Text

License Amendment Request to Relocate TS Surveillance Frequencies to Licensee Controlled Program in Accordance with TSTF-425, Revision 3
	ML12284A213
Person / Time
Site:	Millstone
Issue date:	10/04/2012
From:	Stoddard D; Dominion Nuclear Connecticut
To:	; Document Control Desk, Office of Nuclear Reactor Regulation
References
	12-580
	Download: ML12284A213 (187)
	v • d • e

Dominion Nuclear Connecticut, Inc.

5000 Dominion Boulevard, Glen Allen, VA 23060 J ominoW Web Address: www.dom.com October 4, 2012 U.S. Nuclear Regulatory Commission Serial No.12-580 Attention: Document Control Desk NSSL/MLC RO Washington, DC 20555 Docket No. 50-423 License No. NPF-49 DOMINION NUCLEAR CONNECTICUT, INC.

MILLSTONE POWER STATION UNIT 3 LICENSE AMENDMENT REQUEST TO RELOCATE TS SURVEILLANCE FREQUENCIES TO LICENSEE CONTROLLED PROGRAM IN ACCORDANCE WITH TSTF-425. REVISION 3 In accordance with the provisions of 10 CFR 50.90, Dominion Nuclear Connecticut, Inc.

(DNC) is submitting a request for an amendment to the technical specifications (TS) for Millstone Power Station Unit 3 (MPS3). The proposed amendment would modify TSs by relocating specific surveillance frequencies to a licensee controlled program with the adoption of Technical Specification Task Force (TSTF)-425, Revision 3, "Relocate Surveillance Frequencies to Licensee Control - Risk-Informed Technical Specification Task Force (RITSTF) Initiative 5b." Additionally, the change would add a new program, the Surveillance Frequency Control Program (SFCP), to TS Section 6, Administrative Controls. The changes are consistent with NRC-approved Industry/TSTF Standard Technical Specifications (STS) change TSTF-425, Revision 3, (ADAMS Accession No. ML090850642). The Federal Register notice published on July 6, 2009 (74 FR 31996),

announced the availability of this TS improvement. provides a description and assessment of the proposed change. includes DNC documentation with regard to the technical adequacy of the Probabilistic Risk Assessment. Attachment 4 provides a cross-reference between the NUREG-1431 surveillances included in TSTF-425 versus the MPS3 surveillances included in this amendment request. Attachments 3 and 6 provide the MPS3 marked-up TS pages and TS Bases pages, respectively. The marked-up TS Bases pages are provided for information only. The changes to the affected TS Bases pages will be incorporated in accordance with the TS Bases Control Program upon approval of this amendment request.

As detailed in Attachment 5, the proposed amendment does not involve a Significant Hazards Consideration pursuant to the provisions of 10 CFR 50.92. The Facility Safety Review Committee has reviewed and concurred with the determinations herein.

Issuance of this amendment is requested no later than October 4, 2013, with the amendment to be implemented within 90 days.

In accordance with 10 CFR 50.91(b), a copy of this license amendment request is being provided to the State of Connecticut.

Serial No: 12-580 Docket No. 50-423 Adoption of TSTF-425, Rev. 3 Page 2 of 3 Should you have any questions in regard to this submittal, please contact Wanda Craft at (804) 273-4687.

Sincerely, Daniel G. Stoddard Senior Vice President - Nuclear Operations COMMONWEALTH OF VIRGINIA COUNTY OF HENRICO The foregoing document was acknowledged before me, in and for the County and Commonwealth aforesaid, today by Daniel G. Stoddard, who is Vice President - Nuclear Operations of Dominion Nuclear Connecticut, Inc. He has affirmed before me that he is duly authorized to execute and file the foregoing document in behalf of that company, and that the statements in the document are true to the best of his knowledge and belief.

Acknowledged before me this Ž/ýlday of Odv-ýC, 2012.

My Commission Expires: /-L -,,O/*

ic lNotary Public Commonwealth of Virginia Reg. # 7518653 Attachments: y mmission Expires December 31, 20L

1. Description and Assessment of Proposed Changes

2. Documentation of PRA Technical Adequacy

3. Marked-up Technical Specifications Changes

4. Cross-References - NUREG-1431 to MPS3 TS Surveillance Frequencies Removed

5. Significant Hazards Consideration Determination 6.. Marked-Up Technical Specifications Bases Changes (For Information Only)

Commitments made in this letter: None

Serial No: 12-580 Docket No. 50-423 Adoption of TSTF-425, Rev. 3 Page 3 of 3 cc: U.S. Nuclear Regulatory Commission Region I Regional Administrator 2100 Renaissance Blvd., Suite 100 King of Prussia, PA 19406-2713 J. S. Kim NRC Project Manager U.S. Nuclear Regulatory Commission, Mail Stop 08 C2A One White Flint North 11555 Rockville Pike Rockville, MD 20852-2738 NRC Senior Resident Inspector Millstone Power Station Director, Radiation Division.

Department of Energy and Environmental Protection 79 Elm Street Hartford, CT 06106-5127

Serial No.12-580 Docket No. 50-423 ATTACHMENT I DESCRIPTION AND ASSESSMENT OF PROPOSED CHANGES DOMINION NUCLEAR CONNECTICUT, INC.

MILLSTONE POWER STATION UNIT 3

Serial No.12-580 Docket No. 50-423 Attachment 1, Page 1 of 5 DESCRIPTION AND ASSESSMENT OF PROPOSED CHANGES

1.0 DESCRIPTION

In accordance with the provisions of 10 CFR 50.90, Dominion Nuclear Connecticut, Inc.

(DNC) is submitting a request for an amendment to the technical specifications (TS) for Millstone Power Station Unit 3 (MPS3). The proposed amendment would modify TSs by relocating specific surveillance frequencies to a licensee controlled program with the adoption of Technical Specification Task Force (TSTF)-425, Revision 3, "Relocate Surveillance Frequencies to Licensee Control - Risk-Informed Technical Specification Task Force (RITSTF)'Initiative 5b." Additionally, the change would add a new program, the Surveillance Frequency Control Program (SFCP), to TS Section 6, Administrative Controls. The changes are consistent with NRC-approved Industry/TSTF Standard Technical Specifications (STS) change TSTF-425, Revision 3, (ADAMS Accession No. ML090850642). The Federal Register notice published on July 6, 2009 (74 FR 31996),

announced the availability of this TS improvement.

2.0 ASSESSMENT 2.1 Applicability of Published Safety Evaluation DNC has reviewed the safety evaluation provided in Federal Register Notice 74 FR 31996, dated July 6, 2009. This review included a review of the NRC staff's evaluation, TSTF-425, Revision 3, and the requirements specified in NEI 04-10, Rev. 1 (ADAMS Accession No. ML071360456). includes DNC documentation with regard to technical adequacy of the Probabilistic Risk Assessment (PRA) consistent with the requirements of Regulatory Guide (RG) 1.200, Revision 1 (ADAMS Accession No. ML070240001), Section 4.2. also describes any PRA models without NRC-endorsed standards, including documentation of the quality characteristics of those models in accordance with RG 1. 200.

DNC has concluded that the justifications presented in the TSTF proposal and the safety evaluation prepared by the NRC staff are applicable to MPS3 and justify this amendment to incorporate the changes to the MPS3 TSs.

2.2 Optional Changes and Variations The proposed amendment is consistent with the STS changes described in TSTF-425, Revision 3. However, DNC proposes variations or deviations from TSTF-425, as identified below.

1. Revised (typed) TS pages are not included in this amendment request given the number of TS pages affected, the straightforward nature of the proposed changes,

Serial No.12-580 Docket No. 50-423 Attachment 1, Page 2 of 5 and outstanding MPS3 amendment requests that may impact some of the same TS pages. Providing only mark-ups of the proposed TS changes satisfies the requirements of 10 CFR 50.90 in that the mark-ups fully describe the changes desired. This represents an administrative deviation from the NRC staffs model application dated July 6, 2009 (74 FR 31996) with no impact on the NRC staffs model safety evaluation published in the same Federal Register notice. As a result of this deviation, the contents and numbering of the attachments for this amendment request differ from the attachments specified in the NRC staffs model application.

The proposed TS Bases changes are provided to the NRC for information only.

2. The definition of STAGGERED TEST BASIS is being retained in MPS3 TS Definition Section 1 since this terminology is mentioned in Administrative TS Section 6.8.4.h, "Control Room Envelope Habitability Program," which is not the subject of this amendment request and is not proposed to be changed. This represents an administrative deviation from TSTF-425 with no impact on the NRC staffs model safety evaluation dated July 6, 2009 (74 FR 31996).

3. The inserts provided in TSTF-425 are revised to fit the MPS3 TS format.

The TSTF-425 insert for each relocated surveillance frequency is changed from "in accordance with the Surveillance Frequency Control Program" to "at the frequency specified in the Surveillance Frequency Control Program."

The insert provided in TSTF-425 to replace text describing the basis for each frequency relocated to the SFCP has been revised from "The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program" to read "The surveillance frequency is controlled under the Surveillance Frequency Control Program." This deviation is consistent with recent NRC guidance. After NRC approval of the license amendment request (LAR) and as part of the LAR implementation, the existing MPS3 Bases information describing the basis for the relocated surveillance frequencies will also be relocated to a licensee controlled program with the relocated surveillance frequencies.

In addition, other editorial changes to the existing TS wording and/or text inserts are being made. These administrative/editorial deviations to the TSTF-425 inserts and the existing TS wording are made to fit the MPS3 TS format.

4. Attachment 4 provides a cross-reference between the NUREG-1431 surveillances included in TSTF-425 versus the MPS3 surveillances included in this amendment request. Attachment 4 includes a summary description of the referenced TSTF-425 (NUREG-1431)/MPS3 (NUREG-0452 format) TS surveillances which is provided for information purposes only and is not intended to be a verbatim description of the TS surveillances. This cross-reference highlights the following:

Serial No.12-580 Docket No. 50-423 Attachment 1, Page 3 of 5

a. NUREG-1431 surveillances included in TSTF-425 and corresponding MPS3 surveillances with plant-specific surveillance numbers,

b. NUREG-1431 surveillances included in TSTF-425 that are not contained in the MPS3 TS, and

c. MPS3 plant-specific surveillances that are not contained in NUREG-1431 and, therefore, are not included in the TSTF-425 mark-ups.

Concerning the above, MPS3 TSs were developed based on NUREG-0452. As a result, the applicable MPS3 TSs and associated Bases number differ from the STS presented in NUREG-1431 and TSTF-425, but with no impact on the NRC staff's model safety evaluation dated July 6, 2009 (74 FR 31996).

For NUREG-1431 surveillances not contained in MPS3 TSs, the corresponding mark-ups identified in TSTF-425 for these surveillances are not applicable. This is an administrative deviation from TSTF-425 with no impact on the NRC staffs model safety evaluation dated July 6, 2009 (74 FR 31996).

For MPS3 plant-specific surveillances not included in the NUREG-1431 mark-ups provided in TSTF-425, DNC has determined that since these surveillances involve fixed periodic frequencies, relocation of these frequencies is consistent with TSTF-425, Rev. 3, and with the NRC's model safety evaluation dated July 6, 2009 (74 FR 31996), including the scope exclusions identified in Section 1.0, "Introduction," of the model safety evaluation. In accordance with TSTF-425, changes to the frequencies for these surveillances would be controlled under the SFCP.

The SFCP provides the necessary administrative controls to require that surveillances related to testing, calibration, and inspection are conducted at a frequency to assure the necessary quality of systems and components is maintained, facility operation will be within safety limits, and the limiting conditions for operation will be met. Changes to frequencies in the SFCP would be evaluated using the methodology and PRA guidelines contained in NEI 04-10, Revision 1, "Risk-Informed Technical Specifications Initiative 5b, Risk-Informed Method for Control of Surveillance Frequencies," (ADAMS Accession No. ML071360456), as approved by NRC letter dated September 19, 2007 (ADAMS Accession No. ML072570267). The NEI 04-10, Revision 1 methodology includes qualitative considerations, risk analyses, sensitivity studies and bounding analyses, as necessary, and recommended monitoring of the performance of structures, systems, and components, (SSCs) for which frequencies are changed to assure that reduced testing does not adversely impact the SSCs. In addition, the NEI 04-10, Revision 1 methodology satisfies the five key safety principles specified in RG 1.177, "An Approach for Plant-Specific, Risk-Informed Decisionmaking: Technical Specifications," dated August 1998, relative to changes in surveillance frequencies.

Serial No.12-580 Docket No. 50-423 Attachment 1, Page 4 of 5

3.0 REGULATORY ANALYSIS

3.1 No Significant Hazards Consideration DNC has reviewed the proposed no significant hazards consideration (NSHC) determination published in the Federal Register dated July 6, 2009 (74 FR 31996).

DNC has concluded that the proposed NSHC presented in the Federal Register notice is applicable to MPS3, and is provided as Attachment 5 to this amendment request, which satisfies the requirements of 10 CFR 50.91 (a).

3.2 Applicable Regulatory Requirements A description of the proposed changes and their relationship to applicable regulatory requirements is provided in TSTF-425, Revision 3 and the NRC's model safety evaluation published in the Notice of Availability dated July 6, 2009 (74 FR 31996).

DNC has concluded that the relationship of the proposed changes to the applicable regulatory requirements presented in the Federal Register notice is applicable to MPS3.

3.3 Conclusions In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commission's regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

4.0 ENVIRONMENTAL CONSIDERATION

DNC has reviewed the environmental consideration included in the NRC staff's model safety evaluation published in the Federal Register on July 6, 2009 (74 FR 31996).

DNC has concluded that the staffs findings presented therein are applicable to MPS3, and the determination is hereby incorporated by reference for this application.

Serial No.12-580 Docket No. 50-423 Attachment 1, Page 5 of 5

5.0 REFERENCES

1. TSTF-425, Revision 3, "Relocate Surveillance Frequencies to Licensee Control -

RITSTF Initiative 5b," March 18, 2009 (ADAMS Accession Number:

ML090850642).

2. NRC Notice of Availability of Technical Specification Improvement to Relocate Surveillance Frequencies to Licensee Control - Risk-Informed Technical Specification Task Force (RITSTF) Initiative 5b, Technical Specification Task Force - 425, Revision 3, published on July 6, 2009 (74 FR 31996).

3. NEI 04-10, Revision 1, "Risk-Informed Technical Specifications Initiative 5b, Risk-Informed Method for Control of Surveillance Frequencies," April 2007 (ADAMS Accession Number: ML071360456).

4. Regulatory Guide 1.200, Revision 1, "An Approach for Determining the Technical Adequacy of Probabilistic Risk Assessment Results for Risk-Informed Activities,"

.January 2007 (ADAMS Accession Number: ML070240001).

5. Regulatory Guide 1.177, "An Approach for Plant-Specific, Risk-Informed Decisionmaking: Technical Specifications," dated August 1998 (ADAMS Accession No. ML003740176).

Serial No.12-580 Docket No. 50-423 ATTACHMENT 2 DOCUMENTATION OF PROBABILISTIC RISK ASSESSMENT (PRA)

TECHNICAL ADEQUACY DOMINION NUCLEAR CONNECTICUT, INC.

MILLSTONE POWER STATION UNIT 3

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 1 of 18 DOCUMENTATION OF PROBABILISTIC RISK ASSESSMENT (PRA)

TECHNICAL ADEQUACY PRA QUALITY OVERVIEW The implementation of the Surveillance Frequency Control Program (SFCP, also referred to as Technical Specifications Initiative 5b) at Millstone Power Station Unit 3 (MPS3) will follow the guidance provided in NEI 04-10, Revision 1 [Ref. 1] in evaluating proposed surveillance test interval (STI; also referred to as "surveillance frequency") changes. The following steps of the risk-informed STI revision process are common to all proposed STI changes within the proposed licensee controlled program.

EaCh proposed STI revision is reviewed to determine whether there are any commitments made to the Nuclear Regulatory Commission (NRC) that may prohibit changing the interval. If there are no related commitments, or the commitments may be changed using a commitment change process based on NRC endorsed guidance, then evaluation of the STI revision can proceed. If a commitment exists and the commitment change process does not permit the change without NRC approval, then the STI revision cannot be implemented. Only after receiving formal NRC approval to change the commitment could a STI revision proceed.

" A qualitative analysis is performed for each STI revision that involves several considerations as explained in NEI 04-10, Revision 1.

" Each STI revision is reviewed by an expert panel, referred to as the Integrated Decisionmaking Panel (IDP), which is normally the same panel as is used for Maintenance Rule implementation, but with the addition of specialists with experience in surveillance tests and system or component reliability. If the IDP approves the STI revision, the change is documented and implemented, and available for future audits by the NRC. If the IDP does not approve the STI revision, the STI value is left unchanged.

" Performance monitoring is conducted as recommended by the IDP. In some cases, no additional monitoring may be necessary beyond that already conducted under the Maintenance Rule. Performance monitoring helps to confirm that no failure mechanisms related to the revised test interval are subsequently identified as sufficiently significant to alter the basis provided in the justification for the surveillance interval change.

The IDP is responsible for periodic review of performance monitoring results. If it is determined that the time interval between successive performances of a surveillance test is a factor in the unsatisfactory performances of the surveillance, the IDP returns the STI back to the previously acceptable STI.

In addition to the above steps, the Probabilistic Risk Assessment (PRA) is used, when possible, to quantify the effect of a proposed individual STI revision compared

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 2 of 18 to acceptance criteria in NEI 04-10, Revision 1. Also, the cumulative impact of risk-informed STI revisions on PRA evaluations (i.e., internal events, external events, and shutdown) is also compared to the risk acceptance criteria as delineated in NEI 04-10, Revision 1.

For those cases where the STI cannot be modeled in the plant PRA (or where a particular PRA model does not exist for a given hazard group), a qualitative or bounding analysis is performed to provide justification for the acceptability of the proposed test interval change.

The NEI 04-10, Revision 1 methodology endorses the guidance provided in Regulatory Guide (RG) 1.200, Revision 1 [Ref. 2], "An Approach for Determining the Technical Adequacy of Probabilistic Risk Assessment Results for Risk-Informed Activities." The guidance in RG 1.200 indicates that the following steps should be followed when performing PRA assessments (NOTE: Because of the broad scope of potential Initiative 5b applications and the fact that the risk assessment details will differ from application to application, each of the issues encompassed in Items 1 through 3 below will be covered with the preparation of each individual PRA assessment made in support of the individual STI interval requests.

Item 3 satisfies one of the requirements of Section 4.2 of RG 1.200. The remaining requirements of Section 4.2 are addressed by Item 4 below.):

1. Identify the parts of the PRA used to support the application.

" Identify structures, systems, and components (SSCs), operational characteristics affected by the application and how these are implemented in the PRA model.

" A definition of the acceptance criteria used for the application.

2. Identify the scope of risk contributors addressed by the PRA model.

If not full scope (i.e., internal events, external events, applicable modes), identify appropriate compensatory measures or provide bounding arguments to address the risk contributors not addressed by the PRA model.

3. Summarize the risk assessment methodology used to assess the risk of the application.

Include how the PRA model was modified to appropriately model the risk impact of the change request.

4. Demonstrate the technical adequacy of the PRA.

Identify plant changes (design or operational practices) that have been incorporated at the site, but are not yet in the PRA model and justify why the change does not impact the PRA results used to support the application.

" Document peer review findings and observations that are applicable to the parts of the PRA required for the application, and for those that have not yet been addressed, justify why the significant contributors would not be impacted.

Document that the parts of the PRA used in the decision are consistent with applicable standards endorsed by the RG (currently, RG 1.200, Revision 1, which includes only the internal events PRA standard). Provide justification to show that where specific requirements in the standard are not adequately met, it will not unduly impact the results.,

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 3 of 18 Identify key assumptions and approximations relevant to the results used in the decision-making process.

The purpose of the remaining portion of this attachment is to address the requirements identified in Item 4 above.

TECHNICAL ADEQUACY OF THE PRA MODEL The MPS3 PRA model of record, M310A, and associated documentation have been maintained as a living program, and the PRA is updated approximately every 3 to 5 years to reflect the as-built, as-operated plant. The M310A PRA model is highly detailed, including a wide variety of initiating events, modeled systems, operator actions, and common cause events. The PRA model quantification process used for the MPS3 PRA is based on the event tree/fault tree methodology, which is a well-known methodology in the industry.

Dominion employs a structured approach to establishing and maintaining the technical adequacy and plant fidelity of the PRA models for all operating Dominion nuclear generation sites. This approach includes both a proceduralized PRA maintenance and update process, and the use of self-assessments and independent peer reviews. The following information describes this approach as it applies to the MPS3 PRA.

PRA Maintenance and Update The MPS3 PRA model and documentation have been maintained as a living program. The PRA is routinely updated approximately every 3 to 5 years in order to reflect the current plant configuration and to reflect the accumulation of additional plant operating history and component failure data.

There are several procedures and GARDs (Guidance and Reference Documentation) that govern Dominion's PRA program. Procedure NF-AA-PRA-101 controls the maintenance and use of the PRA documentation and the associated NF-AA-PRA procedures and GARDs. These documents define the process to delineate the types of calculations to be performed, the computer codes and models used, and the process (or technique) by which each calculation is performed.

The NF-AA-PRA series of GARDs and procedures provide a detailed description of the methodology necessary to:

" Perform PRA for any station in the Dominion Nuclear Fleet, including MPS3.

" Create and maintain products to support licensing and plant operation concerns for the Dominion Nuclear Fleet.

Provide PRA model configuration control.

Create and maintain configuration risk evaluation tools for the Dominion Nuclear Fleet.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 4 of 18 A procedurally controlled process is used to maintain configuration control of the MPS3 PRA models, data, and software. In addition to model control, administrative mechanisms are in place to assure that plant modifications, procedure changes, calculations, operator training, system operation changes, and industry operating experiences (OEs) are appropriately screened, dispositioned, and scheduled for incorporation into the model.

These processes help assure that the MPS3 PRA reflects the as-built, as-operated plant within the limitations of the PRA methodology.

This process involves a periodic review and update cycle to model any changes in the plant design or operation. Plant modifications and procedure changes are reviewed on an approximate quarterly or more frequent basis to determine if they impact the PRA and if a PRA modeling and/or documentation change is warranted. These reviews are documented, and if any PRA changes are warranted, they are added to the PRA Configuration Control (PRACC) database for PRA implementation tracking.

As part of the PRA evaluation for each STI change request, a review of open items in the PRACC database is performed and an assessment of the impact on the results of the application is made prior to presenting the results of the risk analysis to the IDP. If a non-trivial impact is expected, then the performance of additional sensitivity studies or PRA model changes to confirm the impact on the risk analysis may be included.

The MPS3 PRACC database was reviewed to identify any open (i.e., not yet officially resolved and incorporated into the PRA) PRACC items. The open PRACC items contain identified PRA changes to address plant modifications (as discussed above) as well as changes to correct errors or to enhance the model.

The Level 1 and Level 2 MPS3 PRA analyses were originally developed and submitted to the NRC in 1983 as the Plant Safety Study (PSS). In response to Generic Letter 88-20, "Individual Plant Examination for Severe Accident Vulnerabilities - 10 CFR 50.54(f)," the Millstone Unit No. 3 Individual Plant Examination (IPE) and Individual Plant Examination of External Events (IPEEE) were submitted in the same letter to the NRC dated August 31, 1990 [Ref. 3]. The NRC staff evaluation reports for the IPE (May 5, 1992) [Ref. 4] and IPEEE (May 26, 1998) [Ref. 5] concluded that the studies meet the intent of Generic Letter 88-20. The MPS3 PRA has been updated many times since the original PSS. A summary of the MPS3 PRA history is listed below.

Date Model Change 08/83 MPS3 PSS submitted 09/83 Amendment 1: Corrected consequence analysis

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 5 of 18 Date Model Change (continued) 01/84 Transfer of PSS technology from Westinghouse, the PSS contractor, to the licensee 04/84 Amendment 2: Reanalysis of seismic fragilities by Structural Mechanics Associates 11/84 Amendment 3: Correction of mathematical error in seismic analysis 08/85 Published MPS3 risk evaluation report (NUREG-1 152) 08/87 Amendment 4 (internal): Reanalysis of the Level 1 PRA to account for actual surveillance intervals, main feedwater recovery, etc.

1988 First round of evaluation of projects under internal Integrated Safety Assessment Program (ISAP) 1989 Second round of internal ISAP evaluations 89-90 Transferred PSS from mini-computer to personal computer 05/90 5th update: Correction of math and logic errors discovered in transfer 06/90 6th update: Updated transient frequencies (plant data), revised V sequence model, and coupled the Level 2 PRA to the Level 1 Fall 90 Coupled the Level 3 PRA to Levels 1 and 2; third round of ISAP evaluations 08/90 Submittal of IPE 05/92 NRC staff evaluation report concludes IPE meets the intent of Generic Letter 88-20. The report contains recommendations to explicitly model 1) total loss of service water (SW) initiating event, 2) Heating Ventilation and Air Conditioning (HVAC) dependency, and 3) Direct Current (DC) power dependency 12/95 Model converted from support state to linked fault tree methodology

a. HVAC dependency explicitly modeled

b. DC power dependency explicitly modeled

c. Total loss of SW initiator modeled 02/96 Large Early Release Frequency (LERF) model developed using original PSS model 10/98 Station Blackout (SBO) diesel generator battery limitation modeled

a. Transfer to sump recirculation analyzed using simulator data

b. Plant-specific data update 08/99 Time-dependent SBO model incorporated

a. Loss of ventilation/room heat-up calculation conclusions incorporated 09/99 Westinghouse Owner's Group (WOG) peer review completed 06/00 Incorporated loss of offsite power and offsite power restoration calculations 09/02 NUREG/CR-5750 used as source of general initiating event frequencies

a. Incorporated some of the peer review level A and B findings and observations

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 6 of 18 Date Model Change (continued) 2004 Added main feedwater and condensate systems to the secondary cooling function.

2005 MSPI (Mitigating Systems Performance Indicator) Model Update completed

a. plant specific data

b. reliability: 01/01/2000-12/31/2004

c. unavailability: January, 2002 to December, 2004

d. initiating events: 1990 to 12/31/2004

e. addressed remaining A and B level peer review findings and observations 2006 2005 Mod A Model (M305 Mod A)

a. Revised the cooling dependency for the charging pump oil cooling system (CCE). SW is not required to cool charging pumps if auxiliary building temperatures remain below 90'F 2006 2005 Mod B and C Model (M305 Mod B & C)

a. added internal flooding in Mod B

b. revised junction box flood damage logic in internal flooding model in Mod C 2007 2005 Mod D Model (M305 Mod D)

a. added hot leg recirculation to large loss of coolant accident (LOCA)

b. added new pre-initiator human error probabilities (HEPs)

c. updated Human Reliability Analysis (HRA) using latest methodology:

Cause Based Decision Tree (CBDT), Human Cognitive Reliability Correlation (HCR), Technique for Human Error Rate Prediction (THERP)

d. updated interfacing system LOCA

e. updated Level 2

f. various other changes (e.g., replaced logic that assumed LOCA, steam generator tube rupture (SGTR) or steam line break (SLB) occurs in one reactor coolant system (RCS) loop or steam generator) 2008 Model updated to meet RG 1.200 (M308A) 2012 Model update (M310A)

a. updated with plant-specific data

b. addressed several not-met supporting requirements

c. enhanced documentation Comprehensive Critical Reviews The MPS3 PRA model has benefited from the following comprehensive technical PRA peer reviews:

NEI PRA Peer Review The MPS3 internal events PRA received a formal industry PRA peer review in 1999 [Ref. 6].

The purpose of the PRA peer review process is to provide a method for establishing the technical quality of a PRA for the spectrum of potential risk-informed plant licensing

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 7 of 18 applications for which the PRA may be used. The PRA peer review process used a team composed of industry PRA and system analysts, each with significant expertise in both PRA development and PRA applications. This team provided both an objective review of the PRA technical elements and a subjective assessment, based on their PRA experience, regarding the acceptability of the PRA elements. The team used a set of checklists as a framework within which to evaluate the scope, comprehensiveness, completeness, and fidelity of the PRA products available. The MPS3 review team used the "Westinghouse Owner's Group (WOG) Peer Review Process Guidance" as the basis for the review.

The general scope of the implementation of the PRA peer review included a review of eleven main technical elements, using checklist tables (to cover the elements and sub-elements), for an at-power PRA including internal events, internal flooding, and containment performance, with focus on LERF.

The findings and observations (F&Os) from the PRA peer review were prioritized into four categories (A through D) based upon importance to the completeness of the model. All F&Os identified during the 1999 WOG peer review have been addressed.

MPS3 PRA Self-Assessment A self-assessment/independent review of the MPS3 PRA against the American Society of Mechanical Engineers (ASME) PRA standard was performed by Dominion with the support of a contracting company, MARACOR, in late 2007 using guidance provided in NRC RG 1.200, Revision 1, "An Approach for Determining the Technical Adequacy of Probabilistic Risk Assessment Results from Risk-Informed Activities" [Ref. 7].

Many of the supporting requirements (SRs) identified in the self-assessment as not meeting Capability Category II were incorporated into the MPS3 2008 PRA model (M308A) revision.

Several improvements made to the model involved -documenting sources of uncertainty/assumptions, including additional loss of single AC and DC buses initiators, upgrading component boundaries to be consistent with generic data, updating several thermal hydraulic (e.g., MAAP computer code) runs and improving success criteria documentation.

MPS3 2012 Focused PRA Peer Review The MPS3 PRA model was then updated (M31 OA) to reflect the current plant configuration and accumulation of additional plant operating history and component failure data. In the M31OA model update, nearly all of the remaining not-met SRs were addressed by further upgrades to the model documentation as well as improvements to the model.

In June 2012, Science Applications International Corporation (SAIC) performed a focused PRA peer review of model upgrades [Ref. 10] incorporated since the 1999 WOG peer review. The purpose of the PRA peer review is to assess whether PRA upgrades, as defined by the ASME/ANS (American Nuclear Society) PRA standard, meet the intent of Category II SRs.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 8 of 18 The scope of this review is defined in Table 1 [Ref. 9].

Table 1 Scope of MPS3 Focused Review Technical High Level Supporting Comments Element Requirements Requirements (HLRs) (SRs) Covered IE IE-C IE-C8, IE-C9, Focused on support system initiating IE-C1O, IE-C11, event fault tree models including loss of IE-C14 single alternating current and direct current buses and reactor plant ventilation, and the Interfacing Systems Loss of Coolant Accident (ISLOCA) analysis.

AS AS-A All AS-B All AS-C All SC SC-B All Comprehensive review with attention to revised power operated relief valve success criteria for bleed & feed (BAF) for sequences where steam generator (SG) cooling is lost late (after demineralized water storage tank

_(DWST) depletion).

SY SY-A SY-A6, SY-A8, Focused on cooling dependency for the SY-Al 1, SY- charging pump oil cooling system A14, SY-A18 (CCE), ventilation dependencies, and SY-B SY-B5, SY-B6, methodology change from "black box" to SY-B7, SY-B9, component boundaries for the reactor SY-B10 protection system and engineered safeguards features actuation system.

HR HR-C All Focused on HRA updated to current HR-D All plant procedures and timing, and HR-G All rescreening of pre-initiator HEPs and their updated probabilities using THERP.

DA DA-B All Focused on the changed method for DA-D DA-D5, DA-D6 common cause failures from Multiple Greek Letter to the Alpha factor method, and the update to include a systematic approach to grouped common cause failure treatment.,

LE All All IF All All

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 9 of 18 The ASME/ANS PRA standard [Ref. 8] contains a total of 316 numbered SRs for internal events and internal flooding in nine technical elements. The focused scope of this review covered a total of 166 SRs. Three (3) of the SRs were determined to be not applicable to the MPS3 PRA model. Of the 163 SRs, 156 SRs, or 95.7%, were rated as SR Met, Capability Category II, or greater. None of the SRs were rated as only Category I, but seven (7) SRs were Not Met. A listing of the Not Met SRs is provided in Table 2 and evaluated in the gap analysis provided in Table 3.

Table 2 SRs Assessed as Not Met or Category I for the MPS3 PRA Technical Element Not Met SRs Cat I SRs Initiating Event (IE) None None Accident Sequence Analysis (AS) None None Success Criteria (SC) None None Systems Analysis (SY) SY-B6* None Human Reliability Analysis (HR) None None Data Analysis (DA) None None Internal Flooding (IF) IFPP-B2 None IFSO-A4 IFSN-A8 IFEV-A5 IFEV-A7 Large Early Release Frequency (LE) LE-D2 None

Documentation issue that was resolved following the peer review Gaps to Meeting the ASME/ANS Standard Table 3 provides a list of "gaps" in the technical adequacy of the MPS3 PRA model, M31OA.

Technical adequacy gaps were identified during the internal self-assessment and the focused peer review. For each gap, the table provides a gap description, ASME/ANS SR, Current Status/Comment and Importance to Application fields. Modeling gaps are classified as either high risk significance or low risk significance (based on their Fussell-Vesely (FV) importance value using a threshold value of 5E-3), or are classified as no impact to the application.

In accordance with NEI 04-10, Revision 1, "Risk-Informed Technical Specifications Initiative 5b, Risk-Informed Method for Control of Surveillance Frequencies," open gaps that would impact the results of the SFCP PRA assessment will require sensitivity studies. These are identified in Table 3. These open gaps will be addressed in a PRA model periodic update in accordance with the PRA program procedural requirements.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 10 of 18 Table 3 Status of Identified Gans to Canabilitv Cateaorv IIof the ASMEIANS PRA Standard Title Capability Category II ASME/ANS Current Status / Comment Importance to Application Requirements SR Gap #1 Interview plant personnel IE-A8* There is currently no documentation of Not Risk Significant (e.g., Operations, previous informal discussion between plant Maintenance, Safety personnel and the PRA engineers on Documentation issue only.

Analysis) to determine if modeled initiating events in the MPS3 potential initiating events PRA. The PRA staff, which include Following implementation of the SFCP and in have been overlooked, previous system engineers, senior reactor accordance with PRA procedures, a operators and shift technical advisors, sensitivity study will not be required.

have worked closely over the years with plant personnel in support of risk-informed activities (e.g., Maintenance Rule (a)(4),

Mitigating System Performance Indicators, Notice of Enforcement Discretion, and Significance Determination Process). A process has been developed and implemented to document discussions with plant personnel going forward.

Gap #2 Perform plant walkdowns and SY-A4* A process has been developed and Not Risk Significant interviews with implemented to document additional knowledgeable plant information on plant walkdowns and plant Documentation issue only.

personnel to confirm system personnel interviews within the system analysis correctly reflects the notebooks. This is an on-going process. Following implementation of the SFCP and in as-built, as-operated plant. Also see Current Status/Comment for Gap accordance with PRA procedures, a

1. sensitivity study will not be required.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 11 of 18 Table 3 Status of Identified Gaps to Capability Category IIof the ASMEIANS PRA Standard Title Capability Category II ASMEIANS Current Status / Comment Importance to Application Requirements SR Gap #3 When needed, BASE the HR-G5** Existing Human Reliability Analysis High Risk Significant required time to complete documentation for talk-throughs with actions for significant Human Operations is outdated (circa 2006). No Several potentially impacted HEPs are Failure Events (HFEs) on new operator survey information is considered risk significant.

action time measurements in provided to support the basis for revised or either walkthroughs or talk- new HFEs. In accordance with the SFCP, a bounding throughs of the procedures or sensitivity study will be performed by simulator observations. increasing the HEP by a factor of 10 for all new and revised HEPs without talk-through with Operations.

Gap #4 For multiple human actions in HR-G7** There are several numerical High Risk Significant:

the same accident sequence inconsistencies in the dependency analysis or cut set, identified in spreadsheet supporting the HEP This is considered high risk significance due accordance with supporting Dependency Analysis Notebook, HR.4. to the importance of operators backing up requirement QU-C1, ASSESS automatic functions and some manual actions the degree of dependence, (e.g., hot leg injection).

and calculate a joint HEP that reflects the dependence. In accordance with the SFCP, an internal ACCOUNT for the influence review of the dependency analysis of success or failure in spreadsheet will be conducted. Any HEPs preceding human actions and identified to be incorrectly calculated will system performance on the require a bounding sensitivity study by human event under increasing the failure probability by a factor of consideration including 10.

(a) the time required to complete all actions in relation to the time available to perform the actions (b) factors that could lead to dependence (e.g., common instrumentation, common procedures, increased stress)

(c) availability of resources (e.g., personnel)

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 12 of 18 Table 3 Status of Identified GaDs to CaDabilitv Cateaorv IIof the ASMEIANS PRA Standard Title Capability Category 11 [ASMEIANS Current Status I Comment Importance to Application I Requirements SR I Gap #5 DOCUMENT the process IFPP-B2 Most flood areas are based on the Fire Low Risk Significance:

used to identify flood areas. Hazards Analysis, however, some areas For example, this are partitioned into smaller areas or split In accordance with the SFCP, a bounding documentation typically between multiple areas without a specific sensitivity study will be performed by doubling includes (a) flood areas used relationship to the Fire Hazards Analysis. the circulating water initiating event in the analysis and the reason frequencies.

for eliminating areas from Include additional documentation on flood further analysis (b) any propagation paths between the two walkdowns performed in operating units and the condensate support of the plant polishing facility (CPF). For example, it is partitioning. possible for water to propagate from the CPF to the turbine building. Potential water propagation is bounded by the already analyzed internal flooding events in the turbine building. Specifically, the amount of water generated during a circulating water pipe break is far greater than the amount of water possibly cienerated in the CPF.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 13 of 18 Table 3 Status of dentified Gaps to Capability Category II of the ASME/ANS PRA Standard Title Capability Category II ASME/ANS Current Status / Comment Importance to Application Requirements SR Gap #6 For each potential source of IFSO-A4 Need to incorporate internal flooding Low Risk Significance:

flooding, IDENTIFY the frequencies associated with non-piping flooding mechanisms that failures (e.g., expansion joints, bellows, Internal flooding contributes only -2% to the would result in a release. overfill, and inadvertent sprinkler overall CDF. Any potential changes in INCLUDE: actuation). flooding frequencies will only result in very (a) failure modes of small impact to the overall CDF.

components such as pipes, The majority of non-piping components tanks, gaskets, expansion (e.g., pumps, valves, tanks) are identified Following implementation of the SFCP and in joints, fittings, seals, etc. and included in the internal flooding accordance with PRA procedures, a bounding (b) human-induced analysis. The remaining non-piping failures sensitivity study will be performed by doubling mechanisms that could lead (expansion joints, bellows and inadvertent the internal flooding initiating event to overfilling tanks, diversion actuation of fire protection systems) are frequencies.

of flow-through openings bounded by already analyzed flow rates.

created to perform Since the remaining non-piping failures maintenance; inadvertent make up a small percentage of the overall actuation of fire-suppression system piping failures, any changes in the system internal flooding initiating event (c) other events resulting in a frequencies will not have a significant release into the flood area. impact to the overall core damage frequency (CDF)/LERF or impact the SFCP.

