in the same location as snubbers which failed the previous functional test shall be retested at the time of the next functional test but shall not be included in the sample plan. If, during the functional test, additional sampling is required due to failure of only one type of snubber, the functional test results shall be reviewed at that time to determine if additional samples should be limited to the type of snubber which has failed the functional testing.

f. Functional Test Acceotance Criteria The snubber functional test shall verify that:

1) Snubber activation (restraining action or lockup) is achieved within the specified velocity range in both tension and compression.

2) Snubber release rate (bleed) is achieved in both tension and compression, within the specified range.

3) Fasteners for attachment of the snubber to the component and to the snubber anchorage.are secure.

4-62 Amendment No. M, 106

SHOCK SUPPRESSORS (SNUBBERS)

SURVEILLANCE REOUIREMENTS (Continued)

Testing methods may be used to measure parameters indirectly, or parameters other than those specified, if those results can be correlated to the specified parameters through established methods.

g. Functional Test Failure Analysis

1. Cause of Failure Evaluation An engineering evaluation shall be made of each failure to meet the functional test acceptance criteria to determine the cause of the failure. The results of this evaluation shall be used, if applicable, in selecting snubbers to be tested in an effort to determine the operability of other snubbers, irrespective of type, which may be subject to the same failure mode.

2. Damaoe Evaluation For the snubbers found inoperable, an engineering evaluation shall be performed on the components to which the inoperable snubbers are attached. The purpose of this engineering evaluation shall be to determine if the components to which the inoperable snubbers are attached were adversely affected by the inoperability of the snubbers in order to ensure that the component remains capable of meeting the designed service.

If any snubber selected for functional testing either fails to activate (lockup) or fails to extend or retract, i.e.,

frozen-in-place, the cause will be evaluated and, if caused by manufacturer or design deficiency, all snubbers of the same type which are subject to the same defect shall be evaluated in a manner to ensure operability. This testing requirement shall be independent of the requirements stated in Specification 4.17.1e for snubbers not meeting the functional test acceptance criteria.

h. Functional Testino of Reoaired and Reolaced Snubbers Snubbers which fail the visual inspecticn or the functional test acceptance criteria shall be repaired or replaced. Replacement snubbers and snubbers which have repairs which might affect the functional test result shall have been tested to meet the functional test criteria before installation in the unit.

4-63 Amendment No. 106

SHOCK SUPPRESSORS (SNUBBERS)

SURVEILLANCE REQUIREMENTS (Continued)

i. Snubber Seal Service Program A snubber seal service life program shall be developed whereby the seal service life of hydraulic snubbers is monitored to ensure that the service life is not exceeded between surveillance inspections. The designated service life for the various seals shall be established based on engineering information. The seals shall be replaced so that the indicated service life will not be exceeded during a period when the snubber is required to be OPERABLE. The seal replacements shall be documented and the documentation shall be retained in accordance with Specification 6.lO.2.m.

I 4-64 Amendment No. 1p<J4f, 149 APR 2 7 1989

10 9

8

-J

-i LL- 7 6

LLU LLU C 5 u-LLJ

= 3 3

L-CD 2

a; Uj 3.

-j 0 .

A_;j N CUMULATIVE NO. OF SNUBBERS OF TYPE TESTED FIGURE 4.17-1 SNUBBER FUNCTIONAL TEST - S;.;?PLE PLAN 2 Amendment No. 106 ,167 4-67 I

THIS PAGE INTENTIONALLY LEFT BLANK (Pages 4-69 through 4-76A deleted) 4-68 Amendment Nos. 32, 101, 106, 146,167

4.19 STEAM GENERATOR (SG) TUBE INTEGRITY Applicabilitv: Whenever the reactor coolant average temperature is above 200'F Surveillance Requirements (SR):

Each steam gener.shall, be determined to have tube integrity by performance of the following:

4.19.1 Verify SG tube integrity in accordance with the Steam Generator Program.

4.19.2 Verify that each inspected SG tube that satisfies the tube repair criteria is plugged in accordance with the Steam Generator Program prior to exceeding an average reactor coolant temperature of 200°F following an SG tube inspection.

BASES:

BACKGROUND Steam generator (SG) tubes are small-diameter, thin walled tubes that carry primary coolant through the primary to secondary heat exchangers.

The SG tubes have a number of important safety functions. Steam generator tubes are an integral part of the reactor coolant pressure boundary (RCPB) and, as such, are relied on to maintain the primary system's pressure and inventory. The SG tubes isolate the radioactive fission products in the primary coolant from the secondary system. In addition, as part of the RCPB, the SG tubes are unique in that they act as the heat transfer surface between the primary and secondary systems to remove heat from the primary system. This Specification addresses only the RCPB integrity function of the SG. The SG heat removal function is addressed by TS Section 3.4.

SG tube integrity means that the tubes are capable of performing their intended RCPB safety function consistent with the licensing basis, including applicable regulatory requirements.

Steam generator tubing is subject to a variety of degradation mechanisms. Steam generator tubes may experience tube degradation related to corrosion phenomena, such as wastage, pitting, intergranular attack, and stress corrosion cracking, along with other mechanically induced phenomena such as denting and wear. These degradation mechanisms can impair tube integrity if they are not managed effectively.

The SG performance criteria are used to manage SG tube degradation.

Specification 6.19, "Steam Generator (SG) Program," requires that a program be established and implemented to ensure that SG tube integrity is maintained. Pursuant to Specification 6.19, tube integrity is maintained when the SG performance criteria are met. There are three SG performance criteria: structural integrity, accident induced leakage, and 4-77 Amendment No. 47, 261 (12-22-78)

4.20 -REACTOR BUILDING AIR 1TMVERATURE I

&bDlicability This specification applies to the average air temperature of the primary containment durin; polwer operations.

To assure that the temperatures used in the safety analysis of the reactor building are not excoteded.

i Specification 4..20.1 When the reactor is critical, the reactor building tem-ercture W. -: I be cbeckcd once each twenty-tour (24) hours. If any detector execedzs 130°F (1200F below elevation 320) the arithmetic average will be computed to assure compliance with Specification 3.17.1.

I Amendment 1No. A,471 4-86 K£ 2 178

4.21 RADIOACTIVE EFFLUENT INSTRUMENTATION Deleted 4.21.1 Radioactive Liquid Effluent Instrumentation Deleted 4.21.2 Radioactive Gaseous Process & Effluent Monitoring Instrumentation Deleted 4.22 RADIOACTIVE EFFLUENTS Deleted 4.22.1 Liquid Effluents Deleted 4.22.2 Gaseous Effluents Deleted 4.22.3 Solid Radioactive Waste Deleted 4.22.4 Total Dose Deleted 4.23 RADIOLOGICAL ENVIRONMENTAL MONITORING Deleted 4.23.1 Monitoring Program Deleted 4.23.?. Land Use Census Deleted 4.23.3 Interlaboratory Comparison Program Deleted 4-87 (4-88 thru 4-122 deleted)

Amendment No. 7Z, 0,0 #, f0Z, 1,p, 137, 101, IN, 177, 197 OCT 2 0,

5.0 DESIGN FEATURES 5.1 SITE ADplicabilitv Applies to the location and extent of the exclusion boundary, restricted area, and low population zone.

Obiecti To define the above by location and distance description.

Snecification 5.1.1 The Three Mile Island Nuclear Station Unit I is located in an area of low population density about ten miles southeast of Harnsburg, PA. It is in Londonderry Township of Dauphin County, Pennsylvania, about two and one-half miles north of the southern tip of Dauphin County, where Dauphin is coterminal with York and Lancaster Counties. The station is located on an island approximately three miles in length situated in the Susquehanna River upstream from York Haven Dam. Figure 5.1 is an extended plot plan of the site showing the plant orientation and immediate surroundings. The Exclusion Area as defined in 10 CFR 100.3, is a 2,000 ft. radius, including portions of Three Mile Island, the river surface around it, and a portion of Shelley Island, which is owned by AmerGen Energy Company, LLC. The minimum distance of 2,000 ft. l occurs on the shore of the mainland in a due easterly direction from the plant as shown on Figure 5.1 for the Exclusion Area. Figure 5-3 showing the physical location of the fence defines the "Restricted Area" surrounding the plant. The minimum distance of the "Restricted Area" is approximately 560 feet and is from the centerline of the TMI Unit 2 Reactor Building to a point on the westerly shoreline of Three Mile Island. The .inimum distance to the outer boundary of the low population zone is two miles as shown on T.S. Figure 5-2, which also depicts the site topography for a radius of five miles. T.S. Figure 5-3 depicts the locations of gaseous effluent release points and liquid effluent outfalls (as tabularized on page 5-10), and the meteorological tower location (designated as

'weather tower' on the figure).

S-1 Amendment No. 27, l49 218 DE C 2 G 199

(

ArnerGen Ame11dfflent No. +O*,

hree nd ucIl ea ton 1

eft, 246 EXTENOED PLOT PLAN EA nIL: 5 717R1.DWG flG 5-1I

-+-:;:::.: 'O ~UI-M ...HM .. "'l"l::l:\' i I/

E " ... CM ..... WIl:L UNIT NO 1 .......--'...-._-~ ............ " ..

-.- 1 \

1

~~ ~Ut:lUl'N.IA UNIT NO 1 ;.r~~...::-.:c. ~

TURBINE BLDG ,.. .'P ~~ 7-';"

%(

'loo~

U",,,

~,

r~.1 00' " ..

UNIT NO I fUEL HANDLING BLDG

d

... ~

. ~ 0:., ....

~~""loC""'"

ESF VENT STACK DSNOO2 - DELETED AmerGen Three Mil. Island Hudear Station Gaseous Effluent Release Point and liquid EfOuent Outlet Locations

_____________Ag. 5-3 Amendment No. 149,218,246,269

5.2 CONTAINMENT Applicability Applies to those design features of the containment system relating to operational and public safety.

Objective To define the significant design features of the reactor containment.

Specification Containment consists of two systems which are the reactor building and reactor building isolation system.

5.2.1 REACTOR BUILDING The reactor building completely encloses the reactor and the associated reactor coolant systems. The reactor building is a reinforced concrete structure composed of cylindrical walls with a flat foundation mat, and a shallow dome roof. The foundation slab is reinforced with conventional mild-steel reinforcing. The cylindrical walls are prestressed with a post-tensioning tendon system in the vertical and horizontal directions. The dome roof is prestressed utilizing a three-way post-tensioning tendon system. The inside surface of the reactor building is lined with a carbon steel liner to ensure a high degree of leak tightness for containment.

The internal free volume of the reactor building is in excess of 2.0x10 6 cubic feet. The foundation mat is 9 ft thick with a 2 ft thick concrete slab above the bottom liner plate. The cylindrical portion has an inside diameter of 130 ft, wall thickness of 3 ft 6 in., and a height of 157 ft from top of foundation slab to the spring line. The shallow dome roof has a large radius of 110 ft, a transition radius of 20 ft 6 in., a thickness of 3 ft, and an overall height of 32 ft 4 1/8 in.

The concrete containment building provides adequate biological shielding for both normal operation and accident situations. Design pressure and temperature are 55 psig and 281 0 F, respectively. The reactor building is designed for an external atmospheric pressure of 2.5 psi greater than the internal pressure.

Penetration assemblies are welded to the reactor building liner. Access openings, electrical penetrations, and fuel transfer tube covers are equipped with double seals.

Reactor building purge penetrations and reactor building atmosphere sampling penetrations are equipped with double valves having resilient seating surfaces (Reference 1).

5-2 Amendment No. 157 SEP 2 5 1990

The principal design basis for the structure is that it be capable of withstanding the internal pressure resulting from a loss of coolant accident, as defined in Section 14, with no loss of integrity. In this event the total energy contained in the water of the reactor coolant system is assumed to be released into the reactor building through a break in the reactor coolant piping. Subsequent pressure behavior is determined by the building volume, engineered safeguards, and the combined influence of energy sources and heat sinks.

5.2.2 REACTOR BUILDING ISOLATION SYSTEM Leakage through all fluid penetrations not serving accident-consequence-limiting systems is minimized by a double barrier so that no single, credible failure or malfunction of an active component can result in loss-of-isolation or intoler-able leakage. The installed double barriers take the form of closed piping systems, both inside and outside the reactor building and various types of isolation valves (Reference 2). I REFERENCES (1) UFSAR Section 5.2.2.4.8 - "Penetrations and Openings" (2) UFSAR Section 5.3.1 - "Isolation System - Design Bases" 5-3 Amendment No. 157 SEP 2 5 1990

5.3 REACTOR Applicability Applies to the design features of the reactor core and reactor coolant system.

Objective To define the significant design features of the reactor core and reactor coolant system.

Specification 5.3.1 REACTOR CORE 5.3.1.1 A fuel assembly normally contains 208 fuel rods arranged in a 15 by 15 lattice. The reactor shall contain 177 fuel assemblies. Fuel rods shall be clad with zircaloy, ZIRLO, or zirconium-based M5 alloy materials and contain an initial composition of natural or slightly enriched uranium dioxide as fuel material. Limited substitutions of zirconium alloy or stainless steel filler rods for fuel rods, in accordance with NRC-approved applications of fuel rod configurations, may be used. Fuel assemblies shall be limited to those fuel designs that have been analyzed with applicable NRC staff-approved codes and methods, and shown by tests or analyses to comply with all fuel safety design bases. A limited number of lead test assemblies that have not completed representative testing may be placed in non-limiting core regions. The details of the fuel assembly design are described in TMI-1 UFSAR Chapter 3.

5.3.1.2 The reactor core shall approximate a right circular cylinder with an equivalent diameter of 128.9 inches. The active fuel height is defined in TMI-1 UFSAR Chapter 3.

5.3.1.3 The core average and individual batch enrichments for the present cycle are described in TMI-1 UFSAR Chapter 3.

5.3.1.4 The control rod assemblies (CRA) and axial power shaping rod assemblies (APSRA) are distributed in the reactor core as shown in THI-1 FSAR Chapter 3. The CRA and APSRA design data are also described in the UFSAR.

5.3.1.5 The TMI-1 core may contain burnable poison rod assemblies (BPRA) and gadolinia-urania integral burnable poison fuel pellets as described in TMI-1 UPSAR Chapter 3.

5.3.1.6 Reload fuel assemblies and rods shall conform to design and evaluation data described in the UFSAR. Enrichment shall not exceed a nominal 5.0 weight percent of U23.

5.3.2 REACTOR COOLANT SYSTEM 5.3.2.1 The reactor coolant system shall be designed and constructed in accordance with code requirements. (Refer to UFSAR Chapter 4 for details of design and operation.)

5-4 Amendment No.120 ,12 ,50 ,157 .170 470 1Z03 , CAB, 233

5.3.2.2 The reactor coolant system and any connected auxiliary systems exposed to the reactor coolant conditions of temperature and pressure, shall be designed for a pressure of 2,500 psig and a temperature of 650 0F.

The pressurizer and pressurizer surge line shall be designed for a temperature of 670'F.

5.3.2.3 The reactor coolant system volume shall be less than 12,200 cubic feet.

5-5 Amendment No. i, 1, , 183, AR I X ij4

5.4 NEW AND SPENT FUEL STORAGE FACILITIES ADp icabilmtv Applies to storage facilities for new and spent fuel assemblies.

Obiective To assure that both new and spent fuel assemblies will be stored in such a manner that an inadvertent criticality could not occur.