Gap #7 COMPARE results and IE-C12* Perform a reasonableness check of the Low Risk Significance:

EXPLAIN differences in the expansion joint rupture frequencies initiating event analysis with modeled in the PRA. Internal flooding contributes only -2% to the generic data sources to overall CDF. Any potential changes in provide a reasonableness expansion joint rupture frequencies will only check of the results. result in very small impact to the overall CDF (See Gap #6).

Following implementation of the SFCP and in accordance with PRA procedures, a bounding sensitivity study will be performed by doubling the expansion joint frequencies.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 14 of 18 Table 3 Status of Identified Gaps to Capability Category IIof the ASME/ANS PRA Standard Title Capability Category II ASMEIANS Current Status / Comment. Importance to Application Requirements SR Gap #8 For each defined flood area IFSN-A3** There is a mismatch between some of the Not Risk Significant and each flood source, internal flooding operator actions IDENTIFY those automatic or discussed in PRA Notebooks, Flood Documentation issue only.

operator responses that have Scenario Development IF.2 and Recovery the ability to terminate or Action Analysis for Internal Flooding Following implementation of the SFCP and in contain the flood propagation. Events HR. 10. accordance with PRA procedures, a sensitivity study will not be required.

Gap #9 IDENTIFY inter-area IFSN-A8 Internal Flooding notebook, IF.2, does not Low Risk Significance propagation through the consider the potential for barrier normal flow path from one unavailability. For example, "...Flood Following implementation of the SFCP and in area to another via drain Compartment CSW-3. The room is accordance with PRA procedures, a lines; and areas connected equipped with a water tight door that sensitivity study will be performed that will via backflow through drain remains intact, and thus propagationto investigate the potential flood propagation via lines involving failed check other compartments is not postulated." In barrier unavailability or floor drain failure that valves, pipe and cable addition, no mention of floor drain check could impact the surveillance frequency penetrations (including cable valves are included in the Internal Flooding change.

trays), doors, stairwells, notebooks.

hatchways, and heating, ventilation and air conditioning ducts. INCLUDE potential for structural failure (e.g., of doors or walls) due to flooding loads.

Gap DETERMINE the flood IFEV-A5 In the current PRA model, M310A, the Not Risk Significant

10 initiating event frequency for internal flooding initiating events are in "per each flood scenario group by calendar year". This is conservative since Conservative, non-risk significant using the applicable the Internal Flooding frequency has not contributions to the CDF.

requirements in 2-2.1. been multiplied by capacity factor.

Additionally, Internal Flooding only Following implementation of the SFCP and in contributes -2% to the overall CDF value, accordance with PRA procedures, a sensitivity study will not be required.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 15 of 18 Table 3 Status of Identified Gaps to Capability Category II of the ASMEIANS PRA Standard Title Capability Category II ASME/ANS Current Status I Comment Importance to Application Requirements SR Gap INCLUDE consideration of IFEV-A7 Process for identifying human-induced Not Risk Significant

11 human-induced floods during flooding scenarios is not documented.

maintenance through However, the MPS3 PRA does include four Documentation issue only.

application of generic data. human-induced flooding scenarios.

Following implementation of the SFCP and in Revise the flooding analysis to document accordance with PRA procedures, a the process used to identify human- sensitivity study will not be required.

induced flood scenarios.

Gap EVALUATE the impact of LE-D2 An analysis of potential penetration failures Not Risk Significant

12 containment seals, was performed as part of the 1983 MPS3 penetrations, hatches, drywell Plant Safety Study, which is likely outdated Documentation issue only.

heads (boiling water based on research conducted after 1983.

reactors), and vent pipe The containment capacity analysis should Following implementation of the SFCP and in bellows and INCLUDE as consider degradation of seal performance accordance with PRA procedures, a potential containment at elevated temperatures based on newer sensitivity study will not be required.

challenges, as required. If research information.

generic analyses are used in support of the assessment, NUREG/CR-6906 [Ref. 11] reports that JUSTIFY applicability to the compression seals and gaskets, electrical plant being evaluated, penetration assemblies, and personnel airlocks were shown to fail when tested in excess of DBA pressures and temperatures by a factor of 2 to 5. This is consistent with the conclusions in the MPS3 Level 2 analysis.

Not Met SR identified during the self-assessment process which did not meet the requirement for a peer review (i.e., was not categorized as a model upgrade since the 1999 WOG peer review).

- These SRs were categorized as Met by the peer review team. However, an F&O was written for the SR based on non-systematic discrepancies that the PRA peer review team judged to require correction.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 16 of 18 External Events Considerations Internal Plant Examination - External Events (IPEEE)

The NEI 04-10, Revision 1, methodology allows for STI change evaluations to be performed in the absence of quantifiable PRA models for all external hazards. For those cases where the STI cannot be modeled in the plant PRA (or where a particular PRA model does not exist for a given hazard group), a qualitative or bounding analysis is performed to provide justification for the acceptability of the proposed STI change.

The MPS3 PRA is a Level 1 and 2 model that includes internal events and internal floods.

For external events such as fire, seismic, extreme winds and other external events, the risk assessments from the IPEEE [Ref. 3] can be used for insights on changes to surveillance intervals.

Fire Risk The MPS3 PRA does not include a fire model. Therefore, the results of the fire risk assessment performed for the IPEEE must be qualitatively assessed for impact of the STI extension on fire risk. The IPEEE fire risk analysis quantified a CDF impact by combining the frequency of fires and the probability of detection/suppression failure with the remaining safety function unavailabilities. A systematic approach was used to identify critical fire areas where fires could fail safety functions and pose an increased risk of core damage if other safety functions are unavailable. The CDF due to fires is 4.8E-06/yr, with the dominant risk being fires in the cable spreading room, switchgear rooms, control room, and auxiliary building.

Seismic Risk The MPS3 PRA has not updated the seismic model since the IPEEE. Therefore, the results of the seismic risk assessment performed for the IPEEE must be qualitatively assessed for impact of the STI extension on seismic event risk. The IPEEE seismic risk analysis quantified a CDF impact by combining the seismic hazard frequencies with the fragilities of critical structures and components and the safety function unavailability. The CDF due to seismic events is 9.1E-06/yr, with the dominant risk being seismic events that result in a loss of offsite power and failure of the emergency diesel generator enclosures, or collapse of the control building.

High Winds, Floods and Other External Events The risk of other external events such as high winds, aircraft accidents, hazardous materials and turbine missiles was assessed in the MPS3 IPEEE. The IPEEE assessments concluded that the risk of these accidents is negligible primarily due to the low frequency of occurrence that would cause damage to mitigating systems. For example, reinforced concrete houses provide the applicable safety systems missile protection during high wind conditions.

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 17 of 18 Summary of External Events As stated earlier, the NEI 04-10, Revision 1, methodology allows for STI change evaluations to be performed in the absence of quantifiable PRA models for external hazards. Therefore, in performing the assessments for the other hazard groups, a qualitative or bounding approach will be used.

SUMMARY

The MPS3 PRA technical capability evaluations and the maintenance and update processes described above provide a robust basis for concluding that the full power internal events MPS3 PRA is suitable for use in risk-informed processes such as that proposed for the implementation of a SFCP. In performing the assessments for the other hazard groups, the qualitative or bounding approach will be utilized in most cases. Also, in addition to the standard set of sensitivity studies required per the NEI 04-10, Revision 1, methodology, open items for changes at the site and remaining gaps to specific requirements in the ASME/ANS PRA standard will be reviewed to determine which, if any, would merit application-specific sensitivity studies in the presentation of the application results.

REFERENCES

1. Risk-Informed Technical Specifications Initiative 5b, Risk-Informed Method for Control of Surveillance Frequencies, Industry Guidance Document, NEI 04-10, Revision 1, April 2007.

2. Regulatory Guide 1.200, An Approach for Determining the Technical Adequacy of Probabilistic Risk Assessment Results for Risk-Informed Activities, Revision 1, January 2007.

3. E. J. Mroczka letter to the Nuclear Regulatory Commission, "Millstone Nuclear Power Station, Unit No. 3, Response to Generic Letter 88-20, Individual Plant Examination for Severe Accident Vulnerabilities, Summary Report Submittal," dated August 31, 1990.

4. V. L. Rooney (NRC) letter to Northeast Nuclear Energy Company, "Staff Evaluation of Millstone 3 Individual Plant Examination, (IPE) -Internal Events, GL 88-20 (TAC No.

M74434)," May 5,1992.

5. J. W. Andersen (NRC) letter to Northeast Nuclear Energy Company, "Millstone Nuclear Power Station, Unit No. 3 Individual Plant Examination of External Events (TAC No.

M83643)," May 26, 1998.

6. Millstone Power Station Unit 3 Probabilistic Risk Assessment Peer Review Report, September 1999

7. Millstone Power Station Unit 3 Probabilistic Risk Assessment Model Notebook Part IV, Appendix A.1, "Internal Events Model Self Assessment," August 2007

Serial No.12-580 Docket No. 50-423 Attachment 2, Page 18 of 18

8. ASME/ANS RA-S-2008, "Standard for Level 1/Large Early Release Frequency Probabilistic Risk Assessment for Nuclear Power Plant Applications" and its 2009 addendum (ASME/ANS RA-Sa-2009).

9. Millstone Power Station Unit 3 Probabilistic Risk Assessment Model Notebook Part IV, Appendix B, "Quality Summary," May 2012.

10. Millstone Power Station Unit 3 Probabilistic Risk Assessment Model Notebook Part IV, Appendix A.3, "Reg Guide 1.200 Peer Review," August 2012.

11. NUREG/CR-6906, "Containment Integrity Research at Sandia National Laboratories,"

July 2006.

Serial No.12-580 Docket No. 50-423 ATTACHMENT 3 MARKED-UP TECHNICAL SPECIFICATIONS CHANGES DOMINION NUCLEAR CONNECTICUT, INC.

MILLSTONE POWER STATION UNIT 3

THIS IS A CONTROLLED COPY OF THE UNIT 3 TECHNICAL SPECIFICATIONS CURRENT THROUGH CHANGE NO. 263 UPDATED BY LISA SCRUGGS

Oeteber 2, 1997 TABLE!.1 FREQUENCY NOTATION NOTATION FREQUENCY S At least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , D At least once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , w At least once per 7 days.

M At least once per 31 days.

Q At least once per 92 days.

SA At least once per 184 days.

R At least once per 18 months.

S/U Prior to each reactor startup.

N.A. Not applicable.

P Completed prior to each release.

I ISFCPI At the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 1-8

Marchi 6, 2066 3/4.1 REACTIVITY CONTROL SYSTEMS 3/4. 1. 1.1 BORATION CONTROL SHUTDOWN MARGIN - MODES I AND 2 LIMITING CONDITION FOR OPERATION 3.1.1.1,1 The SHUTDOWN MARGIN shall be within the limits specified in the CORE OPERATING LIMITS REPORT (COLR).

APPLICABILITY: MODES I and 2*.

ACTION:

With the SHUTDOWN MARGIN not within the limits specified in the COLR, immediately initiate and continue boration at greater than or equal to 33 gpm of a solution containing greater than or equal to 6600 ppm boron or equivalent until the required SHUTDOWN MARGIN is restored.

SURVEILLANCE REQUIREMENTS 4.1.1.1.1 The SHUTDOWN MARGIN shall be determined to be within the limits specified in the COLR:

a. Within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months after detection of an inoperable control rod(s) and at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter while the rod(s) is inoperable. If the inoperable control rod is immovable or untrippable, the above required SHUTDOWN MARGIN shall be verified acceptable with an increased allowance for the withdrawn worth of the immovable or untrippable control rod(s);

b. When in MODE I or MODE 2 with Keff greater than or equal to I t lees+-eer 1--hetws by verifying that control bank withdrawal t e limits of Specification 3.1.3.6; Ithe frequency specified in the Surveillance Frequency Control Progra-m I

c. When in MODE 2 with Kff less than 1, within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months prior to achieving reactor criticality by verifying that the predicted critical control rod position is within the limits of Specification 3.1.3.6;

d. Prior to initial operation above 5% RATED THERMAL POWER after each fuel loading, by consideration of the factors of Specification 4.1.1.1.2, with the control banks at the maximum insertion limit of Specification 3.1.3.6; and

See Special Test Exceptions Specification 3.10.1.

MILLSTONE - UNIT 3 3/4 1-1 Amendment No. 60, 44-1, 24, 21-4, 29-

Marcfh 11, 1991 REACTIVITY CONTROL SYSTEMS SURVEILLANCE REQUIREMENTS (Continued) 4.1.1.1.2 The overall core reactivity balance shall be compared to predicted values to demonstrate agreement within +/--1%Ak/k at l.ast .ne. per 31 Effeetiv. Fall Pw.r Day. (EFPD).

This comparison shall consider at least the f i rs:

1) Reactor Coolant System boron concentratiin,

[ the frequency specified in the Surveillance Frequency Control Program

2) Control rod position,

3) Reactor Coolant System average temperature,

4) Fuel burnup based on gross thermal energy generation,

5) Xenon concentration, and

6) Samarium concentration.

The predicted reactivity values shall be adjusted (normalized) to correspond to the actual core conditions prior to exceeding a fuel burnup of 60 EFPD after each fuel loading.

MILLSTONE - UNIT 3 3/4 1-2 Amendment No. 6&

March 16, 2006 3/4.1 REACTIVITY CONTROL SYSTEMS 3/4. 1.1 BORATION CONTROL SHUTDOWN MARGIN - MODES 3. 4 AND 5 LOOPS FILLED LIMITING CONDITION FOR OPERATION 3.1.1.1.2 The SHUTDOWN MARGIN shall be within the limits specified in the CORE OPERATING LIMITS REPORT (COLR).* /f APPLICABILITY: MODES 3, 4 and 5 ACTION:

With the SHUTDOWN MARGIN less than the required value, immediately initiate and continue boration at greater than or equal to 33 gpm of a solution containing greater than or equal to 6600 ppm boron or equivalent until the required SHUTDOWN MARGIN is restored.

SURVEILLANCE REQUIREMENTS 4.1.1.1.2.1 The SHUTDOWN MARGIN shall be determined to be within the limits specified in the COLR:

a. Within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months after detection of an inoperable control rod(s) and at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter while the rod(s) is inoperable. If the inoperable control rod is immovable or untrippable, the above required SHUTDOWN MARGIN shall be verified acceptable with an increased allowance for the withdrawn worth of the immovable or untrippable control rod(s); and

b. Ata 24 he, irsby consideration of the following factors:

1. eactor Coolant System boron concentration,

2. Con ol rod position,

3. Reactor olant System average temperature,

4. Fuel burnup b ed on gross thermal energy generation,

5. Xenon concentrati , and

6. Samarium concentratio 4.1.1.1.2.2 Valve 3CHS*V305 shall be verified cl ed and locked a per 31 day*..an, Additional SHUTDOWN MARGIN requirements, i equi dare given in Specification 3.3.5.

1the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 1-3 Amendment No. 60, 4-4, 4-64, -24.,

2-*, H29-

X-Mar%97,

- 4,,,,4

-24 REACTIVITY CONTROL SYSTEMS SHUTDOWN MARGIN - COLD SHUTDOWN - LOOPS NOT FILLED LIMITING CONDITION FOR OPERATION 3.1.1.2 The SHUTDOWN MARGIN shall be greater than or equal to

a. the limits specified in the CORE OPERATING LIMITS REPORT (COLR) for MODE 5 with RCS loops not filled* or

b. the limits specified in the COLR for MODE 5 with RCS loops filled* with the chemical and volume control system (CVCS) aligned to preclude reactor coolant system boron concentration reduction.

APPLICABILITY: MODE 5 LOOPS NOT FILLED ACTION:

a. With the SHUTDOWN MARGIN less than the above, immediately initiate and continue boration at greater than or equal to 33 gpm of a solution containing greater than or equal to 6600 ppm boron or equivalent until the required SHUTDOWN MARGIN is restored.

b. With the CVCS dilution flow paths not closed and secured in position in accordance with Specification 3.1.1.2(b), immediately close and secure the paths or meet the limits specified in the COLR for MODE 5 with RCS loops not filled. ,

SURVEILLANCE REQUIREMENTS 4.1.1.2.1 The SHUTDOWN MARGIN shall be determined to be within the limits specified in the COLR: the frequency specified in the Surveillance Frequency Control Programr

a. Within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months after detection of an ijoperable control rod(s) and at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter while the rg(-s inoperable. If the inoperable control rod is immovable or untrippabt. tie SHUTDOWN MARGIN shall be verified acceptable with a redased allowance for the withdrawn worth of the immovable or untrip ontrol rod(s); and

.Att hurs by consideration of the following factors:

I. Reactor Coolant System boron concentration,

2. Control rod position,

3. Reactor Coolant System average temperature,

4. Fuel burnup based on gross thermal energy generation,

Additional SHUTDOWN MARGIN requirements, if required, are given in Specification 3.3.5.

MILLSTONE - UNIT 3 3/4 1-8 Amendment No. 60, 99, 4-44, 464-,

9eceinbe. -29, i994 REACTIVITY CONTROL SYSTEMS SURVEILLANCE REQUIREMENTS (Continued) the frequency specified in the Surveillance Frequency Control Program I

5) Xenon concent tion, and

6) S rium concentration.

4.1.1.2.2 At lea oer .. 31 dayAthe following valves shall be verified closed and locked.

The valves may be opened on an intermittent basis under administrative controls except as noted.

Valve Number Valve Function Valve Position I. V304(Z-) Primary Grade Water Closed

2. VI20(Z-)

to CVCS Moderating Hx Outlet Closed

/

V147(Z-) Closed

/

3. BTRS Outlet

4. V797(Z-) Failed Fuel Monitoring Closed Flushing S. VI00(Z-) Resin Sluice, CVCS Cation Closed Bed Demineralizer

6. V571(Z-) Resin Sluice, CVCS Cation Closed Bed Demineralizer

7. VII1(Z-) Resin Sluice, CVCS Cation Closed Bed Demincralizer

8. V I*12(Z-) Resin Sluice, CVCS Cation Closed Bed Demineralizer II

9. V98(Z-)/V99(Zr) Resin Sluice, CVCS Mixed Closed /

Bed Demineralizer

10. V569(Z-)/V570(Z-) Resin Sluice, CVCS Mixed Closed Bed Demineralizer 1H. V 107(Z-)/V 109(Z-) Resin Sluice, CVCS Mixed Closed Bed Demineralizer

12. VI08(Z-)/VIIO(Z-) Resin Sluice, CVCS Mixed Closed Bed Demineralizer

13. V305(Z-)* Primary Grade Water Closed to Charging Pumps

This valve may not be opened under administrative controls.

MILLSTONE - UNIT 3 3/4 1-8a Amendment No.

B.. e,, 0, 2003 0l,/,

REACTIVITY CONTROL SYSTEMS LIMITING CONDITION FOR OPERATION ACT1ON:( Continued)

c. A power distribution map is obtained from the movable incore detectors and FQ(Z) and EAN are verified to be within their limits within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months ; and

d. THERMAL POWER level is reduced to less than or equal to 75%

of RATED THERMAL POWER within the next hour and within the following 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months the High Neutron Flux Trip Setpoint is reduced to less than or equal to 85% of RATED THERMAL POWER.

c. With more than one rod trippable but inoperable due to causes other than addressed by ACTION a. above, POWER OPERATION may continue provided that:

1. Within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , the remainder of the rods in the bank(s) with the inoperable rods are aligned to within +12 steps of the inoperable rods while maintaining the rod sequence and insertion limits of Specification 3.1.3.6.

The THERMAL POWER level shall be restricted pursuant to Specification 3.1.3.6 during subsequent operation, and

2. The inoperable rods are restored to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

d. With more than one rod misaligned from its group step counter demand height by more than +/-12 steps (indicated position), be in HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.1.3.1.1 The position of each full-length rod shall be determined to be within the group demand limit by verifying the individual rod positions at'-t-' 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months except during time intervals when the rod position deviation monitor i noperable, then verify the group positions at least once per 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

4.1.3.1.2 Each full-length rod not fully inserted Ice in the shall be determined to be OPERABLE by movement of at least 10 steps in anyone ircction oep 92 daYS.

the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 1-21 Amendment No. -50,60, 9-4

MaIi 1., 2096 REACTIVITY CONTROL SYSTEMS POSITION INDICATION SYSTEMS - OPERATING LIMITING CONDITION FOR OPERATION 3.1.3.2 The Digital Rod Position Indication System and the Demand Position Indication System shall be OPERABLE and capable of determining the control rod positions within +/-12 APPLICABILITY: MODES I and 2.

ACTION:

a. With a maximum of one digital rod position indicator per bank inoperable:

I. Determine the position of the nonindicating rod(s) indirectly by the movable incore detectors at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months and immediately after any motion of the nonindicating rod which exceeds 24 steps in one direction since the last determination of the rod's position, or

2. Reduce THERMAL POWER to less than 50% of RATED THERMAL POWER within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

b. With a maximum of one demand position indicator per bank inoperable:

I. Verify that all digital rod position indicators for the affected bank are OPERABLE and that the most withdrawn rod and the least withdrawn rod of the bank are within a maximum of 12 steps of each other at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , or

2. Reduce THERMAL POWER to less than 50% of RATED THERMAL POWER within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

the frequency specified in the Surveillance Frequency Control Program SURVEILLANCE REQUIREMENTS Systcm agree and the Digital Rd Position Indication 4.1.3.2.1Demand Each digital Positionrod positi Ind}*q System aion indicator shall bedete the rod position med to be OPERABLE by verifying that the r.-.er"1*h...except during time int rals when System and the at lez ,,er ~ndication Positio within 12 steps then compare the Demand deviation monitor is inoperable, System at least once per 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .*

Digital Rod Position Indication position indicator(s) shalle determined to be above required digital rod 4.1.3.2.2 Each of the with th~emand position that the digital rod position indicators agree at" a t en e et 4 OPERABLE by verifying hen exercised over the full-range o f rod travel w

indicators w ithin 12 steps MILLSTONE - UNIT 3 3/4 1-23 Amendment No. "0, 60,20, 2-0-7, 229 V

Mareh 29, 200?

REACTIVITY CONTROL SYSTEMS ROD DROP TIME LIMITING CONDITION FOR OPERATION 3.1.3.4 The individual full-length (shutdown and control) rod drop time from the fully withdrawn position shall be less than or equal to 2.7 seconds from beginning of decay of stationary gripper coil voltage to dashpot entry with:

a. Tavg greater than or equal to 500'F, and

b. All reactor coolant pumps operating.

APPLICABILITY: MODES 1 and 2.

ACTION:

a. With the drop time of any full-length rod determined to exceed the above limit, restore the rod drop time to within the above limit prior to proceeding to MODE I or 2.

b. With the rod drop times within limits but determined with three reactor coolant pumps operating, operation may proceed provided THERMAL POWER is restricted to less than or equal to 65% of RATED THERMAL POWER with the reactor coolant stop valves in the nonoperating loop closed.

SURVEILLANCE REQUIREMENTS 4.1.3.4 The rod drop time of full-length rods shall be demonstrated through measurement prior to reactor criticality:

4/

a. For all rods following each removal of the reactor vessel head, and

b. Deleted

c. At --- r24 menths.

I the freauency soecified in the Surveillance Freauencv Control Proaram I MILLSTONE - UNIT 3 3/4 1-25 Amendment No. 60, 44-2, 206, -34,

IA l16, 200I REACTIVITY CONTROL SYSTEMS SHUTDOWN ROD INSERTION LIMITS LIMITING CONDITION FOR OPERATION 3.1.3.5 All shutdown rods shall be limited in physical insertion as specified in the CORE OPERATING LIMITS REPORT (COLR). A APPLICABILITY: MODES I

and 2***

ACTION:

With a maximum of one shutdown rod inserted beyond the insertion limits specified in the COLR except for surveillance testing pursuant to Specification 4.1.3.1.2, within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months either:

a. Restore the rod to within the limit specified in the COLR, or

b. Declare the rod to be inoperable and apply Specification 3.1.3. 1.

SURVEILLANCE REQUIREMENTS 4.1.3.5 Each shutdown rod shall be determined to be within the insertion limits specified in the COLR:

a. Within 15 minutes prior to withdrawal of any rods in Control Bank A, B, C, or D during an approach to reactor criticality, and

b. At l--1%once per 12 hour1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months th-M the frequency specified in the Surveillance Frequency Control Program

See Special Test Exceptions Specifications 3.10.2 and 3.10.3.

With Keff greater than or equal to 1.

MILLSTONE - UNIT 3 3/4 1-26 Amendment No. 6,-2-2-9

March 16, 2006 REACTIVITY CONTROL SYSTEMS CONTROL ROD INSERTION LIMITS LIMITING CONDITION FOR OPERATION 3.1.3.6 The control banks shall be limited in physical insertion as specified in the CORE OPERATING LIMITS REPORT (COLR). ~1' APPLICABILITY: MODES I* and 2***

ACTION:

With the control banks inserted beyond the insertion limits specified in the COLR, except for surveillance testing pursuant to Specification 4.1.3.1.2:

a. Restore the control banks to within the limits within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months , or

b. Reduce THERMAL POWER within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months to less than or equal to that fraction of RATED THERMAL POWER which is allowed by the bank position using the insertion limits specified in the COLR, or

c. Be in at least HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.1.3.6 The position of each control bank shall be determined to be within the insertion limits a except during time intervals when the rod insertion limit monitor is inoperab e, positions at least once per 4- hours.

I the frequency specified in the Surveillance Frequency Control Program

See Special Test Exceptions Specifications 3.10.2 and 3.10.3.

With Keff greater than or equal to I.

MILLSTONE - UNIT 3 3/4 1-27 Amendment No. -50,60, 2-29 Resudb NRC Lc=ttcr- dated Scptembef 24., 2006

Ma1d1 11, 1991 POWER DISTRIBUTION LIMITS SURVEILLANCE REQUIREMENTS 4.2.1.1.1 The indicated AFD shall be determined to be within its limits during POWER OPERATION above 50% of RATED THERMAL POWER by:

a. Monitoring the indicated AFD for each OPERABLE excore channel at least-ree

-. e7*,-4y, when the AFD Monitor Alarm is OPERABLE: /.

b. Monitoring and logging the indicated AFD for each OPERABLE e core channel

/

at least once per hour for the first 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and at least once per 3 minutes thereafter, when the AFD Monitor Alarm is inoperable. The log / d values of the indicated AFD shall be assumed to exist during the interval pre eding each logging.

4.2.1.1.2 The indicated AFD shall be considered outside of its limits wh two or more OPERABLE excore channels are indicating the AFD to be outside the li its. /

4.2.1.1.3 When in base load operation, the target flux difference of channel shall be determined by measurement at least onee pef.9 *EM, provisions of Specification 4.0.4 are not applicabo. /

4.2.1.1.4 When in base load operation, the tarl pr... 31 ff...ti. Full. P.. . by either dete.

Days /

with the surveillance requirements of Specificat the most recently measured value and the calculý of Specification 4.0.4 are not applicable.

the freauencv sDecified in the Surveillance Freauencv Control Program MILLSTONE - UNIT 3 3/4 2-2 Amendment No. -5ý0,-60

Mai**I 6, 2006 POWER DISTRIBUTION LIMITS SURVEILLANCE REQUIREMENTS (Continued)

c. Satisfying the following relationship:

F xxK(Z)

Q PxW(Z)

F (Z) 0.5 RTP FM )F Q x K(Z) for P*0.5 Q( W(Z) x 0.5 where FQM(Z) is the measured FQ(Z) increased by the allowances for manufacturing tolerances and measurement uncertainty, FORTP is the FQ limit, K(Z) is the normalized Fo(Z) as a function of core height,$P is the relative THERMAL POWER, and W(Z) is the cycle-dependent function that accounts for power distribution transients encountered during normal operation. FQ T K(Z),

and W(Z) are specified in the CORE OPERATING LIMITS REPORT as per Specification 6.9.1.6.

d. Measuring FQM(Z) according to the following schedule:

(1) Upon achieving equilibrium conditions after exceeding by 10% or more of RATED THERMAL POWER, the THERMAL POWER at which FQ(Z) was last determined,*** or (2) At . a 0 o:e - n .... .... whichever occurs first.

e. With the maximum value of

[the frequency specified in the Surveillance Frequency Control Program-]

FK(Z)

K(Z) over the core height (Z) increasing since the previous determination of FQM(Z),

either of the following ACTIONS shall be taken:a (1) Increase FQM(Z) by an appropriate factor specified in the COLR and verify that this value satisfies the relationship in Specification 4.2.2.1.2.c, or

During power escalation at the beginning of each cycle, power level may be increased until a power level for extended operation has been achieved and power distribution map outlined.

MILLSTONE - UNIT 3 3/4 2-8 Amendment No. "O,60, 99, 4-20,4-0,

-229

M-lret 16, 2006 POWER DISTRIBUTION LIMITS SURVEILLANCE REQUIREMENTS (Continued)

b. Duringbase load operation, if the THERMAL POWER is decreased below APL ND then the conditions of 4,2.2.1.3.a shall be satisfied before reentering base load operation.

4.2.2.1.4 During base load operation FQ(Z) shall be evaluated to determine if FQ(Z) is within its limit by:

a. Using the movable incore detectors to obtain a power distribution map at any THERMAL POWER above APLND.

b. Evaluate the computed heat flux hot channel factor by performing both of the following:

(1) Determine the computed heat flux hot channel factor, FQM(Z), by increasing the measured FQM(Z) component of the power distribution map by 3% to account for manufacturing tolerances and further increase the value by 5% to account for measurement uncertainties, and (2) Verify that FQM(Z) satisfies the requirements of Specification 3.2.2.1 for all core plane regions, i.e., 0 - 100% inclusive.

c. Satisfying the following relationship:

RTP F M(Z): F 0 x K(Z) frP>ALND Q P X W(Z)BL where: FQM(Z) is the measured FQ(Z) increased by the allowances for manufacturing tolerances and measurement uncertainty, FQRTP is the FQ limit, K(Z) is the normalized F (Z) as a function of core height, P is the relative THERMAL POWER, and W(Z)BL is the cycle-dependent function that accounts for limited power distribution transients encountered during base load operation.

FQRTP, K(Z), and W(Z)BL are specified in the COLR as per Specification 6.9.1.6.

d. Measuring FQM(Z) in conjunction with target flux difference determination according to the following schedule:

(1) Prior to entering base load operation after satisfying Section 4.2.2.1.3 unless a full core flux map has been taken in the previous 31 EFPD with the relative THERMAL POWER having been maintained above APLND for the 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months prior to mapping, and (2) At i r 31 E Ke.t.vC Full Pwcer Days.

MILLSTONE - UNIT 3 3 - Amendment No. 0, 60,99, ---70, *-9 I the frequency specified in the Surveillance Frequency Control Proqram I

POWER DISTRIBUTION LIMITS LIMITING CONDITION FOR OPERATION ACTION: (Continued)

b. Within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of initially being outside the above limits, verify through incore flux mapping and RCS total flow rate that the RCS total flow rate is N

restored to within the limits specified above and in the COLR and FAH is restored to within the above limit, or reduce THERMAL POWER to less than 5% of RATED THERMAL POWER within the next 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

c. Identify and correct the cause of the out-of-limit condition prior to increasing THERMAL POWER above the reduced THERMAL POWER limit required by ACTION a.2. and/or b., above; subsequent N

POWER OPERATION may proceed provided that FAH and indicated RCS total flow rate are demonstrated, through incore flux mapping and RCS total flow rate comparison, to be within the region of acceptable operation prior to exceeding the followinig THERMAL POWER levels:

1. A nominal 50% of RATED THERMAL POWER,

2. A nominal 75% of RATED THERMAL POWER, and

3. Within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of attaining greater than or equal to 95% of RATED THERMAL POWER.

SURVEILLANCE REQUIREMENTS 4.2.3.1.1 The provisions of Specification 4.0.4 are not applicable.

N 4.2.3.1.2 FAH shall be determined to be within the acceptable range:

a. Prior to operation above 75% of RATED THERMAL POWER after each fuel loading, and

b. At le-ne p 3 E-v Fall Poe Day.

4.2.3.1.3 The RCS total w rate shall be determined to be within the acceptable range by:

a. Verifying by p ision heat balance that the RCS total flow rate is

>_363,200 gpm an reater than or equal to the limit specified in the COLR within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months after r ehing 90% of RATED THERMAL POWER after each fuel loading, and the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 2-20 Amendment No. 60, 79, 4-00, 2-36, 2:4G

POWER DISTRIB.UTION LIMITS SURVEILLANCE REQUIREMENTS (Continued)

b. Verifying that the RCS total flow rate is >_363,200 gpm and greater than or equal to the limit specified in the COLR at least onc p4r1iouro. 1 4.2.3.1,4 The RCS total flow rate indicators shall be subjec ed to a CHANNEL CALIBRATION at t , r IS month.

4.2.3.1.5 DELETED.

4.2.3.1.6 DELETED.

MILLSTONE - UNIT 3 3/4 2-21 Amendment No. 2-7, 60,24 Macf 1, 99 1 POWER DISTRIBUTION LIMITS LIMITING CONDITION FOR OPERATION ACTION (Continued)

2. Reduce THERMAL POWER to less than 50% of RATED THERMAL POWER within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months and reduce the Power Range Neutron Flux-High Trip Setpoints to less than or equal to 55% of RATED THERMAL POWER within the next 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months ; and

3. Identify and correct the cause of the out-of-limit condition prior to increasing THERMAL POWER; subsequent POWER OPERATION above 50% of RATED THERMAL POWER may proceed provided that the QUADRANT POWER TILT RATIO is verified within its limit at least once per hour for 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months or until verified at 95% or greater RATED THERMAL POWER.

SURVEILLANCE REQUIREMENTS 4.2.4.1 The QUADRANT POWER TILT RATIO shall be determined to be within the limit above 50% of RATED THERMAL POWER by:

a. Calculating the ratio at c et pcr 7 days when the alarm is OPERABLE, and onee

b. Calculating the ratio at lea t once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months during steady-state operation when the alarm is inoperable.

4.2.4.2 The QUADRANT POWER TILT .ATIOshall be determined to be within the limit when above 75% of RATED THERMAL PO R with one Power Range channel inoperable by using the movable incore detectors to confirm th the normalized symmetric power distribution, obtained from two sets of four symmetric thimble ocations or full-core flux map, is consistent with the indicated QUADRANT POWER TILT RA10at at cncc per 12 hurf.

the frequency specified in the Surveillance Frequency Control Proqram MILLSTONE - UNIT 3 3/4 2-26 Amendment No. P, 6&- ,['

ial-ch 9,260^4 POWER DISTR*BUTION LIMITS 3/4.2.5 DNB PARAMETERS LIMITING CONDITION FOR OPERATION 3.2.5 The following DNB-related parameters shall be maintained within the limits specified L in the CORE OPERATING LIMITS REPORT (COLR): 4

a. Reactor Coolant System Tavg, and

b. Pressurizer Pressure.

APPLICABILITY: MODE 1.

ACTION:

With any of the above parameters exceeding its limit, restore the parameter to within its limit within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or reduce THERMAL POWER to less than 5% of RATED THERMAL POWER within the next 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

SURVEILLANCE REQUIREMENTS 4.2.5 Each of the above DNB-related parameters shall be verified to be within the limits specified in the COLRat .. ottrs.

I the freciuencv specified in the Surveillance Frecuencv Control Proqraml MILLSTONE - UNIT 3 3/4 2-27 Amendment No. P, 60, -- 8

-Novembber-3-32000 3/4.3 INSTRUMENTATION 3/4.3.1 REACTOR TRIP SYSTEM INSTRUMENTATION LIMITING CONDITION FOR OPERATION 3.3.1 As a minimum, the Reactor Trip System instrumentation channels and interlocks of Table 3.3-1 shall be OPERABLE.

APPLICABILITY: As shown in Table 3.3-I.

ACTION:

As shown in Table 3.3- I.

SURVEILLANCE REQUIREMENTS 4.3.1 .1 Each Reactor Trip System instrumentation channel and interlock and the automatic trip logic shall be demonstrated OPERABLE by the performance of the Reactor Trip System Instrumentation Surveillance Requirements specified in Table 4.3-I.

4.3.1.2 The REACTOR TRIP SYSTEM RESPONSE TIME of each Reactor trip function shall be verified to be within its limit at least-once-per-l-8-menths. Neutron detectors and speed sensors are exempt from response ti n'verification. Eaeli-veri'fieat-ion-slmti~ciud*-at-least-onc-

-tiin-sueh-that-both-trains-are-vcri-fi,-altast-once-per-36-milonths--and-one-chameii-(to-ficltude- /

-input-~e lays-to-both--tra ins)-peli-f~un t.ion-su eh-that-alcI.Fhan niicls-are-ve ri-fied-at-teast-one e-evei-yN tImes--8-thsw ere-N-is-the- otal-nttmber-of-redundant-channels-isn-a-spcci-fe-R-actor-tri-funt-ion-as-shtown- ii thie "Tvt f-ehall etscohmln-of-Table-33=.