Specification 5.4.1 NEW FUEL STORAGE

a. New fuel will normally be stored in the new fuel storage vault or spent fuel pools.

For the new fuel storage vault, the fuel assemblies are stored in racks in parallel rows, having a nominal center to center distance of 21-1/8 inches in both directions. The spacing in the new fuel storage vault is sufficient to maintain Knff less than 0.95 based on storage of fuel assemblies in clean unborated water or less than 0.98 based on storage in an optimum hypothetical low density moderator (fog or foam) for fuel asemblies with a nominal enrichment of 5.0 weight percent U . When fuel is being stored in the new fuel storage vault, twelve (12) storage locations (aligned in two rows of six locations each; transverse row numbers four and eight) must be left vacant of fissile or moderating material to provide sufficient neutron leakage to satisfy the NRC maximum allowable reactivity value under the optimum low moderator density condition.

For Spent Fuel Pool "Am, the fuel assemblies are stored in racks in parallel rows, having a nominal center to center distance of 11.1 inches in both directions for the Region I racks and 9.2 inches in both directions for the Region II racks. The spacing in the Spent Fuel Pool 'Am storage locations for both Region I and I1 is adequate to maintain Kmff less than 0.95. Region I will store fuel with a maximum 5.0 percent initial enrichment. Region II will store new fuel with low enrichment. When fuel is being moved in or over the Spent Fuel Storage Pool 'Al and fuel is being stored in the pool, a boron concentration of at least 600 ppmb must be maintained to meet the NRC maximum allowable reactivity value under the postulated accident condition.

For Spent Fuel Pool 0B0, the fuel assemblies are stored in racks in parallel rows, having nominal center to center distance of 13-5/8 inches in both directions. This spacing is sufficient to maintain a K~ff less than 0.95 based on fuel asumblies with a maximum enrichment of 4.37 weight percent U . When fuel is being moved in or over the Spent Fuel Storage Pool OBO and fuel is being stored in the pool, a boron concentration of at least 600 ppmb must be maintained to meet the NRC maximum allowable reactivity value under the postulated accident condition.

b. Deleted.

c. New fuel may also be stored in shipping containers.

5-6 Amendment No. 1;0, 164 .170 FEB 1 7 1i93

5.4.2 SPENT FUEL STORAGE (Reference 1)

a. Irradiated fuel assemblies will be stored, prior to offsite shipment, in the stainless steel lined spent fuel pools. which are located in the fuel handling building.

b. Whenever there is fuel in the pool except for initial fuel loading, the spent fuel pool is filled with water borated to the concentration used in the reactor cavity and fuel transfer canal.

c. Deleted.

d. The fuel assembly storage racks provided and the number of fuel elements each will store are listed by location below:

Spent Fuel Pool A Spent Fuel Pool B Dry New Fuel North End of Fuel South End of Fuel Storage Area Handling Building Handling Building Fuel Handling Building Fuel Assys. 1062

496 54 Cores 6.0 2.8 0.37 NOTE:

Includes three spaces for accommodating failed fuel containers. An additional 432 storage locations can be installed to provide a total of 1494 locations or 8.44 cores.

e. All of the fuel assembly storage racks provided are designed to Seismic Class 1 criteria to the accelerations indicated below:

Fuel Handling Building Fuel Handling Dry New Fuel Storage Area Building Spent And Spent Fuel Pool A Fuel PoolB Horiz. 0.38 g **

Vertical 0.25 g NOTE: The "B" pool fuel storage racks are designed using the floor response spectra of the Fuel Handling Building.

f. DELETED

g. When spent fuel assemblies are stored in the Spent Fuel Pool "A", Region II storage locations, the combination of initial enrichment and cumulative burnup for spent fuel assemblies shall be within the acceptable area of Figure 5-4.

h. When spent fuel assemblies are stored in the Spent Fuel Pool "B", storage locations, the combination of initial enrichment and cumulative burnup for spent fuel assemblies shall be within the acceptable area of Figure 5-5.

REFERENCES (1) UFSAR, Section 9.7 - "Fuel Handling System" 5-7 Amendment No. 34,138,167,164,170,231,269

- - n M

ACCEPTAB3LE BURNUP

- DOMAIN Z - -

0 15.60 UNACCEPTABLE BURNUP DOMAIN

-i6.S 7X

., LB INITIAL ENRICHMENT. WTS U-23S Figure 5.4 MINIMUM ESURLP REOUIREMJENTS FOR FLEL IN REGION II OF THE POOL A STORAGE RACKS 5-7a Amendment No. 164,170 FEB 1 7 1993

! Y Y ____________

)

2.1 0II II ACCEPTABLE BURNUP DOMAIN t t0-f '4 4.

0 VX I , ,-

/

4. .4-.s--4

/ I

.L I I UNACCEPTABLE BURNUP DOMAIN A-A 4.3 I

s 4.

4.5

. I I

4.6 X

I I I

I I

4.7 I

I I I I 4.8 t

4.9 I

I - l l l 5.0 INITIAL ENRICHMENT. wts U-235 Figure 5-5 MINIMUM ByRNUP REQUIREMENTS FOR FUEL IN TRZ POOL "'" STORO&Z RKCXB 5-7b Amendment No. 170 FEB 1 7 1993

5.5 AIR INTAKE TUNNEL FIRE PROTECTION SYSTEMS Deleted Amendment No. 212 5-8 Revised (1-20-76) adTh -i I-S7

Intentionally left blank a

Amendment No. 212 5-9 1 JJUN 2 1 1S99 Revised (1-20-76)

ELEVATIONS FOR GASEOUS EFFLUENT RELEASE POINTS (See Figure 5-3)

Unit 1 Stack 483' 7" Unit 1 Turbine Building 425' 4n Unit 1 Fuel Handling Building 348' ESF Vent Stack LOCATIONS OF LIQUID EFFLUENT OUTFALLS PURSUANT TO NPDES (See Figure 5-3)

Outfall No. Description DSN 001 Main Station Discharge DSN 002 (Deleted)

DSN 003 Emergency Discharge from Unit 1 (if DSN 001 is blocked)

DSN 004 Emergency Discharge from Unit 1 (if Unit 1 MDCT blocked)

DSN 005 Stormwater and yard drainage and dewatering of natural draft cooling towers, maintenance dredging desiltation and basin dewatering, fire brigade training facility runoff, fire service water runoff.

5-10 Amendment No. A2, 422, 449, 246

6.0 ADMINISTRATIVE CONTROLS 6.1 RESPONSIBILITY 6.1.1 The Vice President-TMI Unit 1 shall be responsible for TMi-l operations and may, at any time, delegate his responsibilities in writing to the Plant Manager. He shall delegate the succession of his responsibilities in writing during his absence.

6.1.2 The Shift Manager (or during his absence from the Control Room, a designated individual), shall be responsible for the Control Room command function. A management directive to this effect signed by the Chief Nuclear Officer shall be reissued to all unit personnel on an annual basis.

6.2 ORGANIZATION 6.2.1 CORPORATE 6.2.1.1 An onsite and offsite organization shall be established for unit operation and corporate management. The onsite and offsite organization shall include the positions for activities affecting the safety of the nuclear power plant.

6.2.1.2 Lines of authority, responsibility and communication shall be established and defined from the bighest management levels through intermediate levels to and including operating organization positions. These relationships shall be documented and updated as appropriate, in the form of organizational charts. These organizational charts will be documented in the Updated FSAR and updated in accordance with 10 CFR 30.71e.

6.2.1.3 The Chief Nuclear Officer shall have corporate responsibility for overall plant nuclear safety and shall take measures to ensure acceptable performance of the staff in operating, maintaining, and providing technical support so that continued nuclear safety is assured.

6.2.2 UNIT STAFF 6.2.2.1 The Vice President-TMI Unit 1 shall be responsible for overall site safe operation and shall have control over those on site activities necessary for safe operation and maintenance of the site.

6.2.2.2 The unit staff organization shall meet the following:

a. Each on-duty shift shall be composed of at least the minimum shift crew composition shown in Table 6.2-1.

b. At least one licensed Reactor Operator shall be present in the control room when fuel is in the reactor.

6-1 Amendment No. 11,32,77;,139,179, 207,28 219 JVA' 0 '7 2000

C. At least two licensed Reactor Operators shall be present in the control room during reactor startup, scheduled reactor shutdown and during recovery from reactor trips.

d. The Shift Manager or Control Room Supervisor # shall be in the control room at all times other than cold shutdown conditions (T ay, < 2001F) when he shall be onsite. I

e. An individual ## qualified pursuant to 6.3.2 in radiation protection procedures shall be on site when fuel is in the reactor.

f. All REFUELING OPERATIONS shall be observed and directly supervised by either a licensed Senior Reactor Operator or Senior Reactor Operator Limited to Fuel Handling who has no other concurrent responsibilities during this operation.

g. A Site Fire Brigade ## of at least 5 members shall be maintained onsite at all times. The Site Fire Brigade shall not include members of the minimum shift crew necessary for safe shutdown of the unit and any personnel required for other essential functions during a fire emergency.

h. The Shift Technical Advisor shall serve in an advisory capacity to the Shift Manager on matters pertaining to the engineering aspects assuring safe operation of the unit. I 6.2.2.3 Individuals who train the operating staff and those who carry out the health physics and quality assurance function shall have sufficient organizational freedom to be independent from operating pressures, however they may report to the appropriate manager on site.

If not SRO. licensed, he shall have completed the SRO Training program.

1. The individual of item 6.2.2.2e and the Fire Brigade composition may be less than the minimum requirements for a period of time not to exceed 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in order to accommodate unexpected absence provided imrnmediate action is taken to fill the required positions.

6-la Amendment 11, 32, 77, 139, 169 219 Xt INe'C 2C00

TABLE 6.2-1 MINIMUM SHIFT CREW COMPOSITION""'

LICENSE CATEGORY QUALIFICATIONS T. 1 > 200° T,v, 200° SRO(v) 2 RO('v) 2 1 Non-Licensed Auxiliary 2 1 Operator Shift Technical Advisor 160 None Required (i) Does not include the Licensed Senior Reactor Operator or Senior Reactor Operator Limited to Fuel Handling, supervising (a) irradiated fuel handling and transfer activities onsite, and (b) all unirradiated fuel handling and transfer activities to and from the Reactor Vessel.

(ii) May be on a different shift rotation than licensed personnel.

(iii) Except for the Shift Manager, shift crew composition may be one less than the I minimum requirements for a period of time not to exceed 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in order to accommodate unexpected absence of on-duty shift crew members provided immediate action is taken to restore the shift crew composition to within the minimum requirements of Table 6.2-1. This provision does not permit any shift crew position to be unmanned upon shift change due to an incoming shift crewman being late or absent.

(iv) Pursuant to the requirements of 10 CFR 50.54(m).

6-2 Amendment No. 11,-32,77,149 219

.. ; I A.J

6.3 UNIT STAFF QUALIFICATIONS 6.3.1 Each member of the unit staff shall meet or exceed the minimum qualifications of ANSI/ANS 3.1 of 1978 for comparable positions unless otherwise noted in the Technical Specifications, with the following exceptions: 1) the education and experience eligibility requirements for operator license applicants (described in Exelon letter RS-07-078, dated July 19, 2007), and changes thereto, shall be approved by the NRC and described in an applicable station training procedure, and 2) individuals who do not meet ANSI/ANS 3.1 of 1978, Section 4.5, are not considered technicians or maintenance personnel for purposes of determining qualifications but are permitted to perform work for which qualification has been demonstrated.

6.3.2 The management position responsible for radiological controls shall meet or exceed the qualifications of Regulatory Guide 1.8 of 1977. Each radiological controls technician/supervisor shall meet or exceed the qualifications of ANSI-N 18.1-1971, paragraph 4.5.2/4.3.2, or be formally qualified through an NRC approved TMI-I Radiation Controls training program. All radiological controls technicians will be qualified through training and examination in each area or specific task related to their radiological controls functions prior to their performance of those tasks.

6.3.3 The Shift Technical Advisors shall have a bachelor's degree or equivalent in a scientific or engineering discipline with specific training in unit design, response and analysis of transients and accidents.

6.4 TRAINING 6.4.1 A training program for the Fire Brigade shall be maintained and shall meet or exceed the requirements of Section 600 of the NFPA Code.

6.5 DELETED 6-3 (Pages 6-4 through 6-8 deleted)

Amendment Nos. 11,22,32,66,77,84,92,99,128,129,131,132,1 39,141 ,149,159,171 ,179,195,198, 207,212,218,239,241,252, ;a (; 5 , 269

DELETED 6-9 Amendment No. 11, 77, 99, 132, 139, 179, 218, 252

6.6 REPORTABLE EVENT ACTION 6.6.1 The following actions shall be taken for REPORTABLE EVENTS:

a. The Nuclear Regulatory Commission shall be notified and a report submitted pursuant to the requirements of Section 50.73 to 10 CFR 50.

6.7 SAFETY LIMIT VIOLATION 6.7.1 The following actions shall be taken in the event a safety limit is violated:

a. The reactor shall be shutdown and operation shall not be resumed until authorized by the Nuclear Regulatory Commission.

b. An immediate report shall be made to the Plant Manager, and Vice President-TMI Unit 1, and the event shall be reported to NRC in accordance with 10 CFR 50.72.

c. A complete analysis of the circumstances leading up to and resulting from the occurrence shall be prepared by the unit staff. This report shall include analysis of the effects of the occurrence and recommendations concerning operation of the unit and prevention of recurrence. This report shall be submitted to the Plant Manager and the Vice President-TMI Unit 1. The safety limit violation report shall be submitted to NRC in accordance with 10 CFR 50.73.

6-10 Amendment No. 11,77,129,167,179,218,219, 269

6.8 PROCEDURES AND PROGRAMS 6.8.1 Written procedures shall be established, implemented and maintained covering the items referenced below:

a. The applicable procedures recommended in Appendix "A" of Regulatory Guide 1.33, Revision 2, February 1978.

b. Surveillance and test activities of equipment that affects nuclear safety and radioactive waste management equipment.

c. Refueling Operations.

d. Security Plan Implementation.

e. Fire Protection Program Implementation.

f. Emergency Plan Implementation.

g. Process Control Program Implementation.

h. Offsite Dose Calculation Manual Implementation.

i. Quality Assurance Program for effluent and environmental monitoring using the guidance in Regulatory Guide 4.15, Revision 1.

j. Deleted 6.8.2 Further, each procedure required by 6.8.1 above, and substantive changes thereto, shall be reviewed and approved as described in 6.5.1 prior to implementation and shall be reviewed periodically as set forth in administrative procedures.

6.8.3 Temporary changes to procedures of 6.8.1 above may be made provided:

a. The intent of the original procedure is not altered;

b. The change is approved by two members of the licensee's management staff qualified in accordance with 6.5.1.14 and knowledgeable in the area affected by the procedure. For changes which may affect the operational status of unit systems or equipment, at least one of these individuals shall be a member of unit management or supervision holding a Senior Reactor Operator's License on the unit.

c. The change is documented, reviewed and approved as described in 6.5.1 within 14 days of implementation.