Ithe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 3-1 Amendment No. 4-, 49, *-, +-00,-8 Replace each marked through.surveillance frequency in the Check, Calibrate, and Test columns with "SFCP" I TABLE 4.3-1 r REACTOR TRIP SYSTEM INS TATION SURVEILLANCE REQUIREMENTS TRIP C,

ANA G ACTUATING MODES FOR 2 p.HANN VICE W!HICH FUNCTIONAL UNIT CHANN CHEC CHA CAL EL PERATIO OPE TONAL ACTUATION SI JRVEILLANCE RATIONT T T LOGIC TEST IS; REQUIRED C

2

- 1. Manual Reactor Trip N.A. N.A. N.A. -R(14) N.A. 1, 2, 3*, 4*, 5*

2. Power Range, Neutron Flux

a. High Setpoint -9(2, 4), N.A. N.A. 2 "vW(3, 4),

-Q(4, 6),

-R(4, 5) 0,

b. Low Setpoint -S-- -R(4, 5) S/U(1) N.A. N.A. **, 2

3. Power Range, Neutron Flux, N.A. R-(4, 5) N.A. N.A. 1, 2 High Positive Rate 2

4. Deleted 2

5. Intermediate Range R(4, 5) S/Ui(1) N.A. N.A. '**, 2

6. Source Range, Neutron Flux -R(4, 5) S/U(l), N.A. N.A. 2" *, 3*, 4*, 5*

It z -Q(9) 0b

7. Overtemperature AT R N.A. N.A. 1,2 it 8. Overpower AT N.A. N.A. 1,2

9. Pressurizer Pressure--Low -S- -ft. -9(18) N.A. N.A. 1 ****

10. Pressurizer Pressure--High -S- -R- -Q(8) N.A. N.A. 1,2

11. Pressurizer Water Level--High -S -R N.A. N.A. 1

12. Reactor Coolant Flow--Low -S -R N.A. N.A.

Replace each marked through surveillance frequency in the Check, Calibrate, and Test columns with "SFCP" "I'A*E 43-1 Coninued)

REACTOR TRIP SYSTEM INSTTAION SURVILLANCE REQUIREMENTS T~RIP )DES FOR (j~

/ // CHANE D CjE WHtICH H

C CHANN CHAN EL PERATIO OPERA NAL ACTUATION SUI RVEILLANCE z FUNCTIONAL UNIT CH CAL RATION EST EST OGIC TEST ISF EQUIRED C 13. Steam Generator Water -R 4(18) N. N.A. 1,2 z .d Level--Low-Low H

14. Low Shaft Speed - N.A. -R(13) N.A. N.A. I Reactor Coolant Pumps

15. Turbine Trip

a. Low Fluid Oil N.A. N.A. S/U(l, 10)**** N.A. 1 Pressure 4~.

b. Turbine Stop Valve N.A. -R N.A. S/U(1, 10)**** N.A. 1 Closure

16. Deleted I

17. Reactor Trip System Interlocks

a. Intermediate Range N.A. -R(4) N.A. N.A.

Neutron Flux, P-6

b. Low Power Reactor N.A. -R(4) N.A. N.A. 1 Trips Block, P-7 2_ c. Power Range Neutron N.A. AR(4) -R N.A. N.A.

0. Flux, P-8

d. Power Range Neutron N.A. -R(4) -R N.A. N.A. 1 Flux, P-9 1,

e. Power Range Neutron N.A. -W(4) N.A. N.A.

Flux, P- 10 1,

f. Turbine Impulse N.A. -R N.A. N.A.

Chamber Pressure, P-13

IReplace each marked through surveillance frequency in the Check, Calibrate, and Test columns with "SFCP" I TABLE 4.3;1..4,Ontflfmed)

C,, REACTOR TRIP SYSTEM I*NSTRUMFNWI'IMSURVEILLANCE REQUIREMENTS H

0 zrri lODES FOR

/ ~ C/NNEL C \DEVIC, THICH CHANN H L 0 RRATIONAL PERATI AL ACTUATION SiURVEILLANCE FUNCTIONAL NIT CHEKý CA RATION ST $T LOGIC TEST IS REQUIRED

18. Reactor Trip Breaker N.A. N.A. N.A. -M(,1) N.A. I 2,3*,

44 5*5t

19. Automatic Trip and N.A. N.A. N.A. N.A. 4vMfq) 1,2,3*,

Interlock Logic 4*, 5*

t'J

20. DELETED 1, 2,3*,

I

21. Reactor Trip Bypass N.A. N.A. N.A. -15) N.A.

Breaker -R(1 6) 4*, 5*

22. DELETED 0

(0-0 I.

z

S llb .14, 2004 TABLE 4.3-1 (Continued)

TABLE NOTATIONS

When the Reactor Trip System breakers are closed and the Control Rod Drive System is capable of rod withdrawal.

- Below P-6 (Intermediate Range Neutron Flux Interlock) Setpoint.

- - Below P-10 (Low Setpoint Power Range Neutron Flux Interlock) Setpoint.

- - - Above the P-9 (Reactor Trip/Turbine Interlock) Setpoint.

- - - - ~ Above the P-7 (At Power) Setpoint (1) If not performed in previous 31 days.

(2) Comparison of calorimetric to excore power indication above 15% of RATED THERMAL POWER. Adjust excore channel gains consistent with calorimetric power if absolute difference is greater than 2%. The provisions of Specification 4.0.4 are not applicable to entry into MODE 2 or 1.

(3) Single point comparison of incore to excore AXIAL FLUX DIFFERENCE above 15% of RATED THERMAL POWER. Recalibrateif the absolute difference is greater than or equal to 3%. The provisions of Specification 4.0.4 are not applicable for entry into MODE 2 or 1.

(4) Neutron detectors may be excluded from CHANNEL CALIBRATION.

(5) Detector plateau curves shall be obtained, and evaluated and compared to manufacturer's data. For the Source Range, Intermediate Range and Power Range Neutron Flux channels the provisions of Specification 4.0.4 are not applicable for entry into MODE 2 or 1.

(6) Incore - Excore Calibration, above 75% of RATED THERMAL POWER. The provisions of Specification 4.0.4 are not applicable for entry into MODE 2 or 1.

(7) v_°t, ,.ish:_ bL~t...... "t k'........ 62 aS-T-AGGER.ED TEST F_,ASIS.

ay --

(8) Not 'use ~d elte (9) -QaI*er~y*rveillance in MODES 3*, 4*, and 5* shall also include verification that permissives P-6 and P-10 are in their required state for existing plant conditions by observation of the permissive annunciator window.

MILLSTONE - UNIT 3 3/4 3-13 Amendment No. 60, 70, 4-G9, 2

-Noveinber-3-2000-INSTRUMENTATION SURVEILLANCE REQUIREMENTS 4.3.2.1 Each ESFAS instrumentation channel and interlock and the automatic actuation logic and relays shall be demonstrated OPERABLE by performance of the ESFAS Instrumentation Surveillance Requirements specified in Table 4.3-2.

4.3.2.2 The ENGINEERED SAFETY FEATURES RESPONSE TIME* of each ESFAS function shall be verified to be within the limit at least-onee-pei-1-months. E-aeh-vý ation sheal-inelude-at-4east--ene4rain-sueh4hat-bot~h-tf ai-afe-ver4ed-at-least-Gnre-per--36-menths-and- /

oneehannet--e4nelde-ipu.t-r*eays4e-beth-tf er-ii netion-sueh-that-aJtehunnels-are-eified. /

--t-least-once-ler-N-timnes---8-mothls-whe - to inberofred-tnachmn-srmkin-a speei.fiSe--FA---finetien-as-shownrn-the- -Tott -oFC-Indseonn-of-Table-3:3-.

Ithe frequency specified in the Surveillance Frequencv Control Proirain I

The provisions of Specification 4.0.4 are not applicable for response time verification of steam line isolation for entry into MODE 4 and MODE 3 and turbine driven auxiliary fccdwater pump for entry into MODE 3.

MILLSTONE - UNIT 3 3/4 3-16 Amendment No. 4-, -9, 96, --0, 1 Replace each marked through surveillance frequency in the Check, Calibrate, and Test columns with "SFCP" ENGINEERED SAFETY FEATURESN SYSTEM INSTRUMENTATION SURVEILLA94ft4Q IREMNTS.

0 MODES z H LDE CMASTER SLAV E FOR WHICH CHANNEL CHANNEL OPE IONA OPE ION A UATION RELAY REL, rY SURVEILLANCE SFUINCTIONAL UNIT CHECK CALIB I TES TEST OG TEST TEST TES'] IS REOUIRED Safety Injection (Reactor Trip, Feedwater Isolation, Control Building/

Isolation (Manual Initiation Only), Sta Diesel Generators, and Service W r)

a. Manual Initiation N.A. N.A. N.A. -R- N.A. N.A. N.A. 1,2,3,4

b. Automatic Actuation N.A. N.A. N.A. N.A. M) Q(4) 1,2,3,4 Logic and Actuation 0~~

Relays

c. Containment Pressure- -S N.A. N.A. N.A. N.A. 1,2,3 High-I

d. Pressurizer Pressure- -S --Q N.A. N.A. N.A. N.A. 1,2,3 Low 0

e. Steam Line Pressure- -S- -R N.A. N.A. N.A. N.A. 1,2,3 (0-Low

2. Containment Spray z

0 a. Manual Initiation N.A. N.A. N.A. N.A. N.A. N.A. 1,2,3,4

b. Automatic Actuation N.A. N.A. N.A. N.A. -MN -Q(4) 1,2,3,4 y" Logic and Actuation Relays

c. Containment Pressure- --R -R --Q N.A. N.A. N.A. N.A. 1,2,3,4 High-3

jReplace each marked through surveillance frequency in the Check, Calibrate, and. Test columns with "SFCP" II

" "ABLE 4.3-9 Cniud ENGINEERED SAFETY FEATURES A~t YTMISR MENASTEROLAV

-1 0 MODES z CHA DEV LEMASTER SLAVE FOR WHICH CHANNEL CHA EL OPE AION OPERA ONA C TION RELAY RELAY SURVEILLANCE FUNCTIONAL UNIT CHECK NTEST TI L T TEST TEST IS REQUIRED

-4 L~) 3. Containment Isohatior

a. Phase "A" Isolatio In

1. Manual Initiat ion N.A. N.A. N.A. -R- N.A. N.A. N.A. 1,2,3,4

2. Automatic Actuation N.A. N.A. N.A. N.A. -M(4)- -Q-(4) 1,2,3,4 Logic and Actuation L.J Relays

3. Safety Injection See Item 1. above for all Safety Injection Surveillance Requirements.

b. Phase "B" Isolation

1. Manual Initiation N.A. N.A. N.A. -R7 N.A. N.A. N.A. 1, 2,3,4

2. Automatic Actuation N.A. N.A. N.A. N.A. -M4 -Q (4) 1,2,3,4 Logic and Actuation 0 Relays 0.

3. Containment -9 -R- N.A. N.A. N.A. N.A. 1, 2,3,4 0

Pressure-High-3

c. DELETED I

4. Steam Line Isolation Sd. Manual Initiation I

1. Individual N.A. N.A. N.A. R N.A. N.A. N.A. 1,2,3,4

2. System N.A. N.A. N.A. N.A. N.A. N.A. 1, 2, 3, 4

lReplace each marked through surveillance frequency in the Check, Calibrate, and Test columns with "SFCP" STABLE 4.32 (Continued)

ENGINEERED SAFETYSURVEI FEATURE L 4tE kk*OW-CMENTS INSTRUMENTATION C"

EL DEVI" MAS TG MASTER SA SLAVE MODES FOR WHI[CH CHANNEL C OP TIONAL OPERA NAL U N RELAY RELAY SURVEIL LANCE FUNCTIONAL UNIT CHECK LlB TION TE EST LO TE EST TEST IS REQU][RED

4. Steam Line Isolation (Continued

b. Automatic Actuation N.A. N.A. N.A. N.A. -M(f -MN") -Q,(4) 1,2,3,4 Logic and Actuation Relays

c. Containment Pressure- -S -R - N.A. N.A. N.A. N.A. 1, 2, 3, 4 High-2 S d. Steam Line Pressure- -- - -Q- N.A. N.A. N.A. N.A. 1,2,3 Low

e. Steam Line Pressure- -R- -- N.A. N.A. N.A. N.A. 3 Negative Rate-High

5. Turbine Trip and Feedwater Isolation

a. Automatic Actuation Logic and Actuation N.A. N.A. N.A. N.A. Mf*)r -M-4 --Q(4) 1,2 -t ERelays CL b. Steam Generator Water -S -R -Q N.A. -M(-Ij- * -)-- -.Q(4) 1,2,3 Level-High-High

- c. Safety Injection N.A. N.A. N.A. -R N.A. N.A. N.A. 1,2 o Actuation Logic 4

d. Tave Low Coincident N.A. --k N.A. N.A. N.A. N.A. 1, 2 with Reactor Trip (P-4)

lReplace each marked through surveillance frequency in the Check, Calibrate, and Test columns with "SFCP"

~TABLE 4.342 (Continued)

ENGINEERED SAFETY FEATURES A-fft TION SYSTEM TINSTRUMENTATION SURVEILL.46Ck Ithdk-REMENTS MODES CHANEL DEVI MASTER SLAVE FOR WH]ICH UNIT CHECK LANCE ALIBATION TE TEST LOG "IONAL TES ST TEST IS REQU.IRED FUNCI

6. Au:xiliary Fcedwater

a. Manual Initiation N.A. N.A. N.A. -R N.A. N.A. N.A. 1,2,3

b. Automatic Actuation and N.A. N.A. N.A. N.A. "M-M-l" -Q(4) 1, 2, 3 Actuation Relays 0 c. Steam Generator Water N.A. N.A. N.A. N.A. 1,2,3 Level-Low-Low

d. Safety Injection See Item 1. above for all Safety Injection Surveillance Requirements.

e. Loss-of-Offsite Power See Item 8. below for all Loss of Power Surveillance.

f. Containment See Item 2. above for all CDA Surveillance Requirements.

Depressurization Actuation (CDA)

7. Control Building Isolation CD

a. Manual Actuation N.A. N.A. N.A. N.A. N.A. N.A. 4t

b. Manual Safety Injection N.A. N.A. N.A. N.A. N.A. N.A. 1,2,3,4 Actuation

c. Automatic Actuation N.A. N.A. N.A. N.A. -Wit4 -M4+ -Q(4) 1,2,3,4 Logic and Actuation Relays

d. Containment Pressure-- N.A. N.A. N.A. N.A. 1, 2,3 High-I

lReplace each marked through surveillance frequency in the Check, Calibrate, and Test columns with "SFCP" ENGINEERED SAFETY FEATURES ION SYSTEM INSTRUMENTATION O G T MODES mH LVC MASTER SLAVE FOR WHICH CHANNEL CH EL OPE IONAL 0 LA UA RELAY RELAY SURVEILLANCE FUNCTIONAL UNIT__ CHECK I IONJ ST OGI ES ST TEST IS REQUIRED

7. Control Building Isolation (Conti )

e. Control Building Inlet -S- N.A. N.A. N.A. N.A.

Ventilation Radiation

8. Loss of Power

a. 4 kV Bus Undervoltage N.A. -R- N.A. -M(3) N.A. N.A. N.A. 1, 2,3,4 (Loss of Voltage)

b. 4 kV Bus Undervoltage N.A. 4-R N.A. -M(3) N.A. N.A. N.A. 1, 2, 3, 4 (Grid Degraded Voltage)

9. Engineered Safety Features Actuation System Interlocks E3 a. Pressurizer Pressure, N.A. -QR- N.A. N.A. N.A. N.A. 1, 2, 3 P-II

b. Low-Low Tavg, N.A. "R N.A. N.A. N.A. N.A. 1,2,3 Z

0 P-12

c. Reactor Trip, P-4 N.A. N.A. N.A. --R- N.A. N.A. N.A. 1,2,3

10. Emergency Generator N.A. N.A. N.A. N.A. -Q-(k* 2) N.A. N.A. 1,2,3,4 Load Sequencer

11. Cold Leg Injection -S- --R- --. N.A. N.A. N.A. N.A. 1,2,3 1 j,

-*", Permissive, P-I919

Septem ber-l-8-,-2i00S TABLE 4.3-2 (Continued, TABLE NOTATION

~-f~ed I

I-----L I.

2. This surveillance may be performed continuously by the emergency generator load sequencer auto test system as long as the EGLS auto test system is demonstrated OPERABLE by the performance of an ACTUATION LOGIC TEST at leastonce-pet-9-2 days- lttefeunyseiidi h uvilneFeunyOto rga

3. On-a-mvmthl--basis; a loss of voltage condition will be initiated at each u idervoltage monitoring relay to verify individual relay operation. Setpoint verificati n and actuation of the associated logic and alarm relays will be performed as part of the HANNEL CALIBRATION iequired-onee-per-l8-mronths.

4. For Engineered Safety Features Actuation System functional units wi h only Potter &

Brumfield MDR series relays used in a clean, environmentally contr lied cabinet, as discussed in Wetstinghouse Owners Group Report WCAP- 13900, th surveillance interval for slave relay testing is R.

the frequency specified in the Surveillance Frequency Control Program MODES 1, 2, 3, and 4.

During movement of recently irradiated fuel assemblies. A/

MILLSTONE - UNIT 3 3/4 3-41 Amendment No. 4-5, -74,49, -I-9, -+-29,

-+-98, 2-0-, 2-4-9, u, 24-2, 243-

Oeteber-2-5-,I-990 INSTRUMENTATION 3/4.3.3 MONITORING INSTRUMENTATION RADIATION MONITORING FOR PLANT OPERATIONS LIMITING CONDITION FOR OPERATION 3.3.3.1 The radiation monitoring instrumentation channels for plant operations shown in Table 3.3-6 shall be OPERABLE with their Alarm/Trip Setpoints within the specified limits.

APPLICABILITY: As shown in Table 33-6.

ACTION:

a. With a radiation monitoring channel Alarm/Trip Setpoint for plant operations exceeding the value shown in Table 3.3-6, adjust the Setpoint to within the limit within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months or declare the channel inoperable.

b. With one or more radiation monitoring channels for plant operations inoperable, take the ACTION shown in Table 3.3-6,

c. The provisions of Specification 3.0.3 are not applicablc. 1-SURVEILLANCE REQUIREMENTS required 4.3.3.1 Each radiation monitoring instrumentation channel for plant operations shall be demonstrated OPERABLE by the performance of the CHANNEL CHECK, CHANNEL CALIBRATION and ANALOG CHANNEL OPERATIONAL TEST for the MODES and at the frequencies shown in Table 4.3-3.

MILLSTONE - UNIT 3 3/4 3-42 Amendment No. 7

lReplace each marked through surveillance frequency in the Check, Calibrate, and Test columns with "SFCP" I z, TABL\ 4.3-m' RADIATION MONITORING IN TRUM4 TATION FOR PLANT 0

OPERATIONS SfJRVEILIJANCE REhI.IREMENTS ANALOG CHANNEL MODES FOR WHICH CHANNEL CHANNEL OPERATIONAL SURVEILLANCE FUNCTIONAL UNIT CHECK CALIBRATION TEST IS REQUIRED

1. Containment

a. Deleted

b. RCS Leakage Detection r., 1) Particulate Radio- g 4 1,2, 3,4 activity

2) Deleted __r

2. Fuel Storage Pool Area Monitors

a. Radiation Level g R Q Ct, TABLE NOTATION'S With fuel in the fuel storage pool area.

Ctb 4z C4 OP

-Jwntaiy-3,--995-INSTRUMENTATION REMOTE SHUTDOWN INSTRUM ENTATION LIMITING CONDITION FOR OPERATION 3.3.3.5 The Remote Shutdown Instrumentation transfer switches, power, controls and monitoring instrumentation channels shown in Table 3.3-9 shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3.

ACTION:

a. With the number of OPERABLE remote shutdown monitoring channels less than the Minimum Channels OPERABLE as required by Table 3.3-9, restore the inoperable channel(s) to OPERABLE status within 7 days, or be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

b. With one or more Remote Shutdown Instrumentation transfer switches, power, or control circuits inoperable, restore the inoperable switch(s)/circuit(s) to OPERABLE status within 7 days, or be in HOT STANDBY within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

c. Entry into an OPERATIONAL MODE is permitted while subject to these ACTION requirements.

SURVEILLANCE REQUIREMENTS requred 4.3.3.5.1 Each remote shutdown monitoring instrumentation channel shall be demonstrated OPERABLE by performance of the CHANNEL CHECK and CHANNEL CALIBRATION operations at the frequencies shown in Table 4.3-6.

4.3.3.5.2 Each Remote Shutdown Instrumentation transfer switch, power and control circuit including the actuated components, shall be demonstrated OPERABLE at least-onee-per--g8 months.

the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 3-53 Amendment No. , -79, -I-DO-

lReplace each marked through surveillance frequency in the Check and Calibrate columns with "SFCP" I TABLE 4.3-1 REMOTE SHUTDOWN MONITORlG INSTRU IENTATION SURVEILLANCE REOUIREMENTS "

CHANNEL CHANNEL INSTRUMENT CHECK CALIBRATION

1. Reactor Trio) Breaker Iindication M N.A.

2. Pressurizer Pressure M R- -I-Pressurizer Level M R

-t-

4. Steam Generator Pressure M R

5. M-

-I-Steam Generator Water Level R M

-I-

6. Auxiliary Feedwater Flow Rate M R

7. Loop Hot Leg Temperature M Re

8. Loop Cold Leg Temperature R

9. Reactor Coolant System Pressure M -L (Wide Range) R

10. DWST Level M M R

11. RWST Level N- R

12. Containment Pressure M R

13. Emergency Bus Voltmeters R

14. Source Range Count Rate M* R

15. Intermediate Range Amps Nd

16. Boric Acid Tank Level 0 When below P-6 (intermediate range neutron flux interlock setpoint).

'0

Jiane-Pr00-LIMITING CONDITION FOR OPERATION (Continued) action taken, the cause of the inoperability, and the plans and schedule for restoring the channel to OPERABLE status.

f. With the number of OPERABLE channels for the reactor vessel water level monitor less than the minimum channels OPERABLE requirements of Table 3.3-10, either restore the inoperable channel(s) to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months if repairs are feasible without shutting down or:

I. Initiate an alternate method of monitoring the reactor vessel inventory;

2. Prepare and submit a Special Report to the Commission pursuant to Specification 6.9.2 within 30 days following the event outlining the action taken, the cause of the inopcrability, and the plans and schedule for restoring the channel(s) to OPERABLE status; and

3. Restore the channel(s) to OPERABLE status at the next scheduled refueling.

g. Entry into an OPERATIONAL MODE is permitted while subject to these ACTION requirements.

SURVEILLANCE REQUIREMENTS Irqured-4.3.3.6.1 Each accident monitoring instrumentation channel shall be demonstrated OPERABLE by performance of the CHANNEL CHECK and CHANNEL CALIBRATION at the frequencies shown in Table 4.3-7.

4.3.3.6.2 Deleted -I MILLSTONE - UNIT 3 3/4 3-59a Amendment No. 4-7, 5, 6, 44-2, 224

lReplace each marked through surveillance frequency in the Check and Calibrate columns with "SFCP" TABLE 4.3-7 0 ACCIDENT MONITORING INSTRUMENTATION SURV ILLANCE REOUIREMENTS CHANNEL CHANNEL z INSTRUMENT CHECK CALIBRATION I. Containment Pressure

a. Normal Range

b. Extended Range

2. Reactor Coolant Outlet Temperature - TH10 T

1. (Wide Range)

3. Reactor Coolant Inlet Temperature - TCOLD (Wide Range)

4. Reactor Coolant Pressure - Wide Range -h

5. Pressurizer Water Level

6. Steam Line Pressure -R- -

7. Steam Generator Water Level - Narrow Range I-1

-F'-

8. Steam Generator Water Level - Wide Range 4-

9. Refueling Water Storage Tank Water Level

10. Demineralized Water Storage Tank Water Level Yvr

-F'-

1I. Auxiliary Feedwater Flow Rate

-I-

3 12. Reactor Coolant System Subcooling Margin Monitor -F'-

0.

13. Containment Water Level (Wide Range)

14. Core Exit Thermocouples

("1

15. DELETED

lReplace each marked through surveillance frequency in the Check and Calibrate columns with "SFCP" TABLE 4.3-7 (Continued 0 ACCIDENT MONITORING INSTRUMENTATION SURVE.,LANCE REOUIRU -TS z

M CHANNEL CHANNEL INST RUMENT CHECK CALIBRATION z

16. Containment Area - High Range Radiation Monitor 44- -R*

17. Reactor Vessel Water Level

18. Deleted -I-

19. Neutron Flux -m- -R 4-J

CHANNEL CALIBRATION may consist of an electronic calibration of the channel, not including the detector, for range decades above 10 R/h and a one point calibration check of the detector below 10 R/h with an installed or portable gamma source.

- Electronic calibration from the ICC cabinets only.

z 8

I.

M

.ch 1 16, 2006 INSTRUMENTATION 3/4.3.5 SHUTDOWN MARGIN MONITOR (continued)

SURVEILLANCE REQUIREMENTS 4.3.5 a. Each of the above required shutdown margin monitoring instruments shall be demonstrated OPERABLE by an ANALOG CHANNEL OPERATIONAL TEST at t r 92 dayi that shall include verification that the Shutdo Margin Monitor is set per the CORE OPERATING LIMITS REPORT( OLR).'

b. At le ps n r)A hours VERIFY the minimum count rate (counts/sec) as de within t COLR.

Ithe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 3-83 Amendment No. 4-64,224-

Dt 1 1 1 bib t 2603 v0, 3/4.4 REACTOR COOLANT SYSTEM 3/4.4.1 REACTOR COOLANT LOOPS AND COOLANT CIRCULATION STARTUP AND POWER OPERATION r, LIMITING CONDITION FOR OPERATION 3.4.1.1 Four reactor coolant loops shall be OPERABLE and in operation.

APPLICABILITY: MODES 1 and 2.*

ACTION:

With less than the above required reactor coolant loops in operation, be in at least HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.4.1.1 The above required reactor coolant loops shall be verified in operation and circulating reactor coolant at enee --r - .. .

Ithe frequency specified in the Surveillance Frequency Control Program I

See Special Test Exceptions Specification 3.10.4.

MILLSTONE - UNIT 3 3/4 4-1 Amendment No. 444

REACTOR COOLANT SYSTEM HOT STANDBY SURVEILLANCE REQUIREMENTS 4.4.1.2.1 At least the above required reactor coolant pumps, if not in operation, shall be determined OPERABLE wysby verifying correct breaker alignments and indicated power availability.

4.4.1.2.2 The required steam gene ators shall be determined OPERABLE by verifying secondary side water level to be grea er than or equal to 17% at lcast c, cc per 12 hKrs.

4.4.1.2.3 The required reactor coolan loops shall be verified iperation and circulating reactor coolant at le, , , ,

MILLSTONE - UNIT 3 3/4 4-2a Amendment No. 2-30 ý

06#, / _

REACTOR COOLANT SYSTEM HOT SHUTDOWN LIMITING CONDITION FOR OPERATION (continued)

b. With less than the above required reactor coolant loops in operation and the Control Rod Drive System is capable of rod withdrawal, within I hour open the Reactor Trip System breakers.

c. With no loop in operation, suspend operations that would cause introduction of coolant into the RCS with boron concentration less than required to meet SDM of LCO 3.1 I . 1.2 and immediately initiate corrective action to return the required loop to operation.

SURVEILLANCE REQUIREMENTS 4.4.1.3.1 The required pump(s), if not in operation, shall be determined OPERABLE on~c-pcr

-- days by verifying correct breaker alignments and indicated power availability.

4.4.1.3.2 The required steam generator(s) shall be determined OPERABLE b verifying secondary side water level to be greater than or equal to 17% .

4.4.1.3.3 The required loop(s) shall be verified in operatio and circ ting reactor coola 12 hlah S. e atas-Fuum t e lat the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 4-4 Amendment No. 44-5, 4 230-

66128ff6 REACTOR COOLANT SYSTEM COLD SHUTDOWN - LOOPS FILLED LIMITING CONDITION FOR OPERATION ACTION:

a. With less than the required RHR loop(s) OPERABLE or with less than the required steam generator water level, immediately initiate corrective action to return the inoperable RHR loop to OPERABLE status or restore the required steam generator water level as soon as possible.

~1'

b. With no RHR loop in operation, suspend operations that would cause introduction of coolant into the RCS with boron concentration less than required to meet SDM of LCO 3.1.1 .1.2 and immediately initiate corrective action to return the required RHR loop to operation.

SURVEILLANCE REQUIREMENTS 4.4.1.4.1. 1 The secondary side water level of at least two steam generators when required shall be determined to be within limits .at least ence oer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

4.4.1.4.1.2 At least one RHR loop" coolant at.. a.t n....... 12 hzur .

4.4.1.4.1.3 The- ieration, shall be determined OPERABLE o p-dayG-by verifying und indicated power availability-.,.--

MILLSTONE - UNIT 3 3/4 4-5a Amendment No. , 4-9-7 ,2-3&-

REACTOR COOLANT SYSTEM COLD SHUTDOWN - LOOPS NOT FILLED SURVEILLANCE REQUIREMENTS 4.4.1.4.2.1 The required pump, if not in operation, shall be determined OPERABLE enee-per /

deys-by verifying correct breaker alignment and indicated power availability.

4.4.1.4.2.2 At least one RHR loop shall be determined to be in ation and circulating reactor coolant aLteant once-- r 12 hc-ua.

MILLSTONE - UNIT 3 3/4 4-6a Amendment No. 4-P, 49

?lah 16, 2006 REACTOR COOLANT SYSTEM LOOP STOP VALVES LIMITING CONDITION FOR OPER.ATION 3.4.1.5 Each RCS loop stop valve shall be open and the power removed from the valve operator.

APPLICABILITY: MODES 1, 2, 3 and 4.

ACTION:

a. With power available to one or more loop stop valve operators, remove power from the loop stop valve operators within 30 minutes or be in HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b.*(') With one or more RCS loop stop valves closed, maintain the valve(s) closed and be in HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the next 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.4.1.5 Verify each RCS loop stop valve is open and the power removed from the valve operator at laeat ,ne- per--34-da1ys.

[the frequency specified in the Surveillance Frequency Control Program

(1)All required ACTIONS of ACTION Statement 3.4.1.5.b shall be completed whenever this action is entered.

MILLSTONE - UNIT 3 3/4 4-7 Amendment No. 2--7, 229

REACTOR COOLANT SYSTEM 3/4.4.3 PRESSURIZER STARTUP AND POWER OPERATION LIMITING CONDITION FOR OPERATION 3.4.3.1 The pressurizer shall be OPERABLE with:

a. at least two groups of pressurizer heaters, each having a capacity of at least 175 kW; and

b. water level maintained at programmed level +/-6% of full scale (Figure 3.4-5).

APPLICABILITY: MODES I and 2.

ACTION:

a. With only one group of pressurizer heaters OPERABLE, restore at least two groups to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

b. With pressurizer water level outside the parameters described in Figure 3.4-5, within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months restore programmed level to within +/- 6% of full scale, or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

c. With the pressurizer otherwise inoperable, be in at least HOT STANDBY with the Reactor Trip System breakers open within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.4.3.1.1 The pressurizer water level shall be verified to be within programmed level +/- 6% of full scale at least eeec per 12 heur-.

4.4.3.1.2 The cap of each of the above required groups of pressurizer heaters shall be verified by energizing t aters and measuring circuit current at cae iteteRilC.

Ithe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 4-11 Amendment No. 4-O, 4-60, 19-

REACTOR COOLANT SYSTEM HOT STANDBY LIMITING CONDITION FOR OPERATION 3.4.3.2 The pressurizer shall be OPERABLE with:

a. at least two groups of pressurizer heaters, each having a capacity of at least 175 kW; and

b. water level less than or equal to 89% of full scale.

APPLICABILITY: MODE 3 ACTION:

a. With only one group of pressurizer heaters OPERABLE, restore at least two groups to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months of being declared inoperable, or be in HOT SHUTDOWN within the following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

b. With the pressurizer otherwise inoperable, be in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.4.3.2.1 The pressurizer water level shall be determined to be less than or equal to 89% of full scale at znco pcr 12-eazt hurs.

4.4.3.2.2 The c city of each of the above required groups of pressurizer heaters shall be verified by energizing eaters and measuring circuit current at lcasf fcfe cach refueling Ithe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 4-11 b Amendment No. 4-60,2+

AugustOO26,20 REACTOR COOLANT SYSTEM RELIEF VALVES SURVEILLANCE REQUIREMENTS 4.4.4.1 In addition to the requirements of Specification 4.0.5, each PORV shall be demonstrated OPERABLE by:

a. Performance of a CHANNEL CALIBRATION at lemst once per ...onths; and

b. Operating the valve through one complete cycl of full travel during MODES 3 or 4 at .- 0n1cc 24 N rPnt4 lst; and

c. Perfo ance of an ANALOG CHANNEL 0 ERATIONAL TEST on the PORV at channel but excluding valve operation, high pre urizer pressure actuation

and

d. Verify the PO V high pressure automatic opening function is enable t least-enee

,,A 4.4.4.2 Each block valve shal I~e demonstrated by operating the valve through one contlete cycle of fi power removed in order to meet the r'quirements o, in Specification 3.4.4.

MILLSTONE - UNIT 3 3/4 4-13 Amendment No. 88, 3, 64-, 206, 41-

-Septernbte(a0O2OOS-8 REACTOR COOLANT SYSTEM 3/4.4,6 REACTOR COOLANT SYSTEM LEAKAGE LEAKAGE DETECTION SYSTEMS LIMITING CONDITION FOR OPERATION ACTION: (Continued)

2. Appropriate grab samples of the containment atmosphere are obtained and analyzed for particulate radioactivity within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and at least once per 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months thereafter, and

3. A Reactor Coolant System water inventory balance is performed within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and at least once per 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months thereafter, Otherwise, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.4.6.1 The Leakage Detection Systems shall be demonstrated OPERABLE by:

a. Containment Atmosphere Particulate Radioactivity Monitoring System-performance of CHANNEL CHECK, CHANNEL CALIBRATION, and ANALOG CHANNEL OPERATIONAL, TEST at the frequencies specified in Table 4.3-3, and

b. Containment Drain Sump Monitoring System-performance of CHANNEL CALIBRATION at-least-,onee-pei-24-mont.hs.

Ithe frequency specified in the Surveillance Frequency Control Program I MILLSTONE - UNIT 3 3/4 4-2 1a Amendment No. 244- /r

REACTOR COOLANT SYSTEM OPERATIONAL LEAKAGE SURVEILLANCE REQUIREMENTS 4.4.6.2.1 Reactor Coolant System operational LEAKAGE shall be demonstrated to be within A each of the above limits by:

a. Deleted

b. Deleted Ithe frequency specified in the Surveillance Frequency Control Proqram

c. Measurement of the CONTROLLED LEAKAGE to the reac lant pump seals when the Reactor Coolant System pressure is 2250 +/- 20 psia leas*nt,-per 3 1iday with the modulating valve fully open. The provisions of Specification 4.0.4 are not applicable for entry into MODE 3 or 4;

- - - - - - - - - --------- NOTES-- --------------

I. Not required to be performed until 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after establishment of steady state operation.

2. Not applicable to primary to secondary LEAKAGE.

-- - the frequency specified in the Surveillance Frequency Control Program

d. Perfo an f a Reactor Coolant System water inventory balance at ka&t-e

---.--- ------ - - NOTE -----------.-.---

Not required to be performed u 1 12 rs after establishment of steady state operation.

e. Verification that primary to secon LE GE is < 150 gallons per day through any one Steam Generator aFe, and;

f. Monitoring the Reactor Head Flange Leakoff System east encc pp 24 heaur- .

4.4.6.2.2(1 )(2)Each Reactor Coolant System Pressure Isolation Valve specified in Table 3.4-1 shall be demonstrated OPERABLE by verifying LEAKAGE to be within its limit: k

(') The provisions of Specification 4.0.4 are not applicable for entry into MODE 3 or 4.

(2) This surveillance is not required to be performed on Reactor Coolant System Pressure Isolation Valves located in the RHR flow path when in, or during the transition to or from, the shutdown cooling mode of operation.

MILLSTONE - UNIT 3 3/4 4-23 Amendment No. 4-00, 4-323, 4-74, 0, ~

REACTOR COOLANT SYSTEM OPERATIONAL LEAKAGE SURVEILLANCE REQUIREMENTS (Continued)

,,Hthe frequency specified in the Surveillance Frequency Control Program

a. At leas! .n.. per 24 tn..... ,

b. Prior to entering MODE 2 whenever the plant has been in COLD SHUTDOWN for 7 days or more and if leakage testing has not been performed in the previous 9 months,

c. Deleted

d. Within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months following valve actuation due to automatic or manual action or flow through the valve, and

e. When tested pursuant to Specification 4.0.5.

MILLSTONE- UNIT 3 4-23a Amendment No. 43 EkoIA,L 27, 2098 REACTOR COOLANT SYSTEM SURVEILLANCE REQUIREMENTS 4.4.8.1 Verify the specific activity of the reactor coolant less than or equal to 81.2 microCuries per gram DOSE EQUIVALENT XE-133 pony.*

/

4.4.8.2 Verify the specific activity of the reactor c olant less than or equal to 1.0 microCuries per gram DOSE EQUIVALENT 1-131 7,* and between 2 and 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months after a THERMAL POWER change of eat r than or equal to 15% RATED I THERMAL POWER within a one hour p -io lat the frequency specified in the Surveillance Frequency Control Program

Surveillance only required to be performed for MODE I operation, consistent with the provisions of Specification 4.0.1. A' MILLSTONE - UNIT 3 3/4 4-29 Amendment No. 246

4ty24, 2092 REACTOR COOLANT SYSTEM OVERPRESSURE PROTECTION SYSTEM SURVEILLANCE REQUIREMENTS 4.4.9.3.1 Demonstrate that each required PORV is OPERABLE by:

a. Performance of an ANAL.OG CHANNEL OPERATIONAL TEST on the PORV actuation channel, but excluding valve operation, within 31 days prior to entering a condition in which the PORV is required OPERABLE and at

-days thereafter when the PORV is required OPERABLE;

b. Performance of a CHANNEL CALIBRATION on the PO actuation channel at

.... p 24.. ,; and

c. Ve 'fying the PORV block valve is open and the PORV old Overpressure Prot tion System (COPPS) is armed at -7 when the PORV is being sed for overpressure protection.