6-11 Amendment No. 11, 32, 72, 77, 84, 129, 141, 167, 173, 207, 218, 270

- o A , DAA .+/-.I-_ -:_.t n_____- .. -

t t 4 a. Kadnu1uwgca1 Environmental nonitoring rrogram A program shall be provided to monitor the radiation and radionuclides in the environs of the plant. The program shall provide (1) representative measurements of radioactivity In the highest potential exposure pathways, and (2) verification of the accuracy of the effluent monitoring program and modeling of environmental exposure pathways.

The program shall (1) be contained in the ODCM, (2) conform to the guidance of Appendix I to 10 CFR Part 50, and (3) include the following:

(1) Monitoring, sampling, analysis, and reporting of radiation and radionuclides in the environment in accordance with the methodology and parameters in the ODCM, (2) A Land Use Census to ensure that changes in the use of areas at and beyond the SITE BOUNDARY are identified and that modifications to the monitoring program are made if required by the results of this census, and (3) Participation in an Interlaboratory Comparison Program to ensure that independent checks on the precision and accuracy of the measurements of radioactive materials in environmental sample matrices are performed as part of the quality assurance program for environmental monitoring.

b. Radioactive Effluent Controls Prooram A program shall be provided conforming with 10 CFR 50.36a for the control of radioactive effluents and for maintaining the doses to MEMBERS OF THE PUBLIC from radioactive effluents as low as reasonably achievable. The program (1) shall be contained in the ODCM, (2) shall be implemented by operating procedures, and (3) shall include remedial actions to be taken whenever the program limits are exceeded. The program shall include the following elements:

(1) Limitations on the operability of radioactive liquid and gaseous monitoring instrumentation including surveillance tests and setpoint determination in accordance with the methodology in the 00CM, (2) Limitations on the concentrations of radioactive material released in liquid effluents to unrestricted areas conforming to 10 times the concentrations specified in 10 CFR Part 20.1001 -

20.2402, Appendix B, Table 2, Column 2, (3) Monitoring, sampling, and analysis of radioactive liquid and gaseous effluents in accordance with 10 CFR 20.1302 and with the methodology and parameters in the ODCM, -a 6-11a Amendment No. 17$. 197 OCT 2VA* 1995

b. Radioactive Effluent Controls Program (continued)

(4) Limitations on the annual and quarterly doses or dose commitment to a MEMBER OF THE PUBLIC from radioactive materials in liquid effluents released from the unit to the site boundary conforming to Appendix I to 10 CFR Part 50, (5) Determination of cumulative dose contributions from radioactive effluents for the current calendar quarter and current calendar year in accordance with the methodology and parameters in the aDCM at least every 31 days.

Determination of projected dose contributions from radioactive effluents in accordance with the methodology in the ODCM at least every 31 days.

(6) Limitations on the operability and use of the liquid and gaseous effluent treatment systems to ensure that the appropriate portions of these systems are used to reduce releases of radioactivity when the projected doses in a 31-day period would exceed 2 percent of the guidelines for the annual dose or dose commitment conforming to Appendix I to 10 CFR Part 50, (7) Limitations on the dose rate resulting from radioactive material released in gaseous effluents to areas at, or beyond, the site boundary. The limits are as follows:

(a) For noble gases: less than or equal to 500 mrem/yr to the total body and less than or equal to 3000 mrem/yr to the skin, and (b) For 1-131,1-133. tritlurn and all radionuctides in particulate form with half lives greater than 8 days:

less than or equal to 1500 mrern/yr to any organ.

(8) Limitations on the annual and quarterly air doses resulting from noble gases released in gaseous effluents from the unit to areas beyond the site boundary conforming to Appendix I to 10 CFR Part 50, (9) Limitations on the annual quarterly doses to a MEMBER OF THE PUBLIC from IOOine-131, IOOine-133, tritium, and all radionuclides in particulate form with half-lives greater than 8 days in gaseous effluents released from the unit to areas beyond the site boundary conforming to Appendix I to 10 CFR Part 50, and (10) Limitations on the annual dose or dose commitment to any MEMBER OF THE PUBLIC due to releases of radioactivity and to radiation from uranium fuel cycle sources conforming to 40 CFR Part 190.

6-11 b Amendment No.268

6.8.5 Reactor Building Leakage Rate Testing Program The Reactor Building Leakage Rate Testing Program shall be established, implemented, and maintained as follows:

A program shall be established to implement the leakage rate testing of the Reactor Building as required by 10 CFR 50.54(o) and 10 CFR 50, Appendix J, Option B, as modified by approved exemptions. This program shall be in accordance with the guidelines contained in Regulatory Guide 1.163, "Performance-Based Containment Leak-Test Program," dated September 1995, as modified by the following exception to NEI 94-01, Rev. 0, "Industry Guideline for Implementing Performance-Based Option of 10 CFR Part 50, Appendix J":

a. Section 9.2.3: The first Type A test performed after the September 1993 Type A test shall be performed prior to startup from the T1 R18 refueling outage. The T1 R1 8 refueling outage will begin no later than November 1, 2009.

The peak calculated Reactor Building internal pressure for the design basis loss of coolant accident, Pc, is 50.6 psig.

The maximum allowable Reactor Building leakage rate, La, shall be 0.1 weight percent of containment atmosphere per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months at Pac.

Reactor Building leakage rate acceptance criteria is < 1.0 La. During the first plant startup following each test performed in accordance with this program, the leakage rate acceptance criteria are < 0.60 L, for the Type B and Type C tests and -<0.75 La for the Type A tests.

6-11 c 20 2 44 Amendment No. 1, , 259

6.9 REPORTING REQUIREMENTS In addition to the applicable reporting requirements of Title 10, Code of Federal Regulations, the following identified reports shall be submitted to the Administrator of the NRC Region 1 Office unless otherwise noted.

6.9.1 Routine Reports A. Startup Report. A summary report of plant startup and power escalation testing shall be submitted following (1)receipt of an operating license, (2) amendment to the license involving a planned increase in power level, (3) installation of fuel that has a different design or has been manufactured by a different fuel supplier, and (4)modifications that may have significantly altered the nuclear, thermal, or hydraulic performance of the plant. The report shall address each of the tests identified in the UFSAR, Chapter 13 and shall in general include a description of the measured values of the operating conditions or characteristics obtained during the test program and a comparison of these values with design predictions and specifications. Any corrective actions that were required to obtain satisfactory operation shall also be described.

Any additional specific details required in license conditions based on other commitments shall be included in this report.

Startup reports shall be submitted within (1)90 days following completion of the startup test program, (2)90 days following resumption or commencement of commercial power operation, or (3)9 months following initial criticality, whichever is earliest. If the Startup Report does not cover all three events (i.e., Initial criticality, completion of startup test program, and resumption or commencement of commercial power operation), supplementary reports shall be submitted at least every three months until all three events have been completed.

B. Annual Reports. Annual reports covering the activities of the unit as described below during the previous calendar year shall be submitted prior to March 1 of each year. (Asingle submittal maybe made for the station. The submittal should combine those sections that are common to both units at the station.)

1. DELETED

2. The following information on aircraft movements at the Harrisburg International Airport:

a. The total number of aircraft's movements (takeoffs and landings) at the Harrisburg International Airport for the previous twelve-month period.

b. The total number of movements of aircraft larger than 200,000 pounds at the Harrisburg International Airport for the previous twelve-month period, broken down into scheduled and non-scheduled (including military) takeoffs and landings, based on a current estimate provided by the airport manager or his designee.

6-12 Amendment No. 12, 37, 77, 167, 180, 2 54

3. The following information from the periodic Leak Reduction Program tests shall be reported:

a. Results of leakage measurements,

b. Results of visual inspections, and

c. Maintenance undertaken as a result of Leakage Reduction Program tests or inspections.

4. The following information regarding pressurizer power operated relief valve and pressurizer safety valve challenges shall be reported:

a. Date and time of incident,

b. Description of occurrence, and

c. Corrective measures taken if incident resulted from an equipment failure.

5. The following information regarding the results of specific activity analysis in which the primary coolant exceeded limits of Technical Specifications 3.1.4.1 shall be reported:

a. Reactor power history starting 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months prior to the first sample in which the limit was exceeded;

b. Results of the last isotopic analysis for radioiodine performed prior to exceeding the limit, results of analysis while limit was exceeded and results of one analysis after the radioiodine activity was reduced to less than limit. Each result should include date and time of sampling and the radioiodine activity was reduced to less than limit.

Each result should include date and time of sampling and the radioiodine concentrations;

c. Cleanup system flow history starting 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months prior to the first sample In which the limit was exceeded;

d. Graph of the 1-131 concentration and one other radioiodine isotope concentration in microcuries per gram as a function of time for the duration of the specific activity above the steady-state level; and

e. The time duration when the specific activity of the primary coolant exceeded the radioiodine limit.

C. DELETED 6.9.2 DELETED 6-13 (Pages 6-14, 6-15, and 6-16 deleted)

Amendment No. 11, 37, 72,77, 82, 117, 129, 254

6.9.3 ANNUAL RADIOLOGICAL ENVIRONMENTAL OPERATING REPORT 6.9.3.1 The Annual Radiological Environmental Operating Report covering the operation of the unit during the previous calendar year shall be submitted prior to May 1 of each year.

The Report shall include summaries, interpretations, and an analysis of trends of the results of the Radiological Environmental Monitoring Program for the reporting period. The material provided shall be consistent with the objectives outlined in: (1) the ODCM; and, (2) Sections IV.B.2, IV.B.3, and IV.C of Appendix I to 10 CFR Part 50.

Note: A single submittal may be made for the station.

6-17 Amendment No. 59, 64, 72, 77, 108, 117, 129,173 APR 5 1993

6.9.4 ANNUAL RADIOACTIVE EFFLUENT RELEASE REPORT 6.9.4.1 The Annual Radioactive Effluent Release-Report covering the operation of the unit during the previous calendar year shall be submitted prior to May 1 of each year.

The Report shall include a summary of the quantities of radioactive liquid and gaseous effluent and solid waste released from the unit.

The material provided shall be: (1) consistent with the objectives outlined in the OCM and PCP; and, (2) in conformance with 10 CFR 50.36(a) and Section IV.B.1 of Appendix I to 10 CFR Part 50.

Note: A single submittal may be made for the station. The submittal should combine those sections that are common to both units at the station.

6-18 Amendment No. 71, 77, fl9, W7, M7, 185

6.9.5 CORE OPERATING LIMITS REPORT 6.9.5.1 The core operating limits addressed by the individual Technical Specifications shall be established and documented in the CORE OPERATING LIMITS REPORT prior to each reload cycle or prior to any remaining part of a reload cycle.

6.9.5.2 The analytical methods used to determine the core operating limits addressed by the individual Technical Specifications shall be those previously reviewed and approved by the NRC for use at TMI-1, specifically:

(1) BAW-10179 P-A, "Safety and Methodology for Acceptable Cycle Reload Analyses." The current revision level shall be specified in the COLR.

(2) TR-078-A, "TMI-1 Transient Analyses Using the RETRAN Computer Code", Revision 0. NRC SER dated 2/10/97.

(3) TR-087-A, "TMI-1 Core Thermal-Hydraulic Methodology Using the VIPRE-01 ComputerCode", Revision 0. NRC SER dated 12/19/96.

(4) TR-091 -A, "Steady State Reactor Physics Methodology for TMI-1 Revision 0. NRC SER dated 2,/21/96.

(5) TR-092P-A, "TMI-1 Reload Design and Setpoint Methodology",

Revision 0. NRC SER dated 4/22/97.

(6) BAW-10227P-A, "Evaluation of Advanced Cladding and Structural Material (M5) in PWR Reactor Fuel", NRC SER dated February 4, 2000.

6.9.5.3 The core operating limits shall be determined so that all applicable limits (e.g., fuel thermal-mechanical limits, core thermal-hydraulic limits, ECCS limits, nuclear limits such as shutdown margin, and transient/accident analysis limits) of the safety analysis are met.

6.9.5.4 The CORE OPERATING LIMITS REPORT, including any mid-cycle revisions or supplements thereto, shall be provided upon issuance for each reload cycle to the NRC Document Control Desk with copies to the Regional Administrator and Resident Inspector.

6.9.6 STEAM GENERATOR TUBE INSPECTION REPORT A report shall be submitted within 90 days after the average reactor coolant temperature exceeds 2000F following completion of an inspection performed in accordance with Section 6.19, Steam Generator (SG) Program. The report shall include:

a. The scope of inspections performed on each SG,

b. Active degradation mechanisms found,

c. Nondestructive examination techniques utilized for each degradation mechanism, 6-19 Amendment No. 72,77,129,137,111,149,!150,168,!73,178,202, 233, 2b1

d. Location, orientation (if linear), and measured sizes (if available) of service induced indications,

e. Number of tubes plugged during the inspection outage for each active degradation mechanism,

f. Total number and percentage of tubes plugged or repaired to date,

g. The results of condition monitoring, including the results of tube pulls and in-situ testing,

h. The effective plugging percentage for all plugging and tube repairs in each SG,

i. Location, bobbin coil depth estimate (if determined), bobbin coil amplitude (if determined), and axial and circumferential extent for each inside diameter (ID) IGA indication.

j. An assessment of growth of inside diameter IGA degradation in accordance with the volumetric ID IGA management program contained in AmerGen Engineering Report, ECR No. TM 01-00328.

k. The information specified for reporting in ECR No. 02-01121, Rev. 2.

I. The number and percentage of inservice tubes repaired by each method existing in the SGs.

6.10 RECORD RETENTION 6.10.1 The following records shall be retained for at least five years:

a. Records of normal station operation including power levels and periods of operation at each power level.

b. Records of principal maintenance activities, including inspection, repairs, substitution, or replacement of principal items of equipment related to nuclear safety.

c. All REPORTABLE EVENTS.

d. Records of periodic checks, tests and calibrations.

e. Records of reactor physics tests and other special tests related to nuclear safety.

f. Changes to procedures required by Specification 6.8.1.

g. Deleted

h. Test results, in units of microcuries, for leak tests performed on licensed sealed sources.

i. Results of annual physical inventory verifying accountability of licensed sources on record.

Control Room Log Book.

k. Control Room Supervisor Log Book.

6-20 Amendment No.72, 77, 129,137,141, 150, 173,18(, 29, 261

6.10.2 The following records shall be retained for the duration of Operating License DPR-50 unless otherwise specified in 6.10.1 above.

a. Records and drawing changes reflecting facility design modifications made to systems and equipment described in the Final Safety Analysis Report.

b. Records of new and irradiated fuel inventory, fuel transfers and assembly burnup histories.

c. Routine unit radiation surveys and monitoring records.

d. Records of doses received by all individuals for whom monitoring was required.

e. Records of radioactive liquid and gaseous wastes released to the environment, and records of environmental monitoring surveys.

f. Records of transient or operational cycles for those facility components which affect nuclear safety for a limited number of transients or cycles as defined in the Final Safety Analysis Report.

g. Records of training and qualification for current members of the unit staff.

h. Records of in-service inspections performed pursuant to these Technical Specifications.

i. Records of Quality Assurance activities required by the QATR.

j. Records of reviews performed for changes made to procedures or equipment or reviews of tests and experiments pursuant to 10 CFR 50.59.

k. Deleted.

I. Records of analyses required by the radiological environmental monitoring program.

m. Records of the service lives of all safety related hydraulic snubbers including the date at which the service life commences and associated installation and maintenance records.

n. Records of solid radioactive shipments.

o. Records of reviews performed for changes made to the OFFSITE DOSE CALCULATION MANUAL and the PROCESS CONTROL PROGRAM.