4.4.9.3.2 Demonstrate at each required RHR suctio n relief valv is OPERABLE by:

a. Verifying the olation valves between t ie RCS an each required RHR suction relief valve are en at p 2hes; an

b. Testing pursuant to peci cation 4.0.5.

4.4.9.3.3 When complying with 3.4. 3.4, verify that the R is vented through a vent pathway 2.0 square inches at t 1 day & for passive vent path and kee4aeeet

-po.4.2-ho*Sfor unloc ope ye t valves 4.4.9.3.4 Verify that no Safety Injectio u are c pa le of injectin to the RCS least-4.4.9.3.5 Verify that a maximum of one centriu c r p is capable of injecting into the RCS at lkat ncFce - 12 houris.

Ithe frequency specified in the Surveillance Frequency Control Proqram ]

MILLSTONE - UNIT 3 3/4 4-39 Amendment No. v-9, 80, 4-0, 4-3-,3, 4-54, 4-44,-2a06-

4anry-3, n99 3/4.5 EMERGENCY CORE COOLING SYSTEMS 3/4.5.1 ACCUMULATORS LIMITING CONDITION FOR OPERATION 3.5.1 Each Reactor Coolant System (RCS) accumulator shall be OPERABLE with:

a. The isolation valve open and power removed,

b. A contained borated water volume of between 6618 and 7030 gallons,

c. A boron concentration of between 2600 and 2900 ppm, and

d. A nitrogen cover-pressure of between 636 and 694 psia.

APPLICABILITY: MODES 1,2, and 3*.

ACTION:

a. With one accumulator inoperable, except as a result of a closed isolation valve, restore the inoperable accumulator to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and reduce pressurizer pressure to less than 1000 psig within the following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

b. With one accumulator inoperable due to the isolation valve being closed, either immediately open the isolation valve or be in at least HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and reduce pressurizer pressure to less than 1000 psig within the following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS Ithe frequency specified in the Surveillance Frequency Control Program 4.5.1 Each accumulator sh I be demonstrated OPERABLE:

a. At V) by:

1) Ver ying that the contained borated water volume and nitrogen c er-pressure in the tanks are within their limits, and /I

2) Verifying that each accumulator isolation valve is open.

b. At - e pe - and within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months after each solution volume increase of greater than or equal to 1% of tank volume by verifying the boron concentration of the accumulator solution. This surveillance is not required when the volume increase makeup source is the RWST.

Pressurizer pressure above 1000 psig.

MILLSTONE - UNIT 3 3/4 5-1I Amendment No. 4-2, 45+, 60, 4.00-

Nov.,mber 29, 1995 EMERGENCY CORE COOLING SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

c. At when the RCS pressure is above 1000 psig by verifying that theý ciated circuit breakers are locked in a deenergized position or removed.

Ithe frequency specified in the Surveillance Frequency Control Proqram MILLSTONE - UNIT 3 3/4 5-2 Amendment No. 4-O0, 4-24

itly24, 2092-EMERGENCY CORE COOLING SYSTEMS SURVEILLANCE REQUIREMENTS the frequency specified in the Surveillance Frequency Control Proqram 4.5.2 Each subsystem shall be demonstrated OPERABLE:

a. At.... by verifying that the following valves are in the indicate 'ositions with power to the valve operators removed:

Valve Function Valve Position RWST Supply to St Pumps OPEN SI Pump A to Hot Leg Injection CLOSED SI Pump B to Hot Leg Injection CLOSED SI Cold Leg Master Isolation OPEN SI Pump Master Miniflow OPEN Isolation RHR to Hot Leg Injection CLOSED RHR Pump A to Cold Leg OPEN Injection RHR Pump B to Cold Leg OPEN Injection

b. Al H-days by:

1) Verifying that the ECCS piping, except for the operating centrifugal charging pump(s) and associated piping, the RSS pump, the RSS heat exchanger and associated piping, is full of water, and

2) Verifying that each valve (manual, power-operated, or automatic) in the flow path that is not locked, sealed, or otherwise secured in position, is in its correct position.

c. By a isual inspection which verifies that no loose debris (rags, trash, clothing, etc.)) s present in the containment which could be transported to the containment sum and cause restriction of the pump suctions during LOCA conditions. This visu I inspection shall be performed:

I) For all accessible areas of the containment prior to establishing CONTAINMENT INTEGRITY, and

2) At least once daily of the areas affected (during each day) within containment by containment entry and during the final entry when CONTAINMENT INTEGRITY is established.

d. At a.... per 24 me..th. by:

I) Verifying automatic interlock action of the RHR System from the Reactor Coolant System by ensuring that with a simulated signal greater than or equal to 412.5 psia the interlocks prevent the valves from being opened.

MILLSTONE - UNIT 3 3/4 5-4 Amendment No. 60, 49, 440, 4-24, 447, 446, 49

Sc3%.Ftc 1 1 c 18, 200?

EMERGENCY CORE COOLING SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

2) A visual inspection of the containment sump and verifying that the subsystem suction inlets are not restricted by debris and that the sump components (strainers, etc.) show no evidence of structural distress or abnormal corrosion.

e. Atlcaat oce per 21, menths by:

I) Verifying that each automatic valve in the flow path actuates to its correct position on a Safety Injection actuation test signal, and

2) Verifying that each of the following pumps start automatically upon receipt fa Safety Injection actuation test signal:

a Centrifugal charging pump, b) -- the frequency specified in the Surveillance Frequency Control Proqram c) RHR pump.

3) Vei ifying that the Residual Heat Removal pumps stop automatically upon rec ipt of a Low-Low RWST Level test signal.

f. By verifyi g that each of the following pump's developed head at the test flow point is gr ater than or equal to the required developed head when tested pursuant to Specific ation 4.0.5:

I) Ce itrifugal charging pump

2) Sa ety Injection pump

3) RI-R pump

4) Co tainment recirculation pump

g. By verifyi g the correct position of each electrical and/or mechanical position stop for the fol owing ECCS throttle valves:

I) Within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months following completion of each valve stroking operation when the ECCS subsystems are required to be OPERABLE, and

2) At',o,. . .. * ,,,,h ECCS Throttle Valves Valve Number Valve Number 3SIH*V6 3SIH*V25 3SIH*V7 3SIH*V27 MILLSTONE - UNIT 3 3/4 5-5 Amendment No. 60, 24, --5-5, 2-06, 2-3-7,240-

March 11, 1991 EMERGENCY CORE COOLING SYSTEMS 3/4.5.4 REFUELING WATER STORAGE TANK LIMITING CONDITION FOR OPERATION 3.5.4 The refueling water storage tank (RWST) shall be OPERABLE with:

a. A contained borated water volume between 1,166,000 and 1,207,000 gallons,

b. A boron concentration between 2700 and 2900 ppm of boron,

c. A minimum solution temperature of 4 0 °F, and

d. A maximum solution temperature of 50'F.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION With the RWST inoperable, restore the tank to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or be in at least HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS the frequency specified in the Surveillance Frequency Control Prowram]

4.5.4 The RW shall be demonstrated OPERABLE:

a. At by:

1) Verifying the contained borated water volume in the tank, and

2) Verifying the boron concentration of the water.

b. At 'teeA-t onee per 21, heurz by verifying the RWST temperature.

MILLSTONE - UNIT 3 3/4 5-9 Amendment No. 4-2,40.

EMERGENCY CORE COOLING SYSTEMS 3/4.5.5 pH TRISODIUM PHOSPHATE STORAGE BASKETS LIMITING CONDITION FOR OPERATION 3.5.5 The trisodium phosphate (TSP) dodecahydrate Storage Baskets shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3 and 4 ACTION:

With the TSP Storage Baskets inoperable, restore the system TSP Storage Baskets to OPERABLE status within 7 days or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in HOT SHUTDOWN the following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.5.5 The TSP Storage Baskets shall be demonstrated OPERABLE at leasteneepeI

noathby verifying that a minimum total of 974 cubic feet of TSP is cont ed in the TSP ?1 Storage Baskets.

Ithe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 5-10 Amendment No. 5, 6-

Suptembei 29, 2003 3/4.6- CONTAINMENT SYSTEMS 3/4.6.1 PRIMARY CONTAINMENT CONTAINMENT INTEGRITY LIMITING CONDITION FOR OPERATION 3.6.1.1 Primary CONTAINMENT INTEGRITY shall be maintained.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

Without primary CONTAINMENT INTEGRITY, restore CONTAINMENT INTEGRITY within I hour or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.1 .1 Primary CONTAINMENT INTEGRITY shall be demonstrated:

the frequency specified in the Surveillance Frequency Control Proqram

a. At lzust once per 31 days by verifying that all penetrations~" not capable of being closed by OPERABLE containment automatic isolation valves,(2) and required to f be closed during accident conditions are closed by valves, blind flanges, or deactivated automatic valves secured in their positions,(3) except for valves that /

are open under administrative control as permitted by Specification 3.6.3; and

b. By verifying that each containment air lock is in compliance with the requirements of Specification 3.6.1.3.

c. Deleted (1) Except valves, blind flanges, and deactivated automatic valves which are located inside the containment and are locked, sealed, or otherwise secured in the closed position. These penetrations shall be verified closed during each COLD SHUTDOWN except that such verification need not be performed more often than once per 92 days.

(2) In MODE 4, the requirement for an OPERABLE containment isolation valve system is satisfied by use of the containment isolation actuation pushbuttons.

(3) Isolation devices in high radiation areas may be verified by use of administrative means.

MILLSTONE - UNIT 3 3/4 6-1 Amendment No. -9, 4-54, 4-86,24 CONTAINMENT SYSTEMS CONTAINMENT AIR LOCKS LIMITING CONDITION FOR OPERATION Continued

c. With the containment air lock inoperable, except as specified in ACTION a. or ACTION b. above, immediately initiate action to evaluate overall containment leakage rate per Specification 3.6.1.2 and verify an air lock door is closed within I hour. Restore the air lock to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Otherwise, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.1.3 Each containment air lock shall be demonstrated OPERABLE:

a. By verifying leakage results in accordance with the Containment Leakage Rate Testing Program. Containment air lock leakage test results shall be evaluated against the leakage limits of Technical Specification 3.6.1.2. (An inoperable air lock door does not invalidate the previous successful performance of the overall air lock leakage test).

b. Deleted

c. At by verifying that only one door in each air lock can be opened a Ithe freauencv sDecified in the Surveillance Freauencv Control Proaram I MILLSTONE - UNIT 3 3/4 6-6 Amendment No. -59,4-54, +-M6, 2*5-

fallua[y F-

i~

CONTAINMENT SYSTEMS CONTAINMENT PRESSURE LIMITING CONDITION FOR OPERATION 3.6.1.4 Primary containment pressure shall be maintained greater than or equal to 10.6 psia and less than or equal to 14.0 psia. i APPLICABILITY: MODES I, 2, 3, and 4.

ACTION:

With the containment pressure less than 10.6 psia or greater than 14.0 psia, restore the containment pressure to within the limits within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.1.4 The primary containment pressure shall be determined to be within the limits .t 4eas ,

Sper4~-2heurs.

Ithe frequency specified in the Surveillance Frequency Control Proqram MILLSTONE - UNIT 3 3/4 6-7 Amendment No.

CONTAINMENT SYSTEMS AIR TEMPERATURE LIMITING CONDITION FOR OPERATION 3.6.1.5 Primary containment average air temperature shall be maintained greater than or equal to 80'F and less than or equal to 120'F.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With the containment average air temperature less than 80'F or greater than 120 0 F, restore the average air temperature to within the limit within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.1.5 The primary containment average air temperature shall be the arithmetical average of the temperatures at the following locations and shall be determined at le,,as ... 24 Location Fthe frequencv specified in the Surveillance Frequency Control Prowram

a. 94 ft elevation, E outside crane wall

b. 86 ft elevation, NW outside crane wall

c. 75 ft elevation, W Steam Generator platform

d. 75 ft elevation, E Steam Generator platform

e. 45 ft elevation, Pressurizer cubicle, crane wall MILLSTONE - UNIT 3 3/4 6-9

fieA1,44987 CONTAINMENT SYSTEMS CONTAINMENT VENTILATION SYSTEM LIMITING CONDITION FOR OPERATION 3.6.1.7 Each containment purge supply and exhaust isolation valve shall be OPERABLE and each 42-inch containment shutdown purge supply and exhaust isolation valve shall be closed and locked closed.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

a. With a 42-inch containment purge supply and/or exhaust isolation valve open or not locked closed, close and/or lock close that valve or isolate the penetration(s) within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , otherwise be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.1.7.1 The containment purge supply and exhaust isolation valves shall be verified to be locked closed and closed at vp~i 3 days.

Ithe frequency specified in the Surveillance Frequency Control Proqram MILLSTONE - UNIT 3 3/4 6-11 Amendment No.4

May 3 -,200&

CONTAINMENT SYSTEMS 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS CONTAINMENTQUENCHSPRAY SYSTEM LIMITING CONDITION FOR OPERATION 3.6.2.1 Two independent Containment Quench Spray subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With one Containment Quench Spray subsystem inoperable, restore the inoperable system to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.2.1 Each Containment Quench Spray subsystem shall be demonstrated OPERABLE:

a. At , by:

1) Verifying that each valve (manual, power operated, or automatic) in the flow path that is not locked, sealed, or otherwise secured in position, is in its correct position; and

2) Verifying the temperature of the borated water in the refueling water storage tank is between 40°F and 50'F.

b. By veri ing that each pump's developed head at the test flow point is greater than or equal o the required developed head when tested pursuant to Specification 4.0.5;

c. At 1, by:

1) Ver ing that each automatic valve in the flow path actuates to its correct osi 'on on a CDA test signal, and

2) V if ing that each spray pump starts automatically on a CDA test signal.

d. By verifying -ch spray nozzle is unobstructed following maintenance that could I, cause nozzle b ockage.

Ithe frequency specified in the Surveillance Frequency Control Proqram MILLSTONE - UNIT 3 3/4 6-12 Amendment No. -5, -50, -0,42-2, 445-5-,

4-74,20,4-24-,

September~ 20, 2006 CONTAINMENT SYSTEMS RECIRCULATION SPRAY SYSTEM LIMITING CONDITION FOR OPERATION 3.6.2.2 Two independent Recirculation Spray Systems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With one Recirculation Spray System inoperable, restore the inoperable system to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months ; restore the inoperable Recirculation Spray System to OPERABLE status within the next 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or be in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.2.2 Each Recirculation Spray System shall be demonstrated OPERABLE:

a. At Ica t oncz pcr 31 days by verifying that each valve (manual, power-operated, or aut .atic) in the flow path that is not locked, sealed, or otherwise secured in positi , is in its correct position;

b. By verifyi that each pump's developed head at the test flow point is greater than or equal to t e required developed head when tested pursuant to Specification 4.0.5; tlh

c. At ..s.by verifying that on a CDA test signal, each starts automatically after receipt of an RWST Low-Low by verifying that each automatic valve in the flow

~1' d.

t p ition on a CDA test signal; and

e. By verifying bZzle unobstructed following maintenance that could cause nozzle MILLSTONE - UNIT 3 3/4 6-13 Amendment No. 50, 4-00, 424, 4-545, 4-74, 206, 22,2-3-3

September 29, 2003 CONTAINMENT SYSTEMS 3/4.6.3 CONTAINMENT ISOLATION VALVES LIMITING CONDITION FOR OPERATION 3.6.3 The containment isolation valves shall be OPERABLE. (1) (2) 4 APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With one or more of the isolation valve(s) inoperable, maintain at least one isolation barrier OPERABLE in the affected penetration(s), and:

a. Restore the inoperable valve(s) to OPERABLE status within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , or

b. Isolate the affected penetration(s) within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months by use of deactivated automatic ,1 valve(s) secured in the isolation position(s), or

c. Isolate the affected penetration(s) within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months by use of closed manual valve(s) or blind flange(s); or

d. Isolate the affected penetration that has only one containment isolation valve and a closed system within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months by use of at least one closed and deactivated automatic valve, closed manual valve, or blind flange; or

e. Be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . '1 SURVEILLANCE REQUIREMENTS Ithe frequency specified in the Surveillance Frequency Control Proqram [

4.6.3.1 DELEI DhI) 4.6.3.2 Each isolation valve shall be de rnstrated OPERABLE during the COLD SHUTDOWN or REFUELING MODE at J st .. * .p..-.....th.by:

a. Verifying that on a Phase "A" Isolation test signal, each Phase "A" isolation valve actuates to its isolation position,

b. Verifying that on a Phase "B" Isolation test signal, each Phase "B" isolation valve actuates to its isolation position, and

c. Verifying that on a Containment High Radiation test signal, each purge supply and exhaust isolation valve actuates to its isolation position.

4.6.3.3 The isolation time of each power-operated or automatic valve shall be determined to be within its limit when tested pursuant to Specification 4.0.5.

(I) The provisions of this Specification are not applicable for main steam line isolation valves.

However, provisions of Specification 3.7.1.5 are applicable for main steam line isolation valves.

(2) Containment isolation valves may be opened on an intermittent basis under administrative controls. I MILLSTONE - UNIT 3 3/46-15 Amendment No. a8, - 64,96, -,

446, 06,2-", N CONTAINMENT SYSTEMS 3/4.6.5 SUBATMOSPHERIC PRESSURE CONTROL SYSTEM STEAM JET AIR EJECTOR LIMITING CONDITION FOR OPERATION 3.6.5.1 The inside and outside isolation valves in the steam jet air ejector suction line shall be closed.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With the inside or outside isolation valves in the steam jet air ejector suction line not closed, restore the valve to the closed position within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.6.5.1.1 The steam jet air ejector suction line outside isolation valve shall be determined to be in the closed position by a visual inspection prior to increasing the Reactor Coolant System temperature above 200'F and at -r 31 da*,'y thm*fter.

4.6.5.1.2 The steam jet air ejector suc i n line inside isolation valve shall be determined to be locked in the closed position by a visual ins tion prior to increasing the Reactor Coolant System temperature above 2007F.

Ithe frequency specified in the Surveillance Frequency Control Program71 MILLSTONE - UNIT 3 3/4 6-18 Amendment No. M

Mar-eh 29, 2007 CONTAINMENT SYSTEMS 3/4.6.6 SECONDARY CONTAINMENT SUPPLEMENTARY LEAK COLLECTION AND RELEASE SYSTEM LIMITING CONDITION FOR OPERATION 3.6.6.1 Two independent Supplementary Leak Collection and Release Systems shall be OPERABLE with each system comprised of:

a. one OPERABLE filter and fan, and

b. one OPERABLE Auxiliary Building Filter System as defined in Specification 3.7.9.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With one Supplementary Leak Collection and Release System inoperable, restore the inoperable system to OPERABLE status within 7 days or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS Ithe frequency specified in the Surveillance Frequency Control Program 4.6.6.1 Each Supplementary Leak C lection and Release System shall be demonstrated OPERABLE: ýC

a. At en a T.AGGEED T-A-SI-S by initiating, from the control room, ow through the HEPA filters and charcoal adsorbers and verifying a system rate of 7600 cfm to 9800 cfm and that the system operates for at least I1Oontinuous hours with the heaters operating.

b. At r-.24-ament-hs or following painting, fire, or chemical release in any ,4, ventilation zone communicating with the system by:

I) Verifying that the system satisfies the in-place penetration and bypass leakage testing acceptance criteria of less than 0.05% anduses the test procedure guidance in Regulatory Positions C.5.a, C.5.c, and C.5.d of Regulatory Guide 1.52, Revision 2, March 1978,* and the system flow rate is 7600 cfm to 9800 cfm; MILLSTONE - UNIT 3 3/4 6-19 Amendment No. 2, A-9,8-4, 4-N, 4.,

06, M;-

CONTAINMENT SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

2) Verifying, within 31 days after removal, that a laboratory analysis of a representative carbon sample obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978,* shows the methyl iodide penetration less than or equal to 2.5% when tested in accordance with ASTM D3803-89 at a temperature of 30'C (86°F) and a relative humidity of 70%; and

3) Verifying a system flow rate of 7600 cfm to 9800 cfm during system operation when tested in accordance with ANSI N510-1980.

c. After every 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of charcoal adsorber operation, by verifying, within 31 days after removal that a laboratory analysis of a representative carbon sample obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978,* shows the methyl iodide penetration less than or equal to 2.5% when tested in accordance with ASTM D3803-89 at a temperature of 30'C (86°F) and a relative humidity of 70%:

the frequency specified in the Surveillance Frequency Control Program

d. At I ,st ncc p'cr 21 months by: ,

I) Verifying that the pressure drop across the combined HEPA filters and charcoal adsorber banks is less than 6.25 inches Water Gauge while operating the system at a flow rate of 7600 cfm to 9800 cfm,

2) Verifying that the system starts on a Safety Injection test signal, and

3) Verifying that the heaters dissipate 50 +/-5 kW when tested in accordance with ANSI N510-1980.

ANSI N510-1980 shall be used in place of ANSI N510-1975 referenced in Regulatory Guide 1.52, Revision 2, March 1978.

MILLSTONE - UNIT 3 3/4 6-20 Amendment No. -, 1-4,84, 4-00, 4-2-3, 4-M, 4-4, itily 24,09-CONTA[NMENT SYSTEMS SECONDARY CONTAINMENT LIMITING CONDITION FOR OPERATION 3.6.6.2 Secondary Containment shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With Secondary Containment inoperable, restore Secondary Containment to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENT 4.6.6.2.1 OPERABILITY of Secondary Containment shall be demonstrated at

-days by verifying that each door in each access opening is closed except w e access opening is being used for normal transit entry and exit.

4.6.6.2.2 At , verify each S ementary Leak Collection and Release System produce a tive pressure of greater or equal to 0.4 inch water gauge in the Auxiliary Building at 24'- . 120 seconds after a start signal.

Ithe frequency specified in the Surveillance Frequency Control Proqram MILLSTONE - UNIT 3 3/4 6-22 Amendment No. 7, 490,4-2-3,4-26, 206-

Fe~b, Uarry H-,20 PLANT SYSTEMS AUXILIARY FEED WATER SYSTEM LIMITING CONDITION FOR OPERATION ACTION: (Continued)

.1 Inoperable Equipment Required ACTION

e. Three auxiliary feedwater e.

pumps in MODE 1, 2, or 3.

- - - - - -- NOTE --------

LCO 3.0.3 and all other LCO required ACTIONS requiring MODE changes are suspended until one /

AFW pump is restored to OPERABLE status.

/

Immediately initiate ACTION to restore one auxiliary feedwater pump to OPERABLE status.

SURVEILLANCE REQUIREMENTS 4.7.1.2.1 Each auxiliary feedwater pump shall be demonstrated OPERABLE:

a. At fflne-ýFff 3-1 days. by:

q encv specified in the Surveillance Frequencv Control Proq7Fa7m frequ ehthe NM'E--- - - - - - - - - - - - - - -

Auxiliary edwater ate pumps may be considered OPERABLE during alignment and operation a- s a generator r steam eney level control, if they are capable of being manually ig realigned o the au x auxiliary feedwater mode of operation.

j j g9 eachth Verifyi auxiliaryry feedwater f manual, power operated, and automatic valve in each w ter flowfl h pathli andu in each required steam supply flow path to the steam turbi auxiliary jI j feedwater pump, that is not locked, scaled, or otherwise s jr driven I UP ecur d in position, is in the correct position.

b. A0 east ignee per 92 days on a STAGGERED TEST-BASIS, tested pursuant to Specification 4.0.5, by:

1) Verifying that on recirculation flow each motor-driven pump develops a total head of greater than or equal to 3385 feet;

2) Verifying that on recirculation flow the steam turbine-driven pump develops a total head of greater than or equal to 3780 feet when the secondary steam supply pressure is greater than 800 psig. The provisions of Specification 4.0.4 are not applicable for entry into MODE 3.

MILLSTONE - UNIT 3 3/4 7-5 Amendment No. 96, -00,4-2-7, 4-3.9, 2.06, 3 Februar- 2., 2007 PLANT SYSTEMS AUXILIARY FEEDWATER SYSTEM SURVEILLANCE REQUIREMENTS (Continued)

c. At, by verifying that each auxiliary feedwater pump starts as igned automatically upon receipt of an Auxiliary Feedwater Actuation test into MODE 3. the provisions of signa Forthe steam turbine-driven applicable auxiliary for entry feedwater pump, 4.0.4 are not Specifi tion 4.7.1.2.2 An auxiliary f dwater flow path to each steam generator shall be demonstrated OPERABLE following each OLD SHUTDOWN of greater than 30 days prior to entering MODE 2 by verifying flow to ach steam generator.

[the frequency specified in the Surveillance Frequency Control Proqram I MILLSTONE - UNIT 3 3/4 7-5a Amendment No. 2-34--

PLANT SYSTEMS DEMINERALIZED WA]TER STORAGE TANK LIMITING CONDITION FOR OPERATION 3.7.1.3 The demineralized water storage tank (DWST) shall be OPERABLE with a water volume of at least 334,000 gallons.

APPLICABILITY: MODES I, 2, and 3.

ACTION:

With the DWST inoperable, within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months either:

a. Restore the DWST to OPERABLE status or bc in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in HOT SHUTDOWN within the following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , or

b. Demonstrate the OPERABILITY of the condensate storage tank (CST) as a backup supply to the auxiliary feedwater pumps and restore the DWST to OPERABLE status within 7 days or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in HOT SHUTDOWN within the following 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.7.1.3.1 The DWST shall be demonstrated OPERABLE at least-once-per-+2-hours by verifying the water volume is within its limits when the tank is the suppy source for the auxiliary feedwater pumps. /

/

4.7.1.3.2 The CST shall be demonstrated OPERABLE a Ieast-on -per-l-2-hours by verifying that the combined volume of both the DWST and CST isat least 387,000 gallons of water whenever the CST and DWST are the supply source forihe aeueHary fCcdwater Pumps.

Ithe frequency specified in the Surveillance FreqUency Control Program~

MILLSTONE - UNIT 3 3/4 7-6 Amendment No. 4 Jantiai-34-I-4M TABLE 4.7-1 SECONDARY COOLANT SYSTEM SPECIFIC ACTIVITY SAMPLE AND ANALYSIS PROGRAM TYPE OF MEASUREMENT SAMPLE AND ANALYSIS AND ANALYSIS FREQUENCY I. Gross Radioactivity A-t-tcast-onee--per-7-2-heuis.

2.

Determination Isotopic Analysis for DOSE EQUIVALENT 1-131

/ a) Gnee-pet-4-days, when-ever the gross radio-Concentration /activity determination indicates concentrations greater than 10% of the allowable limit for radioiodines.

b) Onee-peir-6-menth%, when-

,//,ever the gross radio-activity determination indicates concentrations less than or equal to 10%

of the allowable limit for radioiodines.

=At the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 7-8

PLANT SYSTEMS STEAM GENERATOR ATMOSPHERIC RELIEF BYPASS LINES LIMITING CONDITION FOR OPERATION 3.7.1.6 Each steam generator atmospheric relief bypass valve (SGARBV) line shall be OPERABLE, with the associated main steam atmospheric relief isolation (block) valve in the open position.

APPLICABILITY: MODES 1, 2, and 3, MODE 4 when steam generator is relied upon for heat removal.

ACTIONS

a. With one required SGARBV line inoperable, restore required SGARBV line to OPERABLE status within 7 days or be in at least MODE 3 within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be in MODE 4 without reliance upon steam generator for heat removal within the next 18 hours2.083333e-4 days 0.005 hours 2.97619e-5 weeks 6.849e-6 months . LCO 3.0.4 is not applicable.

b. With two or more required SGARBV lines inoperable, restore all but one required SGARBV line to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least MODE 3 within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and be in MODE 4 without reliance upon steam generator for heat removal within the next 18 hours2.083333e-4 days 0.005 hours 2.97619e-5 weeks 6.849e-6 months .

SURVEILLANCE REQUIREMENTS 4.7.1.6.1 Verify one complete cycle of each SGARBV 4.7.1.6.2 Verify one complete cycle of each mai earn atmospheric relief isolation (block) valve in the,Su*,g

lt the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 7-9a Amendment No. 1-ý

PLANT SYSTEMS 3/4.7.3 REACTOR PLANT COMPONENT COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.3 At least two independent reactor plant component cooling water safety loops shall be OPERABLE.

APPLICAI31LITY: MODES 1,2, 3, and 4.

ACTION:

With only one reactor plant component cooling water safety loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.7.3 At least two reactor plant component cooling water safety loops shall be demonstrated OPERABLE:

a. At by verifying that each valve (manual, power-operated, or aut tic) servicing safety-related equipment that is not locked, sealed, or otherwis ecured in position is in its correct position; and

b. At W-t *e-2* A by verifying that:

1) Eac tomatic e actuates to its correct position on its associated Engineere fety F re actuation signal, and

2) Each Component Coo , r System pump starts automatically on an SIS test signal.

Ithe frequency specified in the Surveillance Frequency Control Propram MILLSTONE - UNIT 3 3/4 7-11 Amendment No. 4-24,40&6-

-jul24, 2002 PLANT SYSTEMS 3/4.7.4 SERVICE WATER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.4 At least two independent service water loops shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With only one service water loop OPERABLE, restore at least two loops to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.7.4 At least two service water loops shall be demonstrated OPERABLE:

a. At ,1 days by verifying that each valve (manual, power-operated, or aut tie) servicing safety-related equipment that is not locked, sealed, or otherwi secured in position is in its correct position; and

b. At r 24 mnths by verifying that:,

I) Ea u*toma valve servicing safety-related equipment actuates to its ition its associated Engineered Safety Feature actuation correct signal, and

2) Each Service Water Sys pump starts automatically on an SIS test signal. 1

[the frequency specified in the Surveillance Frequency Control Proqram MILLSTONE - UNIT 3 3/4 7-12 Amendment No. 247, 206

l,99 PLANT SYSTEMS 3/4.7.5 ULTIMATE HEAT SINK LIMITING CONDITION FOR OPERATION 3.7.5 The ultimate heat sink (UHS) shall be OPERABLE with an average water temperature of less than or equal to 750F.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

If the UHS temperature is above 75'F, monitor the UHS temperature once per hour for 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

If the UHS temperature does not drop below 75'F during this period, place the plant in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . During this period, if the UHS temperature increases above 77°F, place the plant in HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.7.5 The U14S shall be determined OPERABLE:

a. Ateast-oene-pr-44-ounsby verifying the average water temperature to be within b.-

At n- , , by verifying the average water temperature to be within limits %e erage water temperature exceeds 701F.

Ithe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 7-13 Amendment No. 4-1

-Stember 18, 2008 PLANT SYSTEMS 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM LIMITING CONDITION FOR OPERATION ACTION: (Continued)

e. With both Control Room Emergency Air Filtration Systems inoperable, or with the OPERABLE Control Room Emergency Air Filtration System required to be in the emergency mode by ACTION d. not capable of being powered by an OPERABLE emergency power source, or with one or more Control Room Emergency Air Filtration System Trains inoperable due to an inoperable CRE boundary, immediately suspend the movement of recently irradiated fuel assemblies.

SURVEILLANCE REQUIREMENTS 4.7.7 Each Control Room Emergency Air Filtration System shall be demonstrated OPERABLE: the frequency specified in the Surveillance Frequency Control

a. At ... yo*^.. ' r,, 2hourts by verifying that the control room air temperature is less than ual to 95*F;

b. At u:l~ m't 31 d~ays-u aiSTAGGEREDff TEST B-ASY by initiating, from the contr room, flow through the HEPA filters and charcoal adsorbers and verifying a sys m flow rate of 1,120 cfm +/- 20% and that the system operates for at least 10 cont uous hours with the heaters operating;

c. At s or following painting, fire, or chemical release in any ventilation zone communicating with the system by:

I) Verifying that the system satisfies the in-place penetration and bypass leakage testing acceptance criteria of less than 0.05% and uses the test procedure guidance in Regulatory Position C.5.a, C.5.c, and C.5.d of Regulatory Guide 1.52, Revisions 2, March 1978,* and the system flow rate is 1,120 cfm +/- 20%;

2) Verifying, within 31 days after removal, that a laboratory analysis of a representative carbon sample obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978,* shows the methyl iodide penetration less than or equal to 2.5% when tested in accordance with ASTM D3803-89 at a temperature of 30'C (867F), a relative humidity of 70%, and a face velocity of 54 ft/min; and

3) Verifying a system flow rate of 1,120 cfm +/- 20% during system operation when tested in accordance with ANSI N510-1980.

MILLSTONE - UNIT 3 3/4 7-16 Amendment No. 2, 23, 4-184-, 4-84, 2-03, 2-06, 2p-, "24

September~ 18, 2008 PLANT SYSTEMS 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM SURVEILLANCE REQUIREMENTS (Continued)

d. After every 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of charcoal adsorber operation, by verifying, within 31 days after removal, that a laboratory analysis of a representative carbon sample obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978,* shows the methyl iodide penetration less than or equal to 2.5%

when tested in accordance with ASTM D3803-89 at a temperature of 30'C (86°F),

and a relative humidity of 70%, and a face velocity of 54 ft/min.

,7--the frequency specified in the Surveillance Frequencv Control Proqram

e. A l.......-,pr 24 1.. nth. by:

1) Verifying that the pressure drop across the combined HEPA filters and charcoal adsorber banks is less than 6.75 inches Water Gauge while operating the system at a flow rate of 1,120 cfm +/- 20%;

2) Deleted

3) Verifying that the heaters dissipate 9.4 +/-l kW when tested in accordance with ANSI N510-1980.

f. After each complete or partial replacement of a HEPA filter bank, by verifying that the cleanup system satisfies the in-place penetration and bypass leakage testing acceptance criteria of less than 0.05% in accordance with ANSI N510-1980 for a DOP test aerosol while operating the system at a flow rate of 1120 cfm +/- 20%; and

g. After each complete or partial replacement of a charcoal adsorber bank, by verifying that the cleanup system satisfies the in-place penetration and bypass leakage testing acceptance criteria of less than 0.05% in accordance with ANSI N510-1980 for a halogenated hydrocarbon refrigerant test gas while operating the system at a flow rate of 1120 cfm +/- 20%.

h. By performance of CRE unfiltered air inleakage testing in accordance with the CRE Habitability Program at a frequency in accordance with the CRE Habitability Program.

ANSI N510-1980 shall be used in place of ANSI N510-1975 referenced in Regulatory Guide 1.52, Revision 2, March 1978.

MILLSTONE - UNIT 3 3/4 7-17 Amendment No. -2, 4,, U+-8-, 203, 220,243

March 29, 2007 PLANT SYSTEMS 3/4.7.9 AUXILIARY BUILDING FILTER SYSTEM LIMITING CONDITION FOR OPERATION 3.7.9 Two independent Auxiliary Building Filter Systems shall be OPERABLE.

APPLICABILITY: MODES 1,2, 3, and 4.

ACTION:

With one Auxiliary Building Filter System inoperable, restore the inoperable system to OPERABLE status within 7 days or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . In addition, comply with the ACTION requirements of Specification 3.6.6.1.

SURVEILLANCE REQUIREMENTS the frequency specified in the Surveillance Frequency Control Prorami 4.7.9 Each Aeu ary Building Filter System shall be demonstrated OPERABLE: A"

a. At esP_. .c ---rrSTAGGE-- ED -EST-ASB S by initiating, from the contrtl room, flow through the HEPA filters and charcoal adsorbers and verifying a sytem flow rate of 30,000 cfm +/-10% and that the system operates for at least 10 coninuous hours with the heaters operating;

b. At . or following painting, fire, or chemical release in any ,f ventilation zone communicating with the system by:

I) Verifying that the cleanup system satisfies the in-place penetration and bypass leakage testing acceptance criteria of less than 0.05% and uses the test procedure guidance in Regulatory Positions C.5.a, C.5.c, and C.5.d of Regulatory Guide 1.52, Revision 2, March 1978,* and the system flow rate is 30,000 cfm +10%;

2) Verifying, within 31 days after removal, that a laboratory analysis of a representative carbon sample obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978,* shows the methyl MILLSTONE - UNIT 3 3/4 7-20 Amendment No. , 8-&7, +--2-., 4-94, -20, 20, 3

2l 24.-,,0,2O, PLANT SYSTEMS SURVEILLANCE REQUIREMENTS iodide penetration less than or equal to 2.5% when tested in accordance with ASTM D3803-89 at a temperature of 30'C (86°F), a relative humidity of 70%, and a face velocity of 52 ft/min; and

3) Verifying a system flow rate of 30,000 cfm +/- 10% during system operation when tested in accordance with ANSI N510-1980.

c. After every 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of charcoal adsorber operation, by verifying, within 31 days after removal, that a laboratory analysis of a representative carbon sample obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978,* shows the methyl iodide penetration less than or equal to 2.5% when tested in accordance with ASTM D3803-89 at a temperature of 301C (867F), a relative humidity of 70%, and a face velocity of 52 ft/min;

[-7the frequency specified in the Surveillance Frequency Control Proqram

d. At.- -2. m-.s-by: /r I) Verifying that the pressure drop across the combined HEPA filters and charcoal adsorber banks is less than 6.8 inches Water Gauge while operating the system at a flow rate of 30,000 cfm +/-10%,

2) Verifying that the system starts on a Safety Injection test signal, and

3) Verifying that the heaters dissipate 180 +/- 18 kW when tested in accordance with ANSI N510-1980.

e. After each complete or partial replacement of a HEPA filter bank, by verifying that the cleanup system satisfies the in-place penetration and bypass leakage testing acceptance criteria of less than 0.05% in accordance with ANSI N510-1980 for a DOP test aerosol while operating the system at a flow rate of 30,000 cfm +10%;

and f, After each complete or partial replacement of a charcoal adsorber bank, by verifying that the cleanup system satisfies the in-place penetration and bypass leakage testing acceptance criteria of less than 0.05% in accordance with ANSI N510-1980 for a halogenated hydrocarbon refrigerant test gas while operating the system at a flow rate of 30,000 cfm -+/-10%.

ANSI N510-1980 shall be used in place of ANSI N510-1975 referenced in Regulatory Guide 1.52, Revision 2, March 1978.

MILLSTONE - UNIT 3 3/4 7-21l Amendment No. a, 8-7, 4-24, 4-84, 246-

March 16, 26-H6 ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION ACTION (continued) inoperable Equipment Required AC I WIN

e. Iwo diesel generators e.2 Restore one of tne inoperable diesel generators to OPERABLE status within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

AND e.3 Following restoration of one diesel generator, restore OPERABLEremaining statusinoperable following diesel generator the time to requirements of ACTION Statement b. above based on the initial loss of the remaining inoperable diesel generator.

4" the frequency specified in the Surveillance Frequency Control Proqram SURVEILLANCE REQAMENT 4.8.1.1.1 Each of the bove req independent circuits between the offsite transmission network and the Onsit Class IEDtr ution System shall be:

a. Dete ined OPERABL a l e er 7 days by verifying correct breaker alig ents, indicated pow availability, and

b. Dem nstrated OPERABLE a east ence-,r months during shutdown by trans/erring (manually and automaticallyfunit power supply from the normal circ it to the alternate circuit.

4.8.1.1.2 Each d sel generator shall be demonstrated OPERABLE:*

a. At ,. ., ,r , day, by:

1) Verifying the fuel level in the day tank,

2) Verifying the fuel level in the fuel storage tank,

3) Verifying the fuel transfer pump starts and transfers fuel from the storage system to the day tank,

4) Verifying the lubricating oil inventory in storage,

5) Verifying the diesel starts from standby conditions and achieves generator voltage and frequency at 4160.+/- 420 volts and 60 +/- 0.8 Hz. The diesel generator shall be started for this test by using one of the following signals:

a) Manual, or

All planned starts for the purpose of these surveillances may be preceded by an engine prelube period.

MILLSTONE - UNIT 3 3/4 8-3a Amendment No. 40, 64,-44-2, -+-94,240,

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued) the frequency specified in the Surveillance Frequency Control Program b) Simulated loss-of-offsite power by itself, or c) Simulated loss-of-offsite power in conjunction with an ESF Actuation test signal, or d) An ESF Actuation test signal by itself.

6) Verifying the generator is synchronized and gradually loaded in accordance with the manufacturer's recommendations between 4800-5000 kW* and operates with a load between 4800-5000 kW* for at least 60 minutes, and

7) Verifying the diesel generator is aligned to provide standby power to the associated emergency busses.

b. At -i

-ncpe-.p -184 -ays by:

I) Verifying that the diesel generator starts from standby conditionS and attains generator voltage and frequency of 4160 +/- 420 volts and 60 -

0.8 Hz within I1 seconds after the start signal.

2) Verifying the generator is synchronized to the associated emergency bus, loaded between 4800-5000 kW* in accordance with the manufacturer s recommendations, and operate with a load between 4800-5000 kW* for at least 60 minutes.

TIa diesel generator shall be started for this test using one of the signals in S I eillance Requirement 4.8.1.1.2.a.5. This test, if it is performed so it coincides w the testing required by Surveillance Requirement 4.8.1.1 .2.a.5, may also s le to concurrently meet those requirements as well.

nd after each operation of the diesel where the period of op ration was greate or equal to I hour by checking for and removing ac mulated water from the day tank; d.. At artoAne per. 1days by checking for and removing accumulated water from the fuel oil storage tanks;

e. By sampling new fuel oil in accordance with ASTM-D4057 prior to addition to storage tanks and:

1) By verifying in accordance with the tests specified in ASTM-D975-81 prior to addition to the storage tanks that the sample has:

a) An API Gravity of within 0.3 degrees at 60*F, or a specific pravity of within 0.0016 at 60/601F, when compared to the suppliers certificate, or an absolute specific gravity at 60/60°F of greater than or equal to 0.83 but less than or equal to 0.89, or an APIgravity of reater than or equal to 27 degrees but less than or equal to 39 oegrees;

The operating band is meant as guidance to avoid routine overloading of the diesel.

Momentary transients outside the load range shall not invalidate the test.

MILLSTONE -. UNIT 3 3/4 8-4 Amendment No. 4, 64, 4-14, 4-3-, +94-

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued) the frequency specified in the Surveillance Frequency Control Proqram b) A kinematic viscosity at 40'C of greater than or equal to 1.9 centistokes, but less than or equal to 4.1 centistokes (alternatively, Saybolt viscosity, SUS at I00'F of greater than or equal to 32.6, but less than or equal to 40. 1), if gravity was not determined by comparison with the supplier's certification; c) A flash point equal to or greater than 125'F; and 1

d) Water and sediment less than 0.05 percent by volume when tested in accordance with ASTM-D 1796-83.

By verifying within 30 days of obtaining the sample that the other properties specified in Table I of ASTM-D975-81 are met when tested in accordance with ASTM-D975-81 except that: (1) the cetane index shall b'e determined in accordance with ASTM-D976 (this test is an appropriate approximation for cetane number as stated in ASTM-D975-81 [Note E]),

and (2) the analysis for sulfur may be performed in accordance with ASTM-D1552-79, ASTM-D2622-82 or ASTM-D4294-83.

f. t by obtaining a sample of fuel oil in accordance with A TM-D2276-78, and verifying that total particulate contamination is less than 1 mg/liter when checked in accordance with ASTM-D2276-78, Method A;

g. A__ t ec per 18 menths during shutdown, by:

I) DELETED X'

2) Verifying the generator capability to reject a load of greater than or equal to 595 kW while maintaining voltage at 4160 +/- 420 volts and frequency at 60 +/- 3 Hz;

3) Verifying the generator capability to reject a load of 4986 kW without tripping. The generator voltage shall not exceed 5000 volts during and 4784 volts following the. load rejection;

4) Simulating a loss-of-offsite power by itself, and:

a) Verifying deenergization of the emergency busses and load shedding from the emergency busses, and b) Verifying the diesel starts from standby conditions on the auto-start signal, energizes the emergency busses with permanently connected loads within II seconds, energizes the auto-connected shutdown loads through the load sequencer and operates for greater than or equal to 5 minutes while its generator is loaded with the shutdown loads. After energization, the steady-state voltage and frequency of the emergency busses shall be maintained at 4160 +/- 420 volts and 60.4 0.8 Hz during this test.

MILLSTONE - UNIT 3 3/4 8-5 Amendment No.-4, 40, 64, -4, 4-00, 440, 4-2,-+4&, -94

March 29, 2007 ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

8) Verifying that the auto-connected loads to each diesel generator do not exceed the 2000-hour rating of 5335 kW;

9) Verifying the diesel generator's capability to:

a) Synchronize with the offsite power source while the generator is loaded with its emergency loads upon a simulated restoration of offsite power, b) Transfer its loads to the offsite power source, and c) Be restored to its standby status.

10) Verifying that with the diesel generator operating in a test mode, connected to its bus, a simulated Safety Injection signal overrides the test mode by:

(1) returning the diesel generator to standby operation, and (2) automatically energizing the emergency loads with offsite power;

11) DELETED

12) Verifying that the automatic load sequence timer is OPERABLE with the interval between each load block within +/- 10% of its design interval; and

13) DELETED

h. At least ncc pcr 10 ycars by starting both diesel generators simultaneously from stal by conditions, during shutdown, and verifying that both diesel generators achie e generator voltage and frequency at 4160 +/- 420 volts and 60 +/- 0.8 Hz in less tha or equal to 11 seconds; and

i. At

10yasby draining each fuel oil storage tank, removing the ac ted ediment and cleaning the tank using a sodium hypochlorite solution.

Ithe frequency specified in the Surveillance Frequency Control Prowram MILLSTONE - UNIT 3 3/4 8-7 Amendment No. 64,7-9, 00, 4-4-2, -+-74, 4-94, 2P ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

j. At by verifying the diesel generator operates for at least 24 rs. During the first 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of this test, the diesel generator shall be loaded betwee 5400-5500kW* and during the remaining 22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months of this test, the diesel generato hall be loaded between 4800-5000kW*. The generator voltage and frequency all be 4160 +/- 420 volts and 60 +/- 0.8 Hz within I I seconds after the start signal; t steady-state generator voltage and frequency shall be maintained within these lin s during this test.** Within 5 minutes after completing this 24-hour test, perf Specification 4.8.1.1 .2.a.5) excluding the requirement to start the diesel from tandby conditions.***

k. At 4eas- by verifying that the fuel transfer pump transfers fuel fronnTa to the day tank of each diesel via the installed cross-connect

1. At ktý that the following diesel generator lockout starting:

II Fn ;n,. nx/,trenpr u el w(2 s.......

pr}.... of 3 lo i)

2) Lube"Joil pressure

"*s low ( *the logic), frequencyFrequency Surveillance specified inControl

,the Program

3) Generator differential, and

4) Emergency stop.

The operating band is meant as guidance to avoid routine overloading of the diesel.

Momentary transients outside the load range shall not invalidate the test.

- Diesel generator loadings may include gradual loading as recommended by the manufacturer.

If Surveillance Requirement 4.8.1.1 .2.a.5) is not satisfactorily completed, it is not necessary to repeat the preceding 24-hour test. Instead, the diesel generator may be operated between 4800-5000 kW for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or until operating temperature has stabilized.

MILLSTONE - UNIT 3 3/4 8-8 Amendment No. 4-0, 64, 4-0, 1 j-

,I09 92 ELECTRICAL POWER SYSTEMS 3/4.8.2 D.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION 3.8.2.1 As a minimum, the following D.C. electrical sources shall be OPERABLE:

a. 125-volt Battery Bank 301 A- 1, and an associated full capacity charger,

b. 125-volt Battery Bank 301 A-2, and an associated full capacity charger,

c. 125-volt Battery Bank 301 B-1 and an associated full capacity charger, and

d. 125-volt Battery Bank 301 B-2 and an associated full capacity charger.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

a. With either Battery Bank 301A-1 or 301 B-1, and/or one of the required full capacity chargers inoperable, restore the inoperable battery bank and/or full capacity charger to OPERABLE status within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b. With either Battery Bank 301A-2 or 301B-2 inoperable, and/or one of the required full capacity chargers inoperable, restore the inoperable battery bank and/or full capacity charger to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS f lthe frequency specified in the Surveillance Frequency Control Proqramr 4.8.2.1 Each 12 -volt battery bank and charger shall be demonstrated OPERABLE:

a. At ast onceper ,,a by verifying that:

1) The parameters in Table 4.8-2a meet the Category A limits, and

2) The total battery terminal voltage is greater than or equal to 129 volts on float charge.

MILLSTONE - UNIT 3 3/4 8-11! Amendment No. ,

9tw5j9 ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

b. At lea-t on pcr 2 lV and within 7 days after a battery discharge with battery teiinal voltage below 110 volts, or battery overcharge with battery terminal v tage above 150 volts, by verifying that:

) The parameters in Table 4.8-2a meet the Category B limits,

2) There is no visible corrosion at either terminals or connectors, or the connection resistance of these items is less than 150 x 10-6 ohm, and

3) The average electrolyte temperature of six connected cells is above 60°F.

MAR nve-011M by verifying that:

the frequency The cells, cell plates, and battery racks show no visual indication of specified in the physical damage or abnormal deterioration, Surveillance

2) The cell-to-cell and terminal connections are clean, tight, and coated with Frequency anticorrosion material, Control Program

3) The resistance of each cell-to-cell and terminal connection is less than or equal to 150 x 10-6 ohm, and S) Each battery charger will supply at least the amperage indicated in Table 4.8-2b at greater than or equal to 132 volts for at least 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . df'

d. t c* *ncc Cr Iper10, mnthis, during shutdown, by verifying that the battery apacity is adequate to supply and maintain in OPERABLE status all of the actual o simulated emergency loads for the design duty cycle when the battery is sui jected to a battery service test; T

e. At , during shutdown, by verifying that the cry capacity is at least 80% of the manufacturer's rating when ted to a performance discharge test; G-hnC, pa -this performance discharge test may be performed in lieu of the battery service test required by Specification 4.8.2. 1d.; and f, At least once per 18 months, during shutdown, by giving performance discharge tests of battery capacity to any battery that shows signs of degradation or has reached 85% of the service life expected for the application. Degradation is indicated when the battery capacity drops more than 10% of rated capacity from its average on previous performance tests, or is below 90% of the manufacturer's rating.

MILLSTONE - UNIT 3 3/4 8-12 Amendment No. 64, -9, Q4G0, 449-

ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

a. With one of the required trains of A.C. emergency busses not OPERABLE, restore the inoperable train to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b. With one A.C. vital bus either not energized from its associated inverter, or with the inverter not connected to its associated D.C. bus: (1) reenergize the A.C. vital bus within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months ; and (2) reenergize the A.C.

vital bus from its associated inverter connected to its associated D.C. bus within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

c. With one D.C. bus not energized from its associated battery bank, reenergize the D.C. bus from its associated battery bank within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS 4.8.3.1 The specified busses shall be determined OPERABLE in the specified manner at a ,t-

-,efepeF- day6 by verifying correct breaker alignment and indicated voltage on the b es.

Ithe frequency specified in the Surveillance Frequency Control Proqram I MILLSTONE - UNIT 3 3/4 8-17 Amendment No.-64, 2-

ELECTRICAL POWER SYSTEMS ONSITE POWER DISTRIBUTION SHUTDOWN LIMITING CONDITION FOR OPERATION (Continued)

4) Two 125 volt DC Busses consisting of:

a) Bus #301 B-I energized from Battery Bank #301 B-I, and b) Bus #301 B-2 energized from Battery Bank #301B-2.

APPLICABILITY: MODES 5 and 6.

ACTION:

With any of the above required electrical busses not energized in the required manner, immediately suspend all operations involving CORE ALTERATIONS, positive reactivity additions that could result in loss of required SDM or boron concentration, movement of recently irradiated fuel assemblies, crane operation with loads over the fuel storage pool, or operations with a potential for draining the reactor vessel, initiate corrective action to energize the required electrical busses in the specified manner as soon as possible.

SURVEILLANCE REQUIREMENTS 4.8.3.2 The specified busses shall be determined energized in the required mannert Iant-enee ar-7 ' by verifying correct breaker alignment and indicated volta e usses.

Ithe frequencv specified in the Surveillance Frequencv Control Program MILLSTONE - UNIT 3 3/4 8-18a Amendment No. 446, 230,-243.

3/4.9 REFUELING OPERATIONS 3/4.9.1 BORON CONCENTRATION LIMITING CONDITION FOR OPERATION 3.9.1.1 The boron concentration of all filled portions of the Reactor Coolant System and the refueling canal shall be maintained sufficient to ensure that the more restrictive of the following reactivity conditions is met; either:

a. A Kffof 0.95 or less, or

b. A boron concentration of greater than or equal to the limit specified in the CORE OPERATING LIMITS REPORT (COLR).

Additionally, the CVCS valves of Specification 4.1.1.2.2 shall be closed and secured in position.

APPLICABILITY: MODE 6.*

ACTION:

a. With the requirements of the above specification not satisfied, immediately suspend all operations involving CORE ALTERATIONS and positive reactivity additions and initiate and continue boration at greater than or equal to 33 gpm of a solution containing greater than or equal to 6600 ppm boron or its equivalent until KeIf is reduced to less than or equal to 0.95 or the boron concentration is restored to greater than or equal to the limit specified in the COLR, whichever is the more restrictive.

b. With any of the CVCS valves of Specification 4.1.1.2.2 not closed** and secured in position, immediately close and secure the valves.

SURVEILLANCE REQUIREMENTS 4.9.1.1.1 The more restrictive of the above two reactivity conditions shall be determined prior to:

a. Removing or unbolting the reactor vessel head, and

b. Withdrawal of any full-length control rod in excess of 3 feet from its fully inserted position within the reactor vessel.

4.9.1.1.2 The boron concentration of the Reactor Coolant System and the refueling cavity shall be determined by chemical analysis at ' o -- Kr 4.9.1.1.3 The CVCS valves of Specification 4.1.1.2. s ified closed and locked at A eiiee per-31-detys. t' Ithe frequency specified in the Surveillance Frequency Control Procqram

The reactor shall be maintained in MODE 6 whenever fuel is in the reactor vessel with the vessel head closure bolts less than fully tensioned or with the head removed.

- Except those opened under administrative control.

MILLSTONE - UNIT 3 3/4 9-1 Amendment No. 50, 60, 99, 4-0-3, 2-,

2-4-, 2-3

Febiuamy 20, 2002 REFUELING OPERATIONS BORON CONCENTRATION LIMITING CONDITION FOR OPERATION 3.9.1.2 The soluble boron concentration of the Spent Fuel Pool shall be greater than or equal to 800 ppm.

APPLICABILITY:

Whenever fuel assemblies are in the spent fuel pool.

ACTION:

a. With the boron concentration less than 800 ppm, initiate action to bring the boron concentration in the fuel pool to at least 800 ppm within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , and

b. With the boron concentration less than 800 ppm, suspend the movement of all fuel assemblies within the spent fuel pool and loads over the spent fuel racks.

SURVEILLANCE REQUIREMENTS 4.9.1.2 Verify that the boron concentration in the fuel pool is greater than or equal to 800 ppm lat the frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 9-1 a Amendment No. 4-2, 548, 4-89, 2O04-

REFUELING OPERATIONS 3/4.9,2 INSTRUMENTATION LIMITING CONDITION FOR OPERATION 3.9.2 Two Source Range Neutron Flux Monitors shall be OPERABLE with continuous visual indication in the control room, and one with audible indication in the containment and control room.

APPLICABILITY: MODE 6.

ACTION:

a. With one of the above required monitors inoperable immediately suspend all operations involving CORE ALTERATIONS and operations that would cause introduction of coolant into the RCS with boron concentration less than required to meet the boron concentration of LCO 3.9. 1. 1.

b. With both of the above required monitors inoperable determine the boron concentration of the Reactor Coolant System within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months and at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter.

SURVEILLANCE REQUIREMENTS 4.9.2 Each Source Range Neutron Flux Monitor shall be demonstrated OPERABLE by performance of:

a. A CHANNEL CHECK and verification of audible counts at. .laeto-p*

-F-2-hours,

b. A CHANNEL CALIBRATION at'7 -

Ithe frequency specified in the Surveillance Frequency Control Program

Neutron detectors arc excluded from CHANNEL CALIBRATION.

MILLSTONE - UNIT 3 3/4 9-2 Amendment No. 4-P--, 203, 230

Mareh 17-,4200 REFUELING OPERATIONS 3/4.9.4 CONTAINMENT BUILDING PENETRATIONS LIMITING CONDITION FOR OPERATION 3.9.4 The containment building penetrations shall be in the following status:

a. The equipment access hatch shall be either:

I. closed and held in place by a minimum of four bolts, or

2. open under administrative control

and capable of being closed and held in place by a minimum of four bolts,

b. A personnel access hatch shall be either:

I. closed by one personnel access hatch door, or

2. capable of being closed by an OPERABLE personnel access hatch door, under administrative control,* and

c. Each penetration providing direct access from the containment atmosphere to the outside atmosphere shall be either:

1. Closed by an isolation valve, blind flange, or manual valve, or

2. Be capable of being closed under administrative control.*

APPLICABILITY: During movement of fuel within the containment building.

ACTION:

With the requirements of the above specification not satisfied, immediately suspend all operations involving movement of fuel in the containment building.

SURVEILLANCE REQUIREMENTS 4.9.4.a Verify each required containment penetrations is in the required status le.st eeee per 7d.p.

4.9.4.b DELETED Ithe frequency specified in the Surveillance Frequency Control Program Administrative controls shall ensure that appropriate personnel are aware that the equipment access hatch penetration, personnel access hatch doors and/or other containment penetrations are open, and that a specific individual(s) is designated and available to close the equipment access hatch penetration, a personnel access hatch door and/or other containment penetrations within 30 minutes if a fuel handling accident occurs. Any obstructions (e.g. cables and hoses) that could prevent closure of the equipment access hatch penetration, a personnel access hatch door and/or other containment penetrations must be capable of being quickly removed.

MILLSTONE - UNIT 3 3/4 9-4 Amendment No. 2-03, 2+9-

-W6-2&806-REFUELING OPERATIONS 3/4.9.8 RESIDUAL HEAT REMOVAL AND COOLANT CIRCULATION HIGH WATER LEVEL

/

LIMITING CONDITION FOR OPERATION 3.9.8. I At least one residual heat removal (RHR) loop shall be OPERABLE and in operation.*

APPLICABILITY: MODE 6, when the water level above the top of the reactor vessel flange is greater than or equal to 23 feet.

ACTION:

1' With no RHR loop OPERABLE or in operation, suspend operations that would cause introduction of coolant into the RCS with boron concentration less than required to meet the boron concentration of LCO 3.9.1 . 1 and suspend loading irradiated fuel assemblies in the core and immediately initiate corrective action to return the required RHR loop to OPERABLE and operating status as soon as possible. Close all containment penetrations providing direct access from the containment atmosphere to the outside atmosphere within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

SURVEILLANCE REQUIREMENTS 4.9.8.1 At least one RHR loop shall be verified in operation and circulating reactor coolant at a flow rate of greater than or equal to 2800 gpm at least one. per 12 Ithe frequency specified in the Surveillance Frequency Control Program

The RHR loop may be removed from operation for up to I hour per 8-hour period, provided no operations are permitted that could cause introduction of coolant into the RCS with boron concentration less than required to meet the boron concentration of LCO 3.9.1.1. 1' MILLSTONE - UNIT 3 3/4 9-8 Amendment No. 7-,-230--,

-06Q28@O6-REFUELING OPERATIONS LOW WATER LEVEL LIMITING CONDITION FOR OPERATION 3.9.8.2 Two independent residual heat removal (RHR) loops shall be OPERABLE, and at least one RHR loop shall be in operation.*

APPLICABILITY: MODE 6, when the water level above the top of the reactor vessel flange is less than 23 feet.

ACTION:

a. With less than the required RHR loops OPERABLE, immediately initiate corrective action to return the required RHR loops to OPERABLE status, or to establish greater than or equal to 23 feet of water above the reactor vessel flange, as soon as possible.

b. With no RHR loop in operation, suspend operations that would cause introduction of coolant into the RCS with boron concentration less than required to meet the boron concentration of LCO 3.9. 1.1 and immediately initiate corrective action to return the required RHR loop to operation. Close all containment penetrations providing direct access from the containment atmosphere to the outside atmosphere within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

SURVEILLANCE REQUIREMENTS 4.9.8.2 At least one RHR loop shall be verified in operation and circulating reactor coolant at a flow rate of greater than or equal to 2800 gpm at least o61cc p 12 .

[the frequency specified in the Surveillance Frequency Control Program

The RHR loop may be removed from operation for up to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months per 8-hour period, provided no operations are permitted that could cause introduction of coolant into the RCS with boron ,..

concentration less than required to meet the boron concentration of LCO 3.9. 1.1.

MILLSTONE - UNIT 3 3/4 9-9 Amendment No. -+-, -2O

Februar; 20, 2002 REFUELING OPERATIONS 3/4.9.10 WATER LEVEL - REACTOR VESSEL LIMITING CONDITION FOR OPERATION 3.9.10 At least 23 feet of water shall be maintained over the top of the reactor vessel flange.

APPLICABILITY: During movement of fuel assemblies or control rods within the containment when either the fuel assemblies being moved or the fuel assemblies seated within the reactor vessel are irradiated while in MODE 6.

ACTION:

With the requirements of the above specification not satisfied, suspend all operations involving movement of fuel assemblies or control rods within the reactor vessel.

SURVEILLANCE REQUIREMENTS 4.9.10 The water level shall be determined to be at least its minimum required depth at least-

[the frequency specifiedin the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 9-11 Amendment No.

Oetoiber 25, 1990 REFUELING OPERATIONS 3/4.9*11 WATER LEVEL - STORAGE POOL LIMITING CONDITION FOR OPERATION 3.9.11 At least 23 feet of water shall be maintained over the top of irradiated fuel assemblies seated in the storage racks.

APPLICABILITY: Whenever irradiated fuel assemblies are in the storage pool.

ACTION:

a. With the requirements of the above specification not satisfied, suspend all movement of fuel assemblies and crane operations with loads in the fuel storage areas and restore the water level to within its limit within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

b. The provisions of Specification 3.0.3 are not applicable.

SURVEILLANCE REQUIREMENTS 4.9.11 The water level in the storage pool shall be determined to be at least its minimum required depth at -OF 7 days when irradiated fuel assemblies are in the fuel storage pool.ei F lthe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 9-12 Amendment No. §+

3/4.10 SPECIAL TEST EXCEPTIONS 3/4. 10.1 SHUTDOWN MARGIN LIMITING CONDITION FOR OPERATION 3.10.1 The SHUTDOWN MARGIN requirement of Specification 3. 1.1.1 may be suspended for measurement of control rod worth and SHUTDOWN MARGIN provided reactivity equivalent to at least the highest estimated control rod worth is available for trip insertion from OPERABLE control rod(s).

APPLICABILITY; MODE 2.

ACTION:

a. With any full-length control rod not fully inserted and with less than the above reactivity equivalent available for trip insertion, immediately initiate and continue boration at greater than or equal to 33 gpm of a solution containing greater than or equal to 6600 ppm boron or its equivalent until the SHUTDOWN MARGIN 4 required by Specification 3.1. 1. I is restored.

b. With all full-length control rods fully inserted and the reactor subcritical by less than the above reactivity equivalent, immediately initiate and continue boration at greater than or equal to 33 gpm of a solution containing greater than or equal to 6600 ppm boron or its equivalent until the SHUTDOWN MARGIN required by Specification 3. I. I. I is restored.

1 SURVEILLANCE REQUIREMENTS 4.10.1 .1 The position of each frill-length control rod either partially or fully withdrawn shall be determ ined at p so-"

wone^

p 2 er ituri.

4.10.1.2 Eachfull-le h control rod not fully inserted shall be demonstrated capable of full insertion when tripped from a7 ast the 5 0% withdrawn position within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months prior to reducing the SHUTDOWN MARGIN to les an the limits of Specification 3. 1. 1.1.

Ithe frequency specified in the Surveillance Frequency Control Program !

MILLSTONE - UNIT 3 3/4 10-1 Amendment No.444-

Decemfbfr 10, 2003 SPECIAL TEST EXCEPTIONS 3./4.10.2 GROUP HEIGHT, INSERTION. AND POWER DISTRIBUTION LIMITS LIMITING CONDITION FOR OPERATION 3.10.2.1 The group height, insertion, and power distribution limits of Specifications 3.1.3. 1, 3.1.3.5, 3.1.3.6, 3.2. 1.1, and 3.2.4 may be suspended during the performance of PHYSICS TESTS provided:

a. The THERMAL POWER is maintained less than or equal to 85% of RATED THERMAL POWER, and

b. The limits of Specifications 3.2.2.1 and 3.2.3.1 are maintained and determined at the frequencies specified in Specification 4.10.2.1.2 below.

APPLICABILITY: MODE 1.

ACTION:

With any of the limits of Specification 3.2.2.1 or 3.2.3. I being exceeded while the requirements of Specifications 3.1.3.1, 3.1.3.5, 3.1.3.6, 3.2. 1.1, and 3.2.4 are suspended, either:

a. Reduce THERMAL POWER sufficient to satisfy the ACTION requirements of Specifications 3.2.2.1 and 3.2.3. 1, or

b. Be in HOT STANDBY within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

SURVEILLANCE REQUIREMENTS 4.10.2.1.1 The THERMAL POWER shall be determined to be less than or equal to 85% of RATED THERMAL POWER at e-as+--.-eper.hwur during PHYSICS TESTS.

4.10.2.1.2 The Surveillance Req 'rements of the below listed specifications shall be performed at '-- -Pr 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months during YSICS TESTS:

ýa. Specifications 4.2.2. .2 and 4.2.2.1.3, and

b. 4.2.3.1.

MILLSTONE - UNIT 3 3/4 10-2 Amendment No. 244-

ianuary 3t, t986 SPECIAL TEST EXCEPTIONS 3/4.10.3 PHYSICS TESTS LIMITING CONDITION FOR OPERATION 3.10.3 The limitations of Specifications 3.1.1.3, 3.1. .4, 3.1.3.1, 3.1.3.5, and 3.1.3.6 may be suspended during the performance of PHYSICS TESTS provided:

a. The THERMAL POWER does not exceed 5% of RATED THERMAL POWER,

b. The Reactor Trip Setpoints on the OPERABLE Intermediate and Power Range channels are set at less than or equal to 25% of RATED THERMAL POWER, and

c. The Reactor Coolant System lowest operating loop temperature (Tavg) is greater than or equal to 541 OF.

APPLICABILITY: MODE 2.

ACTION:

a. With the THERMAL POWER greater than 5% of RATED THERMAL POWER, immediately open the Reactor trip breakers.

b. With a Reactor Coolant System operating loop temperature (Tavg) less than 541IF, restore Tavg to within its limit within 15 minutes or be in at least HOT STANDBY within the next 15 minutes.

SURVEILLANCE REQUIREMENTS 4.10.3.1 The THERMAL POWER shall be determined to be less than or equal to 5% of RATED THERMAL POWER at-st ee per h during PHYSICS TESTS.

4.10.3.2 Each Intermediate and P er Range channel shall be subjected to an ANALOG CHANNEL OPERATIONAL TEST wi hin 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months prior to initiating PHYSICS TESTS.

4.1.- The Reactor Coolant System te *erature (Tavg) shall be determined to be greater than or equal to 541'F at rIuring PHYSICS TESTS.

Ithe freauencv specified in the Surveillance Frequencv Control Prowram I MILLSTONE - UNIT 3 3/4 10-4

jartuary314, SPECIAL TEST EXCEPTIONS 3/4.10.4 REACTOR COOLANT LOOPS LIMITING CONDITION FOR OPERATION 3.10.4 The limitations of Specification 3.4. I .1 may be suspended during the performance of STARTUP and PHYSICS TESTS provided:

a. The THERMAL POWER does not exceed the P-7 Interlock Setpoint, and

b. The Reactor Trip Setpoints on the OPERABLE Intermediate and Power Range channels are set less than or equal to 25% of RATED THERMAL POWER.

APPLICABILITY: During operation below the P-7 Interlock Setpoint.

ACTION:

With the THERMAL POWER greater than the P-7 Interlock Setpoint, immediately open the Reactor trip breakers.

SURVEILLANCE REQUIREMENTS 4.10.4.1 The THERMAL POWER shall be determined to be less than P-7 Interlock Setpoint at east ,nee per hour during STARTUP and PHYSICS TESTS.

4.10.4.2 Each Intermediate and Power Range channel, and P-7 Interlock shall be subjected to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months prior to initiating STARTUP an ANALOG CHANNEL OPERATIONAL TEST within TESTS.

and PHYSICS Ithe frequency specified in the Surveillance Frequency Control Program MILLSTONE - UNIT 3 3/4 10-5

-Se*t*mber 30, 2008 ADMINISTRATIVE CONTROLS PROCEDURES AND PROGRAMS (Continued)

RG 1.183), which were considered in completing the vulnerability assessments, are documented in the UFSAR/current licensing basis. Compliance with these RGs is.

consistent with the current licensing basis as described in the UFSAR and other licensing basis documents.

d. Measurement, at designated locations, of the CRE pressure relative to all external areas adjacent to the CRE boundary during the pressurization mode of operation by one train of the CREVs, operating at the flow rate required by the Surveillance Requirements, at a Frequency of 48 months on a STAGGERED TEST BASIS. The results shall be trended and used as part of the 24 month assessment of the CRE boundary.

e. The quantitative limits on unfiltered air inleakage into the CRE.

These limits shall be stated in a manner to allow direct comparison to the unfiltered air inleakage measured by the testing described in paragraph c. The unfiltered air inleakage limit for radiological challenges isthe inleakage flow rate assumed in the licensing basis analyses of DBA consequences. Unfiltered air inleakage limits for hazardous chemicals must ensure that exposure of CRE occupants to these hazards will be within the assumptions in the licensing basis.

Insert 1 The provisions of Surveillance Requirement 4.0.2 are applicable to the Frequencies for assessing CRE habitability, determining CRE unfiltered inleakage, and measuring CRE pressure and assessing the CRE boundary as required by paragraphs c. and d., respectively.

6.8.5 Written procedures shall be established, implemented and maintained covering Section I.E, Radiological Environmental Monitoring, of the REMODCM.

6.8.6 All procedures and procedure changes required for the Radiological Environmental Monitoring Program (REMP) of Specification 6.8.5 above shall be reviewed by an individual (other than the author) from the organization responsible for the REMP and approved by appropriate supervision.

Temporary changes may be made provided the intent of the original procedure is not altered and the change is documented and reviewed by an individual (other than the author) from the organization responsible for the REMP, within 14 days of implementation.

MILLSTONE - UNIT 3 6-17e Amendment No. 24-5 1-

INSERTS FOR TECHNICAL SPECIFICATIONS MARKUPS INSERT 1 (for TS 6.8.4)

i. Surveillance Frequency Control Program This program provides controls for surveillance frequencies. The program shall ensure that surveillance requirements specified in the technical specification are performed at intervals sufficient to assure the associated Limiting Conditions for Operation are met.

a. The Surveillance Frequency Control Program shall contain a list of frequencies of those surveillance requirements for which the frequency is controlled by the program.

b. Changes to the frequencies listed in the Surveillance Frequency Control Program shall be made in accordance with NEI 04-10, "Risk-Informed Method for Control of Surveillance Frequencies," Revision 1.

c. The provisions of Surveillance Requirements 4.0.2 and 4.0.3 are applicable to the frequencies established in the Surveillance Frequency Control Program.

Serial No.12-580 Docket No. 50-423 ATTACHMENT 4 CROSS-REFERENCES - NUREG-1431 TO MPS3 TS SURVEILLANCE FREQUENCIES REMOVED DOMINION NUCLEAR CONNECTICUT, INC.