6-21 Amendment No. 72, 77, 129,137, 1411, 19, 150,173, 180, 252

6.11 RADIATION PROTECTION PROGRAM Procedures for personnel radiation protection shall be prepared consistent with the requirements of 10 CFR Part 20 and shall be approved, maintained and adhered to for all operations involving personnel radiation exposure.

6.12 HIGH RADIATION AREA 6.12.1 In lieu of the "control device" or "alarm signal" required by paragraph 20.1601 of 10 CFR 20:

a. Each riigh Radiation Area in which the intensity of radiation at 30 cm (11.8 in.)

is greater than 100 mrem/hr. deep dose but less than 1000 mrem/hr. shall be barricaded and conspicuously posted as a High Radiation Area, and personnel desiring entrance shall obtain a Radiation Work Permit (RWP). Any individual or group of individuals entering a High Radiation Area shall (a) use a continuously indicating dose rate monitoring device or (b) use a radiation dose rate integrating device which alarms at a pre-set dose level (entry into such areas with this monitoring device may be made after the dose rate level in the area has been established and personnel have been made knowledgeable of them), or (c) assure that a radiological control technician provides positive control over activities within the area and periodic radiation surveillance with a dose rate monitoring instrument.

b. In addition to the requirements of specification 6.12. I.a:

1. Any area accessible to personnel where an individual could receive in any one hour a deep dose in excess of 1000 mrem at 30 cm (11.8 in.) but less than 500 rads at one meter (3.28 ft.) from sources of radioactivity shall be locked or guarded to prevent unauthorized entry. The keys to these locked barricades shall be maintained under the administrative control of the respective Radiological Controls Supervisor.

2. For individual high radiation areas where an individual could receive in any one hour a deep dose in excess of 1000 mrem at 30 cm (11.8 in.) but less than 500 rads at one meter (3.28 ft.), that are located within large areas such as reactor containment, where no enclosure exists for purposes of locking, and where no enclosure can be reasonably constructed around the individual area, that individual area shall be barricaded and conspicuously posted, and a flashing light shall be activated as a warning device.

The Radiation Work Permit is not required by Radiological Controls personnel during the performance of their assigned radiation protection duties provided they are following radiological control procedures for entry into High Radiation Areas.

6-22 Amendment Nos. 11,35,72,77, 106, 107, 129, 173, 180, 213 JUL 0 1 1999

6.13 PROCESS CONTROL PROGRAM (PCP) 6.13.1 Licensee initiated changes to the PCP:

I

1. Shall be submitted to the NRC in the Annual Radioactive Effluent Release Report for the period in which the changes were made. This submittal shall contain:

a. sufficiently detailed information to justify the changes without benefit of additional or supplemental information;

b. a determination that the changes did not reduce the overall conformance of the solidified waste product to existing criteria for solid wastes; and,

c. documentation that the changes have been reviewed and approved pursuant to 6.8.2.

2. Shall become effective upon review and approval by licensee management.

I 6-23 AmendmentNos. 11, 35,n2,77, 106, 107, 129, 173,207 218 DXC 2 D 1n99

6.14 OFFSITE DOSE CALCULATION MANUAL (ODCM) 6.14.1 Licensee initiated changes to the ODCM:

1. Shall be submitted to the NRC in the Annual Radioactive Effluent Release Report for the period in which the changes were made.

This submittal shall contain:

a. sufficiently detailed information to justify the changes without benefit of additional or supplemental information;

b. a determination that the changes did not reduce the accuracy or reliability of dose calculations or setpoint determinations; and

c. documentation that the changes have been reviewed and approved pursuant to 6.8.2.

2. Shall become effective upon review and approval by licensee management.

6.15 DELETED 6.16 DELETED 6-24 Amendment No. 77,102,173, 197. 207, 218, 253

I r 17 MAJOR CHANGES TO RADIOACTIVE WASTE TREATMENT SYSTEMS 6.17.1 Licensee initiated safety related changes to the radioactive waste system (liquid, gaseous and solid):

1. Shall be reported to the Commission in the Annual Report (Speci'fication 6.9.1B) for the period in which the evaluation was reviewed. The discussion of each change shall contain:

a. A summary of the evaluation that led to the determination that the change could be made in accordance with 10 CFR 50.59;

b. Sufficient detailed information to totally support the reason for the change without benefit of additional or supplemental information;

c. A detailed description of the equipment, components and processes involved and the interfaces with other plant systems;

d. An evaluation of the change which shows the predicted releases of radioactive materials in liquid and gaseous effluents and/or quantity of solid waste that differ from those previously predicted in the license application and amendments thereto;

e. An evaluation of the change which shows the expected maximum exposures to individuals in the unrestricted area and to the general population that differ from those previously estimated in the license application and amendments thereto;

f. A comparison of the predicted releases of radioactive materials, in liquid and gaseous effluents and in solid waste, to the actual releases for the period prior to when the changes are to be made;

g. An estimate of the exposure to plant operating personnel as a result of the change; and

h. Documentation of the fact that the change was reviewed and approved.

6.18 TECHNICAL SPECIFICATIONS (TS) BASES CONTROL PROGRAM This program provides a means for processing changes to the Bases of these Technical Specifications.

a. Changes to the Bases of the TS shall be made under appropriate administrative controls and reviews.

6-25 Amendment No. 72, 77,102,173,207,218,266,269

b. Licensees may make changes to Bases without prior NRC approval provided the changes do not require either of the following:

1. A change in the TS incorporated in the license or

2. A change to the updated FSAR (UFSAR) or Bases that requires NRC approval pursuant to 10 CFR 50.59.

c. The Bases Control Program shall contain provisions to ensure that the Bases are maintained consistent with the UFSAR.

d. Proposed changes that meet the criteria of Specification 6.18.b. 1 or 6.18.b.2 above shall be reviewed and approved by the NRC prior to implementation.

Changes to the Bases implemented without prior NRC approval shall be provided to the NRC on a frequency consistent with 10 CFR 50.71 (e).

6.19 STEAM GENERATOR (SG) PROGRAM A Steam Generator Program shall be established and implemented to ensure that SG tube integrity is maintained. In addition, the Steam Generator Program shall include the following provisions:

a. Provisions for condition monitoring assessments. Condition monitoring assessment means an evaluation of the "as found" condition of the tubing with respect to the performance criteria for structural integrity and accident induced leakage. The "as found" condition refers to the condition of the tubing during an SG inspection outage, as determined from the inservice inspection results or by other means, prior to the plugging of tubes. Condition monitoring assessments shall be conducted during each outage during which the SG tubes are inspected or plugged to confirm that the performance criteria are being met.

b. Performance criteria for SG tube integrity. SG tube integrity shall be maintained by meeting the performance criteria for tube structural integrity, accident induced leakage, and operational leakage.

1. Structural integrity performance criterion: All in-service steam generator tubes shall retain structural integrity over the full range of normal operating conditions (including startup, operation in the power range, hot standby, and cool down and all anticipated transients included in the design specification) and design basis accidents. This includes retaining a safety factor of 3.0 against burst under normal steady state full power operation primary-to-secondary pressure differential and a safety factor of 1.4 against burst applied to the design basis accident primary-to-secondary pressure differentials. Apart from the above requirements, additional loading conditions associated with the design basis accidents, or combination of accidents in accordance with the design and licensing basis, shall also be evaluated to determine if the associated loads contribute significantly to burst or collapse. In the assessment of tube integrity, those loads that do significantly affect burst or collapse shall be determined and assessed in combination with the loads due to pressure with a safety factor of 1.2 on the combined primary loads and 1.0 on axial secondary loads.