MILLSTONE POWER STATION UNIT 3

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 1 of 12 CROSS-REFERENCE NUREG-1431 TS SURVEILLANCE REQUIREMENT FREQUENCIES TO MILLSTONE UNIT 3 TS SURVEILLANCE REQUIREMENT FREQUENCIES REMOVED Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Shutdown margin Verify SDM in Modes 2 w/keff < 1 ,3 4, and 5 SR 3.1.1.1 ---

Verify SDM in Modes 1 and2 --- 4.1.1.1.1 Verify SDM in Modes 3, 4, and 5 Loops Filled --- 4.1.1.1.2.1 .b Verify Valve Position3-CHS v305 --- 4.1.1.1.2.2 Verify SDM in Cold Shutdown Loops Not Filled --- 4.1.1.2.1 .b Verify Valve Positions --- 4.1.1.2.2 Core Reactivity Verify Reactivity 1% SR 3.1.2.1 4.1.1.1.2 Rod Group Alignment Verify Rod Position within Alignment SR 3.1.4.1 4.1.3.1.1 Verify Rod Movement SR 3.1.4.2 4.1.3.1.2 Verify Rod Drop Times --- 4.1.3.4.c Shutdown Bank Insertion Limits Verify Insertion Limits SR 3.1.5.1 4.1.3.5.b Control Bank Insertion limit Verify Limits within COLR SR 3.1.6.2 4.1.3.6 Verify Control Bank Rod Sequence and Overlap SR 3.1.6.3 ---

PositionIndication System Verify Digital Rod Position Operable DRPI vs. Demand 4.1.3.2.1 Position Indication System Verify Digital Rod Position Operable DRPI vs. Demand 4.1.3.2.2 Position Indication System Agree When Exercised Physics Test Exceptions Verify RCS Loop Temperature SR 3.1.8.2 4.10.3.3 Verify Thermal Power <5% SR 3.1.8.3 4.10.3.1 Verify Thermal Power < 85% --- 4.10.2.1.1 Verify SDM SR 3.1.8.4 4.10.1.1 Perform Specs 4.2.2.1.2, 4.2.2.1.3, and 4.2.3.1.2 --- 4.10.2.1.2 Determine Thermal Power < P-7 --- 4.10.4.1 FQ(Z) Limits - RAOC Verify FQ(Z) limits - measured SR 3.2.1.1 4.2.2.1.2.d(2)

Verify Fo(Z) limits Base Load Operations - Measured 4.2.2.1.4.d(2)

Verify FQ (Z) limits SR 3.2.1.2 Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 2 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

N FAH Limits N Verify FAH (Z) limits SR 3.2.2.1 4.2.3.1.2.b AFD Limits - RAOC Verify AFD Within Limit SR 3.2.3.1 4.2.1.1.1 .a Base Loaded Operations - Determine by Measurement the 4.2.1.1.3 AFD for Each Operable Excore Base Loaded Operations- Updated Target AFD --- 4.2.1.1.4 QPTR Verify QPTR by calculation SR 3.2.4.1 4.2.4.1 .a Verify QPTR w/ incore detectors SR 3.2.4.2 4.2.4.2 RPS Instrumentation Table 4.3-1 SR 3.3.1.1 Perform Channel Check Channel Check Column Perform Calorimetric - actual power adjust if > 2% SR 3.3.1.2 Table 4.3-1 Functional Unit (FU) 2 Compare and Adjust NIS to Incore > 3% SR 3.3.1.3 Table 4.3-1, FU 2 Perform TADOT Rx Trip Breakers SR 3.3.1.4 Table 4.3-1 FUs, 18 & 21 Perform Actuation Logic Test SR 3.3.1.5 Table 4.3-1 FU, Unit 19 Calibrate NIS to Incore SR 3.3.1.6 Table 4.3-1, FU 2 Table 4.3-1 Perform COT - 184 days SR 3.3.1.7 Analog Channel Operational Test Column Perform COT (MPS3 - Quarterly Frequency) SR 3.3.1.8 Table 4.3-1 FU 6 Perform TADOT SR 3.3.1.9 Table 4.3-1 TADOT column Perform Channel Calibration w/time constants SR 3.3.1.10 ---

Perform Channel Calibration w/o neutron detectors SR 3.3.1.11 Table 4.3-1, FUs 2, 3, 5, &6 Perform Channel Calibration w/ RTDs SR 3.3.1.12 ---

Perform COT- 18 months SR 3.3.1.13 Table 4.3-1, FU 17 Perform TADOT - 18 months SR 3.3.1.14 Table 4.3-1, FUs 1 &21 Verify Response Time SR 3.3.1.16 4.3.1.2 ESFAS Instrumentation Table 4.3-2, column S R 3.3.2.1 c an l e Perform C hannel C heck Channel Check Column Perform Actuation Logic Test - 92 days SR 3.3.2.2 Table 4.3-2, FU 10 Table 4.3-2, FUs Perform Actuation Logic Test - 31 days SR 3.3.2.3 1.b,2.b,3.a.2,3.b.2,4.b,5.a&b,6.b,7.c SR 3.3.2.4 Table 4.3-2 Perform Master Relay Test Master Relay Test Column Perform Frequency)COT - 184 days (MPS3 - Quarterly SR 3.3.2.5 Table 4.3-2 Analog Channel Operational Test Column Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 3 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Perform Slave Relay Test - 92 days SR 3.3.2.6 Table 4.3-2 Slave Relay Test Column Perform TADOT - 92 days SR 3.3.2.7 ---

Table 4.3-2, FUs 1.a, 2.a, 3.a.1, Perform TADOT - 18 months SR 3.3.2.8 3.b.1, 4.d.1, 4.d.2, 5.c, 6.a, 7.a, 7.b, and 9.c Perform Channel Calibration SR 3.3.2.9 Table 4.3-2 Channel Calibration Column Verify Time Response SR 3.3.2.10 4.3.2.2 RadiationMonitoring Instrumentation MPS3 Perform Check, Calibrate,and Analog COT --- 4.3.3.1 PAM Instrumentation PAM Channel Check SR 3.3.3.1 4.3.3.6.1 PAM Channel Calibration SR 3.3.3.2 4.3.3.6.1 Remote Shutdown System Perform Channel Check SR 3.3.4.1 4.3.3.5.1 Verify Control and Transfer Switch Function SR 3.3.4.2 4.3.3.5.2 Perform Channel Calibration SR 3.3.4.3 4.3.3.5.1 Perform TADOT of Reactor Trip Breaker SR 3.3.4.4 ---

Shutdown Margin Monitor - MPS3 Perform Analog COT --- 4.3.5.a Verify Monitor Count Rate --- 4.3.5.b LOP EDG Start Instrumentation Perform Channel Check SR 3.3.5.1 ---

Perform TADOT SR 3.3.5.2 Table 4.3-2, FU 8 Perform Channel Calibration SR 3.3.5.3 Table 4.3-2, FU 8 Perform Response Time Testing ----- 4.3.2.2 Containment Purge and Vent Isolation Perform Channel Check SR 3.3.6.1 ---

Perform Actuation Logic Test - 31 days SR 3.3.6.2 ---

Perform Master Relay Test - 3 days SR 3.3.6.3 ---

Perform Actuation - 92 days SR 3.3.6.4 ---

Perform Master Relay Test -92 days SR 3.3.6.5 ---

Perform COT SR 3.3.6.6 ---

Perform Slave Relay Test SR 3.3.6.7 ---

Perform TADOT SR 3.3.6.8 4.6.3.2.c Perform Channel Calibration SR 3.3.6.9 ---

CREFS (Control Building Isolation)

Perform Channel Check SR 3.3.7.1 Table 4.3-2, FUs 7.d & e Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 4 of 12 Technical Specification Section Title] TSTF 425 MPS3 Surveillance Description*

Perform COT SR 3.3.7.2 Table 4.3-2, FUs 7.d & e Perform Actuation Logic Test - 31 days SR 3.3.7.3 Table 4.3-2, FU 7.c Perform Master Relay Test - 31 days SR 3.3.7.4 Table 4.3-2, FU 7.c Perform Actuation Logic Test - 92 days SR 3.3.7.5 ---

Perform Master Relay Test - 92 days SR 3.3.7.6 ---

Perform Slave Relay Test SR 3.3.7.7 Table 4.3-2 ,FU 7.c Perform TADOT SR 3.3.7.8 Table 4.3-2, FUs 7.a & b Perform Channel Calibration SR 3.3.7.9 Table 4.3-2, FUs 7.a& b FBACS Actuation Instrumentation Perform Channel Check SR 3.3.8.1 Note 1 Perform COT SR 3.3.8.2 Note 1 Perform Actuation Logic Test SR 3.3.8.3 Note 1 Perform TADOT SR 3.3.8.4 Note 1 Perform Channel Calibration SR 3.3.8.5 Note 1 BDPS (Shutdown Monitor)

Perform Channel Check SR 3.3.9.1 ---

Perform COT SR 3.3.9.2 --

Perform Channel Calibration SR 3.3.9.3 ---

RCS Press Temp & Flow Limits Verify Pressurizer Pressure SR 3.4.1.1 4.2.5 Verify RCS Average Temperature SR 3.4.1.2 4.2.5 Verify RCS Total Flow SR 3.4.1.3 4.2.3.1.3.b Verify RCS Total Flow w/ Heat Balance SR 3.4.1.4 ---

Calibrate RCS Total Flow Indicators --- 4.2.3.1.4 RCS Minimum Temp for Criticality Verify RSC Average Temperature in Each Loop SR 3.4.2.1 RCS Temperature, Pressure, Verify Limits SR 3.4.3.1 4.2.5 Loop Operation - Modes 1 and 2 Verify Each Loop Operating SR 3.4.4.1 4.4.1.1 Loop Operation - Mode 3 Verify Required Loops Operating SR 3.4.5.1 4.4.1.2.3 Verify Steam Generator Water Level > 17% SR 3.4.5.2 4.4.1.2.2 Verify Breaker Alignment and Power Available SR 3.4.5.3 4.4.1.2.1 Loop Operation - Mode 4 Verify Loop Operation - RHR or RCS SR 3.4.6.1 4.4.1.3.3 Verify Steam Generator Water Level > 17% SR 3.4.6.2 4.4.1.3.2 Verify Breaker Alignment and Power Available SR 3.4.6.3 4.4.1.3.1 Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 5 of 12 Technical Specification Section Title/

Surveillance Description* TSTF 425 MPS3 Loop Operation - Mode 5 -Loops Filled Verify RHR Loop Operating SR 3.4.7.1 4.4.1.4.1.2 Verify Steam Generator water Level > 17% SR 3.4.7.2 4.4.1.4.1.1 Verify Breaker Alignment and Power Available RHR SR 3.4.7.3 4.4.1.4.1.3 Pumps SR_3_4.7.3 4.4.1.4.1.3 Verify Loop Operation - Mode 5 -Loops - Not Filled Verify RHR Loop Operating SR 3.4.8.1 4.4.1.4.2.2 4.4.1 .4.2.1 SR 3.4.8.2 Verify Breaker Alignment and Power Available RHR Pumps Pressurizer (Modes 1 and 2/Mode 3)

~2 Verify Water Level SR 3.4.9.1 4.4.3.1.1/4.4.3.2.1 Verify Heater Capacity of Required Groups SR 3.4.9.2 4.4.3.1.2/4.4.3.2.2 Verify Heater banks can be Powered from Emergency SR 3.4.9.4 Power Supply Pressurizer PORVS Cycle each Block Valve SR 3.4.11.1 4.4.4.2 Cycle each PORV SR 3.4.11.2 4.4.4.1 .b Cycle each SOV Valve and Check Valve on the Air SR 3.4.11.3 Accumulators in PORV Control Systems Verify PORVs and Block Valves can be Powered SR 3.4.11.4 ---

from Emergency Power Sources Perform Channel Calibration --- 4.4.4.1.a Perform ACOT on PORV High PressurizePressure --- 4.4.4.1 .c Verify High Pressure Auto Open is Enabled --- 4.4.4.1 .d LTOP Systems Verify only one HPI pump is capable of injecting into SR 3.4.12.1 4.4.9.3.4 the RCS.

Verify a maximum of one charging pump is capable of SR 3.4.12.2 4.4.9.3.5 injecting into the RCS.

Verify each accumulator is isolated. SR 3.4.12.3 ---

Verify each RHR Suction Valve is open for each Relief SR 3.4.12.4 4.4.9.3.2.a Valve Verify required RCS vent [2.07] square inches open SR 3.4.12.5 4.4.9.3.3 Verify PORV block valve is open for each required SR 3.4.12.6 4.4.9.3.1.c PORV.

Verify PORV COPPS Armed --- 4.4.9.3.1.c Verify RHR Suction Isolation Valve is Locked Open with Operator Power Removed for Required RHR SR 3.4.12.7 ---

Suction Relief Valve.

Perform COT on each Required PORV SR 3.4.12.8 4.4.9.3.1.a Perform Channel Calibration on each Required PORV SR 3.4.12.9 4.4.9.3.1.b Channel Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 6 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Operational Leakage Verify RCS Operational Leakage SR 3.4.13.1 4.4.6.2.1. d Verify SG Leakage <150 gpd SR 3.4.13.2 4.4.6.2.1 .e Monitor Reactor Head Flange Leakoff System --- 4.4.6.2.1 .f Measure Leakage to RCP Seals --- 4.4.6.2.1 .c RCS PIVs Verify leakage from each is < 0.5 gpm SR 3.4.14.1 4.4.6.2.2.a Verify RHR Autoclosure Interlock Prevents Opening SR 3.4.14.2 4.5.2.d.1 Verify RHR Autoclosure Interlock Auto Close SR 3.4.14.3 RCS Leakage Detection Instrumentation Perform Channel Check- Particulate Rad Monitor SR 3.4.15.1 4.4.6.1.a Perform COT - Particulate Rad Monitor SR 3.4.15.2 4.4.6.1 .a Perform Channel Calibration Sump Monitor SR 3.4.15.3 4.4.6.1.b Perform Channel Calibrationcontainmentatmosphere SR 3.4.15.4 4.4.6.1 .a radioactivitymonitor.

Perform Channel Calibration containment air cooler. SR 3.4.15.5 ---

RCS Specific Activity Verify RCS gross specific activity SR 3.4.16.1 ---

Verify reactor coolant Dose Equivalent 1-131 SR 3.4.16.2 4.4.8.2 Determine E Bar SR 3.4.16.3 ---

Verify Xe- 133 --- 4.4.8.1 RCS Loop Isolation Valves Verify Open and Power Remove from Isolation Valves SR 3.4.17.1 4.4.1.5 RCS Loops Test Exceptions Verify power < P-7 SR 3.4.19.1 4.10.4.1 Accumulators Verify Accumulator isolation valve open SR 3.5.1.1 4.5.1 .a.2)

Verify borated Water Volume SR 3.5.1.2 4.5.1 .a.1)

Verify N2 Pressure SR 3.5.1.3 4.5.1 .a.1 )

Verify Boron Concentration SR 3.5.1.4 4.5.1 .b Verify Power removed from isolation valve SR 3.5.1.5 4.5.1 .c ECCS - Operating Verify Valve Lineup SR 3.5.2.1 4.5.2.a Verify Valve Position SR 3.5.2.2 4.5.2.b.2)

Verify Piping Sufficiently Full SR 3.5.2.3 4.5.2.b.1)

Verify Automatic Valve Actuation SR 3.5.2.5 4.5.2.e.1)

Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 7 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Verify Automatic Pump Start SR 3.5.2.6 4.5.2.e.2)

Verify RHR Pump Stop Automatically - LoLo RWST --- 4.5.2.e.3)

Verify Throttle Valve Position SR 3.5.2.7 4.5.2.g.2)

Inspection Sump Components SR 3.5.2.8 4.5.2.d.2)

Verify Auto Interlock Prevents Valve Opening --- 4.5.2.d.1)

RWST Verify Water Temperature SR 3.5.4.1 4.5.4.b & 4.6.2.1.a.2)

Verify Water Volume SR 3.5.4.2 4.5.4.a.1)

Verify Boron Concentration SR 3.5.4.3 4.5.4.a.2)

Seal Injection Flow Verify Throttle Valve Position SR 3.5.5.1 ---

pH Tri-sodium PhosphateStorage Baskets Verify Minimum volume of TSP --- 4.5.5 BIT Verify Water Temperature SR 3.5.6.1 Note 1 Verify Water Volume SR 3.5.6.2 Note 1 Verify Water Boron Concentration SR 3.5.6.3 Note 1 Containment Air Locks Verify Interlock Operation SR 3.6.2.2 4.6.1.3.c Containment Isolation Valves Verify 42" Purge Valves Sealed Closed SR 3.6.3.1 4.6.1.7.1 Verify 8" Purge Valves Closed SR 3.6.3.2 4.6.1.7.1 Verify Valves Outside Containment in Correct Position SR 3.6.3.3 4.6.1.1 .a Verify Isolation Time of Valves SR 3.6.3.5 ---

Cycle Weight/Spring Loaded Check Valves SR 3.6.3.6 ---

Perform Leak Rate Test of Purge Valves SR 3.6.3.7 ---

Verify Automatic Valves Actuate to Correct Position SR 3.6.3.8 4.6.3.2.a, b & c Cycle Non Testable Weight/Spring Loaded Check Valves SR 3.6.3.9 ---

Verify Purge Valves Blocked SR 3.6.3.10 ---

Containment Pressure Verify Pressure SR 3.6.4.1 4.6.1.4 Containment Air Temperature Verify Average Air Temperature SR 3.6.5.1 4.6.1.5 Spray Systems Verify Valve Position SR 3.6.6D.1 4.6.2.1.a.1)

Verify Valve Actuation SR 3.6.6D.3 4.6.2.1.c.1)

Verify Pump Start on Auto Signal SR 3.6.6D.4 4.6.2.1 .c.2)

Verify Nozzle are not Obstructed SR 3.6.6D.5 Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 8 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Recirculation Spray Verify Casing Cooling Temperature SR 3.6.6E.1 ---

Verifying Casing Cooling Volume SR 3.6.6E.2 ---

Verify Casing Cooling Boron Concentration SR 3.6.6E.3 ----

Verify Valve Position SR 3.6.6E.4 4.6.2.2.a Verify Actuation of Pumps and Valves SR 3.6.6E.6 4.6.2.2.c & d Verify Nozzle are not Obstructed SR 3.6.6E.7 ---

Spray Additive System Verify Valve position SR 3.6.7.1 Note 1 Verify Tank Volume SR 3.6.7.2 Note 1 Verify Tank Solution Concentration SR 3.6.7.3 Note 1 Actuate Each Flow Path Valve SR 3.6.7.4 Note 1 Verify Spray Additive Flow Rate SR 3.6.7.5 Note 1 Iodine Cleanup System.

Operate train with heaters SR 3.6.11.1 Note 1 Verify train Actuation SR 3.6.11.3 Note 1 Verify Filter Bypass Operation SR 3.6.11.4 Note 1 Steam Jet Air Ejectors Verify Air Ejector outside ContainmentIsolation Valve Closed --- 4.6.5.1.1 Supplementary Leak Collection and Release System MPS3 Verify Manual Train Actuation & Operate Heaters SR 3.6.13.1 4.6.6.1 .a Verify FilterPenetrationand Bypass Leakage --- 4.6.6.1 .b.1)

Verify Filter PressureDrop ---- 4.6.6.1.d.1)

Verify Acutation on Safety Injection Signal SR 3.6.13.3 4.6.6.1 .d.2)

Verify Heater Capacity --- 4.6.6.1.d.3)

Verify Damper Open SR 3.6.13.4 ---

Verify Each train Flow SR 3.6.13.5 4.6.6.1.a./4.6.6.1.b.3)

Secondary Containment (MPS3)

Verify Doors in Access Opening are Closed --- 4.6.6.2.1 Verify Each SLCR System Produce Negative Pressure --- 4.6.6.2.2 Main Steam Isolation Valves Actuate Valves SR 3.7.2.2 ---

MFIVs and MFRVs Actuate Valves SR 3.7.3.2 ---

Atmospheric Dump Valves -

Cycle Dump Valves SR 3.7.4.1 4.7.1.6.1 Cycle Block Valves SR 3.7.4.2 4.7.1.6.2 Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 9 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

AFW Verify Valve Position SR 3.7.5.1 4.7.1.2.1 .a Verify Auto Valve Actuation SR 3.7.5.3 ---

Verify Pump Auto Actuation SR 3.7.5.4 4.7.1.2.1 .c Verify Pump Head --- 4.7.1.2.1.b.1 & 2 Condensate Storage Tank Verify Volume of DWST SR 3.7.6.1 4.7.1.3.1 Component Cooling Verify Valve Position SR 3.7.7.1 4.7.3.a Verify Valve Actuation SR 3.7.7.2 4.7.3.b.1)

Verify Pump Actuation SR 3.7.7.3 4.7.3.b.2)

Service Water Verify Valve Position SR 3.7.8.1 4.7.4.a Verify Valve Actuation SR 3.7.8.2 4.7.4.b.1)

Verify Pump Actuation SR 3.7.8.3 4.7.4.b.2)

Ultimate Heat Sink Verify Water Level SR 3.7.9.1 ---

Verify Water Temperature SR 3.7.9.2 4.7.5.a Operate Cooling Tower SR 3.7.9.3 Note 1 Verify Fan Actuation SR 3.7.9.4 Note 1 CR Emergency Ventilation Verify Control Room Air Temperature --- 4.7.7.a Verify Manual Train Actuation Operate Heaters SR 3.7.10.1 4.7.7.b Verify Train Actuation Actual or Simulated Signal SR 3.7.10.3 ---

Verify Envelope Pressurization SR 3.7.10.4 ---

Verify FilterPenetrationand Bypass Leakage --- 4.7.7.c.1)

Verify System Flow Rate --- 4.7.7.b/4.7.7.c.3)

Verify FilterPressureDrop --- 4.7.7.e.1)

Verify HeaterCapacity --- 4.7.7.e.3)

CR Air Condition System Verify Train Capacity SR 3.7.11.1 ---

ECCS PREACS (MPS3 Auxiliary Building FilterSystem)

Verify Manual Train Actuation and Operate Heaters SR 3.7.12.1 4.7.9.a Verify Train Actuation Actual or Simulated Signal SR 3.7.12.3 4.7.9.d.2)

Verify FilterPenetrationand Bypass Leakage --- 4.7.9.b.1)

Verify System Flow Rate --- 4.7.9.a/4.7.9.b.3)

Verify Envelope Negative Pressure SR 3.7.12.4 ---

Verify PressureDrop Across HEPA and Adsorbers --- 4.7.9.d.1)

Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 10 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Verify Bypass Damper Closure SR 3.7.12.5 ---

Verify Heater Capacity --- 4.7.9.d.3)

Fuel Building Air Cleanup Operate Heaters SR 3.7.13.1 ---

Verify Automatic Train Actuation SR 3.7.13.3 ---

Verify Envelope Negative Pressure SR 3.7.13.4 ---

Verify Bypass Damper Closure SR 3.7.13.5 ---

Penetration Room Air Cleanup System -

Operate Heaters SR 3.7.14.1 Note 1 Verify Automatic Train Actuation SR 3.7.14.3 Note 1 Verify Envelope Negative Pressurization SR 3.7.14.4 Note 1 Verify Bypass Damper Closure SR 3.7.14.5 Note 1 Fuel Storage Pool Water Level Verify Water Level SR 3.7.15.1 4.9.11 Fuel Storage Pool Boron Verify Boron Concentration SR 3.7.16.1 4.9.1.2 Secondary Specific Activity Verify Secondary Activity SR 3.7.18.1 4.7.1.4 Area Temperature Monitoring (MPS3)

Verify Temperature is Within Limits --- 4.7.14.a AC Sources -Operating Verify Breaker Alignment Offsite Circuits SR 3.8.1.1 4.8.1.1.1 .a Verify EDG Starts - Achieves Voltage & Frequency SR 3.8.1.2 4.8.1.1.2.a.5)

Synchronize and Load for > 60 minutes SR 3.8.1.3 4.8.1.1.2.a.6) & 4.8.1.1.2.b.2)

Verify Day Tank Level SR 3.8.1.4 4.8.1.1.2.a.1)

Remove Accumulate Water for Day Tank SR 3.8.1.5 4.8.1.1.2.c Verify Operation of Transfer Pump SR 3.8.1.6 4.8.1.1.2.a.3)

Verify EDG Starts - Achieves Voltage & Frequency in SR 3.8.1.7 4.8.1.1.2.b.1) 10 seconds Verify Auto and Manual Transfer of AC power Sources SR 3.8.1.8 4.8.1 .1. b

- Offsite Sources Verify the EDG alignment for standby power --- 4.8.1.1.2.a.7)

Verify Largest Load Rejection SR 3.8.1.9 4.8.1.1.2.g.2)

Verify EDG Does Not Trip with Load Rejection SR 3.8.1.10 4.8.1.1.2.g.3)

Verify De-energize, Load Shed and Re energize SR 3.8.1.11 4.8.1.1.2.g.4)a) & b)

Emergency Bus with Loss of Offsite Power Verify EDG Start on ESF Signal SR 3.8.1.12 4.8.1.1.2.g.5)

Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 11 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Verify EDG Noncritical Trips are Bypassed SR 3.8.1.13 4.8.1.1.2.g.6)c)

Verify the Lockout FeaturesPrevent EDG Starting --- 4.8.1.1.2.1 Run EDG for 24 Hours SR 3.8.1.14 4.8.1.1.2.j Verify EDG Starts Post Operation - Achieves Voltage & SR 3.8.1.15 Frequency Verify EDG Synchronizes w/ Offsite Power and SR 3.8.1.16 4.8.1.1.2.g.9) a), b) &c)

Transfers Load Verify ESF Signal overrides Test Mode of EDG SR 3.8.1.17 4.8.1.1.2.g.10)

Verify Load Sequencers are with Design Tolerance SR 3.8.1.18 4.8.1.1.2.g.12)

Verify EDG Start on Loss of Offsite Power with ESF SR 3.8.1.19 4.8.1.1.2.g.6)a) & b)

Verify When Started Simultaneously from Standby SR 3.8.1.20 4.8.1.1.2.h Each EDGs Reach Rated Voltage and Frequency Verify auto-connectedloads are < 5335kW --- 4.8.1.1.2.g.8)

Diesel FO and Starting Air Verify FO Storage Tank Volume SR 3.8.3.1 4.8.1.1.2.a.2)

Verify Lube Oil Inventory SR 3.8.3.2 4.8.1.1.2.a.4)

Verify EDG Air Start Receive Pressure SR 3.8.3.4 ---

Check and Remove Accumulate Water from FO Tanks SR 3.8.3.5 4.8.1.1.2.d Verify Total Particulate <_10mg/liter --- 4.8.1.1.2.f Verify Operation of FO Transfer Pumps via the Installed 4.8.1.1.2.k Cross-ConnectLines Clean FO Storage Tanks --- 4.8.1.1.2.i DC Sources Operating Verify Battery Terminal Voltage SR 3.8.4.1 4.8.2.1 .a.2)

Verify Station Battery Chargers Capable of Supplying SR 3.8.4.2 4.8.2.1.c.4)

[x]Amp for [y]Hours Verify Battery Capacity SR 3.8.4.3 4.8.2.1 .d Verify No Visable Corrosion at Terminal or Connectors --- 4.8.2.1.b.2) and resistance > xx ohms Verify No Visual Indication of Physical Damage --- 4.8.2.1.c.1)

Cell-to-Cell And Terminal Connections Clean & Tight --- 4.8.2.1 .c.2)

Verify Cell-to-Cell Resistance is < xx ohms --- 4.8.2.1 .c.3)

Battery Parameters Verify each Battery Float Current is _<[2] amps. SR 3.8.6.1 4.8.2.1 .a.1 & b.1)

Verify each Battery Pilot Cell Voltage is >[2.07] V SR 3.8.6.2 4.8.2.1 .a.1 & b.1)

Verify each Battery Cell Electrolyte Level is > to SR 3.8.6.3 4.8.2.1.a.1 & b.1)

Minimum Design Limits.

Verify each Battery Pilot Cell Temperature > to SR 3.8.6.4 4.8.2.1.b.3)

Minimum Design Limits.

Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 Attachment 4, Page 12 of 12 Technical Specification Section Title/ TSTF 425 MPS3 Surveillance Description*

Verify Each Battery Connected Cell Voltage is>[2.07] V. SR 3.8.6.5 4.8.2.1 .b.1)

Verify Station and EDG Battery Capacity - >80% After SR 3.8.6.6 4.8.2.1 .e Performance Test Complete Performance Discharge Test if Signs of --- 4.8.2.1.f Degradation or after reaching 85% of Service Life Inverters - Operating Verify Correct Inverter Voltage & Alignment to Required SR 3.8.7.1 ---

AC Vital Buses.

Inverters - Shutdown Verify Correct Inverter Voltage & Alignment to Required SR 3.8.8.1 ---

AC Vital Buses.

Distribution System - Operating Verify Correct Breaker Alignments & Voltage to AC/DC SR 3.8.9.1 4.8.3.1 and AC Vital Bus Electrical Distribution Subsystems.

Distribution System - Shutdown Verify Correct Breaker Alignments & Voltage to AC/DC SR 3.8.10.1 4.8.3.2 and AC Vital Bus Electrical Distribution Subsystems.

Boron Concentration Verify Boron Concentration is Within COLR Limit SR 3.9.1.1 4.9.1.1.2 Primary Grade Water Source Isolation Valves Verify Each Valve that Isolates Unborated Water SR 3.9.2.1 4.9.1.1.3 Sources is Secured in the Closed Position Nuclear Instrumentation Perform Channel Check SR 3.9.3.1 4.9.2.a Perform Channel Calibration SR 3.9.3.2 4.9.2.b Containment Penetrations Verify each Required Containment Penetration is in the SR 3.9.4.1 4.9.4.a Required Status.

Verify Each Required Containment Purge and Exhaust Valve Actuates to the Isolation Position on an Actuated SR 3.9.4.2 ---

or Simulated Actuation Signal.

RHR and Coolant Circulation - High Water Level Verify One Loop is in Operation and Circulating Reactor SR 3.9.5.1 4.9.8.1 Coolant at a Flow Rate of > [2800] gpm.

RHR and Coolant Circulation - Low Water Level Verify One Loop is in Operation and Circulating Reactor SR 3.9.6.1 4.9.8.2 Coolant at a flow rate of > [2800] gpm.

Verify Correct Breaker Alignment and Indicated Power SR 3.9.6.2 Available to Required RHR Pump Not in Operation.

Refueling Cavity Water Level Verify Refueling Cavity Water Level is >23 ft Above The SR 3.9.7.1 4.9.10 Top of Reactor Vessel Flange.

Note 1 - This system is not included in the MPS3 design or TS.

--- Surveillance not included in ITS or MPS TSs Italicized text denotes MPS3-specific surveillances

Serial No.12-580 Docket No. 50-423 ATTACHMENT 5 SIGNIFICANT HAZARDS CONSIDERATION DETERMINATION DOMINION NUCLEAR CONNECTICUT, INC.

MILLSTONE POWER STATION UNIT 3

Serial No.12-580 Docket No. 50-423 Attachment 5, Page 1 of 2 PROPOSED NO SIGNIFICANT HAZARDS CONSIDERATION Description of Amendment Request:

This amendment request involves the adoption of approved changes to the standard technical specifications (STS) for Westinghouse Pressurized Water Reactors (NUREG-1431), to allow relocation of specific technical specification (TS) surveillance frequencies to a licensee controlled program. The proposed changes are described in Technical Specification Task Force (TSTF) Traveler, TSTF-425, Revision 3 (ADAMS Accession No. ML090850642), "Relocate Surveillance Frequencies to Licensee Control

- RITSTF Initiative 5b" and are described in the Notice of Availability published in the Federal Register on July 6, 2009 (74 FR 31996).

The proposed changes are consistent with NRC-approved Industry/TSTF Traveler, TSTF-425, Revision 3, "Relocate Surveillance Frequencies to Licensee Control-RITSTF Initiative 5b." The proposed changes relocate surveillance frequencies to a licensee controlled program, the Surveillance Frequency Control Program (SFCP). The changes are applicable to licensees using probabilistic risk guidelines contained in NRC-approved NEI 04-10, "Risk-Informed Technical Specifications Initiative 5b, Risk-Informed Method for Control of Surveillance Frequencies," (ADAMS Accession No.

071360456). In addition, administrative/editorial deviations of the TSTF-425 inserts and the existing TS wording are being proposed to fit the custom TS format.

Basis for proposed no significant hazards consideration: As required by 10 CFR 50.91 (a), the Dominion analysis of the issue of no significant hazards consideration is presented below:

1. Do the proposed changes involve a significant increase in the probability or consequences of any accident previously evaluated?

Response: No.

The proposed changes relocate the specified frequencies for periodic surveillance requirements to licensee control under a new Surveillance Frequency Control Program.

Surveillance frequencies are not an initiator to any accident previously evaluated. As a result, the probability of any accident previously evaluated is not significantly increased.

The systems and components required by the TSs for which the surveillance frequencies are relocated are still required to be operable, meet the acceptance criteria for the surveillance requirements, and be capable of performing any mitigation function assumed in the accident analysis. As a result, the consequences of any accident previously evaluated are not significantly increased.

Therefore, the proposed changes do not involve a significant increase in the probability or consequences of an accident previously evaluated.

Serial No.12-580 Docket No. 50-423 Attachment 5, Page 2 of 2

2. Do the proposed changes create the possibility of a new or different kind of accident from any previously evaluated?

Response: No.

No new or different accidents result from utilizing the proposed changes. The changes do not involve a physical alteration of the plant (i.e., no new or different type of equipment will be installed) or a change in the methods governing normal plant operation. In addition, the changes do not impose any new or different requirements.

The changes do not alter assumptions made in the safety analysis. The proposed changes are consistent with the safety analysis assumptions and current plant operating practice.

Therefore, the proposed changes do not create the possibility of a new or different kind of accident from any accident previously evaluated.

3. Do the proposed changes involve a significant reduction in the margin of safety?

Response: No.

The design, operation, testing methods, and acceptance criteria for systems, structures, and components (SSCs), specified in applicable codes and standards (or alternatives approved for use by the NRC) will continue to be met as described in the plant licensing basis (including the final safety analysis report and bases to TS), since these are not affected by changes to the surveillance frequencies. Similarly, there is no impact to safety analysis acceptance criteria as described in the plant licensing basis. To evaluate a change in the relocated surveillance frequency, Dominion will perform a probabilistic risk evaluation using the guidance contained in NRC approved NEI 04-10, Rev. 1, in accordance with the TS SFCP. NEI 04-10, Rev. 1, methodology provides reasonable acceptance guidelines and methods for evaluating the risk increase of proposed changes to surveillance frequencies consistent with Regulatory Guide 1.177.

Therefore, the proposed changes do not involve a significant reduction in a margin of safety.

Based upon the reasoning presented above, Dominion concludes that the requested changes do not involve a significant hazards consideration as set forth in 10 CFR 50.92(c), Issuance of Amendment.

Serial No.12-580 Docket No. 50-423 ATTACHMENT 6 MARKED-UP TECHNICAL SPECIFICATIONS BASES CHANGES (For Information Only)

DOMINION NUCLEAR CONNECTICUT, INC.

MILLSTONE POWER STATION UNIT 3

BASES FOR SECTIONS 3.0 AND 4.0 LIMITING CONDITIONS FOR OPERATION AND SURVEILLANCE REQUIREMENTS Insert 2 The surveillance frequency is controlled under the Surveillance Frequency Control Program.

LBDC)R O5-tP3-o25 Marceh 7, 2006 REACTIVITY CONTROL SYSTEMS at frequency specified in the Surveillance BASES Frequency Control Program I MOVABLE CONTROL ASSEMBLIES (Continued)

Control rod positions and OPERABILITY of the r position indicators are required to be verified on. a nominal basis of once per.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ith more frequent verifications required if an automatic monitoring channel is inoperable. These verification frequencies are adequate for assuring that the applicable LCOs are satisfied.

The Digital Rod Position Indication (DRPI) System is defined as follows:

Rod position indication as displayed on DRPI display panel (MB4), or

Rod position indication as displayed by the Plant Process Computer System.

With the above definition, LCO 3.1.3.2, "ACTION a." is not applicable with either DRPI display panel or the plant process computer points OPERABLE.

The plant process computer may be utilized to satisfy DRPI System requirements which meets LCO 3.1.3.2, in requiring diversity for determining digital rod position indication.

Technical Specification SR 4.1.3.2.1 determineseach digital rod position indicator to be OPERABLE by verifying the Demand Position Indication System and the DRPI System agree within 12 steps at l4ast onee each 12 hc.rs, except during the time when the rod position deviation monitor is inoperable, then .are the Demand Position Indication System and the DRPI System at least once each 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months . the frequency specified in the Surveillance

Frequency Control Program The Rod Deviation Monitor is generated only from the DRPI panel at MB4. Therefore, when rod position indication as displayed by the plant process computer is the only available indication, then perform SURVEILLANCE REQUIREMENTS every 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

T*hniaie, Speeifiation SR 4.1..3.2.1 detcrmincs each digital rd position indicator to be OIPERABLE by.- v fying .. the Demand P.. itient Indieati. n System and the, DR=P System agree w ithin 12 steps at least ease each 12 he..., e..ept during the time when the rod

_.Pua1t-_u .viaiuu_

~1 A enitor is inoperable, thert V--A,, ethe DB-37em U Pu~itiou fnkt~ Sy tCLYI mid the DRE System at least once each 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

The Red Deviation Monitor- is genter-ated enly fir-m the DRPI panel at NMB4. Ther-eforfe, re Ahe position indication as displayed by the plan-t.proees -comptteris-~tht-only vilva-bl in dication,

/~ th.pf*t,,[11 sUR-VEiLLANCE REQUIR:EMENTS eve, y 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

Duplicative paragraphs ILLSTONE - UNIT 3 B 3/4 1-4 Amendment No. 60,

L.BDCR 05-Nu3=025-Marc 7*, 2006 BASES REACTIVITY CONTROL Ithe SYSTEMS frequency specified in the Surveillance Frequency Control Progn MOVABLE CONTROL ASSEMBLIES (Contined Additional surveillance is required to ensure the plant ocess computer indications are in agreement with those displayed on the DRPI. This i a ditional SURVEILLANCE REQUIREMENT is as follows:

Each rod position indication as displ ed by the plant process computer shall be determined to be OPERABLE /rifying by the rod position indication as displayed on the DRPI display panel agrees wit e rod position indication as displayed by the plant process computer at least once-per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

The rod position indication, as displayed by DRPI display panel (MB4), is a non-QA system, calibrated on a refueling interval, and used to implement T/S 3.1.3.2. Because the plant process computer receives field data from the same source as the DRPI System (MB4), and is also calibrated on a refueling interval, it fully meets all requirements specified in T/S 3.1.3.2 for rod position. Additionally, the plant process computer provides the same type and level of accuracy as the DRPI System (MB4). The plant process computer does not provide any alarm or rod position deviation monitoring as does DRPI display panel (MB4).

For Specification 3.1.3.1 ACTIONS b. and c., it is incumbent upon the plant to verify the trippability of the inoperable control rod(s). Trippability is defined in Attachment C to a letter dated December 21, 1984, from E. P. Rahe (Westinghouse) to C. 0. Thomas (NRC). This may be by verification of a control system failure, usually electrical in nature, or that the failure is associated with the control rod stepping mechanism. In the event the plant is unable to verify the rod(s) trippability, it must be assumed to be untrippable and thus falls under the requirements of ACTION a. Assuming a controlled shutdown from 100% RATED THERMAL POWER, this allows approximately 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months for this verification.

For LCO 3.1.3.6 the control bank insertion limits are specified in the CORE OPERATING LIMITS REPORT (COLR). These insertion limits are the initial assumptions in safety analyses that assume rod insertion upon reactor trip. The insertion limits directly affect core power and fuel burnup distributions, assumptions of available SHUTDOWN MARGIN, and initial reactivity insertion rate.

The applicable I&C calibration procedure (Reference 1.) being current indicates the associated circuitry is OPERABLE.

There are conditions when the Lo-Lo and Lo alarms of the RIL Monitor are limited below the RIL specified in the COLR. The RIL Monitor remains OPERABLE because the lead control rod bank still has the Lo and Lo-Lo alarms greater than or equal to the RIL.

MILLSTONE - UNIT 3 B 3/4 1-5 Amendment No. 60,

LBDCR Ne. 08 IP3-01-4 October 21, 2008 POWER DISTRIBUTION LIMITS in accordance with the Surveillance BASES [Frequency Control Program 3/4.2.2 and 3/4.2.3 HEAT FLUX HOT CHANNEL FACTOR and C FLOW RATE AND NUCLEAR ENTHALPY RISE HOT CHANNEL FACTOR (Co mu d)

Margin is maintained between the safety analysis limit DNB d t design limit DNBR. This margin is more than sufficient to offset the effect of rod bow d an other DNB penalties that may occur. The remaining margin is available for plant de gn flex' ility.

When an FQ measurement is taken, an allowance for bo experim ntal error and manufacturing tolerance must be made. An allowance of 5% is appro nriate for a 11 core map taken with the incore detector flux mapping system and a 3% allow nce is apprq riate for manufacturing tolerance.

The heat flux hot channel factor, FQ(Z), is measu d periodicallylsing the incore detector system.

These measurements are generally taken with e core at or near steady state conditions. Using the measured three dimensional power distri tions, it is possible to derive F M(Z), a computed value of FQ(Z). However, because this val represents a steady state condition, it does not include the variations in the value of FQ( that are present during nonequilibrium situations.

To account for these possible variation the steady state limit of FQ(Z) is adjusted by an elevation dependent factor appropriate to eithe OC or base load operation, W(Z) or W(Z)BL, that accounts for the calculated worst ca/e transient conditions. The W(Z) and W(Z)BL, factors described above for normal operat* n are specified in the COLR per Specification 6.9.1 .6. Core monitoring and control under no steady state conditions are accomplished by operating the core within the limits of the approp te LCOs, including the limits on AFD, QPTR, and control rod insertion. Evaluation of the s ady state FQ(Z) limit is performed in Specification 4.2.2.1.2.b and 4.2.2.1.4.b while evaluation onequilibrium limits are performed in Specification 4.2.2.1.2.c and 4.2.2.1.4.c.

When RCS flow rate a d FNAH are measured, no additional allowances are necessary prior to comparison with the inits of the Limiting Condition for Operation. Measurement errors for RCS total flow rate nd for FNAH have been taken into account in determination of the design DNBR value.

The measureme t error for RCS total flow rate is based upon performing a precision heat balance and using the sult to calibrate the RCS flow rate indicators. To perform the precision heat balance, the 'strumentation used for determination of steam pressure, feedwater pressure, feedwater perature, and feedwater venturi AP in the calorimetric calculations shall be calibrated an least enco per IS manth&. Potential fouling of the feedwater venturi which might not be detected could bias the result from the precision heat balance in a non-conservative manner.

Any fouling which might bias the RCS flow rate measurement can be detected by monitoring and trending various plant performance parameters. If detected, action shall be taken before performing subsequent precision heat balance measurements, i.e., either the effect of the fouling shall be quantified and compensated for in the RCS flow rate measurement or the venturi shall be cleaned to eliminate the fouling.

MILLSTONE - UNIT 3 B 3/4 2-4 Amendment No. 4-2, 60, 70, 24-7,

LBDCR No. 04 MP3-015 Februiy .24,2065 POWER DISTRIBUTION LIMITS lin accordance with the Surveillance Frequency Control Program BASES HEAT FLUX HOT CHANNEL FACTOR and RCS FLOW TE AND NUCLEAR ENTHALPY RISE HOT CHANNEL FACTOR (Continued)

The 1h periodic surveillance of indicated RCS flo is sufficient to detect only flow degradation which could lead to operation outside the acceptable region of operation defined in Specifications 3.2.3. 1.

3/4:2.4 QUADRANT POWER TILT RATIO The QUADRANT POWER TILT RATIO limit assures that the radial power distribution satisfies the design values used in the power capability analysis. Radial power distribution measurements are made during STARTUP testing and periodically during POWER OPERATION.

The limit of 1.02, at which corrective action is required, provides DNB and linear heat generation rate protection with x-y plane power tilts. A limiting tilt of 1.025 can be tolerated before the margin for uncertainty in FQ is depleted. A limit of 1.02 was selected to provide an allowance for the uncertainty associated with the indicated power tilt.

The 2-hour time allowance for operation with a tilt condition greater than 1.02 but less than 1.09 is provided to allow identification and correction of a dropped or misaligned control rod. In the event such action does not correct the tilt, the margin for uncertainty on FQ is reinstated by reducing the maximum allowed power by 3% for each percent of tilt in excess Of 1.

For purposes of monitoring QUADRANT POWER TILT RATIO when one excore detector is inoperable, the moveable incore detectors are used to confirm that the normalized symmetric power distribution is consistent with the QUADRANT POWER TILT RATIO. The incore detector monitoring is done with a full incore flux map or two sets of four symmetric thimbles. The two sets of four symmetric thimbles is a unique set of eight detector locations.

These locations are C-8, E-5, E-11, H-3, H-13, L-5, L- 11,N-8.

3/4.2.5 DNB PARAMETERS The limits on the DNB-related parameters assure that each of the parameters are maintained within the normal steady-state envelope of operation assumed in the transient and accident analyses. The limits are consistent with the initial FSAR assumptions and have been analytically demonstrated adequate to maintain a minimum DNBR greater than the design limit throughout each analyzed transient. The indicated Tavg values MILLSTONE - UNIT 3 B 3/4 2-5 Amendment No. 2-7, MO, 60, 2-P-7, A.kn.wl.dg. d by -

Clce,-r. dated /25

- .DC-R 04 MP3-992 Marceh 25, 2001 POWER DISTRIBUTION LIMITS BASES DNB PARAMETERS (Continued) and the indicated pressurizer pressure values are specified in the CORE OPERATING LIMITS REPORT. The calculated values of the DNB related parameters will be an average of the k' indicated values for the OPERABLE channels.

The 42 hotir periodic surveillance of these parameters through instrument readout* sufficient to ensure that the parameters are restored within their limits following load changes other expected transient operation. Measurement uncertainties have been accounted for in determin the parameter limits.

Fin accordance with the Surveillance Frequency Control Program MILLSTONE - UNIT 3 B 3/4 2-6 Amendment No. 1-2, 60, 24-7,

cknovvidged by NRe klett dated 08i2/0

LBDCR No. 04-IW3--0i Febpaar- 2O ,24 3/4.3 INSTRUMENTATION BASES 3/4.3.1 and 3/4.3.2 REACTOR TRIP SYSTEM INSTRUMENTATION and ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION The OPERABILITY of the Reactor Trip System and the Engineered Safety Features Actuation System instrumentation and interlocks ensures that: (1) the associated action and/or Reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic is maintained, (3) sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance, and (4) sufficient system functional capability is available from diverse parameters.

The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and mitigation of accident and transient conditions. The integrated operation of each of these systems is consistent with the assumptions used in the safety analyses. The Surveillance Requirements specified for these systems ensure that the overall system functional capability is maintained comparable to the original design standards. The periodic surveillance tests performed a-the minimum fr-qucnc.-os are sufficient to demonstrate this capability. "'--Insert The Engineered Safety Features Actuation System Nominal Trip Setpoints specified in Table 3.3-4 are the nominal values of which the bistables are set for each functional unit. The Allowable Values (Nominal Trip Setpoints +/- the calibration tolerance) are considered the Limiting Safety System Settings as identified in 10CFR50.36 and have been selected to mitigate the consequences of accidents. A Setpoint is considered to be consistent with the nominal value when the measured "as left" Setpoint is within the administratively controlled (+) calibration tolerance identified in plant procedures (which specifies the difference between the Allowable Value and Nominal Trip Setpoint). Additionally, the Nominal Trip Setpoints may be adjusted in the conservative direction provided the calibration tolerance remains unchanged.

Measurement and Test Equipment accuracy is administratively controlled by plant procedures and is included in the plant uncertainty calculations as defined in WCAP-10991.

OPERABILITY determinations are based on the use of Measurement and Test Equipment that conforms with the accuracy used in the plant uncertainty calculation.

The Allowable Value specified in Table 3.3-4 defines the limit beyond which a channel is inoperable. If the process rack bistable setting is measured within the "as left" calibration tolerance, which specifies the difference between the Allowable Value and Nominal Trip Setpoint, then the channel is considered to be OPERABLE.

MILLSTONE - UNIT 3 B 3/4 3-1 Amendment No. 4-59, Aelfflawldged by NRCS lc 1 erd-atd 08/25/05

LDDCR 10-MP3-003 INSTRUMENTATION BASES 3/4.3.1 and 3/4.3.2 REACTOR TRIP SYSTEM INSTRUMENTATION and ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION (Continued)

The methodology, as defined in WCAP-10991 to derive the Nominal Trip Setpoints, is based upon combining all of the uncertainties in the channels. Inherent in the determination of the Nominal Trip Setpoints are the magnitudes of these channel uncertainties. Sensors and other instrumentation utilized in these channels should be capable of operating within the allowances of these uncertainty magnitudes. Occasional drift in excess of the allowance may be determined to be acceptable based on the other device performance characteristics. Device drift in excess of the allowance that is more than occasional, may be indicative of more serious problems and would warrant further investigation.

The above Bases does not apply to the Control Building Inlet Ventilation radiation monitors ESF Table (Item 7E). For these radiation monitors the allowable values are essentially nominal values.

Due to the uncertainties involved in radiological parameters, the methodologies of WCAP- 10991 were not applied. Actual trip setpoints will be reestablished below the allowable value based on calibration accuracies and good practices.

The OPERABILITY requirements for Table 3.3-3, Functional Units 7.a, "Control Building Isolation, Manual Actuation," and 7.e, "Control Building Isolation, Control Building Inlet Ventilation Radiation," are defined by table notation "*". These functional units are required to be OPERABLE at all times during plant operation in MODES 1,2, 3, and 4. These functional units are also required to be OPERABLE during movement of recently irradiated fuel assemblies, as specified by table notation

"*". The Control Building Isolation Manual Actuation and Control Building Inlet Ventilation Radiation are required to be OPERABLE during movement of recently irradiated fuel assemblies (i.e.,

fuel that has occupied part of a critical reactor core within the previous 350 hour0.00405 days 0.0972 hours 5.787037e-4 weeks 1.33175e-4 months s*). Table notation """'

of Table 4.3-2 has the same applicability.

The verification of response time at thz ,pecified -requencieE provides assurance that the reactor trip and the engineered safety features actuation associated with each channel is completed within the time limit assumed in the safety analysis. No credit is taken in the analysis for those channels with response times indicated as not applicable (i.e., N.A.). '--nsert Required ACTION 4. of Table 3.3-1 is modified by a Note to indicate that normal plant control operations that individually add limited positive reactivity (e.g., temperature or boron fluctuations associated with RCS inventory management or temperature control) are not precluded by this ACTION provided they are accounted for in the calculated SDM. The proposed change permits operations introducing positive reactivity additions but prohibits the temperature change or overall boron concentration from decreasing below that required to maintain the specified SDM or required boron concentration.

During fuel assembly cleaning evolutions that involve the handling or cleaning of two fuel assemblies coincidentally, recently irradiated fuel is fuel that has occupied part of a critical reactor core within the previous 525 hours0.00608 days 0.146 hours 8.680556e-4 weeks 1.997625e-4 months .

MILLSTONE - UNIT 3 B 3/4 3-2 Amendment No. 3-91, 41-59,4-7-7, +P--7, 219

- ,230

-0628106-INSTRUMENTATION 3/4.3.5 SHUTDOWN MARGIN MONITOR BASES (continued)

Required ACTION b. is modified by a Note which permits plant temperature changes provided the temperature change is accounted for in the calculated SDM. Introduction of temperature changes, including temperature increases when a positive MTC exists, must be evaluated to ensure they do not result in a loss of required SDM.

2. All dilution flowpaths are isolated and placed under administrative control (locked closed). This action provides redundant protection and defense in depth (safety overlap) to the SMMs. In this configuration, a boron dilution event (BDE) cannot occur. This is the basis for not having to analyze for BDE in MODE 6. Since the BDE cannot occur with the dilution flow paths isolated, the SMMs are not required to be OPERABLE as the event cannot occur and OPERABLE SMMs provide no benefit.

3. Increase the SHUTDOWN MARGIN surveillance frequency from every-24-hours to every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . This action in combination with the above, provi e defense in depth and overlap to the loss of the SMMs.

Surveillance Requirements the frequency specified in the SSurveillance Frequency Control Pro The SýMMs are subject to an AGO-T ey to ensure each train of SMM is fully operational. This test shall

de verification that the SMMs are set per the CORE OPERATING LIMITS ORT. "--insert2 IANALOG CHANNEL OPERATIONAL TEST]

MILLSTONE - UNIT 3 B 3/4 3-9 Amendment No. 464, 230

L;DDCR No. 01 MP3 015 3/4.4 REACTOR COOLANT SYSTEM BASES The safety analyses performed for the reactor at power assume that all reactor coolant loops are initially in operation and the loop stop valves are open. This LCO places controls on the loop stop valves to ensure that the valves are not inadvertently closed in MODES 1, 2, 3 and 4.

The inadvertent closure of a loop stop valve when the Reactor Coolant Pumps (RCPs) are operating will result in a partial loss of forced reactor coolant flow. If the reactor is at rated power at the time of the event, the effect of the partial loss of forced coolant flow is a rapid increase in the coolant temperature which could result in DNB with subsequent fuel damage if the reactor is not tripped by the Low Flow reactor trip. If the reactor is shutdown and a RCS loop is in operation removing decay heat, closure of the loop stop valve associated with the operating loop could also result in increasing coolant temperature and the possibility of fuel damage.

The loop stop valves have motor operators. If power is inadvertently restored to one or more loop stop valve operators, the potential exists for accidental closure of the affected loop stop valve(s) and the partial loss of forced reactor coolant flow. With power applied to a valve operator, only the interlocks prevent the valve from being operated. Although operating procedures and interlocks make the occurrence of this event unlikely, the prudent action is to remove power from the loop stop valve operators. The time period of 30 minutes to remove power from the loop stop valve operators is sufficient considering the complexity of the task.

Should a loop stop valve be closed in MODES 1 through 4, the affected valve must be maintained closed and the plant placed in MODE 5. Once in MODE 5, the isolated loop may be started in a controlled manner in accordance with LCO 3.4.1.6, "Reactor Coolant System Isolated Loop Startup." Opening the closed loop stop valve in MODES 1 through 4 could result in colder water or water at a lower boron concentration being mixed with the operating RCS loops resulting in positive reactivity insertion. The time period provided in ACTION 3.4.1 .5.b allows time for borating the operating loops to a shutdown boration level such that the plant can be brought to MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and MODE 5 within 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . The allowed ACTION times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

Surveillance Requirement 4.4.1.5 is performed at least ,n,, pcr 31 days to ensure that the RCS loop stop valves are open, with power removed from the loop stop valve operators. The primary function of this Surveillance is to ensure that power is removed from the valve operators, since Surveillance Requirement 4.4. 1.1 requires verification every 12-heti that all loops are operating and circulating reactor coolant, thereby ensuring that the loop stop valves are open. The frequency -d-ys ensures that the required flow is available i" bEased on engineerng fte ii fvnt eaepal Qperating expcrc~issonta thc fa r sae a 4-lb Amendment No. 60, 40, 9, 4, +-94, 2042, 24-7-,

Aby NJ. lete a t08QS

3/4.4 REACTOR COOLANT SYSTEM BASES (continued)

For the isolated loop being restored, the power to both loop stop valves has been restored Surveillance 4.4.1.6.2 indicates that the reactor shall be determined subcritical by at least the amount required by Specifications 3.1.1.1.2 or 3.1.1.2 for MODE 5 or Specification 3.9. 1.1 for MODE 6 within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of opening the cold leg or hot leg stop valve.

The SHUTDOWN MARGIN requirement in Specification 3.1.1.1.2 is specified in the CORE OPERATING LIMITS REPORT for MODE 5 with RCS loops filled. Specification

.3.1.1.1.2 cannot be used to determine the required SHUTDOWN MARGIN for MODE 5 loops isolated condition.

Specification 3.1.1.2 requires the SHUTDOWN MARGIN to be greater than or equal to the limits specified in the CORE OPERATING LIMITS REPORT for MODE 5 with RCS loops not filled provided CVCS is aligned to preclude boron dilution. This specification is for loops not filled and therefore is applicable to an all loops isolated condition.

Specification 3.9.1.1 requires Keff of 0.95 or less, or a boron concentration of greater than or equal to the limit specified in the COLR in MODE 6.

Specification 3.1.1.1.2 or 3.1.1.2 for MODE 5, both require boron concentration to be determined at' ce eaeh 24 hetir-. SR 4.1.1.1.2. .b.2 and 4.1.1.2.1.b.l satisfy the requirements of Speci i 1. .1.2 and 3.1.1.2 respectfully. Specification 3.9.1.1 for MODE 6 requires boron concentration to be ed at aeb h72 heows. S.R. 4.9.1.1.2 satisfy the requirements of Specification 3.9.1.1. Fthe frequency specified in the Surveillance Frequency Control Program Per Specifications 3.4.1.2, ACTION c.; 3.4.1.3, ACTION c.; 3.4.1.4.1, ACTION b.; and 3.4.1.4.2, ACTION b., suspending the introduction of coolant into the RCS of coolant with boron concentration less than required to meet the minimum SDM of LCO 3.1 .1.1.2 is required to assure continued safe operation. With coolant added without forced circulation, unmixed coolant could be introduced to the core, however, coolant added with boron concentration meeting the minimum SDM maintains acceptable margin to subcritical operations.

References:

1. Letter NEU-94-623, dated July 13, 1994; Mixing Evaluation for Boron Dilution Accident in Modes 4 and 5, Westinghouse HR-59782.

2. Memo No. MP3-E-93-821, dated October 7, 1993.

MILLSTONE - UNIT 3 B 3/4 4-lf Amendment No. 24-7,230

August 26,OO200 REACTOR COOLANT SYSTEM BASES 3/4.4.3 PRESSURIZER (continued) Insert 2 The t2-how periodic surveillances Zquire that pressurizer level be maintained at programmed level within +/- 6% of full sc . The surveillance is performed by observing the indicated level. The 12 heur-intra ha e i3nbyccing prraeficetce be sufficientt r-egutlafly assess level fer any dcviatien and te ensure dhit the appropr-iate

. . During transitory conditions, i.e., power changes, the operators level existsq inth will maintain programmed level, and deviations greater than 6% will be corrected within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months . Two hours has been selected for pressurizer level restoration after a transient to avoid an unnecessary downpower with pressurizer level outside the operating band. Normally, alarms are also available for early detection of abnormal level indications.

Electrical immersion heaters, located in the lower section of the pressurizer vessel, keep the water in the pressurizer at saturation temperature and maintain a constant operating pressure.

A minimum required available capacity of pressurizer heaters ensures that the RCS pressure can be maintained. The capability to maintain and control system pressure is important for maintaining subcooled conditions in the RCS and ensuring the capability to remove core decay heat by either forced or natural circulation of the reactor coolant. Unless adequate heater capacity is available, the hot high-pressure condition cannot be maintained indefinitely and still provide the required subcooling margin in the primary system. Inability to control the system pressure and maintain subcooling under conditions of natural circulation flow in the primary system could lead to a loss of single-phase natural circulation and decreased capability to remove core decay heat.

The LCO requires two groups of OPERABLE pressurizer heaters, each with a capacity of at least 175 kW. The heaters are capable of being powered from either the offsite power source or the emergency power supply. The minimum heater capacity required is sufficient to maintain the RCS near normal operating pressure when accounting for heat losses through the pressurizer insulation. By maintaining the pressure near the operating conditions, a wide margin to subcooling can be obtained in the loops. The requirement for two groups of pressurizer heaters, each having a capacity of 175 kW, is met by verifying the capacity of the pressurizer heater groups A and B. Since the pressurizer heater groups A and B are supplied from the emergency 480V electrical buses, there is reasonable assurance that these heaters can be energized during a loss of offsite power to maintain natural circulation at HOT STANDBY. Providing an emergency (Class 1E) power source for the required pressurizer heaters meets the requirement of NUREG-0737, "A Clarification of TMI Action Plan Requirements," II.E.3. 1, "Emergency Power Requirements for Pressurizer Heaters."

If one required group of pressurizer heaters is inoperable, restoration is required within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . The Completion Time of 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months is reasonable considering that a demand caused by loss of offsite power would be unlikely in this time period. Pressure control may be maintained during this time using normal station powered heaters.

MODE 3 The requirement for the pressurizer to be OPERABLE, with a level less than or equal to 89%, ensures that a steam bubble exists. The 89% level preserves the steam space for pressure control. The 89% level has been established to ensure the capability to establish and maintain pressure control for MODE 3 and to ensure a bubble is present in the pressurizer. Initial pressurizer level is not significant for those events analyzed for MODE 3 in Chapter 15 of the FSAR.

MILLSTONE - UNIT 3 B 3/4 4-2a Amendment No. 4-60,-24-0

LBDCR Na. 04-MP3-015 Febuamy 24, 2065 REACTOR COOLANT SYSTEM BASES 3/4.4.3 PRESSURIZER (cont'd.) t The 12 hei periodic surveillance requires that during MODE 3 op ation, pressurizer level is maintained below the nominal upper limit to provide a minimur ace for a steam bubble.

been shw The

... surveillance is performed by observing

-by.......n p ...... to be,sufflicnt

..... the indicated fl ses level.

ee efafdvite intcrvaln ha&to nfisur2 that a steam bubble en'ists in tho pressupizer. Alarms are also available for early detection of abnormal level indications.

The basis for the pressurizer heater requirements is identical to MODES 1 and 2.

3/4.4.4 RELIEF VALVES The power-operated relief valves (PORVs) and steam bubble function to relieve RCS pressure during all design transients up to and including the design step load decrease with steam dump. Operation of the PORVs minimizes the undesirable opening of the spring-loaded pressurizer Code safety valves. Each PORV has a remotely operated block valve to provide a positive shutoff capability should a relief valve become inoperable. Requiring the PORVs to be OPERABLE ensures that the capability for depressurization during safety grade cold shutdown is met.

ACTION statements a, b, and c distinguishes the inoperability of the power operated relief valves ,'

(PORV). Specifically, a PORV may be designated inoperable but it may be able to automatically and manually open and close and therefore, able to perform its function. PORV inoperability may be due to seat leakage which does not prevent automatic or manual use and does not create the possibility for a small-break LOCA. For these reasons, the block valve may be closed but the action requires power to be maintained to the valve. This allows quick access to the PORV for pressure control. On the other hand if a PORV is inoperable and not capable of being automatically and manually cycled, it must be either restored or isolated by closing the associated block valve and removing power.

Note: PORV position indication does not affect the ability of the PORV to perform any of its safety functions. Therefore, the failure of PORV position indication does not cause the PORV to be inoperable. However, failed position indication of these valves must be restored "as soon as practicable" as required by Technical Specification 6.8.4.e.3.

Automatic operation of the PORVs is created to allow more time for operators to terminate an Inadvertent ECCS Actuation at Power. The PORVs and associated piping have been demonstrated to be qualified for water relief. Operation of the PORVs will prevent water relief from the pressurizer safety valves for which qualification for water relief has not been demonstrated. If the PORVs are capable of automatic operation but have been declared inoperable, closure of the PORV block valve is acceptable since the Emergency Operating Procedures provide guidance to assure that the PORVs would be available to mitigate the event.

OPERABILITY and setpoint controls for the safety grade PORV opening logic are maintained in the Technical Requirements Manual.

MILLSTONE - UNIT 3 B 3/4 4-2b Amendment No. 60, 46-4 Ac1 ww*dged by NR"" t1i,. daktd OW12"S/G,

I~fflC N.. ffA PILflfl M"r2tOO6 REACTOR COOLANT SYSTEM BASES 3/4.4.6.2 OPERATIONAL LEAKAGE (Continued)

An early warning of PRESSURE BOUNDARY LEAKAGE or UNIDENTIFIED LEAKAGE is provided by the automatic systems that monitor the containment atmosphere radioactivity and the containment sump level. It should be noted that LEAKAGE past seals and gaskets is not PRESSURE BOUNDARY LEAKAGE. These leakage detection systems are specified in RCS LCO 3.4.6. 1, "Leakage Detection Systems."

Note 2 states that this SR is not applicable to primary to secondary LEAKAGE because LEAKAGE of 150 gallons per day cannot be measured accurately by an RCS water inventory balance.

Thu 52 i i,.niible teval totrend LEAKAGE and reeognizes the importance cf curly leakage deteeticn in the prevention of aeeidents.

4.4.6.2.1 .e This SR verifies that primary to secondary LEAKAGE is less than or equal to 150 gallons per day through any one SG. Satisfying the primary to secondary LEAKAGE limit ensures that the operational LEAKAGE performance criterion in the Steam Generator Program is met. If this SR is not met, compliance with LCO 3.4.5, "Steam Generator Tube Integrity," should be evaluated.

The 150 gallons per day limit is measured at room temperature as described in Reference 5. The operational LEAKAGE rate limit applies to LEAKAGE through any one SG. If it is not practical to assign the LEAKAGE to an individual SQ all the primary to secondary LEAKAGE should be conservatively assumed to be from one SG.

The Surveillance is modified by a Note which states that the surveillance is not required to be performed until 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after establishment of steady state operation. For RCS primary to secondary LEAKAGE determination, steady state is defined as stable RCS pressure, temperature, power level, pressurizer and makeup tank levels, makeup and letdown, and RCP seal injection and return flows. . nser 21 The vS -,illancF irz4 an,1, of 72 honit is-auiiabk

-rit val k, ,uti.'ndprimary to, eeondar LEAKAGE and rocognizes the importnc.. Of earl1Y leakage detection in the pr.evention. of aca, dntP.- The primary to secondary LEAKAGE is determined using continuous process radiation monitors or radiochemical grab sampling in accordance with the EPRI guidelines (Reference 5).

4.4.6.2.2 The Surveillance Requirements for RCS pressure isolation valves provide assurance of valve integrity thereby reducing the probability of gross valve failure and consequent intersystem LOCA. Leakage from the RCS pressure isolation valve is IDENTIFIED LEAKAGE and will be considered as a portion of the allowed limit.

MILLSTONE - UNIT 3 B 3/4 4-4g Afnendmenf No: r

BBDCR No. 08-IMvPt33--

Mach1, 2008 REACTOR COOLANT SYSTEM BASES SPECIFIC ACTIVITY (Continued)

ACTIONS (Continued) e.

If the required action and completion time of ACTION d. is not met, the reactor must be brought to HOT STANDBY (MODE 3) within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN (MODE 5) within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months . The allowed completion times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

SURVEILLANCE REOUIREMENTS 4.4.8.1 Ithe frequency specified in the Surveillance Frequency Control Program Surveillance Requirement 4.4.8.1 requires performinga mma isotopic analysis as a measure of the noble gas specific activity of the reactor coolant at-st mnc every 7 day . This measurement is the sum of the degassed gamma activities and the gaseous gamma activities in the sample taken.

This Surveillance Requirement provides an indication of any increase in the noble gas specific activity.

Trending the results of this Surveillance Requirement allows proper remedial action to be taken before reaching the LCO limit under normal operating conditions.

requeney consider-s the lew probability of a gross fuel failure Due to the inherent difficulty in detecting Kr-85 in a reactor coolant samp, due to masking from radioisotopes with similar decay energies, such as F- 18 and 1-134, it is acce ble to include the minimum detectable activity for Kr-85 in the Surveillance Requirement 4.4.8. alculation. If a specific noble gas nuclide listed in the definition of DOSE EQUIVALENT XE-I is not detected, it should be assumed to be present at the minimum detectable activ . Insert 2 A Note modifies the Surveillance Requirement to allow entry into and ation in MODE 4, MODE 3, and MODE 2 prior to performing the Surveillance Re " ement. This allows the Surveillance Requirement to be performed in those MOD , prior to entering MODE 1.

4.4.8.2 This Surveillance Requireme performed to ensure iodine specific activity remains within the LCO limit during no operation and following fast power changes when iodine spiking is more apt to occur. 4 quency is adequate to trend hangcs in thc iodine activity lcv1, con'sidering noble gas activity is monitored eaver- 7 days. The frequency of between 2 and 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months after a power change _ 15% RTP within a 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months period is established because the iodine levels peak during this time following iodine spike initiation; samples at other times would provide inaccurate results.

MILLSTONE - UNIT 3 B 3/4 4-6b Amendment No.

REACTOR COOLANT SYSTEM BASES OVERPRESSURE PROTECTION SYSTEMS (continued)

The AOT in MODE 4 considers the facts that only one of the relief valves is required to mitigate an overpressure transient and that the likelihood of an active failure of the remaining valve path during this time period is very low. The RCS must be depressurized and a vent must be established within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months if the required relief valve is not restored to OPERABLE within the required AOT of 7 days.

d.

The consequences of operational events that will overpressure the RCS are more severe at lower temperatures (Ref. 8). Thus, with one of the two required relief valves inoperable in MODE 5 or in MODE 6 with the head on, the AOT to restore two valves to OPERABLE status is 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

The AOT represents a reasonable time to investigate and repair several types of relief valve failures without exposure to a lengthy period with only one OPERABLE relief valve to protect against overpressure events. The RCS must be depressurized and a vent must be established within the following 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months if the required relief valve is not restored to OPERABLE within the required AOT of 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . 4' e.

The RCS must be depressurized and a vent must be established within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months when both ,

required Cold Overpressure Protection relief valves are inoperable.

The vent must be sized > 2.0 square inches to ensure that the flow capacity is greater than that required for the worst case cold overpressure transient reasonable during the applicable MODES.

This action is needed to protect the RCPB from a low temperature overpressure event and a possible non-ductile failure of the reactor vessel.

The time required to place the plant in this Condition is based on the relatively low probability of an overpressure event during this time period due to increased operator awareness of administrative control requirements.

SURVEILLANCE REQUIREMENTS 4.4.9.3.1 Performance of an ANALOG CHANNEL OPERATIONAL TEST is required within 31 days prior to entering a condition in which the PORV is required to be OPERABLE anovepf-21 ays on each required PORV to verify and, as necessary, adjust its lift setpoint. ThAALOG CHANNEL OPERATIONAL TEST will verify the setpoint in accordanc ith the nominal values given in Figures 3.4-4a and 3.4-4b. PORV actuation could de ssurize the RCS; therefore, valve operation is not required.

MILLSTONE - UNIT 3 B 3/4 4-24 Amendment No. 4-54, 1-9-7 lat the frequency specified in the Surveillance Frequency Control Program thereafter

LBDCR Nu. 07-MP3-009 juIIIe 19, 2007 REACTOR COOLANT SYSTEM BASES Performance of a. CALIBRATION on each required PORV actttion channel is required e.pr 2-,4 mens to adjust the channel so that it responds and the lyve opens within the required range and accuracy to a known input./

The PORV block valve must be verified open and COPPS must be verified armed 'cr-2 ,

to provide a flow path and a cold overpressure prol ,ction actuation circuit for each required PORV to perform its function when required. The alve is remotely verified open in the main control room. This Surveillance is performed if cr dit is being taken for the PORV to satisfy the LCO. Insert 2 The block valve is a remotely controlled, mot ope ated valve. The power to the valve operator is not required to be removed, and the ma I operat r is not required to be locked in the open position. Thus, the block valve can be osed in the e ent the PORV develops excessive leakage or does not close (sticks open) after ieving an ove essure transient.

valve rc,-n Gpcn.

4.4.9.3.2 Each required RHR suction relief valve shall be demonstra d OPERABLE by verifying the RHR suction valves, 3RHS*MV8701A and 3RHS*M8701C, are pen when suction relief valve 3PJ..S*RV8708A is being used to meet the LCO and by yeni ing the RHR suction valves, 3RHS*MV8702B and 3RHS*MV8702C, are open when suc ion relief valve 3RHS*RV8708B is being used to meet the LCO. Each required RHR suction reli If valve shall also be demonstrated OPERABLE by testing it in accordance with 4.0.5. This Su illance is only required to be performed if the RHR suction relief valve is bein used to me this LCO.

periodicallyI The R.HR suction valves are Krifled to be open ee42h Ttr 1he ]Tregueney is eensidered-adequate in view of ether-adm'inistrafivia-controls sueh as valve status indications available te the opeRatHR in the cestrel r thatiofom the MpeR suction v'alves rom opdn.

The ASME Code for Operation and Maintenance of Nuclear Power Plants, (Reference 9), test per e-4.0.5 verifies OPERABILITY by proving proper relief valve mechanical motion and by measuring and, if required, adjusting the lift setpoint.

MILLSTONE - UNIT 3 B 3/4 4-25 Amendment No. 5-7, 4-19, 2-06,

DDR No. 07-MP3009A Juno 19, 2007 REACTOR COOLANT SYSTEM BASES OVERPRESSURE PROTECTION SYSTEMS (continued) 4.4.9.3.3 eriodically The RCS vent of> 2.0 square inches is proven OPERABLE y verifying its open condition.

n.Iuu uls for a vent Yvatve tIhat C*

. ..- . .. . . . . v .. .I r mo ed Pre ssuriz e r sa tety va lv e tits th is c a te g ory.

This passive vent arrangement must only be open to be OPERABLE. This Surveillance is reluired to be performed if the vent is being used to satisfy the pressure relief requirements of the LO. lnsert2 4.4.9.3.4 and 4.4.9.3.5 To minimize the potential for a low temperature overpressure event by limiting the mass input capability, all SIH pumps and all but one centrifugal charging pump are verified incapable of injecting into the RCS.

The SIH pumps and charging pumps are rendered' incapable of injecting into the RCS through removing the power from the pumps by racking the breakers out under administrative control.

Alternate methods of control may be employed using at least two independent means to prevent an injection into the RCS. This may be accomplished through any of the following methods:

1) placing thepump in pull to lock (PTL) and pulling its UC fuses, 2) placing the pump in pull to lock (PTL) and closing the pump discharge valve(s) to the injection line, 3) closing the pump discharge valve(s) to the injection line and either removing power from the valve operator(s) or locking manual valves closed, and 4) closing the valve(s) from the injection source and either removing power from the valve operator(s) or locking manual valves closed.

An SIH pump may be energized for testing or for filling the Accumulators provided it is incapable of injecting into the RCS.

Thd Fiege~ u 2houui is sufficien, Lunsid E?!!iu 1ý dieakion a1 nd+/-1 a~la~rms available to tho apertr intocre!r reem, to -verify the regio oftequipmient.'~

ettu REFERENCES

1. ASME Boiler and Pressure Vessel Code,Section XI, Appendix G, "Fracture Toughness for Protection Against Failure," 1995 Edition.

2. ASME Section XI, Code Case N-640, "Alternative Reference Fracture Toughness for Development of P-T Limit Curves," dated February 26, 1999.

3. Generic Letter 88-11

4. ASME, Boiler and Pressure Vessel Code,Section III

5. FSAR, Chapter 15

6. 10CFR50, Section 50.46

7. 10CFR50, Appendix K

8. Generic Letter 90-06

9. ASME Code for Operation and Maintenance of Nuclear Power Plants MILLSTONE - UNIT 3 B 3/4 4-26 Amendment No. 445-7,+97,

LtDB K Nu. IJ6-*IVWJ-U29 August 10, 2006 EMERGENCY CORE COOLING SYSTEMS BASES ECCS SUBSYSTEMS (Continued) flush upon heat exchanger return to service and procedural compliance is relied upon to ensure that gas is not present within the heat exchanger u-tubes.

Surveillance Requirement 4.5.2.C.2 requires that the visual inspection of the containment be performed at least once daily if the containment has been entered that day and when the final containment entry is made. This will reduce the number of unnecessary inspections and also reduce personnel exposure. Insert 2 Surveillance Requirement 4.5.2.d.2 addresses periodic inspectiou, ifre containment sump to ensure that it is unrestricted and. stays in roper operating condition. fhn 2A.mnnth"f..-quln'y as based oft the need topfcmti ane-il-Lrccujder the Zondi"ol 'that apydt 1 the need twehao...... toth.. l.,ati.n. T - . s,. io...t t. dt..t abT.,,-rtl dc.dat,,n and is cauifufuid by upl athig cp~ivnu.

The Emergency Core Cooling System (ECCS) has several piping cross connection points for use during the post-LOCA recirculation phase of operation. These cross-connection points allow the Recirculation Spray System (RSS) to supply water from the containment sump to the safety injection and charging pumps. The RSS has the capability to supply both Train A and B safety injection pumps and both Train A and B charging pumps. Operator action is required to position valves to establish flow from the containment sump through the RSS subsystems to the safety injection and charging pumps since the valves are not automatically repositioned. The quarterly stroke testing (Technical Specification 4.0.5) of the ECC/RSS recirculation flowpath valves discussed below will not result in subsystem inoperability (except due to other equipment manipulations to support valve testing) since these valves are manually aligned in accordance with the Emergency Operating Procedures (EOPs) to establish the recirculation flowpaths. It is expected the valves will be returned to the normal pre-test position following termination of the surveillance testing in response to the accident. Failure to restore any valve to the normal pre-test position will be indicated to the Control Room Operators when the ESF status panels are checked, as directed by the EOPs. The EOPs direct the Control Room Operators to check the ESF status panels early in the event to ensure proper equipment alignment. Sufficient time before the recirculation flowpath is required is expected to be available for operator action to position any valves that have not been restored to the pretest position, including localmanual valve operation. Even if the valves are not restored to the pre-test position, sufficient capability will remain to meet ECCS post-LOCA recirculation requirements. As a result, stroke testing of the ECCS recirculation valves discussed below will not result in a loss of system independence or redundancy, and both ECCS subsystems will remain OPERABLE.

When performing the quarterly stroke test of 3 SIH*MV8923A, the control switch for safety injection pump 3SIH PIA is placed in the pull-to-lock position to prevent an automatic pump start with the suction valve closed. With the control switch for 3SIH*P1A in pull-to-lock, the Train A ECCS subsystem is inoperable and Technical Specification 3.5.2, ACTION a., applies. This ACTION statement is sufficient to administratively control the plant configuration with the automatic start of 3SIH*PIA defeated to allow stroke testing of 3SIH*MV8923A. In addition, the EOPs and the ESF status panels will identify this abnormal plant configuration, if not corrected following the termination of the surveillance testing, to the plant operators to allow restoration of the normal post-LOCA recirculation flowpath. Even if system restoration is not accomplished, sufficient equipment will be available to perform all ECCS and RSS injection and recirculation functions, provided no additional ECCS or RSS equipment is inoperable, and an additional single failure does not occur (an acceptable assumption since the Technical Specification ACTION statement limits the plant configuration time such that no additional equipment failure need be postulated). During the injection phase the redundant subsystem (Train B) is fully functional, as is a significant portion of the Train A subsystem. During the recirculation phase, the Train A RSS subsystem can supply water from the containment sump to the Train A MILLSTONE - UNIT 3 B 3/4 5-2b Amendment No. 4-N, 44-7,4-5-7 .