6-26 Amendment No. 266, 261

2. Accident induced leakage performance criterion: The primary to secondary accident induced leakage volume or rate for any design basis accident, other than a SG tube rupture, shall not exceed the leakage volume or rate in the accident analysis in terms of total leakage volume or rate for all SGs and leakage volume or rate for an individual SG. Leakage from all sources excluding the leakage attributed to the degradation described in TS Section 6.19.c.1 .b is also n,,ot to exceed 1 gpm per SG.

3. The operational leakage performance criterion is specified in TS 3.1.6, "LEAKAGE."

c. Provisions for SG tube repair criteria.

1. The non-sleeved regions of tubes found by inservice inspection to contain flaws with a depth equal to or exceeding 40% of the nominal tube wall thickness shall be plugged.

The following alternate tube repair criteria may be applied as an alternative to the 40% depth based criteria:

a. Volumetric Inside Diameter (ID) Inter-Granular Attack (IGA) indications may be dispositioned in accordance with ECR No. TM 01-00328. (ECR No. TM 01-00328 is not applicable to tube sleeves nor the parent tubing spanned by the sleeves.) ID IGA indication means an indication initiating on the inside diameter surface and confirmed by diagnostic ECT to have a volumetric morphology characteristic of IGA. ID IGA indications shall be removed from service if they exceed an axial extent of 0.25 inches, or a circumferential extent of 0.52 inches, or a through wall degradation dimension of - 40% if assigned.

b. Upper tubesheet kinetic expansion indications may be dispositioned in accordance with ECR No. TM 02-01121, Rev. 2.

2. Tubes found by inservice inspection to contain a flaw in a sleeve, or in a sleeve's parent tube adjacent to the sleeve between the lower sleeve end and the top of the middle sleeve roll, shall be "plugged-on-detection."

3. Sleeved tubes found by inservice inspection to contain any of the following attributes in the parent tubing adjacent to the sleeve upper tubesheet roll expansion shall be removed from service:

a) The parent tubing is not present.

b) There is a change in the number of indications present.

c) There is a change in the orientation/morphology of the indications.

d) There is a significant change in the circumferential extents of the circumferential and volumetric flaws.

e) There is a significant change in the axial extents of the axial and volumetric flaws.

6-27 Amendment No. 261

d. Provisions for SG tube inspections. Periodic SG tube inspections shall be performed.

The number and portions of the tubes inspected and methods of inspection shall be performed with the objective of detecting flaws of any type (e.g., volumetric flaws, axial and circumferential cracks) that may be present along the length of the tube, from the tube-to-tubesheet weld at the tube inlet to the tube-to-tubesheet weld at the tube outlet, and that may satisfy the applicable tube repair criteria. The tube-to-tubesheet weld is not part, of the tube. In tubes repaired by sleeving, the portion of the parent tube between the top of the middle sleeve roll to the bottom of the uppermost sleeve roll (upper tubesheet roll) is not an area requiring inspection. In addition to meeting the requirements of d.1, d.2, d.3, d.4, and d.5 below, the inspection scope, inspection methods, and inspection intervals shall be such as to ensure that SG tube integrity is maintained until the next SG inspection. An assessment of degradation shall be performed to determine the type and location of flaws to which the tubes may be susceptible and, based on this assessment, to determine which inspection methods need to be employed and at what locations.

1. Inspect 100% of the tubes in each SG during the first refueling outage following SG replacement.

2. Inspect 100% of the tubes at sequential periods of 60 effective full power months.

The first sequential period shall be considered to begin after the first inservice inspection of the SGs. No SG shall operate for more than 24 effective full power months or one refueling outage (whichever is less) without being inspected.

3. If crack indications are found in any SG tube, then the next inspection for each SG for the degradation mechanism that caused the crack indication shall not exceed 24 effective full power months or one refueling outage (whichever is less). If definitive information, such as from examination of a pulled tube, diagnostic non-destructive testing, or engineering evaluation indicates that a crack-like indication is not associated with a crack(s), then the indication need not be treated as a crack.

4. Implementation of the repair criteria for ID IGA requires 100% bobbin coil inspection of all non-plugged tubes using inspection methods and probes in accordance with ECR No. TM 01-00328. ID IGA indications detected by the bobbin coil probe shall be characterized using rotating coil probes, as defined in that report.

5. Implementation of the repair criteria for kinetic expansion indications requires 100% rotating probe inspection of the required lengths of the kinetic expansions in all non-plugged, non-sleeved, tubes using inspection methods and probes in accordance with ECR No. TM 02-01121, Rev.2.

e. Provisions for monitoring operational primary to secondary leakage.

f. Provisions for SG tube repair methods. Steam generator tube repair methods shall provide the means to reestablish the RCS pressure boundary integrity of SG tubes without removing the tube from service. For the purposes of these Specifications, tube plugging is not a repair. All acceptable tube repair methods are listed below.

6-28 Amendment No. 261

TMI-1's kinetic expansion repairs installed in the 1980's, and without flaws exceeding the criteria of 6.19.c.1 .b, may remain in service subject to the requirements of TS Sections 3.1.1.2, 4.19, and 6.19.

TMI-1's 80" Inconel-690 rolled sleeves installed in 1991 and 1993, and without flaws exceeding the repair criteria of 6.19.c.2 or 6.19.c.3, may remain in service subject to the requirements of TS Sections 3. 1 .2; 4.19, and 6.19.

Installation of new repair methods, additional kinetic expansions, or additional sleeves, requires prior NRC approval.

NOTE: Refer to Section 6.9.6 for reporting requirements for periodic SG tube inspections.

6.20 Control Room Envelope Habitability Program A Control Room Envelope (CRE) Habitability Program shall be established and implemented to ensure that CRE habitability is maintained such that, with an OPERABLE Emergency Control Room Air Treatment System, CRE occupants can control the reactor safely under normal conditions and maintain it in a safe condition following a radiological event, hazardous chemical release, or a smoke challenge. The program shall ensure that adequate radiation protection is provided to permit access and occupancy of the CRE under design basis accident (DBA) conditions without personnel receiving radiation exposures in excess of 5 rem total effective dose equivalent (TEDE) for the duration of the accident. The program shall include the following elements:

a. The definition of the CRE and the CRE boundary.

b. Requirements for maintaining the CRE boundary in its design condition including configuration control and preventive maintenance.

c. Requirements for (i) determining the unfiltered air inleakage past the CRE boundary into the CRE in accordance with the testing methods and at the Frequencies specified in Sections C.1 and C.2 of Regulatory Guide 1.197, "Demonstrating Control Room Envelope Integrity at Nuclear Power Reactors," Revision 0, May 2003, and (ii) assessing CRE habitability at the Frequencies specified in Sections C.1 and C.2 of Regulatory Guide 1.197, Revision 0.

d. Measurement, at designated locations, of the CRE pressure relative to all external areas adjacent to the CRE boundary during the pressurization mode of operation by one train of the Control Room Ventilation System, operating at the design flow rate, at a Frequency of 24 months. The results shall be trended and used as part of the 24 month assessment of the CRE boundary.

e. The quantitative limits on unfiltered air inleakage into the CRE. These limits shall be stated in a manner to allow direct comparison to the unfiltered air inleakage measured by the testing described in paragraph c. The unfiltered air inleakage limit for radiological challenges is the inleakage flow rate assumed in the licensing basis analyses of DBA consequences. Unfiltered air inleakage limits for hazardous chemicals must ensure that exposure of CRE occupants to these hazards will be within the assumptions in the licensing basis.

The provisions of Section 1.25 are applicable t que u'eRIL- fl r assessing habitability, determining CRE unfiltered inleakage, and measuring CRE pressure and assessing the CRE boundary as required by paragraphs c and d, respectively.

6-29 Amendment No. 26-1-,264

ML092710463

Text

Navigation menu

Search