EMERGENCY CORE COOLING SYSTEMS BASES (Continued)

APPLICABILITY In MODES 1, 2, 3, and 4, a design basis accident (DBA) could lead to a fission product release to containment that leaks to the secondary containment boundary. The large break LOCA, on which this system's design is based, is a full-power event. Less severe LOCAs and leakage still require the system to be OPERABLE throughout these MODES. The probability and severity of a LOCA decrease as core power and reactor coolant system pressure decrease. With the reactor shut down, the probability of release of radioactivity resulting from such an accident is low.

In MODES 5 and 6, the probability and consequence of a DBA are low due to the pressure and temperature limitations in these MODES. Under these conditions, the SLCRS is not required to be OPERABLE.

ACTIONS If it is discovered that the TSP in the containment building sump is not within limits, action must be taken to restore the TSP to within limits. During plant operation, the containment sump is not accessible and corrections may not be possible.

The 7-day Completion Time is based on the low probability of a DBA occurring during this period. The Completion Time is adequate to restore the volume of TSP to within the technical specification limits.

If the TSP cannot be restored within limits within the 7-day Completion Time, the plant must be brought to a MODE in which the LCO does not apply. The specified Completion Times for reaching MODES 3 and 4 are those used throughout the technical specifications; they were chosen to allow reaching the specified conditions from full power in an orderly manner and without challenging plant systems.

SURVEILLANCE REQUIREMENTS Surveillance Requirement 4.5.5 Periodic determination of the volume of TSP in containment must be performed due to the possibility of leaking valves and components in the containment building that could cause dissolution of the TSP during normal operation. .Fr.....of p 24 months, is r"- d to dcterminc visually that a mininmum of 9q4 etubic feet is eofntamctd in the TSP Sterage Baskets.

This requirement ensures that there is an adequate volume of TSP to adjust the pH of the post LOCA sump solution to a value > 7.0. Insert Thc pcriodic vc-ification, is reapu-ifed outage, " cce s l,,vTSP baskets is only feasible durin,,-;g outages, Orating xperience h.... shown thi.. .ur.'ilc; Fr..quen.y a ÷eeptable due to the mefgi f:TSP plaeed in the eontaiment bd MILLSTONE - UNIT 3 B 3/4 5-5 Amendment No. +4-5, 206

LBDCGR Ne. 05 NP3 007 CONTAINMENT SYSTEMS BASES The design of the Containment RSS is sufficiently independent so that an active failure in the recirculation spray mode, cold leg recirculation mode, or hot leg recirculation mode of the ECCS has no effect on its ability to perform its engineered safety function. In other words, the failure in one subsystem does not affect the capability of the other subsystem to perform its designated safety function of assuring adequate core cooling in the event of a design basis LOCA. As long as one subsystem is OPERABLE, with one pump capable of assuring core cooling and the other pump capable of removing heat from containment, the RSS system meets its design requirements.

The LCO 3.6.2.2. ACTION applies when any of the RSS pumps, heat exchangers, or associated components are declared inoperable. All four RSS pumps are required to be OPERABLE to meet the requirements of this LCO 3.6.2.2. During the injection phase of a Loss Of Coolant Accident all four RSS pumps would inject into containment to perform their containment heat removal function. The minimum requirement for the RSS to adequately perform this function is to have at least one subsystem available. Meeting the requirements of LCO 3.6.2.2. ensures the minimum RSS requirements are satisfied.

Surveillance Requirement 4.6.2.2.c requires that at least ncee per 24 mHnths, verification is made that on a CDA test signal, each RSS pump starts automatically after receipt of an RWST Low-Low level signal. The 21m.onth frequen.y is based on the need to per-fr.m

.u.. this eilla.ee und. r the

. o.ditie.s that apply during a plant outage and ptemntial for unplanned transicnt if the st..eillane

. wa. per.formed with the reat.r.at power. Operat-ng .. prin.. ý has Shown that these comnpenenti pasq the sur-veillanee when per-formfed at the 21 menth frequency. Thercefcre the ffequency wa. c.n.luded to be aeeptable fr.m a reliability standp:int. .hangeThis has ne adverse impact en plant at-y-.lnsert2 Surveillance Requirements 4.6.2.1 .d and 4.6.2.2.e require verification that each spray nozzle is unobstructed following maintenance that could cause nozzle blockage. Normal plant operation and maintenance activities are not expected to trigger performance of these surveillance requirements. However, activities, such as an inadvertent spray actuation that causes fluid flow through the nozzles, a major configuration change, or a loss of foreign material control when working within the respective system boundary may require surveillance performance. An evaluation, based on the specific situation, will determine the appropriate test method (e.g., visual inspection, air or smoke flow test) to verify no nozzle obstruction.

MILLSTONE - UNIT 3 B 3/4 6-2a Amendment No.

LBDCR No. 04 MP3 015 CONTAINMENT SYSTEMS BASES 3/4.6.3 CONTAINMENT ISOLATION VALVES The OPERABILITY of the containment isolation valves ensures that the containment atmosphere will be isolated from the outside environment in the event of a release of radioactive material to the containment atmosphere or pressurization of the containment and is consistent with the requirements of General Design Criteria 54 through 57 of Appendix A to 10 CFR Part 50. Containment isolation within the time limits specified for these isolation valves designed to close automatically ensures that the release of radioactive material to the environment will be consistent with the assumptions used in the analyses for a LOCA. FSAR Table 6.2-65 lists all containment isolation valves. The addition or deletion of any containment isolation valve shall be made in accordance with Section 50.59 of IOCFR50 and approved by the committee(s) as described in the QAP Topical Report.

For the purposes of meeting this LCO, the safety function of the containment isolation valves is to shut within the time limits assumed in the accident analyses. As long as the valves can shut within the time limits assumed in the accident analyses, the valves are OPERABLE. Where the valve position indication does not affect the operation of the valve, the indication is not required for valve OPERABILITY under this LCO. Position indication for containment isolation valves is covered by Technical Specification 6.8.4.e., Accident Monitoring Instrumentation.

Failed position indication on these valves must.be restored "as soon as practicable" as required by Technical Specification 6.8.4.e.3. Maintaining the valves OPERABLE, when position indication fails, facilitates troubleshooting and correction of the failure, allowing the indication to be restored "as soon as practicable."

With one or more penetration flow paths with one containment isolation valve inoperable, the inoperable valve must be restored to OPERABLE status or the affected penetration flow path must be isolated. The method of isolation must include the use of at least one isolation barrier that cannot be adversely affected by a single active failure. Isolation barriers that meet this criterion are a closed and deactivated automatic valve, a closed manual valve, and a blind flange. A check valve may not be used to isolate the affected penetration.

If the containment isolation valve on a closed system becomes inoperable, the remaining barrier is a closed system since a closed system is an acceptable alternative to an automatic valve.

However, actions must still be taken to meet Technical Specification ACTION 3.6.3.d and the valve, not normally considered as a containment isolation valve, and closest to the containment wall should be put into the closed position. No leak testing of the alternate valve is necessary to satisfy the ACTION statement, Placing the manual valve in the closed position sufficiently 4]

deactivates the penetration for Technical Specification compliance.

Closed system isolation valves applicable to Technical Specification ACTION 3.6.3.d are included in FSAR Table 6.2-65, and are the isolation valves for those penetrations credited as General Design Criteria 57. The specified time (i.e., 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months ) of Technical Specification ACTION 3.6.3.d is reasonable, considering the relative stability of the closed system (hence, reliability) to act as a penetration isolation boundary and the relative importance of supporting containment OPERABILITY during MODES 1, 2, 3 and 4. In the event the affected penetration is ,

isolated in accordance with 3.6.3.d, the affected penetration flow path must be verified to be isolated on a periodic basis, (Surveillance Requirement 4.6.1.1 .a). This is necessary to assure leak tightness of containment and that containment penetrations requiring isolation following an accident are isolated. ; ,- r1 3 days-th-i- suiv,-illancc for verif-hfg that h td pnra ,,opahisolated is appropriat cnsidcring thc valvca arc opcratcd MILLSTONE - UNIT 3 B3/46-3Amendment No. 28, 63, 4-2, 26, Akcowledged by NfR, tetter dated O8,25ff,5

LBDCR 05-MP3-025 Ma*Lh 7, 2066 CONTAINMENT SYSTEMS BASES 3/4.6.6.1 SUPPLEMENTARY LEAK COLLECTION AND RELEASE SYSTEM (Continued)

Surveillance Requirements Insert 2 a

Cumulative operation of the SLCRS with heaters operating for at least 10 continuous hours 3-1day pen iud is sufficient to reduce the buildup of moisture on the adsorbers and HEPA filters.

The 31 da FrA .. n.y was de,,lo-,A ;n cieratio ,fte k, o,,- riblityf fan .otor, nd 3fltr;66. ThiS s perfomed. of a 8T-rGGE~rED TEST BASIS once per 3!-days.

b. c.'e, and f These surveillances verify that the required SLCRS filter testing is performed in accordance with Regulatory Guide 1.52, Revision 2. ANSI N510-1980 shall be used in place of ANSI N510-1975 referenced in Regulatory Guide 1.52, Revision 2. Laboratory testing of methyl iodide penetration shall be performed in accordance with ASTM D3803-89 and Millstone Unit 3 specific parameters. The surveillances include testing HEPA filter performance, charcoal adsorber efficiency, system flow rate, and the physical properties of the activated charcoal (general use and following specific operations). The heater kW measured must be corrected to its nameplate rating. Variations in system voltage can lead to measurements of kW which cannot be compared to the nameplate rating because the output kW is proportional to the square of the voltage.

Any time the OPERABILITY of a HEPA filter or charcoal adsorber housing has been affected by repair, maintenance, modification, or replacement activity, post maintenance testing in accordance with SR 4.0.1 is required to demonstrate OPERABILITY.

The 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of operation requirement originates from Regulatory Guide 1.52, Revision 2, March 1978, Table 2, Note "c", which states that "Testing should be performed (1) initially, (2) at least once per 18 months thereafter for systems maintained in a standby status or after 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of system operations, and (3) following painting, fire, or chemical release in any ventilation zone communicating with the system."

This testing ensures that the charcoal adsorbency capacity has not degraded below acceptable limits, as well as providing trend data. The 720 hour0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months figure is an arbitrary number which is equivalent to a 30 day period. This criteria is directed to filter systems that are normally in operation and also provide emergency air cleaning functions in the event of a Design Basis Accident. The applicable filter units are not normally in operation and the sample canisters are typically removed due to the 18 month criteria.

d r--oeriodic _

Thedutomatic startup ensures that each SLCRS train responds properly. The once per 21 mcnths

,itc, ,ctpcrform this sur..illan

.... u dhts.. that apply durin Anignt olut*ae 2nd the oontia*l for :an unnlannehd tansient. if the surveillane wasn

. .rfermd with the rePtor Tporr The surveillance verifies that the SLCRS starts on a SIS test signal. It also includes the automatic functions to isolate the other ventilation systems that are not part of the safety-related postaccident operating configuration and to start up and to align the ventilation systems that flow through the secondary containment to the accident condition.

MILLSTONE - UNIT 3 B 3/4 6-6 Amendment No. 8-7, 423, -84,-246,

J-.. 1:2.r-rc M~. Ut'4"-III-- , .Jý Fe....ry 24, 2005 CONTAINMENT SYSTEMS BASES 3/4.6.6.2 SECONDARY CONTAINMENT (continued)

In MODES 5 and 6, the probability and consequences of a DBA are low due to the RCS temperature and pressure limitation in these MODES. Therefore, Secondary Containment is not required in MODES 5 and 6.

ACTIONS In the event Secondary Containment OPERABILITY is not maintained, Secondary Containment OPERABILITY must be restored within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Twenty-four hours is a reasonable Completion Time considering the limited leakage design of containment and the low probability of a DBA occurring during this time period. Therefore, it is considered that there exists no loss of safety function while in the ACTION Statement.

Inoperability of the Secondary Containment does not make the SLCRS fans and filters inoperable. Therefore, while in this ACTION Statement solely due to inoperability of the Secondary Containment, the conditions and required ACTIONS associated with Specification 3.6.6.1 (i.e., Supplementary Leak Collection and Release System) are not required to be entered.

1 If the Secondary Containment OPERABILITY cannot be restored to OPERABLE status within the required completion time, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 5 within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full-power conditions in an orderly manner and without challenging plant systems.

Surveillance Requirements 4.6.6.2.1 Maintaining Secondary Containment OPERABILITY requires maintaining each door in each access opening in a closed position except when the access opening is being used for normal entry and exit. The normal time allowed for passage of equipment and personnel through each access opening at a time is defined as no more than 5 minutes. The access opening shall not be blocked open. During this time, it is not considered necessary to enter the ACTION statement. A 5-minute time is considered acceptable since the access opening can be quickly closed without special provisions and the probability of occurrence of a DBA concurrent with equipment and/or personnel transit time of 5 minutes is low.

j\The 31-day frcqtteney for this Surveillance is based ~UdrInnI andI IS 1 1rgnci-elieftdcrd

.- adequate in -view 4fthe other tind iicat ions of aeessopentng stattu3 that are available to the operator.

MILSTONE - UNIT 3 B 3/4 6-8 Amendment No. 87, 47M, Insert 2 A*knouwldgd by NRC ltte daitd 08/29/05

I:,D..R No. 04-MP3-l1 I-November 10, 2009 PLANT SYSTEMS BASES AUXILIARY FEEDWATER SYSTEM (Continued)

If all three AFW pumps are inoperable in MODE 1, 2, or 3, the unit is in a seriously degraded condition with no safety related means for conducting a cooldown, and only limited means for conducting a cooldown with non safety related equipment. In such a condition, the unit should not be perturbed by any action, including a power change, that might result in a trip. The seriousness of this condition requires that action be started immediately to restore one AFW pump to OPERABLE status. Required ACTION e. is modified by a Note indicating that all required MODE changes or power reductions are suspended until one AFW pump is restored to OPERABLE status. In this case, LCO 3.0.3 is not applicable because it could force the unit into a less safe condition.

SR 4.7.1.2. 1a. verifies the correct alignment for manual, power operated, and automatic valves in the auxiliary feedwater water and steam supply flow paths to provide assurance that the proper flow paths exist for auxiliary feedwater operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing. This SR also does not apply to valves that cannot be inadvertently misaligned, such as check valves. This Surveillance does not require any testing or valve manipulations; rather, it involves verification that those valves capable of potentially being mispositioned are in the correct position. T:he 3.1: day fr*que..y is based

-ngieerigjudgment, is consistent with the, procedural con rols governing valve operation, an ensur-es crae ccet v'alv ep osition s. - I se t The SR is modified by a Note that states one or more auxiliary feedwater pumps may be considered OPERABLE during alignment and operation for steam generator level control, if it is capable of being manually (i.e., remotely or locally, as appropriate) realigned to the auxiliary feedwater mode of operation, provided it is not otherwise inoperable. This exception to pump OPERABILITY allows the pump(s) and associated valves to be out of their normal standby alignment and temporarily incapable of automatic initiation without declaring the pump(s) inoperable. Since auxiliary feedwater may be used during STARTUP, SHUTDOWN, HOT STANDBY operations, and HOT SHUTDOWN operations for steam generator level control, and these manual operations are an accepted function of the auxiliary feedwater system, OPERABILITY (i.e., the intended safety function) continues to be maintained.

MILLSTONE - UNIT 3 B 3/4 7-2c I

LBDCR 07-MP3-G33 JMn 25, 2007 PLANT SYSTEMS BASES SURVEILLANCE REQUIREMENTS For the surveillance requirements, the UHS temperature is measured at the locations described in the LCO write-up provided in this section.

Surveillance Requirement 4.7.5.a verifies that the UHS is capable of providing a 30-day cooling water supply to safety-related equipment without exceeding its design basis temperature. Th 2 4 he'tf fiequ ein y is ba sed on epc a u- c p -'i.'Ld c e -.- h1FiHd U% ULLltc Faal,:tz IVeLczv" tu dt,-ing the appliall MGDES. This surveillance requirement verifies that the avera / water temperature of the UHS is less than or equal to 75'F. InsertFa 2 al I

'L u Surveillance Requirement 4.7.5.b requires that the UHS temperatur e monitored on an increased frequency whenever the UHS temperature is greater t n700 F during the applicable MODES. The intent of this Surveillance Requirement is to' rease the awareness of plant personnel regarding UHS temperature trends above 707F. H.-Pc f-rcqucncy is batc on opeating xEirien r-elpAtd to trcending of 0th pafamctcr variation~s dwrhi5 'Ll 1- ajFLI~a-bol MODES.

3/4.7.6 DELETED 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM BACKGROUND The control room emergency ventilation system provides a protected environment from which operators can control the unit following an uncontrolled release of radioactivity, hazardous chemicals, or smoke. Additionally, the system provides temperature control for the control room envelope (CRE) during normal and post-accident operations.

The control room emergency ventilation system is comprised of the CRE emergency air filtration system and a temperature control system.

The control room emergency air filtration system consists of two redundant systems that recirculate and filter the air in the CRE and a CRE boundary that limits the inleakage of unfiltered 1/

air. Each control room emergency air filtration system consists of a moisture separator, electric/4 heater, prefilter, upstream high efficiency particulate air (HEPA) filter, charcoal adsorber, downstream HEPA filter, and fan. Additionally, ductwork, valves or dampers, and instrumentation form part of the system.

The CRE is the area within the confines of the CRE boundary that contains the spaces that control room occupants inhabit to control the unit during normal and accident conditions. This area encompasses the control room, and other non-critical areas including adjacent support offices, MILLSTONE - UNIT 3 B 3/4 7-10 Amendment No. 49, 4-3.6, 4-44, 24-4,

LBDeR 07-MP3--03-3 S2D5 ,*2,0-VU PLANT SYSTEMS BASES 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM (Continued)

ACTIONS (Continued) their ability to control the reactor and maintain it in a safe shutdown condition in the event of a DBA. In addition, the 90 day Completion Time is a reasonable time to diagnose, plan and possibly repair, and test most problems with the CRE boundary.

Immediate action(s), in accordance with the LCO ACTION Statements, means that the required action should be pursued without delay and in a controlled manner.

During movement of recently irradiated fuel assemblies

d. With one control room emergency air filtration system inoperable, action must be taken to restore the inoperable system to an OPERABLE status within 7 days. After 7 days, either initiate and maintain operation of the remaining OPERABLE control room emergency air filtration system in the emergency mode or suspend the movement of fuel. Initiating and [,

maintaining operation of the OPERABLE train in the emergency mode ensures:

(i) OPERABILITY of the train will not be compromised by a failure of the automatic actuation logic; and (ii) active failures will be readily detected.

e. With both control room emergency air filtration systems inoperable, or with the train required by ACTION 'd' not capable of being powered by an OPERABLE emergency power source, actions must be taken to suspend all operations involving the movement of recently irradiated fuel assemblies. This action places the unit in a condition that minimizes risk. This action does not preclude the movement of fuel to a safe position.

SURVEILLANCE REQUIREMENTS 4.7.7.a Insert 2 The CRE environment should be chec e CRE temperature control system is functioning properly. HE' - a4 1eP 951F at lcast ,ncc pcr 12 hoturs is suffliew. It is not necessary to cle the CRE ventilation chillers. The CRE is manned during operations covered by the techni specifications.

Typically, temperature aberrations will be readily apparent.

4.7.7.b Standby systems should be checked periodically to ensure that they function properl . As-the en i*-ron .Aent and normal opeati,; g condition S OR thi., t. m are n ot teo s. .ver.e,testing thc trains MILLSTONE - UNIT 3 B 3/4 7-13b Amendment No. 4

LIBDCR 05-MP3-025

-March, 20-0 PLANT SYSTEMS BASES 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM (Continued)

SURVEILLANCE REQUIREMENTS (Continued) oan.e ever-y 3 1 days cn a STAGGERED TEST BASIS *hc*provides anadequate of this

-se. This surveillance requirement verifies a system flow rate of 1,120 cfm +/- 20%.

Additionally, the system is required to operate for at least 10 continuous hours with the heaters energized. These operations are sufficient to reduce the buildup of moisture on the adsorbers and HEPA filters due to the humidity in the ambient air.

4.7.7.c las specified in the Surveillance Frequency Control Program The performance of the control room emergency filtration systems should be chec sed periodically by verifying the HEPA filter efficiency, charcoal adsorber efficiency, *inimum flow rate, and the physical properties of the activated charcoal. The frequency is at-loast-oefe pe.,24-months, or following painting, fire, or chemical release in any ventilation zone communicating with the system.

ANSI N510-1980 will be used as a procedural guide for surveillance testing.

Any time the OPERABILITY of a HEPA filter or charcoal adsorber housing has been affected by repair, maintenance, modification, or replacement activity, post maintenance testing in accordance with SR 4.0.1 is required to demonstrate OPERABILITY.

4.7.7.c. I This surveillance verifies that the system satisfies the in-place penetration and bypass leakage testing acceptance criterion of less than 0.05% in accordance with Regulatory Position C.5.a, C.5.c, and C.5.d of Regulatory Guide 1.52, Revision 2, March 1978, while operating the system at a flow rate of 1,120 cfm +/- 20%. ANSI N510-1980 is used in lieu of ANSI N510-1975 referenced in the regulatory guide.

4.7.7.c.2 This surveillance requires that a representative carbon sample be obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978 and that a laboratory analysis verify that the representative carbon sample meets the laboratory testing criteria of ASTM D3803-89 and Millstone Unit 3 specific parameters. The laboratory analysis is required to be performed within 31 days after removal of the sample. ANSI N510-1980 is used in lieu of ANSI N510-1975 referenced in Revision 2 of Regulatory Guide 1.52.

MILLSTONE - UNIT 3 B 3/4 7-14 Amendment No. 4-36, 4-84, 2-06,

LBDCR 07-MP4-033 Jue2,2007 PLANT SYSTEMS BASES 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM (Continued)

SURVEILLANCE REQUIREMENTS (Continued) 4.7.7.c.3 This surveillance verifies that a system flow rate of 1,120 cfm +/- 20%, during system operation when testing in accordance with ANSI N510-1980.

4.7.7.d After 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of charcoal adsorber operation, a representative carbon sample must be obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, Revision 2, March 1978, and a laboratory analysis must verify that the representative carbon sample meets the laboratory testing criteria of ASTM D3803-89 and Millstone Unit 3 specific parameters.

The laboratory analysis is required to be performed within 31 days after removal of the sample.

ANSI N510-1980 is used in lieu of ANSI N510-1975 referenced in Revision 2 of Regulatory Guide 1.52.

The maximum surveillance interval is 900 hours0.0104 days 0.25 hours 0.00149 weeks 3.4245e-4 months , per Surveillance Requirement 4.0.2. The 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of operation requirement originates from Nuclear Regulatory Guide 1.52, Table 2, Note C. This testing ensures that the charcoal adsorbency capacity has not degraded below acceptable limits as well as providing trending data.

4.7.7.e. I This surveillance verifies that the pressure drop across the combined HEPA filters and charcoal adsorbers banks at less than 6.75 inches water gauge when the system is operated at a flow rate of 1,120 cfm + 20%. The fi'eqteiy i at klastM o yi-F" 24 LiUii's.

4.7.7.e.2 Deleted. Irsert2 X 4.7.7.e.3 This surveillance verifies that the heaters can dissipate 1 kW at 480V when tested in accordance with ANSI N510-1980. The f- quen. ys-at..a.tone pen..24m11ts. The heater kW measured must be corrected to its nameplate rating. Variations in system voltage can lead to measurements of kW which cannot be compared to the nameplate rating because the output kW is proportional to the square of the voltage.

MILLSTONE - UNIT 3 B 3/4 7-15 Amendment No. 4-,36, 84, 4-84, 203,206,

February 20, -200-2 PLANT SYSTEMS BASES 3/4.7.9 AUXILIARY BUILDING FILTER SYSTEM //'Insert 2 The 0 BILITY of the Auxiliary Bui *ng Filter System, and associated filters and fans, ensures that r ioactive materials leaki rom the equipment within the charging pump, component cooling wa ump and hea changer areas following a LOCA are filtered prior to reaching the environment. perati of the system with the heaters operating for at least 10 continuous hours in ---'-1A- "d is sufficient to reduce the buildup of moisture on the adsorbers and HEPA filters- e operation of this system and the resultant effect on offsite dosage calculations was assumed in the safety analyses. ANSI N510-1980 will be used as a procedural guide for surveillance testing. Laboratory testing of methyl iodide penetration shall be performed in accordance with ASTM D3803-89 and Millstone Unit 3 specific parameters. The heater kW measured must be corrected to its nameplate rating. Variations in system voltage can lead to measurements of kW which cannot be compared to the nameplate rating because the output kW is proportional to the square of the voltage.

The Charging Pump/Reactor Plant Component Cooling Water Pump Ventilation System is required to be available to support the Auxiliary Building Filter System and the Supplementary Leak Collection and Release System (SLCRS). The Charging Pump/Reactor Plant Component Cooling Water Pump Ventilation System consists of two redundant trains, each capable of providing 100% of the required flow. Each train has a two position, "Off' and "Auto," remote control switch. With the remote control switches for each train in the "Auto" position, the system is capable of automatically transferring operation to the redundant train in the event of a low flow condition in the operating train. The associated fans do not receive any safety related automatic start signals (e.g. Safety Injection Signal).

Placing the remote control switch for a Charging Pump/Reactor Plant Component Cooling Water Pump Ventilation Train in the "Off' position to start the redundant train or to perform post maintenance testing to verify availability of the redundant train will not affect the availability of that train, provided appropriate administrative controls have been established to ensure the remote control switch is immediately returned to the "Auto".position after the completion of the specified activities or in response to plant conditions. These administrative controls include the use of an approved procedure and a designated individual at the control switch for the respective Charging Pump/Reactor Plant Component Cooling Water Pump Ventilation Train who can rapidly respond to instructions from procedures, or control room personnel, based on plant conditions.

MILLSTONE - UNIT 3 B 3/4 7-23 Amendment No. 8-, , 4-1-6, 484, 0

06428/L06-3/4.8 ELECTRICAL POWER SYSTEMS BASES 3/4.8.1. 3/4.8.2. and 3/4.8.3 A.C. SOURCES, D.C. SOURCES, AND ONSITE POWER DISTRIBUTION Technical Specification 3.8.1.1 .b. I requires each of the diesel generator day tanks contain a minimum volume of 278 gallons. Technical Specification 3.8.1.2.b.1 requires a minimum volume of 278 gallons be contained in the required diesel generator day tank. This capacity ensures that a minimum usable volume of 189 gallons is available. This volume permits operation of the diesel generators for approximately 27 minutes with the diesel generators loaded to the 2,000 hour0 days 0 hours 0 weeks 0 months rating of 5335 kw. Each diesel generator has two independent fuel oil transfer pumps. The shutoff level of each fuel oil transfer pump provides for approximately 60 minutes of diesel generator operation at the 2000 hour0.0231 days 0.556 hours 0.00331 weeks 7.61e-4 months rating. The pumps start at day tank levels to ensure the minimum level is maintained. The loss of the two redundant pumps would cause day tank level to drop below the minimum value.

Technical Specification 3.8.1. .b.2 requires a minimum volume of 32,760 gallons be contained in each of the diesel generator's fuel storage systems. Technical Specification 3.8.1.2.b.2 requires a minimum volume of 32,760 gallons be contained in the required diesel generator's fuel storage system. This capacity ensures that a minimum usable volume (29,180 gallons) is available to permit operation of each of the diesel generators for approximately three days with the diesel generators loaded to the 2,000 hour0 days 0 hours 0 weeks 0 months rating of 5335 kW. The ability to cross-tie the diesel generator fuel oil supply tanks ensures that one diesel generator may operate up to approximately six days. Additional fuel oil can be supplied to the site within twenty-four hours after contacting a fuel oil supplier.

Suspending positive reactivity additions that could result in failure to meet the minimum SDM or boron concentration limit is required to assure continued safe operation. Introduction of coolant inventory must be from sources that have a boron concentration greater than that what would be required in the RCS for minimum SDM or refueling boron concentration. This may result in an overall reduction in RCS boron concentration, but provides acceptable margin to maintaining subcritical operation. Introduction of temperature changes including temperature increases when operating with a positive MTC must also be evaluated to ensure they do not result in a loss of required SDM.

Suspension of these activities does not preclude completion of actions to establish a safe conservative condition. These actions minimize the probability of the occurrence of postulated events. It is further required to immediately initiate action to restore the required AC and DC electrical power source and distribution subsystems and to continue this action until restoration is accomplished in order to provide the necessary power to the unit safety systems.

Surveillance Requirements 4.8.1.1.2.a.6.w.. C._,,,*u,nthj4.-anU 1....1.2 , **.....b.

,,,,t'--m"o e, 18 4-t,°u~-*.. aund

,e 4.8.1.1.2. j A19 menth* gk,**,,"*

The Surveillances 4.8.1.1.2.a.6 and 4.8.1.1.2.b.2 verify that the diesel generators are capable of synch-ronizing with the offsite electrical system and loaded to greater than or equal to continuous rating of the machine. A minimum time of 60 minutes is required to stabilize engine temperatures, while MILLSTONE - UNIT 3 B 3/4 8-1c Amendment No. 9-7, 41-2, 4-3-,, 4-94, -0,234

LBDCeR 3g-IvIP3-32 3/4.8 ELECTRICAL POWER SYSTEMS BASES minimizing the time that the diesel generator is connected to the offsite source. Surveillance Requirement 4.8.1.1.2.j requires demonstration oance pe 18 monthg that the diesel generator can start and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , > 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of which are at a load equivalent to 110% of the continuous duty rating and the remainder of the time at a load equivalent to the continuous duty rating of the diesel generator. The load band is provided to avoid routine overloading of the diesel generator. Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain diesel generator OPERABILITY. The load band specified accounts for instrumentation inaccuracies, operational control capabilities, and human factor characteristics. The note (*)

acknowledges that a momentary transient outside the load range shall not invalidate the test.

Surveillance Requirements 4.8.1.1.2.a.5 (1.t , 4.8.1-.1.2.b.1 (n per 1D ,

Th exti2. san4db conti stipul,4a8tio 1 (ie8 ot2a5 M in sp*cifi and 4.8.

1.1.2 .6.b su ersde.i-Several diesel generator surveillance requirements specify that the emergency diesel generator are started from a standby conditionf Standby conditions for a diesel generator means thencese engine coolant and lubricating oil are being circulated and temperatures are maintained within design ranges. Design ranges for standby temperatures are greater than or equal to the low temperature alarm setpoints rsetv and less u-ytm.2**---

than or equal to the standby "keep-warm" hea-- 1nsertteprtrsfrec Surveillance Requirement 4.8.1.1.2.j R-9 Monthk ,we~tf The existing "standby condition" stipulation contained in specification 4.8. 1. 1.2.a.5 is su 'erseded when performing the hot restart demonstration required by 4.8.1.1.2.j. /

Any time the OPERABILITY of a diesel generator has been affected by repair, maintenance, or replacement activity, or by modification that could affect its interdependency, post/maintenance testing in accordance with SR 4.0.1 is required to demonstrate OPERABILITY. "

MILLSTONE - UNIT 3 B 3/4 8-1d Amendment No. 9, 44-2, 4-37, 4-94, 240,

L=BDGR 1i1 MP3 007 ELECTRICAL POWER SYSTEMS BASES A.C. SOURCES, D.C. SOURCES, and ONSITE POWER DISTRIBUTION (Continued)

The Surveillance Requirement for demonstrating the OPERABILITY of the station batteries are based on the recommendations of Regulatory Guide 1.129, "Maintenance Testing and Replacement of Large Lead Storage Batteries for Nuclear Power Plants," February 1978, and IEEE Std 450-1975 & 1980, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Large Lead Storage Batteries for Generating Stations and Substations." Sections 5 and 6 of IEEE Std 450-1980 replaced Sections 4 and 5 of IEEE Std 450-1975. Guidance on bypassing weak cells, if required, is in accordance with section 7.4 of IEEE 450-2002. The f balance of IEEE Std 450-1975 applies. \--Insert2 Verifying average electrolyte temperature above the minimum for which the battery was sized, total battery terminal voltage on float charge, connection resistance values, and the performance of battery service and discharge tests ensures the effectiveness of the charging system, the ability to handle high discharge rates, and compares the battery capacity at that time with the rated capacity.

Table 4.8-2a specifies the normal limits for each designated pilot cell and each connected cell for electrolyte level, float voltage, and specific gravity. The limits for the designated pilot cells float voltage and specific gravity, greater than 2.13 volts and 0.015 below the manufacturer's full charge specific gravity or a battery charger current that had stabilized at a low value, is characteristic of a charged cell with adequate capacity. The normal limits for each connected cell for float voltage and specific gravity, greater than 2.13 volts and not more than 0.020 below the manufacturer's full charge specific gravity with an average specific gravity of all the connected cells not more than 0.010 below the manufacturer's full charge specific gravity, ensures the OPERABILITY and capability of the battery.

Operation with a battery cell's parameter outside the normal limit but within the allowable value specified in Table 4.8-2a is permitted for up to 7 days. During this 7-day period: (1) the allowable values for electrolyte level ensures no physical damage to the plates with an adequate electron transfer capability; (2) the allowable value for the average specific gravity of all the cells, not more than 0.020 below the manufacturer's recommended full charge specific gravity, ensures that the decrease in rating will be less than the safety margin provided in sizing; (3) the allowable value for an individual cell's specific gravity, ensures that an individual cell's specific gravity will not be more than 0.040 below the manufacturer's full charge specific gravity and that the overall capability of the battery will be maintained within an acceptable limit; and (4) the allowable value for an individual cell's float voltage, greater than 2.07 volts, ensures the battery's capability to perform its design function.

If the required power sources or distribution systems are not OPERABLE in MODES 5 and 6, operations involving CORE ALTERATIONS, positive reactivity changes, movement of recently irradiated fuel assemblies (i.e., fuel that has occupied part of a critical reactor core within the MILLSTONE - UNIT 3 B 3/4 8-2 Amendment No.

3/4.9 REFUELING OPERATIONS BASES 3/4.9.8.1 HIGH WATER LEVEL (continued)

ACTIONS RHR loop requirements are met by having one RHR loop OPERABLE and in operations, except as permitted in the Note to the LCO.

If RHR loop requirements are not met, there will be no forced circulation to provide mixing to establish uniform boron concentrations. Suspending positive reactivity additions that could result in failure to meet the minimum boron concentration limit is required to assure continued safe operation. Introduction of coolant inventory must be from sources that have a boron concentration greater than that what would be required in the RCS for minimum refueling boron concentration. This may result in an overall reduction in RCS boron concentration, but provides acceptable margin to maintaining subcritical operation.

If RHR loop requirements are not met, actions shall be taken immediately to suspend loading of irradiated fuel assemblies in the core. With no forced circulation cooling, decay heat removal from the core occurs by.natural convection to the heat sink provided by the water above the core.

A minimum refueling water level of 23 ft above the reactor vessel flange provides an adequate available heat sink. Suspending any operation that would increase decay heat load, such as loading a fuel assembly, is a prudent action under this condition.

If RHR loop requirements are not met, actions shall be initiated and continued in order to satisfy RHR loop requirements. With the unit in MODE 6 and the refueling water level > 23 ft above the top of the reactor vessel flange, corrective actions shall be initiated immediately.

If RHR loop requirements are not met, all containment penetrations providing direct access from the containment atmosphere to the outside atmosphere must be closed within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months . With the RHR loop requirements not met, the potential exists for the coolant to boil and release radioactive gas to the containment atmosphere. Closing containment penetrations that are open to the outside atmosphere ensures dose limits are not exceeded.

The Completion Time of 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is reasonable, based on the low probability of the coolant boiling in that time.

Surveillance Requirement This Surveillance demonstrates that the RHR loop is in operation and circulating reactor coolant.

The flow rate is determined by the flow rate necessary to provide sufficient decay heat removal capability and to prevent thermal and boron stratification in the core. Thc frcgqucncy of 12 huris is suffieicnt, consider-ing the fle%,, tempcratur, puimp conftrol, and Aalam indications available to the ,peratr if+the. .ntro.l r.em for m "nita-"ing the R system.

.R MILLSTONE - UNIT 3 B 3/4 9-4 Amendment No. 4-0.7, 24-9, 2 3/4.9 REFUELING OPERATIONS BASES The Completion Time of 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is reasonable, based on the low probability of the coolant boiling in that time.

Surveillance Requirement This Surveillance demonstrates that one RHR loop is in operation and circulating reactor coolant.

The flow rate is determined by the flow rate necessary to provide sufficient decay heat removal capability and to prevent thermal and boron stratification in the core. In addition, during operation of the RHR loop with the water level in the vicinity of the reactor vessel nozzles, the RHR pump suction requirements must be met. Tht Fiequancy of 12 huws is suffliciut, eefnsdering the Raow, temporature, pumfp eantrol, antd alarm indioatiens available te the eperetor for .m.nito.ngthe RI IR System in the corol roo-m.

MILLSTONE - UNIT 3 B 3/4 9-7 Amendment No. 4--7, 2--9, 230-

v t e Letter Sequence Request
TAC:ME9733, Relocate Surveillance Frequencies to Licensee Control - RITSTF Initiative 5B (Approved, Closed)
Initiation Request Acceptance Administration Questions 8 March 2013 9 October 2013 Answers 4 January 2013 17 April 2013 29 April 2013 30 October 2013 Results Approval, Approval Other:
MONTHYEAR2013-10-09 [Table View]

ML12284A213

Text

1.0 DESCRIPTION

3.0 REGULATORY ANALYSIS

4.0 ENVIRONMENTAL CONSIDERATION

5.0 REFERENCES

SUMMARY

References:

Navigation menu

Search